View comments | RSS feed

ColdFusion security features

ColdFusion provides scalable, granular security for building and deploying your ColdFusion applications. ColdFusion provides following types of security resources:

Development ColdFusion MX Administrator is protected by a password. Additionally, you can specify a password for access to data sources from Macromedia Dreamweaver MX. For more information on configuring Administrator security passwords, see the ColdFusion MX Administrator online Help. This chapter does not these passwords. For more information see the Administrator Help.
Resource The ColdFusion MX Administrator can limit access to ColdFusion resources, including selected tags and functions, data sources, files, and host addresses, based on the location of your ColdFusion pages. You can confine applications to secure areas, thereby flexibly restricting the access that the application has to resources.
User ColdFusion applications can require users to log in to use application pages. You can assign users to roles (sometimes called groups); ColdFusion pages can determine the logged-in user's role or ID and selectively determine what to do based on this information.

Note: You can also use the cfencode utility, located in the cf_root/bin directory, to obfuscate ColdFusion pages that you distribute. Although this technique cannot prevent determined hackers from determining the contents of your pages, it does prevent inspection of the pages.

Version 6

Comments are no longer accepted for ColdFusion MX. ColdFusion 8 is the current version.

Comments

srhcfmx said on Jun 9, 2002 at 9:26 PM :

Missing verb: in "Development" paragraph. "This chapter does not these passwords."

jschley said on Apr 15, 2003 at 10:05 AM :

Is this really the only mention of cfencode anywhere in the docs?

TheoPeters said on Oct 8, 2003 at 1:07 PM :

Apparently part of the "security" of cfencode is that the documentation is so well hidden. I'd like to use cfencode, but when I run it all I get is the very helpful error message: 'segmentation fault'.

jimandsilentbob said on Dec 21, 2003 at 2:01 PM :

Does MM ever read these? I am almost finished building a commercial app written in CF, and am sunk with this segmentation fault in cfencode (cfmx 6.1 on redhat 7.2)

No screen name said on Jan 8, 2004 at 10:13 AM :

The cfEncode.exe syntax is towards the bottom of http://livedocs.macromedia.com/coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/reuseCode4.htm

RSS feed | Send me an e-mail when comments are added to this page | Comment Report

Current page: http://livedocs.adobe.com/coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/appSecurity2.htm

Developing ColdFusion MX Applications with CFML
Securing Applications