Using the cdml_format_files folder    45

You do not need to change any code containing the 

FMP Include

 tag, since the new behavior of 

the Web Companion causes it to automatically search for format files within the cdml_format_files 

folder. Protect files containing the 

FMP Includ

e tag by copying it to the cdml_format_files 

folder.

Note

 With remote administration enabled it is possible to use 

HTTP PUT

 to place a CDML format 

file within the Web folder. Such a file could include the 

FMP Include

 tag which could specify a 

CDML format file that was in the cdml_format_files folder. You can prevent such an attack by only 

enabling remote administration when absolutely necessary.

Important  

Although the FileMaker Pro HTTP server cannot make HTTP requests within the 

cdml_format_files folder directly, this feature is intended to provide security for CDML format 

files only. This feature is not intended to protect data, provide any additional system integrity, or 

prevent an attack by other means.