Developer's Guide to Web Application Security

point is making sure your code does not open any security holes that will allow an

attacker to upload files or gain information.

Secure Development

When writing a ColdFusion application, you must look out for a number of tags

that involve the movement of data in ways that can be attacked. In most cases, vali-

dating the data sent to a page will prevent them from being misused. In others, not

allowing attributes to be set dynamically is the answer. For each tag we examine,

another solution may be to turn the tag off (an option controlled by the administra-

tion panel). Other tags cannot be turned off and must be coded properly.

CFINCLUDE

CFINCLUDE is a ...