Secure FTP on Windows 2003 Server (SSH/SFTP)
Posted by Jason Durham | Tags: IIS
If you didn't already know, FTP (File Transfer Protocol) is inherently insecure. The files you're sending to/from your web server (including authentication params) are easily captured and read by a savvy network nerd. There are a number of 3rd-party FTP applications floating around that solve this problem on Windows servers, at a cost. I have found a solution that doesn't cost a dime other than a few minutes of your time. I have to be honest and say, I had to do a part of this process 3 times before the installer completed successfully.
SQL injection safeguard and implicit action protection
Posted by Jason Durham | Tags: ColdFusion , ColdBox
The routing mechanism for ColdBox's SES Interceptor uses a ported version of ColdCourse, a project by Adam Fortuna. It is incredibly simple and just as powerful. While playing with my SES urls, I realized it was possible to execute implicit framework/handler methods directly from the URL. While I couldn't find a specifc reason why this may cause me grief in the future, I thought it might simplify my life to prevent those methods from being executed.
ColdBox 2.6.2 RC is available!
Posted by Jason Durham | Tags: ColdFusion , ColdBox , IoC Frameworks
The latest release of ColdBox framework includes a slew of new integrations with model objects, dashboard enhancements, a new anti-XSS plugin, and var notation in the configuration file. Thanks to the all of the ColdBox team for providing the new enhancements to an already stellar tool!
URL Rewriting for IIS7 and ColdBox
Posted by Jason Durham | Tags: ColdFusion , ColdBox , IIS
After several exhaustive days scouring the web, reading documentation, soliciting help from others, cursing Vista and beating my head against the wall... I stumbled on a neat, new module built to do _exactly_ what I needed, GUI included!
Holy cow! Boy do I have a lot of work to do...
Posted by Jason Durham | Tags: ColdBox , General
At the suggestion of a few friends, I've decided to enter the blog arena. I'm not sure you'll find the most bleeding edge and advanced topics on this blog, but you will find content on some of the popular new toys in CF development. I'm going to do my best to keep this sucker new and fresh but that comes without warranty. :o)
My first few topics will likely be related to ColdBox, an OO-based ColdFusion framework created by Luis Majano. After much help and encouragement from a friend (Matt Quackenbush), I've "completed" my first ColdBox-based application. The help and support from Matt and Luis has been invaluable, to say the least.
I have a few topics in my mind that I hope _someone_ might learn something from. I'll get them posted soon. :)