Coldfusion or ASP? Must be Secure!

[DirtylilTechBoy]

Hello,

My organization is developing a web site that is expected to recieve high traffic and use multiple databases, an email server, web chat, auctions, classifieds, etc. We can't decide whether or not to develop in Coldfusion or ASP. Does anybody have any factors we need to consider before we make the decision? This must be a secure network.

I appreciate all comments,

Sincerely,

 

[Xede]

You could get it done in both, but probably faster with Cold Fusion. I'm not sure what exactly you mean by "secure network", but again both should be perfectly capable of doing what you want. I recommend Cold Fusion (have used it for about 3 years now).

 

[DirtylilTechBoy]

Thanks! I know that both will work seemlesslly with SQL, so I was thinking I could use both for whatever aspects they could be used best. The secure network thing was just a dig for information about security holes in either platform. I like coldfusion for its ability to use custom tags. However, I had another development company tell me that ASP is much better in angles and respects and that Coldfusion has nothing on ASP.

 

[Chatterjee]

how about php (www.php.net)

-S

 

[bevancoleman]

I beleive most of the scripting languages are 'secure', most vunerbilites are because the programmer dosn't fully understand or impliment security into their product.

A prime example is a very common vunerbility where a programmer takes input from a textbox and inserts it directly into a SQL statement without any form of filtering. If you then enter a carfully constructed SQL statement it is possable to attack the SQL server from a textbox.

 

[DirtylilTechBoy]

Whats PHP? How is it different that Coldfusion and ASP? Or are they all just different ways to work with C++ like Visual Studio except that they are geared toward web based applications?

Thanks!

 

[DirtylilTechBoy]

By the way, I'm looking for an email server that will allow for automatic account creation so that when people register for our site they can get an email redirect address. ex. They have joeblo@theirwebsite.com for their email address and we give them membername@ourwebsite.com which simply forwards email to their original address. I'd prefer a unix based email server, such as sendmail or squirrelmail that can scale to have millions upon millions of accounts (a requirement I was given for the project, my superiors are paranoid about scalability)

 

[DirtylilTechBoy]

anyone?