Here is another MAX 2007 session that you should pay attention to ...

If you build web apps, any web apps, then you must pay attention to security. But what does that actually mean? What are the risks? What are OS and HTTP vulnerabilities, and how are they taken advantage of? How do SQL injection attacks work, and are you truly protected?

Shlomy Gantz has been teaching web app security (from a ColdFusion perspective) for a long time now, and I sat in on one his sessions a year or so ago. He doesn't just talk about security risks, but actually demonstrates the risks and how they are exploited, and offers practical guidance on how to address the risks.

Shlomy will be presenting his Securing ColdFusion at MAX this year, with content updated for the new ColdFusion 8. His sessions run twice, on Tuesday, October 2, 2:45pm-3:45pm, and Wednesday, October 3, 1:45pm-2:45pm. This one is highly recommended.

I just finished my "ColdFusion Powered AIR" presentation at the State Theater in Falls Church, VA (just outside of D.C.). I'll be on the On AIR Bus for two more stops, Baltimore tomorrow, and Philadelphia on Wednesday. I hope to see you there!