> US Senate
> US House of Representatives
Congressman James Clyburn for a specific one.
....and just for grins and giggles for anybody that's never worked on a
site located on the "on-the-hill" servers :
Development was, uh, interesting. The "on-the-hill" servers are running
CF5 ("We haven't done security clearances for any later versions"}. All
your code is "scanned" before it can go live. The problem with their
"scan" is that it doesn't take cfqueryparam or any type of cfform
validation into account as a security measure to insure against SQL
injection attacks, so there coding hoops to jump through to satisfy that
requirement, including, for every single form field on every single
form, lots this:
<cfif IsDefined("FORM.statement_date") AND
(findoneof("!<[^>]+%>!=",FORM.statement_date,1) NEQ 0) >
<cflocation url="request_err.cfm"><cfabort></cfif>
The security hoops you have to jump through just getting access to the
servers for development to start with is pretty intense. We had to apply
for security clearances, and we've got this cool little digital code box
on our keychains now that show a new security code every 60 seconds.
When you log into the server to work on the site, you've got to be quick
or the code changes and you're rejected.
Interesting job!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four
times a year.
http://www.fusionauthority.com/quarterly
Archive: http://www.houseoffusion.com/groups/CF-OT/message.cfm/messageid:147
Subscription: http://www.houseoffusion.com/groups/CF-OT/subscribe.cfm
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.29
