QUOTE(sansclue @ 17 Apr, 2009 - 09:28 AM)

Look into using cfcontent. It is often used to serve up documents from a protected area.
Sansclue,
Thanks for the info. I have researched and implemented cfcontent. I have placed all sensitive documents above the web root and then created an actionpage to target them in their new location.
I'm using fusebox to create this app. Not sure if you are familiar with it. Actions are basically targeted using the url
CODE
<a href="https://xxx.xx.xxx.xxx/index.cfm?fuseaction=catControl.getFile" target="_blank">
getFile then has a fuseaction that points to a coldfusion action page (a fuse) that does the work. It's an interesting way to create an app.
I'm trying to pass variables in the query string, but it does not seem to like it. Here's what I am doing...
CODE
< a href="https://xxx.xx.xxx.xxx/index.cfm?fuseaction=catControl.getFile & data=#filePath#" target="_blank">
On the other end, the actionpage when processed give me an error that filePath is undefined. I ran a cfdump on the page that has the above link and the filePath returns a positive path to the file.
Am I appending the url properly to pass the variable? I've tried several combinations but I cannot seem to get it right. Thanks for any help you may be able to provide.
Cheers!