Forum: Coldfusion Security

:confused;Using IIS6 under Windows 2003 with CFMX 6.1 When a cfm script file is located in a windows security restricted directory, the user is...

I need a way to get the user's Windows login name. There's a global CF setting to enable Windows authentification which sets the variable...

¾È³çÇϼ¼¿ä? Hi Everybody MustUnderstand ¿¡·¯·Î ÀÎÇØ Because of an Error with MustUnderstand client-config.wsdd ÆÄÀÏ°ú server-config.wsdd...

I am currently looking at calling reporting services 2005 web service with coldfusionMX 7 using Windows integrated security from Mister X . I...

I am currently looking at calling reporting services 2005 web service with coldfusionMX 7 using Windows integrated security from Mister X . Any...

I was looking into implementing some of the resources of the IHTK toolkit on a web development project I am working on. The tools that are in the...

Hey everyone, I know this is not specifically a CF security issue, but a security issue related to CF and CC charges on Versign. That being...

Hello all.... Please help i need some input here. Im trying to develop a login/authentication/security framework in Coldfusion for some apps im...

How do I disable printing for PDF created in with Coldfusion reports. I know the tag of permissions="AllowPrinting" will allow the user to...

In the May 29th, 2005 listserv message from cflib.org, they mention this function, sqlSafe(): http://www.cflib.org/udf.cfm?id=1219 The function...

Hi everyone, I have a unique question. We use Apache 2.0.54 and ColdFusion 6.1 on Windows 2000 Server, and I need to find a way to edit the user...

Arrrgh! Having some difficulty getting a CF web app working on IIS. The NT security is set to not allow anonymous access (only windows...

Is it possible to query from IIS or LDAP, the user who is currently accessing the web server? I'm trying to set up a secure site that uses...

Hello, I was wondering if anyone could help me. I have designed a site with a log in and password page. How would call the user name in queries on...

Hello Everyone, I really do not know what I am doing. I am trying to use LDAP authentication so people can login into my application yet keep...

I am generating a list of pins to protect access to an online course registration system. Right now the system is protected by a 6 digit PIN...

I am using CFMX 6.1 and I was playing with the settings in Sandbox Security and now I cannot get access to CF Admin. I get the following error: ...

Whenever any of my sites encounter a malformed URL where the query string contains %s but is not correctly URL encoded, JRun throws a '500 null'...

CFID is predictable, always incremented by 3. We can randomize CFTOKEN by using UUID. Is there a way we can randomize CFID too?:confused;

:( I am encrypting a user password just before storing, the decrypting anytime it is retrieved. All works great, except for passwords that where...