CF_XFILE is a secure replacement for ColdFusion's CFFILE. It requires a Username and Password for every file operation, and restricts users to a directory defined by the administrator. CF_XFILE uses the same functions of CFFILE except a username and password are required.

This tag is designed to be extremely easy to insert into code that has previously been developed using the CFFILE. A simple search and replace should be easy enough. Replace <CFFILE with <CF_XFILE USERNAME="<username>" PASSWORD="<password>".

Any actions that require a path you just supply the path from the root. For example if your domain name was mycompany.com the root would be D:\wwwroot\mycompany.com and your code would like the following.

<CF_XFILE username="<username>"
      password="<password>"
      action="delete"
      file="\temp\filename.ext">.