The only way to stop a hacker is to think like one!
ColdFusion is a Web application development tool that allows programmers to quickly build robust applications using server-side markup language. It is incredibly popular and has both an established user base and a quickly growing number of new adoptions. It has become the development environment of choice for e-commerce sites and content sites where databases and transactions are the most vulnerable and where security is of the utmost importance. Several security concerns exist for ColdFusion due to its unique approach of designing pages using dynamic-page templates rather than static HTML documents. Because ColdFusion does not require that developers have expertise in Visual Basic, Java and C++; Web applications created using ColdFusion Markup language are vulnerable to a variety of security breaches.
Hack Proofing ColdFusion 5.0 is the seventh edition in the popular Hack Proofing series and provides developers with step-by-step instructions for developing secure web applications.
Greg Meyer (Macromedia Certified Advanced Cold Fusion 5.0 Developer) is a Senior Systems Engineer with Netegrity. Rob Rusher (Certified ColdFusion Instructor + Developer) is a Principal Consultant with AYC Ltd. Rob s background includes positions as a Senior Consultant at Macromedia (Allaire), and as a Senior Software Engineer at Lockheed Martin. Steven Casco is the Founder and Chairman of the Boston Cold Fusion Users Group. Sarge (MCSE, MMCP, Certified ColdFusion Developer) is the former ColdFusion Practice Manager for Macromedia Consulting Services. He currently provides a consummate source for security, session-management, and LDAP information as a Senior Product Support Engineer, handling incident escalations as a member of Macromedia's Product Support - Server Division. David Vaccaro is Senior Web Application Developer and President of X-treme Net Development, Inc.