Skip to content
ColdFusion
Find file
Latest commit 2752b00 Jun 24, 2011 @mhenke Edited README.md via GitHub
Failed to load latest commit information.
.project adding script Jun 23, 2011
README.md Edited README.md via GitHub Jun 24, 2011
_parameterizeQueries.cfm

README.md

readme

Purpose

Seek out unparamaterized queries in ColdFusion templates and, at user's option, parameterize them.

Written by

Daryl Banttari dbanttari@gmail.com

Blog Post

http://www.webapper.com/blog/index.php/2008/07/22/coldfusion-sql-injection

Caveats

This will probably break some queries, especially if you do things like WHERE date > ‘#dateFormat(d)# #timeformat(d)#’ or WHERE NAME LIKE ‘#searchname#%’. USE WITH CAUTION! It’s best to test the changes before moving them into production. Remove the “.old” files once the site is confirmed as working well.

License

RELEASED TO THE PUBLIC DOMAIN. But feel free to credit Daryl Banttari with original authorship if you release it with modifications.

Git Workflow for Contributors

This project uses the excellent Git Workflow series by Bob Silverburg for contributions.

Dealing with line endings

Before contributing, please read this http://help.github.com/dealing-with-lineendings/

Something went wrong with that request. Please try again.