Now That You've Changed Your CFQuery's to Use CFQueryParam, Get Rid of That Blue and Grey Screen

I believe it is just as important to put proper error handling into your ColdFusion application as it is to use CFQueryParam with your CFQuery's SQL statements. However, I'm fairly certain friendly error handling messages are the last thing on your mind since you've been updating your CFQuery's to use CFQueryParam, right? Would you believe it's the ever-popular blue and grey ColdFusion error pages that actually contributed to the recent rise in SQL injection attacks on ColdFusion web sites? Well, check out this quote take from 0x000000 # The Hacker Webzine's article Attacking ColdFusion, "I have never seen so much information regarding the site's structure, used database, table names, drivers, server setup and other information useful for attackers." So the last thing we, as ColdFusion developers, would want to do is serve up a big, hacker-friendly sign that says "Hack Me!" Right?

The first thing I would recommend to do is begin checking your site(s) to see what happens when invalid data or arguments are passed through the URL, FORM, etc. It's not too difficult to do. For example, if you have a URL similar to http://www.yourdomain.com/details/?id=45, what happens if you change it to http://www.yourdomain.com/details/?id=45x? If your see the hacker-friendly blue and grey screen, then it's time for some better error handling. Sure, your database might be protected today, but why give the evil-doers more information than they need?

The best part is, Raymond Camden (aka ColdFusionJedi) has already written "The Complete Guide to Adding Error Handling to Your ColdFusion Application." Ray walks you through the trenches of handling errors and you will come out with an armful of techniques to implement into your current and future projects.

Happy coding!

Comments
You can easily to play on window,android and iOS platform,so thanks for this game,but many users asked how to use and play this game,so i told you this is very simple and easy to control.
# Posted By minesweeper games | 11/1/18 6:10 AM
This is a great inspiring article.I am pretty much pleased with your good work.You put really very helpful information https://www.fiverr.com/mubeenshahjahan/do-100-blog...

# Posted By rick | 11/13/18 6:07 AM
I have been endeavoring to chip away at two papers for a class for two days now. They are expected tomorrow (yes I hold up til the latest possible time, its school) and I simply cant get my psyche in the correct place. They arent even troublesome papers, simply something I truly dont need to do.
# Posted By https://www.homeworkclock.com | 11/27/18 7:23 AM
Oh yes I needed to get rid of this blue and grey screen and I am glad you shared how to do it. I looked it up on https://www.thebestessayservice.com/ as well but there was nothing. I think nobody knows about it.
# Posted By Daniel | 11/28/18 1:36 PM
This is a fantastic website and I can not recommend you guys enough. I really appreciate your post. It is very helpful for all the people on the web.
# Posted By somerville vasundhara | 4/7/19 2:12 PM

© 2023, Stephen J. Withington, Jr.  |  BlogCFC was created by Raymond Camden – Version 5.9.004

Creative Commons License  |  This work is licensed under a Creative Commons Attribution 3.0 Unported License.  |  Hosted by Hostek.com