I was tasked recently with auditing an application's security, which is always a tedious process.  Luckily, I was only reviewing the application code, not the platform or infrastructure running the app.

The application was not written using an MVC framework, so I began by crawling through source code.  It took a while, as each .cfm file contained business logic, data access, and display code.  ...<p>[<a href="http://www.firemoss.com/blog/index.cfm?mode=entry&entry=90ADA076-E081-2BAC-69972DAC3E55170C">Read more on Joe Rinehart's blog</a>]</p>