Updated CFHttpSession.cfc With Spoofed Referer Can Log Into PayPal
Post Comment
Please enter your comment below. Click here to return to the web log entry without posting a comment.
The Blog Of Ben Nadel On Obsessively Thorough Web Application Development
I am the chief software engineer at Epicenter Consulting, a boutique software
company in New York City that specializes in developing high-end, customized business
solutions using ColdFusion and jQuery.
( more )
Loading....
Updated CFHttpSession.cfc With Spoofed Referer Can Log Into PayPal
Nov 22, 2009 at
4:30 AM
dasegtezr
... read »
Nov 22, 2009 at
1:56 AM
Why adobe would give you script equivalent of cfquery is beyond me. I love cfquery tag because it helps me wriite clean sql, and get away from the horrible jdbc queries If I wanted to write javali
... read »
Nov 22, 2009 at
1:45 AM
The reason you would want to do this is to stream. Ack json/xml files to ria clients I used thus technique before because putting json in response stream causes debugging info to come thru As well a
... read »
Nov 21, 2009 at
6:47 PM
@charlie griefer, Thank you..
... read »
Nov 21, 2009 at
5:15 PM
@Jose Galdamez, Oh heh yeah I didn't paste the whole code. I should have defined the vars -- my bad. It's fixed thou. Thanks.
... read »
Nov 21, 2009 at
4:49 PM
Great work yet again Ben! Whilst I didn't use this whole code, I copied some of your regex code for a similar problem with the lack of an alt attribute and unescaped ampersands in CFIMAGE for Railo 3
... read »
Nov 21, 2009 at
1:13 PM
@Ben, Because I am pedantic, I just want to make sure that everyone knows there is absolutely no encryption going on. There is only encoding and obfuscation. The cfencode tool only obfuscates your C
... read »