CFWebstore Download

This is version 4 of the SQL Injection blocker tool. I've added a XSS checker as well and corrected an issue with some false positives that we were seeing in the last version. This version also allows you to specify the scope to scan in, public being the default, allowing you to skip the form checks if you need to for specific users (typically backend admin users that may be inserting various script tags through forms). My thanks to Luis Melo for allowing me to borrow his own injection scanner tool for basing this on.

For CFWebstore version 5 and earlier stores, you would need to include this *after* the cfapplication line in database/database.cfm as it will need the application scope turned on (be sure to remove the previous cfinclude in Application.cfm if you were using an earlier version). For other ColdFusion sites, just use it anywhere that works for your application, at some point after application scope has been initialized.