ColdFusion is a rapid application development (RAD) platform and a programming language used with that platform. With most programming languages security is your number one priority, and ColdFusion Security is no different.

Expert ColdFusion Programmers will focus on ColdFusion Security in every aspect of their design and implementation. It is utterly important that ColdFusion Security be planned for in advance during the design stages of a project, and that attention to detail be carried through the implementation phase. It does no good to plan to design a piece of software with security in mind, and then have that be the feature that gets cut due to a lack of time or budget. Make room in your schedule and budget for security implementation and testing. (more…)

SQL injection, like ColdFusion Cross-Site Scripting, is a type of digital attack where a potential intruder will look for weaknesses in application and database systems that can be exploited to gain access to user information such as usernames and passwords. ColdFusion SQL injection is an SQL injection attack aimed at ColdFusion installations.

There are several types of ColdFusion SQL injection attacks. The most common form of attack is referred to as a classic SQL injection attack. This kind of attack is performed when a web interface does not properly filter out special characters such as semicolons. In this attack, the intruder will go to a web form field such as the log in field, and type in their username followed by a special character and an SQL command. Since many web forms are run on the database with administrator permissions this will allow the attacker to execute arbitrary code to gain access to the database. (more…)