My web host claims CFC files must be called from the web root of a
multihomed IIS server and that poses security issues. So, they aren't going
to allow me to use CFC files with my Flash remoting site. Is this correct?

If this is correct, and I have to put all my queries into a CFM page, how do
I call them to create the service objects? Here's how I'm doing it with the
CFC on my local server.

soServiceItems = cfServer.getService("servicesFolder.cfcName", this);
soServiceItems.getServiceItems();

Thanks in advance,

Scott