44    FileMaker Pro Web Publishing Security Guidelines

cdml_format_files folder examples

A request for a format file is handled by following the current path into the cdml_format_files 

folder. If the file is not found there, a second search is performed within the corresponding directory 

within the Web folder.

In FileMaker Pro 5.5 a request that included the format file parameter 

 format=MyFormat.htm

 resulted in a search for 

/Web/MyFormat.htm

. In FileMaker Pro 6, 

the search is made for 

/cdml_format_files/MyFormat.htm

. If the file is not found, a 

second search is performed for 

/Web/MyFormat.htm

. If the file is still not found, then the error 

Format file not found: The format file    could not be found

 is returned.

If a solution is within a sub directory inside of the Web folder, then a copy of that directory 

structure must exist within the cdml_format_files folder. Assuming you have a Web solution in the 

/Web/MyFolder/

 directory, a request for the format file 

 format=MyFolder/

MyFormat.htm

 in FileMaker Pro 5.5 would have resulted in a search for 

/Web/MyFolder/

MyFormat.htm

. In FileMaker Pro 6, the search is made for 

/cdml_format_files/

MyFolder/MyFormat.htm

 first, then, if the file is not found, a second search for 

/Web/

MyFolder/MyFormat.htm

 is performed. 

cdml_format_files folder tips

The cdml_format_files folder lies outside of the Web folder. Any HTTP request attempting to 

access it directly will result in a  file not found  error.

The cdml_format_files folder is intended to be a repository for your CDML format files only. 

Image files, XSLT and/or CSS style sheets, or other types of files will not be recognized or served 

by the Web Companion if they are placed in this folder. For convenience, you may place duplicate 

copies of these files in the cdml_format_files folder, but these files can only be served by the Web 

Companion if they are also present in the Web folder. 

FileMaker, Inc. does not recommend storing databases in the Web folder (or sub folders). 

Databases can be stored in any file folder on the system, including the cdml_format_files folder.  

However, their placement  in the cdml_format_files folder serves no distinct purpose from other 

folders on the system, and consequently is not recommended. 

The cdml_format_files folder will not be accessed by the

  dbopen

 action. Databases placed 

within the cdml_format_files folder can be used in a solution. But they must be launched by some 

means other than the 

 dbopen 

command. Optionally, you may decide to leave one or more 

databases within the Web folder in order to use the 

 dbopen

 command. Because this command is 

only available when remote administration is enabled, be aware that enabling remote 

administration also enables support for the HTTP PUT command, which can compromise security 

in the Web folder.

The 

FMP Include

 tag checks for the path to the cdml_format_files folder. No error is returned 

when this tag is used, since the 

FMP Include

 tag is used to add content to a document being 

processed by the Web Companion.