I've inherited a fusebox site that doesn't seem to have much in the way of cfqueryparamed user-entered variables...
There are a bunch of queries, so I'm thinking of how I could work lazy-er and yet fun-er. It's been a bit since I messed with FB, but I was thinking perhaps I could create a circuit or something that runs prior to any DB stuff, and sanitizes the form and url scopes in some manner. I was thinking this sounded cool, but then I was like, if it was doable, people would have these things you could just slap in onRequestStart or whatever and negate the need for queryparam (or at least add a bit of light protection in the meantime?). Might take a stab at a meta-type deal, if it's possible... maybe a bit of db introspection... mix it up, find something that works... mmm... AOP it in some manner... hmmm... Anyways, while I'm percolating, anyone have any ideas? Doable, not-doable, done? Hmmm.... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| ColdFusion is delivering applications solutions at at top companies around the world in government. Find out how and where now http://www.adobe.com/cfusion/showcase/index.cfm?event=finder&productID=1522&loc=en_us Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:285528 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
