i have some pdf files outside the webroot and i have to serve those files to user as a fast web view.
Note: fast web view is a feature of IIS not coldfusion application server.
currently how i m doing this made a virtual directory to those pdf files folder and i redirect the user to the attachment
so the file serve by IIS itself.
however using this approach user can get the file if he knows the attachment file name. so this is a security concern.
looking for solution for this security concern or any alternate solution.