SQLi Attacks and CFuze
So with the rash of SQL Injection attacks happening on ColdFusion sites, CFuze would like to state that all of our sites have always used
1 <cfqueryparam>
from the beginning. CFuze prefers to have a quite pessimistic view on security, in that, we believe you can never have too much of it. It is surprising to us, that many sites have never used that tag and further more that many sites do not even leverage the ease of CFC's. It is important that any ColdFusion based site leverage every tag given to us by Adobe as they all have a purpose and a function that ultimately, only simplifies our job as developers. For all of those who were attacked, we hope the damage was minimal, and for all of our clients who are worried, do not fear a SQLi attack. CFuze has always kept your site safe!
TweetBacks

There are no comments for this entry.
[Add Comment] [Subscribe to Comments]