question about security?

[1smallblock1]

I have a coldfusion script that I know works because I use it on my personal web server. However I put it on a customer website that is hosted on godaddy servers and get a security error.

You can view the error here...

http://www.heartoftucson.org/HOT-main.cfm

This is the code used.

<CFFILE ACTION="READ" FILE="/home/content/h/e/a/heartoftucson/html/counter/counter.txt" VARIABLE="count">

<CFSET NEWCOUNT=COUNT+1>
<CFFILE ACTION="WRITE" FILE="/home/content/h/e/a/heartoftucson/html/counter/counter.txt" OUTPUT="#newcount#">

<CFLOOP INDEX="i" FROM="1" TO="#Len(newcount)#">
<CFSET DIGIT=LEFT(#NEWCOUNT#,1)>
<CFOUTPUT>
  <IMG SRC="./counter/digits/#digit#.gif" WIDTH="12" HEIGHT="14" ALT="" BORDER="0">
</CFOUTPUT>

<CFSET NEWCOUNT=REMOVECHARS(#NEWCOUNT#,1,1)>
</CFLOOP><BR>

Like I said I have this code working on my website and I even recreated the site on my server and it works there.

http://206.124.197.154:93/

Godaddy support tells me it's my fault and they do not support 'CUSTOM' scripts on their system. I find this funny but also annoying. I wrote a simple text PHP counter and stuck it up on the site but would prefer the graphical counter I wrote.

What do I need to tell these godaddy yahoos in order to get it working or can somebody reccomend a script modification that would be a work around?

[Fetch]

That's a pretty comical response.  GoDaddy needs to adjust sandbox security settings for the directory you are trying to access else your script won't work.

Regards,
Jamie Price
Dedicated Server Sales Representative
Email: jamie@HostMySite.com
877.385.4678 (US)
302.224.4528 (International)

[1smallblock1]

I agree! This is a pretty basic script and I got it to work on my own server with the 'out of the box' settings!

[TLC-IT]

You will find that all hosting-services provide you with a "file manager" type application (as well as command-line access, if you ask for it...) which can be used to manage these settings within the directories that you "own."

But, with thousands of customer web-sites to support on every server, they won't help you do it ... nor necessarily point you to the information which they provide.  The onus is strictly upon you to figure out how to do it.  Their response was purely a brush-off ... purely bogus ... and to be expected.  "We rent a fleet of cars.  Nothing more or less.  You drive them.  If you don't want to drive them, call a cab."

[ilssac]

Are absolutely sure that "/home/content/h/e/a/heartoftucson/html/counter/counter.txt" is the valid path on the GoDaddy server?

I usually have the server tell me what the correct path is with the built in ColdFusion functions.  Thus I don't have to worry about where I might be on any given hosted system.

I.E.

<CFFILE ACTION="READ" FILE="#getDirectoryFromPath(getCurrentTemplatePath)#counter.txt" VARIABLE="count">

P.S.

Be aware the GoDaddy uses CF7 so make sure any functions you use are available in that version.