This plugin is currently discontinued and will not be updated anymore.
Lobot is a [key] obfuscator plugin for ColdFusion on Wheels. This plugin offer a more secure solution to protect your application by obfuscating the [key]. The plugin create a hash of the [key] which is then encrypted with the [key] itself. On each request, the [key] is decrypted and compared to the hash value. If the comparison fails the action is aborted, otherwise the decrypted [key] is restored in the params struct.
- The [key] is encrypted along with the hash value for comparison
- If the comparison is successfull: the [key] is restored in the params struct
- If the comparison fails: the action is aborted
- The obfuscated [key] is impossible to guess and tampering with it will abort the action
- Based on "How to protect sensitive data in URL's"
Documentation for this project can be found at https://github.com/ellor1138/Lobot/wiki
- ColdFusion on Wheels 1.1.8
- Adobe ColdFusion 9 Developer Edition
- MSSQL Server 2008
Copyright 2013 Simon Allard
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" basis, without warranties or conditions of any kind, either express or implied. See the License for the specific language governing permissions and limitations under the License.
He's the Brain, Sweetheart