Running Lucee 4.5 on Linux and Apache.
My understanding is that to setup a new Lucee site (i.e. a new web context), we would need to do the following general steps:
1) Setup the hosting directory.
2) Setup the website in Apache.
3) Browse to /lucee/admin/web.cfm under the domain.
Our experience is that this will create the new web context, with the WEB-INF directory, under the hosting directory for the website and mod_cfml will configure Tomcat appropriately.
However, this means that anyone could browse to lucee/admin/web.cfm under any of the other sites hosted on that server, and it would create a new web context, which would be a huge problem/security concern.
I must be missing something!
How do I configure Lucee and/or Apache to prevent web contexts from being created under other sites?
Thanks in advance for any assistance.