Link Details

In the past, I have been asked several times how to create secure file downloads without tying up resources in the ColdFusion thread pool. Really, when you want to create a good, secure download, you would want to funnel the file requests through some sort of ColdFusion control logic and then stream a non-web-accessible file to the user via ColdFusion's CFContent tag. The problem with this is that the CFContent tag ties up a ColdFusion thread for the entire duration of the download. This works nicely, but ColdFusion shouldn't be responsible for streaming files - let IIS do that; ColdFusion should be freed up to handle the application logic and work flow.