Possible to rename citydesk.xml?
CityDesk puts a file, citydesk.xml, at the root of the site when it uploads. This can be a security problem for our site. We have some folders which are restricted to certain customers/vendors and pulling the citydesk.xml would basically give you a list of our customers, and being able to read the document names could give you some proprietary information.
Unfortunately you cannot do this in the current version.
Michael H. Pryor
Eeks... didn't think of that backdoor...
Adriaan van den Brand
A password-protected directory is nice, but it won't work on all web servers. If you don't control your hosting server then you may not be able to create a password-protected directory at all.
A me too post.
This is not as big a problem as you may think. Just configure your web server to deny access to citydesk.xml (in IIS under properties for this file just unclick read permission). It's in a fixed location so you will only have to ever set this once.
And if I had that level of access to my server, why would I be using CityDesk over something like PHP? I use a $5/mo host that's very reliable, but what you suggested, I'd need to upgrade to $10/mo.
Why doesn't citydesk store this file locally and update it on every upload. Or store the last-uploaded version in its database. There's no need to upload it, because you just have to download it again to compare it anyway. Just keep it local in the first place.
Fog Creek Home