One of the new features added to ColdFusion 9 is the Cache Template in Request setting located on the Server Settings > Caching page of the ColdFusion Administrator. The setting was recently featured in the ColdFusion 9 Performance Brief showing a 50x boost when enabled.

Here's a one liner CFML script to show what version of Java your ColdFusion server is running:

<cfoutput>#CreateObject("java", "java.lang.System").getProperty("java.

Adobe has posted a ColdFusion 9 Performance Brief, outlining several performance improvements over ColdFusion 7 and 8. The brief reports a 40% performance improvement over ColdFusion 8, and a 500% improvement over ColdFusion 7, running CanvasWiki.

I've been doing some security work in Windows 2008 recently for a client, one feature I've really come to like in IIS 7 is Request Filtering.

You can configure Request Filtering at the server wide level, and then override or enhance the filtering at a site / application level.

As you are probably aware ColdFusion allows you to use the integrated J2EE sessions that are provided as part of the J2EE server (by enabling the Use J2EE session variables setting in ColdFusion Administrator).

One of the best ways to really learn about something, is to roll up your sleeves, get your hands dirty. This is especially true for learning about security, it can be difficult to fully understand how attacks work by just reading about it.