Posted by
admin on
Aug 17th, 2009 |
6 comments
SQL Injection attacks are one of the easiest ways to hack into a website. One recent hack, using a script from verynx.cn, involves injecting SQL into a web form that then appends some JavaScript code into fields in a database that then gets executed on the client side when a user views a database-driven page. To learn more about this hack, go to this link.
If you’re using ColdFusion, to harden...
Posted by
admin on
Aug 3rd, 2009 |
2 comments
ColdFusion’s cfqueryparam tag is important for several reasons, most notably data type validation, improved query performance, and foiling SQL injection attacks.
A basic example of cfqueryparam in use is as follows:
<cfquery datasource=”yourdsn”>
SELECT
column1
, column2
, column 3
FROM
yourtable
WHERE
column1...
Posted by
admin on
Jul 6th, 2009 |
1 comment
This is a simple example that can save some manual coding among new developers. Most established developers will already be using these methods but it is surprising how many still do not. Depending on your work environment or country of origin, you may be required to provide content in various languages. This is the case at my desk job, all content must be provided in English and French, of course...