| By Rob Gonda |
Article Rating: |
|
| December 20, 2005 09:45 AM EST |
Reads: |
13,688 |
ajaxCFC now supports built-in improved security, enforcing get or posts verbs, and also optionally checks for the http-referer to match your site. These two checks will prevent a third party from monitoring HTTP packets and trying to call them manually by pasting the full AJAX request to a browser.
I personally always Firefox and Live HTTP headers debug my AJAX applications and I recommend using get methods and allow blank referers for development environments; but you need to be able to lock it down for production.
And talking about development, don't you hate when you think you're doing everything right, but there is no way to see what the server is getting out of your AJAX request? I added some debugging abilities too that write into a debug file.
More details on the implementation of these updates are available in the documentation inside the download.
Rob Gonda is an industry visionary and thought leader, speaks on emerging technologies conferences nationwide, and combines unique approaches to technology and marketing strategies. He is the former Editor-in-Chief of the AJAX Developer’s Journal, an Advanced Certified Coldfusion Developer, member of the Adobe Community Experts, frequent contributor to the CFDJ and ADJ, co-author of Real-World AJAX: Secrets of the Masters, author of AjaxCFC, holds a BS in computer science and engineering and an MBA with a specialization in entrepreneurship.
Rob recently joined Sapient from ichameleon/group/ where he was a founding partner and chief technical officer. He is part of the global technology leadership team, and brings with him over ten years of experience in web development and 360 marketing campaigns for clients such as Adobe, Coca-Cola, Guinness, Toyota, Taco Bell, NBC, and others.
He specializes in emerging technologies, marketing strategy, social media, and he is currently fascinated with rich internet applications, service oriented architecture, mobile, agile methodology, automation, behavioral targeting, multi-channel synergy, and identifying new trends.
Rob’s mission is to develop forward-thinking expertise that will ensure clients are always on par with rapidly changing technologies and maintain its ethos of evolving.
You can reach him at rob[at]robgonda[dot]com and read his blog is at http://www.robgonda.com
