This repository has been archived by the owner on May 4, 2018. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
Home
ellor1138 edited this page Oct 9, 2013
·
6 revisions
Lobot is a [key] obfuscator plugin for ColdFusion on Wheels. This plugin offer a more secure solution to protect your application by obfuscating the [key]. The plugin create a hash of the [key] which is then encrypted with the [key] itself. On each request, the [key] is decrypted and compared to the hash value. If the comparison fails the action is aborted, otherwise the decrypted [key] is restored in the params struct.
- The [key] is encrypted along with the hash value for comparison
- If the comparison is successfull: the [key] is restored in the params struct
- If the comparison fails: the action is aborted
- The obfuscated [key] is impossible to guess and tampering with it will abort the action
- Based on "How to protect sensitive data in URL's"
Next: [Settings](wiki/Settings)