Locking Down CFM/PHP pages Using application.cfc

[Guest]

I have a directory of pages that have a mix of cfm/php pages and random files, like pdf's in it.  I am able to set up a log in using application.cfc but how can I apply it for my php pages/random files to require log in.  I can use a php include at the top of file to run cfm code, I have been successful doing that.

Thanks!

[ilssac]

If you want to lock down all the available resources you either need to have all these resources run through the ColdFusion server, which can be configured to do so, but would have extensive repercussions especially to a site like yours that use other application technelogies.

Or you have the web server (i.e appache or IIS) provide the user authentication and authorization.  All the big ones can do this, if you work on a site where you can control the web server configuration.