...
- Login to your "ColdFusion Administrator Account"
- Navigate to "Security -> Sandbox Security"
- Then -> "Enable ColdFusion Security" and "Submit Changes"
- Add the path in "Add Security Sandbox" for your FarCry Installation
For example: /var/www/webX/html (the path of your real webroot) - Now edit the new created "Sandbox" with the following parameters:
DATA SOURCES
Disable ALL datasource that do not belong to your FC-Project !
CF TAGS - Disable the following CF-Tags:
- CFDBInfo
- CFFTP
- CFRegistry
CF FUNCTIONS - Disable the following CF-Functions:
- CreateObject(.NET)
- CreateObject(COM)
- CreateObject(CORBA)
- CreateObject(WebService)
- GetTempFile
- SetProfileString