Custom App XML Configuration File
Posted by Jason Durham | Tags: ColdBox , ColdFusion
When starting a new application, I always think back through the frustrations I had with a previous project and try to prevent being stuck in the same situation. I presume (and hope) every developer does that. As my skills continue to grow, so does my base of reusable widgets I've made along the way. The allure to Object Oriented development for me was the likelihood being able to reuse mundane, time-consuming or complicated code. On the aforementioned project, the exact spelling of the business wasn't even decided when I wrote the first view. The solution to this problem was provide a mechanism to easily change common business parameters found on most sites.
Secure FTP on Windows 2003 Server (SSH/SFTP)
Posted by Jason Durham | Tags: IIS
If you didn't already know, FTP (File Transfer Protocol) is inherently insecure. The files you're sending to/from your web server (including authentication params) are easily captured and read by a savvy network nerd. There are a number of 3rd-party FTP applications floating around that solve this problem on Windows servers, at a cost. I have found a solution that doesn't cost a dime other than a few minutes of your time. I have to be honest and say, I had to do a part of this process 3 times before the installer completed successfully.
SQL injection safeguard and implicit action protection
Posted by Jason Durham | Tags: ColdBox , ColdFusion
The routing mechanism for ColdBox's SES Interceptor uses a ported version of ColdCourse, a project by Adam Fortuna. It is incredibly simple and just as powerful. While playing with my SES urls, I realized it was possible to execute implicit framework/handler methods directly from the URL. While I couldn't find a specifc reason why this may cause me grief in the future, I thought it might simplify my life to prevent those methods from being executed.
ColdBox 2.6.2 RC is available!
Posted by Jason Durham | Tags: ColdBox , ColdFusion , IoC Frameworks
The latest release of ColdBox framework includes a slew of new integrations with model objects, dashboard enhancements, a new anti-XSS plugin, and var notation in the configuration file. Thanks to the all of the ColdBox team for providing the new enhancements to an already stellar tool!
URL Rewriting for IIS7 and ColdBox
Posted by Jason Durham | Tags: ColdBox , ColdFusion , IIS
After several exhaustive days scouring the web, reading documentation, soliciting help from others, cursing Vista and beating my head against the wall... I stumbled on a neat, new module built to do _exactly_ what I needed, GUI included!