Coldfusion: Difference between revisions

From RavenWiki
Jump to navigationJump to search
Line 6: Line 6:
* All Coldfusion files at or below the directory should now be protected. If you wish to protect binaries etc. then combined use of the Apache/IIS module to protect those directories is suggested.
* All Coldfusion files at or below the directory should now be protected. If you wish to protect binaries etc. then combined use of the Apache/IIS module to protect those directories is suggested.
== Notes ==
== Notes ==
* General disclaimer: the files above have been cobbled together specifically for demonstration purposes!
* General disclaimer: the files above have been put together for demonstration purposes.
* There is an online demo of these files [https://www.emma.cam.ac.uk/teaching/computing/raventest/ here].
* There is an online demo of these files [https://www.emma.cam.ac.uk/teaching/computing/raventest/ here].
* The installation has only been tested with Coldfusion MX 7.02.
* The installation has only been tested with Coldfusion MX 7.02.
* It is good practice to move the webauth.cfc file to a non-public filepath on production servers.
* It is good practice to move the webauth.cfc file to a non-public filepath on production servers.

Revision as of 16:07, 30 January 2007

Tom Corder (tac21) has written a Coldfusion wrapper for the Raven Java Toolkit.

Installation

  • Download the Raven Java Toolkit and extract webauth-toolkit.jar to runtime\jre\lib\ext in the Coldfusion installation directory.
  • Restart the Coldfusion service.
  • Download ravencfc.zip and extract to the directory you wish to protect. It should contain 4 files: application.cfc, webauth.cfc, index.cfm and pubkey2.crt.
  • All Coldfusion files at or below the directory should now be protected. If you wish to protect binaries etc. then combined use of the Apache/IIS module to protect those directories is suggested.

Notes

  • General disclaimer: the files above have been put together for demonstration purposes.
  • There is an online demo of these files here.
  • The installation has only been tested with Coldfusion MX 7.02.
  • It is good practice to move the webauth.cfc file to a non-public filepath on production servers.