Skip to main content
T
Terry26564135miig
Participating Frequently
December 8, 2023
Answered

Protection against cyber attacks

  • December 8, 2023
  • 3 replies
  • 391 views

Our website has been getting alot of direct calls to pages that require parameters that are hidden. The requests are missing the parameters and so the page fails since the parameter is not defined. I was going to just define all undefined parameters but that whould just hide the original problem of the site is being Hacked. I would rather log that the page was requested without parameters and then redirect the call to a "page not found" as if the page did not exist. I'm not sure how to accomplish this. Any Ideas or other solutions?

      This topic has been closed for replies.
      Correct answer sdsinc_pmascari

      There are many things to look at when trying to protect a web site.  For the situation you've described, you could check to see if the required paramets are present and, if not, use CFHEADER to give the 404 Page Not Found error.

       

      <cfif isDefined(“myVar1”) AND isDefined(“myVar2”) AND any-other-verifification-you-need IS true>
	<!--- Process page normally --->
<cfelse>
	<cfheader statuscode=“404” statustext=“Page not found”>
</cfif>

       

      3 replies

      BKBK
      Community Expert
      BKBKCommunity Expert
      Community Expert
      April 2, 2024

      @Terry26564135miig , how do the hidden parameters get passed to the page? That is, in which scopes? This information helps in finding a solution to the problem.

       

       

      M
      Marie Jenner
      Participant
      April 1, 2024

      - Take help from the nearest cyber security department if you find out a website is being hacked. I think this is free service. 

       

      Did you make sure all these things were done well?

       

      - Create strong passwords

      - Use Multifactor Authentication

      - Secure Internet Communication

       

       

      D
      Community Expert
      Dave WattsCommunity Expert
      Community Expert
      April 1, 2024

      Hi, Marie!

       

      This is a programming forum, and you've provided something that probably isn't relevant to CF programmers, I think. I recommend you think about "how this will be understood by developers" when you post something. Most developers will be working on TLS sites that use HTTPS. Their sites may use multifactor authentication already, but they probably can't enforce MFA use - that's often up to designers and architects rather than developers.

       

      Note that this is not intended as a criticism, just as a piece of advice.

       

      Dave Watts, Eidolon LLC

      Dave Watts, Eidolon LLC
      S
      sdsinc_pmascariCorrect answer
      Legend
      December 8, 2023

      There are many things to look at when trying to protect a web site.  For the situation you've described, you could check to see if the required paramets are present and, if not, use CFHEADER to give the 404 Page Not Found error.

       

      <cfif isDefined(“myVar1”) AND isDefined(“myVar2”) AND any-other-verifification-you-need IS true>
	<!--- Process page normally --->
<cfelse>
	<cfheader statuscode=“404” statustext=“Page not found”>
</cfif>

       

        Terms & ConditionsAccessibility statement
        Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices