Adventures with Plex and Pyacc

Recently I came up with the brilliant idea of adding more work for myself, with little to no potential of earning more money, yay side projects  🙂 I've been curious about compilers for a while and figured "Why not?", so I'm working on creating an interpreter for CFScript using Plex and Pyacc. For those who...

Hashing passwords in CFML

  It's easy to store passwords, it's also easy to do it poorly. It's not enough to just hash(form.password) your users data, it's a good first step but is horribly insecure. Why do we hash passwords? The main reason is that if your data is compromised, an attacker could get the users stored passwords. People...

SQL injection and CFML 101

SQL injections are among the first things you learn about web application security. It's such a simple concept that when it's explained, everyone goes "Oh, yeah, well duh" yet we've all written vulnerable code at some point in our lives. Sure, someone learning web development might allow the vulnerability without realizing, but even seasoned professionals...