2019-10-15 Weekly News - Episode 23Hosts:Gavin Pickin - Software Consultant for Ortus Solutions
Andrew Davis - Senior Developer for InLeague LLC
News and EventsOnline #ColdFusion Meetup - "Approaches to more secure ColdFusion code" with Pete FreitagThu Oct 24, 12p US ET
Security is a topic we as developers love to ignore as much as possible, but as the number of attacks increase year over year we need to grab hold of the security in our apps. It can be difficult to secure large or legacy codebases, we'll look at some practical approaches to getting in there and making progress. We'll also review some of the top vulnerabilities to watch out for, which also provide a good starting point.
https://www.meetup.com/coldfusionmeetup/events/265565548/Want to speak - read more here -
https://www.carehart.org/blog/client/index.cfm/2019/10/9/come_speak_on_the_cfmeetup MongoDB Lucee Extension V1.0.0 releasedWe are very excited to bring you a new commercial product release for the Ortus Family: MongoDB Server Lucee Extension The MongoDB Server Lucee Extension allows you to natively connect to a MongoDB Server cluster and leverage it for distributed caching, session/client storage and distribution, cluster RAM file systems, and much more. It can allow your Lucee servers to scale and extend easily by leveraging MongoDB Server as the platform of choice for session/cluster managements, NoSQL, caching and virtual file-systems.
https://www.ortussolutions.com/blog/mongodb-lucee-v100-extension-releasedI <3 Lucee - At ApacheCon 2019 Last month Igal gave a talk titled "I Love Lucee" at the Tomcat track of ApacheCon Lucee is a Rapid Application Development platform, consisting of an application server, language implementation, and a framework
https://www.youtube.com/watch?v=D6l8hyRdFII&feature=youtu.beHacktoberfestHacktoberfest® is open to everyone in our global community. Whether you’re a developer, student learning to code, event host, or company of any size, you can help drive growth of open source and make positive contributions to an ever-growing community. All backgrounds and skill levels are encouraged to complete the challenge.
Hacktoberfest is open to everyone in our global community!
Pull requests can be made in any GitHub-hosted repositories/projects.
Sign up anytime between October 1 and October 31.
Signup today - 4 valid pull requests will earn you a free t-shirt.
https://hacktoberfest.digitalocean.com/ConferencesColdBox From Zero to Hero - Bootcamp Training - SOLD OUTBangalore, India | October 16-17, 2019 - by Luis Majano
Very popular ColdBox training, a great way to get your feet wet and jump start your ColdBox development.
Project Overview:
We will be building a real twitter clone: SoapBox. We will use HMVC conventions, including BDD / TDD testing to build out the application including the usage of many different ForgeBox modules and industry standards.
SOLD OUT
Price: $199 for 2 days
Group discounted pricing available for $99
Register now: https://www.eventbrite.com/e/hmvc-web-applications-from-zero-to-hero-bangalore-india-2019-tickets-58595141646
CF Camp - Workshops and ConferenceOctober 17th and 18th in Munich, Freising, Germany.
Read more now: https://www.cfcamp.org/ - Tickets NOW AVAILABLE.
Early bird - July 15, 2019 - 280 EUR - $313.27
Regular - Sep 11 - Oct 15, 2018 - 330 EUR - $369.17
Late - Oct 16 - Nov 8, 2018 - 380 EUR - $425.10
3rd Episode of Code Masters
Don't miss the third episode of CODE MASTERS from your hosts @markdrew and @robdudley
They recorded a video from CFCamp last year as part of the LocalHost.fm podcast. Watch the Youtube video here https://www.youtube.com/watch?v=-MECBMAMw0A
You can see the great lineup of speakers and sessions from last year on the site now. They will update as the speakers and sessions for this year is finalized.
Call for Speaker Deadline was July 7th - Now closed
Speakers have been announced
https://www.cfcamp.org/speakers.html
On Twitter Kai said “I can honestly say this is the best & most diverse programme, @cf_camp ever had!“
Ortus Speakers
Eric Peterson
Jorge Reyes
Brad Wood
Lots of Great Community Speakers
Charlie Arehart
Eleftheria Batsou
Miguel Beltran
Wil de Bruin
Jen Doherty
Mark Drew
Rob Dudley
Seb Duggan
Nolan Erck
Uma Ghotikar
Matt Gifford
Majid Hajian
Michael Hnat
Kenigbolo Meya Stephen
Kai König
Francisco Mancardi
Lara Martín
Joel Stobart
Maciej Treder
Dom Watson
Sebastian Zartner
Sessions have been announced
https://www.cfcamp.org/sessions.html
CF CAMP Pre Conference Training Options Announced
Before CFCamp we're offering some interesting training sessions and presentations. The training sessions are held at the CFCamp venue at the Marriott Hotel Munich Airport in Freising.
We're currently putting together a very interesting set of training for you. Please stay tuned.
ColdBox Hero to Superhero (Oct, 15-16th)
BDD with TESTBOX (Oct, 15-16th)
PresideCon (Oct, 16th)
Centralize your logs with the Elastic Stack (Oct, 16th)
Get into Linux (Oct, 16th)
https://www.cfcamp.org/pre-conference.html
Ortus Training at CF CampOrtus will be doing a 2 day workshop on the 15th and 16th of October.
Eric Peterson will be leading - Rest easy at night with TestBox BDD
Brad Wood will be leading the - Hero to Superhero - API REST Edition - name to be confirmed.
Blogs, Tweets and Videos of the WeekPodcast - Michaela Light - Teratech - Charlie Arehart talks about ColdFusion 2020 in this episode of the #CFAlive Podcast
https://smarterqueue.com/video/16034651Tweet - Lucee Server tweeting about CFCamp videos from 2018Check out the CFCamp videos from last year via cfcamp.org/videos.html
We had some great sessions in 2018. Are you ready for CFCamp 2019?
https://www.cfcamp.org/impressions/videos.htmlhttps://twitter.com/lucee_server/status/1184032301526724608Blog - Ben Nadel - Building A Simple Redis Key Scanner Using Lucee CFML 5.2.8.50 And JedisThe other day at work, I noticed that our production Redis instance was holding steady, on balance, at about 7GB of memory usage and 14M keys. Anything "holding steady" in Redis makes me suspicious, especially over the course of several months, as I would expect the Redis resource consumption to ebb-and-flow with the natural rhythm of user engagement. As such, I wanted to start digging into the Redis data to see if anything looked wonky. To aid in this discovery process (and to have some fun), I created a super light-weight Redis Key Scanner using Lucee CFML 5.2.8.50 and Jedis, which I can run locally using CommandBox.
https://www.bennadel.com/blog/3706-building-a-simple-redis-key-scanner-using-lucee-cfml-5-2-8-50-and-jedis.htm
Blog - Mura - There is No Such Thing as a Mura DeveloperBeing a professional developer means that your own skills are also constantly developing and evolving, as you expand your toolkit and learn new ways of solving problems. Thanks to the ever-changing landscape of web technology, there is no "one-language" developer anymore. In this light, there truly is no such thing as a "Mura Developer".
https://www.getmura.com/blog/there-is-no-such-thing-as-a-mura-developer/ Tweet - Brad Wood - Short holiday on the way to CFCampAfter an amazing, but short holiday in London and Paris, I'm in Munich Germany and ready for the 2-day Ortus #ColdBox pre-conference training starting tomorrow and then the #CFCamp conference, where it seems I've picked up a second session on CFConfig! #CFML #ColdFusion
https://twitter.com/bdw429s/status/1183854883881005057https://twitter.com/bdw429sBlog - Pete Freitag - Counting IP Addresses in a Log FileI've been using grep to search through files on linux / mac for years, but one flag I didn't use much until recently is the -o flag. This tells grep to only output the matched pattern (instead of lines that match the pattern).
https://www.petefreitag.com/item/884.cfmBlog - Michaela Light on ColdFusion.Adobe.com Blog - Adobe ColdFusion Comprehensive Guide (More Powerful, More Modernized, More Alive)
An informative summary on Adobe ColdFusion and why you could/should use it. This might be a good article to point someone at when they ask “Why ColdFusion?”.
https://coldfusion.adobe.com/2019/10/adobe-coldfusion-comprehensive-guide-powerful-modernized-alive/https://teratech.com/adobe-coldfusion-comprehensive-guide-more-powerful-more-modernized-more-alive/Blog - Matt Clemente - TIL: Generating .xlsx Files with CFML - An Easy Way to Reduce File SizeJust a quick note about generating XLSX (Excel) files with ColdFusion, which basically amounts to me regurgitating the documentation. It’s a small change in code, but the reduction in spreadsheet file size can be considerable.
https://blog.mattclemente.com/2019/10/11/til-generating-xlsx-files-with-coldfusion.htmlBlog - Kishore Balakrishnan from Adobe - ColdFusion Summit 2019 – Presentation FilesThe seventh edition of ColdFusion Summit happened in Vegas from Oct 1st – 2nd. There were more than 500 attendees from 320+ accounts being represented. We had four tracks with 40 sessions. Thank you to everyone that attended Adobe ColdFusion Summit 2019 and to the Presenters for the awesome sessions!
https://coldfusion.adobe.com/2019/10/coldfusion-summit-2019-presentation-files/Blog - Zac Spitzer - Lucee - Lucee Image Extension 1.0.0.30-SNAPSHOT releasedThere have been a number of recent snapshot releases, these include fixes for
Support for CMYK images
cfimage writetobrowser ignores height and width
Regression: Can’t resize image proportionally in ImageResize
Image Rotate throws error on odd number or odd size image
https://dev.lucee.org/t/lucee-image-extension-1-0-0-30-snapshot-released/6168Blog - Ben Nadel - Thought Experiment: Splitting A Single Data Table Up Into High-Writes And High-Reads For Better Performance In MySQL
CAUTION: This post is just me thinking out-loud about an interesting MySQL database performance problem that I have faced at work.
https://www.bennadel.com/blog/3705-thought-experiment-splitting-a-single-data-table-up-into-high-writes-and-high-reads-for-better-performance-in-mysql.htm
Blog - Grae Desmond - On Adobe ColdFusion Blog - Thoughts on the ColdFusion Specialist Program ExamSo, I blogged about the online part of the ColdFusion Specialist program and the in-person section. What about the exam?
https://coldfusion.adobe.com/2019/10/thoughts-coldfusion-specialist-program-exam/Blog - Grae Desmond - On Adobe ColdFusion Blog - Thoughts on the ColdFusion Specialist Program In-Person Segment
So the in person portion of the specialist program was during the pre-conference day of the ColdFusion Summit. The first tip I can give is to get there early if you are doing the specialist program. Adobe sprung for some pretty sweet hoodies for those in the program. They have Adobe ColdFusion Specialist stitched on the front with the Adobe logo on the arms. Unfortunately, I did not get there in time for my size but a friend at the conference graciously gave me his. I cannot say if they will have these at the next offering but I’ would take a shot as it is better than your day to day swag.
https://coldfusion.adobe.com/2019/10/thoughts-coldfusion-specialist-program-person-segment/Blog - Grae Desmond - On Adobe ColdFusion Blog - Thoughts on the ColdFusion Specialist Program Online SegmentSo I finished the ColdFusion Specialist videos. The program consists of online and an in-person components. The online training videos came out about mid September and all participants were required to complete this portion prior to the actual class on the day before the CF Summit. I was only a few minutes into the first video when I realized Nolan Erck was the instructor. He has presented on CF at pretty much every conference I have attended and gives great sessions so I knew the content would be good moving forward.
https://coldfusion.adobe.com/2019/09/thoughts-coldfusion-specialist-program-online-segment/Blog - Matt Gifford - Using Java to create a CFML .wav file audio player componentYesterday I had a thought (it does happen sometimes), and I wondered if it’s possible to make an audio player in CFML that manages audio playback through the browser.
I had a little investigation, and during my lunchbreak today I came up with CFWavPlayer.
https://www.monkehworks.com/2019/10/10/using-java-to-create-a-cfml-wav-audio-player-component.htmlBlog - Charlie Arehart - Come speak on the CFMeetup (online CFUG). A FAQ for prospective speakersDo you have a presentation you've given or would like to offer to a CF/CFML audience?
There is a waiting audience of a couple thousand members of the Online ColdFusion Meetup, the online CF user group which I host, who would love to see your talk and/or its recording that we'd make. This post is a FAQ for such prospective speakers.
https://www.carehart.org/blog/client/index.cfm/2019/10/9/come_speak_on_the_cfmeetupBlog - Ben Nadel - Playing With Lists And Blocking Pop Operations In Redis And Lucee 5.2.9.40I have a really embarrassing confession to make: until just recently, I thought that the Redis List data-type worked like the ColdFusion List data-type. Which is to say, I assumed that it was just an abstraction over simple, delimited string values. This wasn't based on anything that I read - it was just a really, really poor assumption that my brain made. As anyone who uses Redis Lists would tell you, Lists in Redis are really more like (bi-directionally linked) Arrays, where each index is a completely isolated string value. Once I realized how very wrong I was about Redis Lists, I wanted to put together a little learning experiment, where I Push and Pop JSON (JavaScript Object Notation) values on to and off of a Redis List using a Blocking Read operation (BLPOP) in Lucee 5.2.9.40.
https://www.bennadel.com/blog/3704-playing-with-lists-and-blocking-pop-operations-in-redis-and-lucee-5-2-9-40.htmBlog - Nolan Erck - ColdFusion Summit 2019 RecapLast week was the 2019 ColdFusion Summit in Las Vegas. This year brought the conference back to The Mirage (last year’s event was at The Hard Rock Cafe). and by all accounts was a big success!
Who are these jokers that keep spouting off about how “ColdFusion is dead”? Clearly they’ve never been to the ColdFusion Summit (or any recent CF conference for that matter).
https://southofshasta.com/blog/coldfusion-summit-2019-recap/Blog - Pete Freitag - Recursively Counting files by Extension on Mac or LinuxBack in 2004 I wrote up a blog entry showing how to get a count of files by a specific extension. For example you want to know how many js files are in a directory,
https://www.petefreitag.com/item/883.cfmTweet - Terry Beard - Moving to CFScriptMy old school CFML and new school CFScript. While I don't like some of the syntax features of CFScript, it is so much, imho, clearer and cleaner than CFML. I wish I would have dived into CFScript a lot earlier. #CFML #CFScript
https://twitter.com/snackboy/status/1182000312015560704https://twitter.com/snackboyBlog - Matt Clemente - Adobe ColdFusion Summit 2019I had the opportunity to present two sessions at this year’s Adobe ColdFusion Summit in Las Vegas - the first on Docker Swarm, the second on CFML API wrappers. While I’d given both previously, these were updated versions - there’s always room for improvement and changes in this space can happen with disconcerting speed.
https://blog.mattclemente.com/2019/10/08/adobe-coldfusion-summit-2019.htmlBlog - Brad Wood - Who's had more vulns, take 3: Java, ColdFusion, ROR, .NETIt's been 5 years since I wrote my first post comparing the number of CVEs (security vulnerabilities) reported each year by major programming languages and web frameworks and asking Who's Had More Vulns?
Who's Had More Vulns- PHP, Java, or ColdFusion?
https://wwvv.codersrevolution.com/blog/whos-had-more-vulns-php-java-or-coldfusionAnd it's been 2 years since I went back and updated the numbers again to reflect the newest data, still showing there is no statistical support for the notion that CFML is somehow inherently "less secure" than other languages.
Who's Had More Vulns Redux- PHP, Java, ColdFusion, ROR, or .NET?
https://wwvv.codersrevolution.com/blog/whos-had-more-vulns-redux-php-java-coldfusion-ror-or-netNew Post:
http://wwvv.codersrevolution.com/blog/whos-had-more-vulns-take-3-java-coldfusion-ror-netBlog - Matt Gifford - IP API CFML Open Source ComponentA few months ago I needed to write some code to interact with the IP API service to fetch geolocation data for certain conditions within the application.
The code I needed to implement was only a single call to a single endpoint on the API, but that evening I decided to write an API wrapper for it in CFML anyway, which was released as open source that very night.
https://www.monkehworks.com/2019/10/09/ip-api-component-open-source.htmlBlog - Matt Gifford - Adventures with CBStreams - Reducing and MixingFollowing on from the two previous posts in the Adventures with CBStreams series, API Transformations and Struct Grouping, today I wanted show you a useful example to use Java streams to reduce a multidimensional array.
https://www.monkehworks.com/2019/10/09/adventures-with-cbstreams-reducing-and-mixing.htmlBlog - AliasPoorYorik - Alternatives to Query of QueryCFML has had Query of Queries for years and it’s been a useful tool but in modern CFML there is no need to use it at all.
Before I go any further I should point out that if you are working with query objects then it’s likely that that best place to do sorting, filtering etc is directly in the database. Database engines are designed and optimised for these kinds of operations.
https://coldfusion.adobe.com/2019/10/alternatives-query-query/CFML Jobs
Several positions available on
https://www.getcfmljobs.com/ ColdFusion Developer at Good2Go Auto Insurance in Philadelphia, PA, United StatesAdobe ColdFusion (at least 4 years' experience). Has an immediate opportunity in our Blue Bell, PA office for an experienced ColdFusion Developer to work on a...
https://www.getcfmljobs.com/jobs/index.cfm/united-states/ColdFusion-Developer-at-Philadelphia-PA/10953ColdFusion Developer in Melbourne VIC, AustraliaColdFusion Developer / ColdFusion / CFML / IT Developer / JavaScript / SQL / IT Development. Software analysis, development & design skills in ColdFusion (CFML)...
https://www.getcfmljobs.com/jobs/index.cfm/australia/ColdFusion-Developer-at-Melbourne-VIC/10951Sr. Software Engineer - ColdFusion for Clear Capital in Reno, United StatesWe're looking for a talented and highly motivated software engineers to join our team. As a growth stage technology company, Clear Capital is seeking developers eager to be part of a team, working closely with every part of the company from operations to our executive team. Learn more about our engineering teams here.
https://www.getcfmljobs.com/viewjob.cfm?jobid=10948ForgeBox Module of the WeekCFStockyA CFML wrapper module for the Financial Modeling Prep API. Get stock prices and company fundamentals via a simple, clean API.
This module was created by Michael Born during a twitch live coding session, and taps into a flexible and powerful stock market api. This module uses another module we have highlighted before, HYPER.
Watch the twitch videos here : https://www.twitch.tv/michaelborn_me/videos
https://www.forgebox.io/view/cfstockyVS Code Hint Tips and Tricks of the WeekShell Launcher - tyriar.shell-launcherDaniel Imms - 46,445 installs - 5 stars
Easily launch multiple shell configurations in the terminal.
Since you can pass arguments, you can even set this up to run commonly used tasks as well, ie shortcuts for `box testbox watch` or `npm run watch` or `box cfformat ./ --watch`
https://marketplace.visualstudio.com/items?itemName=Tyriar.shell-launcherThank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.
If we’re getting your name wrong please let us know.
Andrew Davis
Brian White
Carl Von Stetten
Da Li
Dan Card
Daniel Garcia
David Belanger
Didier Lesnicki
Don Bellamy
Erick Hoffman
Gary Knight
Jan Jannek
Jeremy Adams
John Farrar
Jordan Clark
Joseph Lamoree
Laksma Tirtohadi
Matthew Clemente
Richard Herbert
Samuel Knowlton
Scott Steinbeck
VJ
Yogesh Mathur
You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors