Coder's Revolution - ColdFusion

JVM Args Don't Like Line Breaks

Sat, 30 Jan 2010 23:44:00 -0500

A brief hiatus today from from the PCI Compliance series to issue a quick public service announcement. I was installing my free copy of SeeFusion today that I netted in the recent give-away WebApper had. Since the target machine was CF7 on a OpenSuse Linux with the JVM upgraded to 1.4.2_11, it was a "manual" install. Pretty easy-- copy a few jar files and edit a few configs. The problem was, SeeFusion wasn't able to connect to my debugging port to capture stack traces and I couldn't figure out why. [More]

PCI DSS Compliance Part 1 - Predictable Session ID Vulnerability

Thu, 28 Jan 2010 22:24:00 -0500

As a web developer you have your share of demons you have to face. If your company processes credit cards, chances are your yearly PCI DSS compliance scan is one of those demons. I thought I would do a short series on a few security items I tightened down as a result of our last PCI scan. This is by no means a comprehensive list of everything needed to pass a PCI scan. If you want to know that and have time to read a 74 page PDF you can get a copy of the Spec at www.pcisecuritystandards.org. [More]

ColdFusion's Heartbeat

Sat, 23 Jan 2010 00:50:00 -0500

I jogged down the stairs, one arm over my head, as I pulled my coat on a sleeve at a time. Fishing the car keys out of my pocket with one hand, I leaned over my computer to tap in my E-mail password with the other. "Wow, 41 unread messages in the CF-Talk folder," I thought. "There must be a hot new topic on the list today." With a click I watched the new thread flow in. "Why i fear ColdFusion is on its last legs" "Oh Geez," I sighed, "Please not with this again!" There wasn't time to read all that right then. I'd have to catch up on this one later in the day when my absorption rate was higher. [More]

BlogCFC Code Formatting Not Thread Safe (With Example)

Thu, 03 Dec 2009 16:58:00 -0500

I found an interesting little bug in the BlogCFC implementation of ColdFISH today. ColdFISH is a ColdFusion code formatting component that is instantiated once and cached as a singleton in the application scope in BlogCFC. The problem is, ColdFISH looks like it wasn't intended to be used as a singleton. It makes use of the variables scope to store the Java StringBuffer class it uses to gather up your formatted code as well as a number of other variables used to parse the code it is formatting. This means when two or more people hit a BlogCFC entry with larger code samples, race conditions exists. [More]

Give Your Opinion, Get SeeFusion For Free

Sun, 29 Nov 2009 15:43:00 -0500

Our friends at Webapper are giving away free copies of SeeFusion (an awesome ColdFusion server monitoring tool) to the first ~~100~~ 200 people to take their survey on ColdFusion consulting. Go check out here: http://www.webapper.com/blog/index.php/2009/11/25/coldfusion-survey/ UPDATE: Webapper is now going to give away SeeFusion to the first 200 people to take their survey. Can't beat that!

A Look Into ColdFusion's Future (Again) Sully? Link? Storm?

Sat, 24 Oct 2009 01:24:00 -0500

Well, now that ColdFusion 9 is officially out the door (it's still hard to believe), have you thought about what you want to ask Santa for CF10? We're going to double digits, baby-- so it'd better be good! Yeah, I know-- who do I think I am? Honestly, I still feel like a kid after Christmas with enough new toys to keep me busy for a while. Even so, I can't help but wonder what's in store. Once again, I have found clues in Adobe's own words via the latest version of the ColdFusion Evangelism Kit. [More]

Taming The Header Output Of CFHTMLHead and CFAjaxProxy

Tue, 20 Oct 2009 22:14:00 -0500

Tags like CFHTMLHead, CFAjaxProxy, and CFAjaxImport don't output their content into the regular ColdFusion output buffer. Instead they put their contents into a special header buffer which is dumped into the beginning of the output right before the request is sent back to the client. But what if you want control over where their output goes? CFSaveContent doesn't work on these bad boys. And even worse, <cfcontent reset="yes"> doesn't get rid of their output. The other day I got bit when trying to return the HTML of a rendered view via a proxy in ColdBox as a JSON string. The JavaScript output of the CFAjaxProxy tag was being appended to the beginning of the response and causing the result to not be valid JSON. [More]

How To Get The SQL Server SPID Out Of SeeFusion

Mon, 21 Sep 2009 22:19:00 -0500

I've never kept too quiet about my affection for SeeFusion as a ColdFusion monitoring tool. I use it for debugging, performance monitoring, and basic metrics gathering. Here's an old note on the JDBC URL wrappers that I found myself digging up last week. I don't even think you can find this nugget on the official SeeFusion site. [More]

MVC Question: What Should The Controller Pass The View?

Sat, 05 Sep 2009 00:08:00 -0500

I think the bane of development planning can be those conversations where you personify your framework and start debating about what a service should "know", whose "job" a particular operation is, or what the handler should "care" about. This is one of those sort of questions, but I'll keep it brief since I'm more interested in your opinions than my ramblings. [More]

ColdFusion UDF: Calculate A Number's Divisors

Fri, 14 Aug 2009 23:24:00 -0500

Here's another UDF I was tinkering with last week. I wanted to be able to count all of the numbers that divided evenly into a given integer. I couldn't find a ColdFusion implementation, so after getting some advice from Stack Overflow I created my own. [More]

Calculate Prime Numbers: Sieve of Eratosthenes

Thu, 13 Aug 2009 23:34:00 -0500

Ahh... the quintessential math problem-- finding prime numbers. Last week while tinkering with a math challenge I needed to find all of the primes up to a given number. There was a version on cflib.org, but I thought I could do it in less code, so I dug in myself. [More]

Bolt, Centuar, Flash Catalyst, and Gumbo features

Fri, 19 Jun 2009 23:56:00 -0500

This Wednesday Adobe's Kevin Hoyt spoke in Kansas City to a captive audience of about 75 people including ColdFusion programmers, HTML/CSS builders, and designers. The meeting was great. It also included Jack Stack BBQ and shwag from Uhlig, Emfluence, and Tek Systems to name a few. Kevin didn't drop any bombs I hadn't heard about yet, but there were definitely a few things I learned about Adobe's up-and-coming products. Here's a quick overview of my notes: [More]

Adobe's Kevin Hoyt is coming to Kansas City!

Mon, 15 Jun 2009 16:55:00 -0500

If you live in or around Kansas City, Kevin Hoyt is coming to speak about ColdFusion, Bolt, Flex, and Flash Catalyst this Wednesday. I am pretty excited. First of all, to receive some local attention from Adobe. Secondly, to get to hear Kevin (Adobe Platform Evangalist). Thirdly, they are promising BBQ. What else could be better? [More]

New Flex 4 Tutorials Available

Mon, 01 Jun 2009 07:34:00 -0500

Flex 4 (Gumbo) is now in Beta and new training tutorials are available from Trilemetry. There a handful of new articles you can read on Adobe's site and follow along with to learn Flex 4 with ColdFusion! [More]

Should Optional Method Parameters Be Defaulted To Blank, Or Left Undefined?

Sat, 30 May 2009 22:51:00 -0500

Today I offer you a question of preference. Should optional method parameters be defaulted to blank and assumed to exist, or should they only be defined if you intend to use them? In the name of code reusability I will find myself writing generic service methods such as userService.loadUser() which have a large list of optional parameters such as lastName, firstName, userName, companyID, userID, password etc. I will reuse this method any time I want to load a user or a list of users. The question is this: is it more correct to default all of the arguments or check for their existence? [More]