Denver Macromedia
Technology Conference

March 14th - 15th, 2002
Denver, Colorado
Home     Speakers     Photos     CF Conf Central
ColdFusion Code Security

ColdFusion Code Security

6/6/02


Click here to start


Table of Contents

ColdFusion Code Security

Speaker Information

Introduction

ColdFusion Security

Not covered in this talk

Error handling

Error handling code

Form Validation

Why is validation important?

Underscore Validation

CFFORM Validation

Javascript Validation

CF Validation

Authentication

Fake URLs

How to checksum a URL

How to encrypt a URL

Fake form submits

Preventing Fake form submits

Fake cookies

SQL hacking

SQL hacking prevention

CFQUERYPARAM

Protect CFINCLUDE and CFMODULE files

Code to protect CFINCLUDE files

Code Defensively

Input massaging

CFCONTENT

Logins

Authentication

Members Only

Session, client and cookies

Session, client and cookies

Session, client and cookies

Timeouts

Session Tracking

Session hang over

Remember Me

Members Only

Back button hacking

Refresh Issues

Datasource password

Encryption

Hashing passwords

Resources

What Security Means

Next Steps

Author: Michael Smith

Home     Speakers      Photos     CF Conf Central