I have had some suggestions for the fwreinit flag to be protected in order to reinitialize the application at hand. What do you think? Is this overkill? The application reinitializes, but it does not crash. It just adds some extra cycles to the request in order to clear and reinit the app. Please send me your comments, suggestions? Should an application reinit, be password protected? Thanks, Luis
Blog
Recent Entries
QR Codes Come to BoxLang Images
The bx-image module can now generate and read QR codes. Two new functions, a string member function, and two new bx:image actions. No extra dependencies for you to manage.
Luis Majano
Luis Majano
October
14,
2026
CBSecurity 3.9: 12 Security Middleware for ColdBox, Declared Right on the Route
Ortus Solutions today announces CBSecurity 3.9, a major step forward for securing ColdBox applications. This release adds 12 ready-made security middleware that you attach directly to routes and route groups, with no firewall rules required.
Luis Majano
Luis Majano
October
13,
2026
ACF2021 extended support ends on November 10. Is Your Application Ready?
Adobe ColdFusion 2021 reaches the end of extended support on November 10, 2026. If your application still runs on this release, the time to decide what comes next is now.
Adobe ended core support for ColdFusion 2021 on November 10, 2025. The current extended support period is best effort and does not include security patches or hotfixes. When it ends on November 10 2026, organizations will no longer have that support option from Adobe for ColdFusion 2021.
What ...
Cristobal Escobar
Cristobal Escobar
October
13,
2026
Add Your Comment
(3)
Dec 06, 2006 03:53:29 UTC
by Sana
Hi Luis,
I think it really important to keep our APP more secure. Why we allow site users to reinit our app. some users they just play with these kind of things and keep reinit app.
In my app i am using onAppinit method to call global components + static data queriries and other global static info. so keep reinit the app cause some problem of server timeout and also whole system get very slow.
Thanks
Sana
Dec 06, 2006 08:38:38 UTC
by Rob Gonda
If you allow to set a init key and init password is enough. You can set it to a complex password which no user could guess. That's secure enough for me.
p.s. this captcha text is really annoying. Check out Charlie's solution, also default in a latest version of blogCFC
Dec 06, 2006 15:26:06 UTC
by Luis Majano
Thanks Rob!!
You are the details man!! jeje.
Will take a look at it.