Radek, what you did is exactly correct.  (Well, some people might bust your 
balls for the select *, but that's another performance/bug related 
discussion)

Just make sure you get EVERY vulnerable query in your site. It only takes 
one bad apple...

~Brad

----- Original Message ----- 
From: "Radek Valachovic" <[EMAIL PROTECTED]>
To: "CF-Talk" <[email protected]>
Sent: Thursday, July 24, 2008 12:12 PM
Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...


> Do you think when I am using cfqueryparams for example with numbers like
> this is secured?:
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309629
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to