Modernize or Die® - CFML News for September 20th, 2021 - Episode 120

Share:

Listens: 0

Modernize or Die ® Podcast - CFML News Edition

Education


2021-09-28 Weekly News - Episode 120Watch the video version on YouTube at https://youtu.be/rXPASiVo6ks Hosts: Eric Peterson - Senior Developer for Ortus SolutionsGavin Pickin - Senior Developer for Ortus SolutionsThanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. A few ways  to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube.  Sign up for a free or paid account on CFCasts, which is releasing new content every week Buy Ortus’s new Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Patreon SupportWe have 38 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. We are now 41% of the way to our next goal, fully funding the ForgeBox.io site.Now offering Annual Memberships, pay for the year and save 10% - great for businesses.News and EventsInto the Box 2021 - RecapGreat Success! Especially the Viral Edgardo Cabezas with his Reggaeton - Video available :DCBWire v1.0.0 - https://cbwire.ortusbooks.com/ Qb v8.7.0 & v8.7.1 Released - https://qb.ortusbooks.com/whats-new#8-7-0ForgeBox v6.0.0 Stachebox v1.0.0 - ElasticSearch, LogStash, and FileBeats viewerContentBox v5.0.0 - Using Tailwind and AlpineJS got some love from attendees and twitterMULTI-SITE!!!  New CLI installation and managerNew Ortus Github Actions for CFFormat, DocBox, Fixinator, Semantic Release https://github.com/Ortus-Solutions/fixinator-action https://github.com/Ortus-Solutions/commandbox-action https://github.com/Ortus-Solutions/semantic-release-actionNew Adobe ColdFusion Product Manager - In the Adobe Session Mark Takata had a lot of really encouraging things to say about the new #ColdFusion Product Manager who  is gearing up to take over the direction of CF! For More information:Keynote Day 1: https://youtu.be/NNYK1-NPBeI Keynote Day 2: https://youtu.be/jK8RfFLQZjo Full Session Videos coming to CFCasts soon https://intothebox.orgCommandBox v5.4.1 releasedWe are pleased to announce the release of CommandBox 5.4.1.  This is a patch release with 5 small fixes for the 5.4.0 release.   There are a few bug fixes, and a couple small enhancements in this release.https://www.ortussolutions.com/blog/commandbox-541-released Lucee-Spreadsheet Release and RenameJust released v3.0 of my spreadsheet library. Two big changes: 1) it's now "spreadsheet-cfml" instead of "lucee-spreadsheet" 2) calls can now be chained for simpler code (yeah for fluent builder patterns!)Ortus fixed the forgebox slug so builds will not fail anymore and updating ForgeBox to have failover redirects for future issues in other projectshttps://github.com/cfsimplicity/spreadsheet-cfml/New Name - https://www.forgebox.io/view/spreadsheet-cfmlOld Name - https://www.forgebox.io/view/lucee-spreadsheet Minor Stable Lucee Release Out - 5.3.8.206Mainly a CFSchedule fixhttps://github.com/lucee/Lucee/compare/5.3.8.201...5.3.8.206Modernize Or Die Podcast - SoapBox Edition - Relaunching Oct 7thLuis Majano is hosting a series of Community Members over the coming months.Interview format. Several episodes are recorded and prepped for release.https://soapbox.modernizeordie.io/ Security Alert - Cring ransomware group exploits ancient ColdFusion server (CF9)Active exploit of cf9 servers leading to ransomware attacks. This is why you should not be running software that's no longer updated! Thank for heads up from @viviotech email to their clients, including one we sharehttps://news.sophos.com/en-us/2021/09/21/cring-ransomware-group-exploits-ancient-coldfusion-server/ Ortus Webinar for October - Gavin Pickin - Building Quick APIs - the extended versionIn this session we will use ColdBox’s built in REST BaseHandler, and with CBSecurity and Quick ORM we will set up a secure API using fluent query language - and you’ll see how quick Quick development can be!https://www.ortussolutions.com/events/webinarsSignup coming soonSome people think October is pumpkin spice, halloween, but for us, its HACKTOBERFESTHacktoberfest 2021Support open source throughout October!Hacktoberfest encourages participation in the open source community, which grows bigger every year. Complete the 2021 challenge and earn a limited edition T-shirt.GIVING TO OPEN SOURCEOpen-source projects keep the internet humming—but they can’t do it without resources. Donate and support their awesome work.TREES NOT TEESRather than receive t-shirts as swag, you can choose to have a tree planted in your name and help make Hacktoberfest 2021 more carbon neutral.To win a reward, you must sign up on the Hacktoberfest site and make four pull requests on any repositories classified with the 'hacktoberfest 'topic on GitHub or GitLab by October 31. If an Ortus Solutions repo that you want to contribute to is not marked with the `hacktoberfest` topic, please let us know so we can fix it.https://hacktoberfest.digitalocean.com/ ICYMI - Adobe ColdFusion Updates ReleasedWe are pleased to announce that we have released the updates for the following ColdFusion versions:ColdFusion (2021 release) Update 2ColdFusion (2018 release) Update 12Note: The ColdFusion (2021 release) installers have also been refreshed with this update. The new server installers bundle Update 2 and JDK 11.0.11. The ColdFusion Add-Ons and other installers are bundled with JDK 11.0.11. The refreshed installers are available at ColdFusion downloads.Biggest update here is supporting Big Sur.  (A little late with Monterey just around the corner.)https://coldfusion.adobe.com/2021/09/coldfusion-2021-and-2018-september-updates/ ICYMI - Adobe CF 2021 Docker Images finally on DockerHubAdobe has been putting their ColdFusion Docker images onto Docker hubhttps://coldfusion.adobe.com/2021/09/adobe-coldfusion-2021-docker-image-now-available-dockerhub/ https://hub.docker.com/u/adobecoldfusion ICYMI - Adobe 1 Day Workshop - Adobe ColdFusion Workshop with Damien BruyndonckxWed, September 22, 2021Wed, November 10, 202109:00 - 17:00 CEST EUROPEANJoin the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise.https://coldfusion-workshop.meetus.adobeevents.com/ ICYMI - Adobe Webinar for September - Head in the clouds: Installing ColdFusion on Azure and AWS with Mark TakataWed, September 22, 202109:00 - 10:00 PDTIf you’ve been thinking about getting your CF instance moved into the cloud but don’t know where to start, this webinar will get you rolling. We will explore how to install, configure and update CF2021 installs in both Amazon AWS and Microsoft Azure and give you tips and tricks on how to get things off the ground.https://installing-coldfusion-on-azure-and-aws.meetus.adobeevents.com/ CFCasts Content Updateshttps://www.cfcasts.com Just ReleasedUp and Running with Quick 25 - Serialization 26 - Step 10 Exercise 27 - Subselects and Relationship Counts Coming this weekMore Up and Running with QuickSend your suggestions at https://cfcasts.com/supportConferences and TrainingInto the Box 2021 - HYBRID - Live in Person in Texas. and Live OnlineGreat Success! Keynote Day 1: https://youtu.be/NNYK1-NPBeI Keynote Day 2: https://youtu.be/jK8RfFLQZjo Full Session Videos coming to CFCasts soon https://intothebox.orgAdobe ColdFusion Summit 2021December 7th and 8thMark let us know the Keynote Speaker will be someone from outside of Adobe - will announce once the contract is inked. She works for a big company.VirtualRegister for Free - https://cfsummit.vconfex.com/site/adobe-cold-fusion-summit-2021/1290Blog - https://coldfusion.adobe.com/2021/09/adobe-coldfusion-summit-2021-registrations-open/ More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/Blogs, Tweets and Videos of the WeekBlog - We are Orange - From MURA to MASAFor those that don’t know, MURA is a very powerful CMS that is renowned for it’s fantastic UX – especially for content managers. Previously it was offered as an open source platform but that support ended in August of this year.As seasoned MURA users – with some big clients running it – this could have presented a major problem. So, we came up with a solution… and we’re proud to announce that We Are Orange has forked the project and are now supporting a new version – called MASA – continuing its lifespan as an open source platform.https://www.weareorange.eu/updates/from-mura-to-masa Blog - Ben Nadel - Exploring The Scope Of SERIALIZABLE Transaction Row-Locking In Lucee CFML 5.3.7.47Earlier this week, I looked at using SERIALIZABLE transactions to enforce unique naming constraints in MySQL and Lucee CFML. Transaction isolation isn't a topic that I'm super comfortable with. As such, I wanted to continue exploring the way in which transaction locking affects concurrent access to a given database table. More specifically, I wanted to better understand the scope of row-locking that is applied in a SERIALIZABLE transaction in MySQL 5.7.32 and Lucee CFML 5.3.7.47.https://www.bennadel.com/blog/4122-exploring-the-scope-of-serializable-transaction-row-locking-in-lucee-cfml-5-3-7-47.htm Blog - Ben Nadel - CFThread "ElapsedTime" Is Not "Processor Time" In Lucee CFML 5.3.8.201This morning, as I was trying to perform some follow-up exploration on SERIALIZABLE transactions in MySQL, I noticed something strange about the metadata exposed by the CFThread tag in Lucee CFML. Whereas Adobe ColdFusion (ACF) documents the ElapsedTime property as being "The amount of processor time that was spent handling the thread", this property looks to mean something different in Lucee CFML. It appears to be the amount of time that has elapsed since the CFThread tag was spawned; but, has nothing to do with when it ended; or, how much time it took to execute.https://www.bennadel.com/blog/4121-cfthread-elapsedtime-is-not-processor-time-in-lucee-cfml-5-3-8-201.htm Blog - Ben Nadel - Fixing Protocols In My ColdFusion Custom Tag DSL For HTML EmailsLast week, I looked at the fact that [Yahoo! Mail won't render href attributes with encoded protocols]. In that post, I created a ColdFusion user defined function (UDF) to un-encoded the https:// portion of the href attribute. After letting that approach bake in production at InVison for a while without an issues, I've decided to move the fix into my ColdFusion custom tag DSL for HTML emails. With this new implementation, I've pushed the logic down into the and custom tag implementations so that the developer can continue to use these tags without any changes to their code.https://www.bennadel.com/blog/4123-fixing-protocols-in-my-coldfusion-custom-tag-dsl-for-html-emails.htm Blog - Ben Nadel - Request Tracing Propagation When Consuming Amazon SQS Queues In Lucee CFML 5.3.8.201As I continue to explore the use of Amazon SQS queues in Lucee CFML, I have to start thinking about request tracing. In a monolithic application, request tracing is much less of a value-add since most operations happen within a single request. Once I start using a message queue to decouple steps within a larger workflow, however, I break out of that single-request boundary. As such, if I want to identify "message creation" as being related to "message consumption", I have to propagate the concept of tracing through the message queue life-cycle. I'm sure there are loads of ways to do this. So, what follows is just one possible way to propagate request tracing through Amazon SQS in a Lucee CFML 5.3.8.201 application.https://www.bennadel.com/blog/4118-request-tracing-propagation-when-consuming-amazon-sqs-queues-in-lucee-cfml-5-3-8-201.htm Tweet - Ben Nadel - Too Clever or Too Cool - Execute assignments as part of return statementsI am sure many people will hate this syntax / technique. But, I love the fact that #Lucee #CFML allows me to execute assignments as part of return statements. This allows my #ColdFusion to look more and more like my #JavaScript. Both of which are my happy place! ?https://twitter.com/BenNadel/status/1439532846528479235 https://twitter.com/BenNadel/ Blog - Ben Nadel - Spreading Http And HttpParam Tags Across Multiple Function Calls In Lucee CFML 5.3.8.201Back when InVision was running on Adobe ColdFusion 10, I leaned heavily on the native Http.cfc component when making network requests. However, once we switched over to Lucee CFML 5.3, where tag support in CFScript is much more robust, I found myself reverting back to the http and httpParam tags for network requests. There's something I find so elegant about the syntax of tags and their builder-like pattern of construction. One nice about using the Http.cfc ColdFusion component, however, is that it can be passed around and augmented such as with the injection of tracing headers. This got me thinking about augmenting http tags with httpParam tags; and, whether such an augmentation could be spread across function calls in Lucee CFML 5.3.8.201.https://www.bennadel.com/blog/4117-spreading-http-and-httpparam-tags-across-multiple-function-calls-in-lucee-cfml-5-3-8-201.htm Blog - Brad Wood - Ortus Solutions - CommandBox v5.4.1 releasedWe are pleased to announce the release of CommandBox 5.4.1.  This is a patch release with 5 small fixes for the 5.4.0 release.   There are a few bug fixes, and a couple small enhancements in this release.https://www.ortussolutions.com/blog/commandbox-541-released Blog - Ben Nadel - Yahoo! Mail Does Not Render Anchor Tags With Encoded HREF AttributesWhen rendering view templates in Lucee CFML (or any server-side language for that matter), rule number-one is don't trust the content. This is a corollary to an older rule, don't trust the user. As such, when I render content, I almost always wrap it in one of the many encoding methods that ColdFusion offers: encodeForHtml() or encodeForHtmlAttribute(). And, for the most part, this works wonderfully. However, I just discovered yesterday that Yahoo! Mail won't render Anchor () tags with fully-encoded href attributes. Specifically, it will strip-out the href attribute entirely if the link protocol is encoded. To fix this, I had to walk-back some of the encoding in my HTML emails. For anyone else that runs into this problem, I thought it might be helpful to put together a demo in Lucee CFML 5.3.8.201.https://www.bennadel.com/blog/4115-yahoo-mail-does-not-render-anchor-tags-with-encoded-href-attributes.htm Tweet - Ben Nadel - Undocumented Features that suddenly don’t workHmmm, after installing Adobe #ColdFusion 2018 hotfix earlier this week, I am seeing that this:query[ column_name ].indexOf( value )... no longer works. This was an undocumented feature, but it suddenly stopped working. Case in point, don't use undocumented features.https://twitter.com/BenNadel/status/1438834934760755203https://twitter.com/BenNadelCFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 198 ColdFusion positions from 93 companies across 115 locations in 5 Countries.8 new jobs listedFull-Time - Middle ColdFusion Developer at Hyderabad, Telangana - India Posted Sep 27https://www.getcfmljobs.com/jobs/index.cfm/india/Middle-ColdFusion-Developer-at-Hyderabad-Telangana/11346 Full-Time - Full Stack Developer - Java/SQL/ColdFusion at United States - United States Posted Sep 24https://www.getcfmljobs.com/jobs/index.cfm/united-states/Full-Stack-Developer-JavaSQLColdFusion-at-United-States/11345 Full-Time - ColdFusion Developer (REMOTE) at REMOTE - United States Posted Sep 18https://www.getcfmljobs.com/jobs/index.cfm/united-states/CFDev-at-Remote-US/11344 Full-Time - ColdFusion Software Developer - Mid to Senior Level - Remote - United States Posted Sep 17https://www.getcfmljobs.com/jobs/index.cfm/united-states/ColdFusion-Software-Developer-Mid-to-Senior-Level-Remote-Position-at-Denver-CO/11343 Full-Time - Coldfusion Engineer at United States - United States Posted Sep 17https://www.getcfmljobs.com/jobs/index.cfm/united-states/Coldfusion-Engineer-at-United-States/11342 Full-Time - Sr Software Engineer Lead Coldfusion at Pune, Maharashtra - India Posted Sep 16https://www.getcfmljobs.com/jobs/index.cfm/india/Sr-Software-Engineer-Lead-Coldfusion-at-Pune-Maharashtra/11341 Full-Time - Senior Coldfusion Developer |LATAM| at Colon, PA - United States Posted Sep 15https://www.getcfmljobs.com/jobs/index.cfm/united-states/Senior-Coldfusion-Developer-LATAM-at-Colon-PA/11339 Full-Time - ColdFusion Developer at Herndon, VA - United States Posted Sep 15https://www.getcfmljobs.com/jobs/index.cfm/united-states/ColdFusion-Developer-at-Herndon-VA/11340 ForgeBox Module of the WeekCBWire - ColdBox + LivewireLaravel Livewire is a library that makes it simple to build modern, reactive, dynamic interfaces using Laravel Blade as your templating language. This is a great stack to choose if you want to build an application that is dynamic and reactive but don't feel comfortable jumping into a full JavaScript framework like Vue.Now we have it in ColdBox for CFML - BETAhttps://www.forgebox.io/view/cbwirehttps://cbwire.ortusbooks.com/ VS Code Hint Tips and Tricks of the WeekEmoji LogAfter building hundreds of open source software I've ended up inventing a git commit log standard called EMOJI-LOG that helps me understand a project's history with a less cognitive load just by looking at the git log.https://marketplace.visualstudio.com/items?itemName=ahmadawais.emoji-log-vscode Thank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsNow offering Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website Patreons John Wilson - Synaptrix  Don Bellamy Eric Hoffman David Belanger Dean Maunder Gary Knight Giancarlo Gomez Jonathan Perret Mario Rodrigues Jeffry McGee - Sunstar Media Yogesh Mathur Joseph Lamoree Ben Nadel Brett DeLine Carl Von Stetten Charlie Arehart Dan Card Daniel Garcia Didier Lesnicki Edgardo Cabezas Jan Jannek Jason Daiger Jeff McClain Jeremy Adams Jonas Eriksson Jordan Clark Kai Koenig Laksma Tirtohadi Leon Seremelis Matthew Darby Matthew Clemente Mingo Hagen Patrick Flynn Ross Phillips Scott Steinbeck - Agri Tracking Systems Shawn Oden Stephany Monge Steven Klotz You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors ★ Support this podcast on Patreon ★