category: coldfusion


CFDUMP isn't always what is seems


 
While working with <cfpdf> to split mutlipage PDFs I ran into a strange issue. In dumping the resulting variable from an <cfpdf action="read"> call, the output shows the variable being a structure with several properties. The problem is, if you try to access any of these properties using normal access notation (ie. object.property), an exception will be thrown stating that the property doesn't exist.

Take the following example: read more... 


 

How to reset Railo Admin passwords


 
I ran into a situation tonight where I needed to reset the admin passwords for Railo, its super easy but figuring out where to do it was a little bit of a pain. Here's how you do it, read more... 


 

Securing CFID, CFToken and JSessionID cookies


 
A recent presentation given at DEFCON 16 exposed a seemingly unsuspected vulnerability, common in most SSL-Secured websites. Many large and prominent sites such as GMail, Facebook, Yahoo Mail and others are exposed to this vulnerability simply because they haven't secured their cookies. The presenter dubbed the exploit, HTTPS Cookie Highjacking and loosely described it as,

"It turns out an adversary able to position themselves in between you and a website is able to inject arbitrary http-based content elements for domains that do not set the 'Encrypted Sessions Only' property of their cookies, and thus cause your client to transmit these cookies via clear text, intercept them, and impersonate you."
read more... 


 

Various enhancements to jalpino.com


 
Just wanted to list out some recent enhancements that I've made to the site.

Photo Gallery
The most notable enhancement I made to this area was including a dynamic watermark to the images that I pull back from Flickr. I didn't do this for the copyright aspect of my photos (although its an added bonus read more... 


 

Baltimore Meets Railo


 
This months Baltimore Adobe Users Group is getting a special guest speaker, CFML committee member and CEO of Railo, Gert Franz. Railo is an Adobe Coldfusion alternative that, at some level, is free and soon will have a open source edition. If you live in and or around the Baltimore Metro you should defenitely make your way down for the meeting, there is usualy free food and drink, and always great conversation amongst Adobe professionals. read more...