The Vue CLI is a great tool for developing Vue.js applications but I wanted to see how it could be integrated into an application with a CFML/Coldbox back-end.Read →

One of the recommendations I mention in OWASP TOP 10 2017 A2-Broken Authentication: Password Requirements is to provide guidance to your users when creating passwords. Here I attempt to explore some ways of implementing feedback to users on the strength of their passwords.Read →

the new guidelines for password requirements say to drop all the complexity rules and to create a blocklist of weak, common, and compromised passwords that cannot be used when a user creates a new account. Here is a quick example of one way this could be implemented in CFML.Read →

Continuing the series on the OWASP Top 10 now we look at the #2 OWASP vulnerability which is Broken AuthenticationRead →

In this post, I will focus on the #1 OWASP vulnerability which is Injection and how to prevent it in CFML applications.Read →

The book Accelerate: The Science of Lean Software and DevOps: Building and Scaling High Performing Technology Organizations by Nicole Forsgren Ph.D., Jez Humble, and Gene Kim warn that organizations should be learning continuous delivery so they do not fall behind in a world where IT is critical to remain competitive in any industry.Read →

Here is an easy way to run CFLint on files from within ST2 or ST3 using build systems.Read →

I created this gist that is a CommandBox Task Runner that takes a glob pattern and runs CFLint on any files that match.Read →

In part I of this blog series we walked through using TestBox-Snapshots to create some approval tests for refactoring a legacy CFML application. In this post, we will focus on setting our application…Read →

In my previous post , I discussed the importance of refactoring and a general workflow for using Approval Tests to be sure your output is not changing.Read →

Legacycode.rocks is a great resource for anyone working with legacy code. Aside from a ton of useful information, it is also motivational because they really try to take away the stigma of working…Read →

Watching the keynote talks from this year’s Into the Box Conference gave me some inspiration to start learning more about running CFML applications in Docker. I currently run a Jekyll Docker image to…Read →

This is a script I wrote to quickly setup a new Mura 7 development server in CommandBox . It runs on Lucee with an embedded H2 database. It uses the new cfconfig module to setup the datasource.Read →

In my previous blog posts I talked about working with streams in Node.js. I assumed I could do something similar working in CFML by using Java but had never attempted it. At my company we process many…Read →

In Adobe Coldfusion you can only return one record set from using cfquery or queryExecute . If you need to return multiple record sets then you can write a stored procedure and use cfstoredproc .Read →