Tom Muck's Blog
News and Views
Security concern with 404 pages
Friday, February 04, 2005 11:15:41 AM
I made an interesting discovery using CFMX 6.1 with IIS 5 and IIS 6. When I create a 404 error page and add it in IIS 5, I have in the past created it as a ColdFusion template so that I can keep the same design and layout, which is built up with ColdFusion includes. When I do the same thing in IIS 6, a strange thing happens: when you go to a non-existent page, the 404 page comes up fine. However, when you go to a non-existent directory, the ColdFusion 404 page is served as a text file, exposing all ColdFusion code. I think the other settings are the same on the two sites. Anyone else see this?
Category tags: Dreamweaver, ColdFusion
Posted by Tom Muck
Add comment | View comments (1) | Permalink | Trackbacks (0) | Digg This
Before posting comments or trackbacks, please read the posting policy.