Securing /WEB-INF/ by moving it outside of the web root

Securing /WEB-INF/ by moving it outside of the web root

By default, Lucee places its web-context configuration and data files in a folder named WEB-INF within the web root of each website. The WEB-INF folder structure gets created automatically when Lucee gets called to serve up a .cfm/.cfml file. If you wish to redirect the web-context data elsewhere, follow the instructions below.

If you followed the instructions on previous pages, you already have a folder called D:\Lucee. Create a subfolder called "web-contexts" within D:\Lucee\

  • Launch your favorite text editor as a local Administrator and open D:\Tomcat\conf\web.xml
  • Locate the section near the end of the configuration which reads 'CFMLServlet'
  • Locate the '' section which contains 'lucee-web-directory'
  • Replace the '' with D:\Lucee\web-contexts{web-context-label}
  • Restart the Tomcat service

See also