Security and site design

[manimal]

Hi guys!
Can any one give me some links to sites that give me some security tips when programming websites? I've done a search through google and I mainly get stuff about securing servers and such, but I'm wanting details about how to design websites with some security - like do I use complicated names for database names/fields, etc.?

Thanks!

 

[RedLion]

Hi Manimal,

Look on the site from Allaire for the keyword "application.cfm" you wil find some nice examples how to secure your pages with the help of application.cfm. You could also look in the documentation about application.cfm or the tek-tips threads.


Charl

 

[mcsolas]

I just found one that helps from people to have access to your database files. If you webserver supports FP extensions, the _private directory on windows servers wont let people grab it through a web browser.

MC

 

[SidianConsulting]

One thing to remember about database files is that you should always, always, ALWAYS keep them out of a web-accessible directory. If you are in a shared hosting environment, then consider creating a web folder in the root of your web application and keep all web-accessible files in there. Keep your database file off the root in a separate directory.

-Tek