What does verifyClient do in <cffunction>whether it really makes it safe? from what?
Doc said:
A boolean value that indicates whether to require remote function calls includes an encrypted security token. For use with ColdFusion AJAX applications.
encrypted security token? who is causing this? Client side JS? Introduced in JS when requesting a page using CF? What if another person uses the same security token?
source
share