Hello,
I have been following the ColdFusion 10 lockdown guide (this question also relates to CF9 though) and we are recommended to change the /cfide/scripts directory to a custom directory as /CFIDE/Scripts should be blocked by request filtering.
See point "2.2.8.1 CFIDE URIs" and "4.1.5 Setup Virtual Directory alias for /CFIDE/scripts/"
Is there any way to edit the paths the WSCONFIG.exe tool uses so instead of it adding the 'jakarta' and 'CFIDE' virtual directories to all sites it adds the 'jakarta' and my own 'CFScripts' virtual directory which points to a different path than /cfide/scripts?
My reason for asking this is after some CF10 upates we have to re-run the WSCONFIG.exe tool, this results in all my sites containing a /cfide/ virtual directory which I don't want - scripts should be accessible from /CFScripts which i have to manually add to each new site. If WSCONFIG.exe could add this for me it would save much time and allow a more secure setup.
I hope I have provided enough information to get a discussion started. If more info or clarification is needed please let me know.
Cheers
Luke