I agree, it's not really the language's fault. I'm involved with more than one application that's over a decade old, so I understand what happens. My point is

I agree, it's not really the language's fault. I'm involved with more than one application that's over a decade old, so I understand what happens. My point is that a lot of the things still running around in ColdFusion aren't there because they're healthy, they're around because they are too sick to do anything else with. I've got too much personal experience with applications used by the government that I sure would not trust with my personal data! You know, things written before password hashing was standard practice ... and that still don't hash passwords.