Developer's Guide to Web Application Security

<CFABORT showerror="The variable ID has a value other than a number">

</CFIF>

All you have to do here is replace the not defined message with the setting of

the variable.This is five lines of code rather than one, but you get to control the

error messages and maybe do more checking.This brings us to our final type of

checking.

Data Evaluation

This is both the hardest part of data evaluation and the most powerful. In the pre-

vious examples, we checked for a variable’s existence and checked its data type. In

this section, we actually check the data that is contained within the variable for con-

tent.This can be as simple as making sure the data is a specific ...