Security concerns

• This utility must be protected;

  • Otherwise, it’s a hacker’s dream
  • NOTE: I use a session variable to hold a login

• Security can be disabled

  • (in application.cfm, set BypassSecurity=“Yes”)
  • OK, iff protection already exists

• Security must be configured

  • Use an existing username/password to login
    • Avoids password management
    • Provide parameters in LoginParam.cfm

• Database passwords for queries are omitted in stored DIFF specification

Copyright © 1997-2024, Maryland Cold Fusion User Group. All rights reserved.