2021-06-01 Weekly News - Episode 106

Watch the video version on YouTube at https://youtu.be/jmA7-rHjomk

Hosts:
 
Gavin Pickin - Software Consultant for Ortus Solutions
Eric Peterson - Software Consultant for Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. 
A few ways  to say thanks back to Ortus Solutions:

Patreon Support

We have 36 patreons providing 84% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!
https://www.ortussolutions.com/blog/we-need-your-help



News and Events



Lucee 5.3.8.179-RC4 (Final Release Candidate) Released

This will be the Final RC before STABLE, available via your admin or via https://download.lucee.org/
There are some improvements for MS SQL users since RC3. There is currently a problem with MS SQL extensions not being available for download, including 7.22, apologies, this will be fixed tomorrow.
https://dev.lucee.org/t/lucee-5-3-8-179-rc4-final-release-candidate/8400



Adobe leaking Dev Week Sessions on Twitter

Adobe has not added sessions to the Dev Week site yet, but Adobe is tweeting promos with the Session Name, Speaker, date and time on Twitter.
https://twitter.com/coldfusion



Online CF Meetup - Getting Started with FusionReactor, with Brad Wood

Thursday Jun 3rd at 12pm US Eastern Time, UTC-4.
New to FusionReactor? Perhaps you have a license but aren't sure how to tap into the features? We'll cover the basics of using FR to profile code, view your running and recent requests, and how to tell what is making a request slow. We'll cover tracking JDBC requests, HTTPS calls, and using the Profiler feature. There are many more features in FR, but we'll cover enough to get you started.
https://www.meetup.com/coldfusionmeetup/events/278404050/



Ortus Webinar for June - Eric Peterson - Topic - Build a Blog in 30 minutes with Quick

Webinars Page: https://www.ortussolutions.com/events/webinars
Registration: coming soon



ICYMI TestBox v4.3 Released!

We are excited to announce a new minor version release of TestBox version 4.3.x. To install just use CommandBox: install testbox --saveDev or to update your TestBox installation update testbox.
This update includes several cool new features and improvements that will delight your testing life! For example, we have integrated your favorite code editors to the simple reporter so you can now open the line of code that failed your test or created and exception!
https://www.ortussolutions.com/blog/testbox-v43-released 



Reminder - State of the CF Union Survey

Help us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc. We will share the summary results with everyone who completes the survey so that you can see how you compare with other CF developers.
Spread the news so we can get as many responses as possible.
https://teratech.com/state-of-the-cf-union-2021-survey



CFCasts Content Updates

http://www.cfcasts.com
New features alert🚨: Now you can see when our OOP videos will be dropping! Also, this series will have closed captions 🙌

Just Released

Send your suggestions at https://cfcasts.com/support



Conferences and Training



Adobe ColdFusion Developers Week

June 22-24, 2021 - Online
Coders, mark your calendars for Adobe ColdFusion Developer Week 2021!
Coders, Adobe ColdFusion Developer Week 2021 is edging closer! This year, we’ve lined up a series of sessions and webinars that will give you a 360-degree view of ColdFusion 2021’s brand new features and updates. Right from developing cloud-native applications to reducing downtime, these webinars will let you in on the best tips to deploy applications rapidly and seamlessly.
This is your chance to meet coders from across the globe and exchange ideas with some of the best minds in the industry. And that’s not all! Your presence at the conference will earn you points that can help you win exciting prizes and vouchers. Our scoreboard will keep track of active participation!
Whether you’re a new developer, someone with little or no experience with Adobe ColdFusion, or even if you have been using it all your life, Adobe ColdFusion Developers Week 2021 is where you need to be. Don’t miss out!
https://adobe.vconfex.com/site/adobe-coldfusion-developer-week/977



ICYMI - MS Build - last week

May 25-27
Learn. Connect. Code.
Explore what’s next in tech and the future of hybrid work. Find solutions, sharpen skills, and find what you can add to your toolbox at this year’s event.
https://mybuild.microsoft.com/home



ICYMI - DockerCon - last week

May 27th 2021
DockerCon 2021 is a free, one-day virtual event that is a unique experience for developers and development teams who are building the next generation of modern applications. If you want to learn about how to go from code to cloud fast and how to solve your development challenges, DockerCon 2021 offers engaging live content to help you build, share and run your applications.
https://www.docker.com/dockercon-live/2021



Apple WWDC21 - Glow and behold

June 7-11
The Apple Worldwide Developers Conference is coming to a screen near you, June 7 to 11. Join the worldwide developer community for an all-online program with exciting announcements, sessions, and labs at no cost. You’ll get a first look at the latest Apple platforms, tools, and technologies — so you can create your most innovative apps and games yet.
Learn about this year’s Swift Student Challenge, and stay tuned for additional details.
https://developer.apple.com/wwdc21/



Ortus’s Conferences for 2021

ITB Online or In Person - Survey went out to ask would you be willing to attend in person
September 2021
Call for speakers coming soon (once we decide online or in person)

Survey for onsite or not
https://us1.list-manage.com/survey?u=09b13d89e6ce4c287f4c1f1b0&id=936054da77&e=44c477cc32&

ITB Latam
December 2021


More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/



Blogs, Tweets and Videos of the Week


Blog - Ben Nadel - The 14th Annual Regular Expression Day - June 1st 2021
For 14 years I've been trying to spread the joy - nay, the awesomeness - of Regular Expressions. And while my love of Regular Expressions continues to grow with each year, it turns out, so does the complexity and overhead of adulting. For the past few years, this day of reflection has snuck up on me. And, each year, it becomes harder and harder to plan anything fun. Throw in a global pandemic and a crazy-ass work schedule, and things get even worse. As such, I have nothing at all planned for this year.
https://xkcd.com/208/
https://regexr.com/
https://www.bennadel.com/blog/4058-the-14th-annual-regular-expression-day-june-1st-2021.htm


Blog - Ben Nadel - Migrating Password Hashing Algorithms In Lucee CFML 5.3.7.47
Over the weekend, I looked at using the Password4j password hashing library in Lucee CFML. One of the APIs that the Password4j library includes is the ability to update a hash with new hashing characteristics. This is actually something I've had to do in the past - migrating a system to a stronger, more security hashing algorithm. As such, I thought it would be fun to demonstrates using the Password4j library in Lucee CFML 5.3.7.47.
https://www.bennadel.com/blog/4057-migrating-password-hashing-algorithms-in-lucee-cfml-5-3-7-47.htm


Blog - Adam Cameron - CFML: weirdness with… <cfquery> and single-quote escaping
I was looking around for a good (read: bad) example of one of those exercises in "building a dynamic SQL string inside a <cfquery>". Firstly, one should pretty much never do this. You are almost certainly tightly-coupling business logic with DB-tier logic, and that's an anti-pattern right there. And it also means you can't test it without hitting an actual database, which is rubbish. So just: don't do it. Build the SQL string first, testing all the logic as you go, and once the string is built, pass the completed thing to queryExecute (let's all just pretend <cfquery> doesn't exist: it's a horrific construct, and should have been left to die in the C20th where it belongs).
https://blog.adamcameron.me/2021/05/cfml-weirdness-with-and-single-quote.html


Blog - Ben Nadel - Using Password4j And The BCrypt, SCrypt, And Argon2 Password Hashing Algorithms In Lucee CFML 5.3.7.47
At InVision, we use BCrypt to perform a one-way, cryptographic hash of user passwords. Which we've been doing for as long as I can remember. In a conversation the other day, however, I mentioned to Adam Tuttle that I thought there was now a more "modern" hashing algorithm; but, that I didn't know what it was. So, I wanted to take a minute to freshen-up my understanding of password hashing best practices (and how they can be applied in ColdFusion and Lucee CFML).
https://www.bennadel.com/blog/4056-using-password4j-and-the-bcrypt-scrypt-and-argon2-password-hashing-algorithms-in-lucee-cfml-5-3-7-47.htm


Blog - Nolan Erck - Object Oriented Programming with CFML Video Series
Want to learn Object Oriented Programming with CFML? Are you still struggling with Components? No idea what they do or how to use them with confidence? Then you’re in luck! South of Shasta has partnered with Ortus Solutions and we’ve just released the “Object Oriented Programming Series” training videos on CFCasts.  This is a collection of 35 videos, designed for the CFML developer that is still struggling with how to use Components.  Each video is a bite-size bit of information about Object Oriented Programming using CFML.
https://southofshasta.com/blog/object-oriented-programming-with-cfml-video-series/


Blog - Ben Nadel - Including Tracing Headers In Nginx 1.18.0 Access Logs Using Custom Formatting
As I mentioned yesterday, we're trying to track down a mysterious logout issue at InVision. Part of this investigation involves trying to understand where an even more mysterious 502 Bad Gateway error is coming from. Due to the many layers of our network, it's proving difficult to figure out which "network hop" is failing. Yesterday, I looked at adding tracing headers to Amazon's ALB using X-Amzn-Trace-Id. Today, I want to look at adding tracing headers to the access logs in Nginx 1.18.0 using a custom log format.
https://www.bennadel.com/blog/4055-including-tracing-headers-in-nginx-1-18-0-access-logs-using-custom-formatting.htm


Blog - Ben Nadel - Using The "X-Amzn-Trace-Id" Header For Request Tracing Through Amazon's Load Balancers
At InVision, David Bainbridge and I have been working hard to figure out why some users are getting randomly logged-out of one of our client-side applications. Part of what makes this issue so challenging to debug is that there are many services that touch requests coming out of this application. And, even though we are using request tracing headers in our distributed system, we are struggling to connect the dots as those requests pass-through Amazon's load balancers. Yesterday, however, David discovered that Amazon's load balancers will record (and modify) the HTTP header, X-Amzn-Trace-Id, within their request logs. I think this may really help us!
https://www.bennadel.com/blog/4054-using-the-x-amzn-trace-id-header-for-request-tracing-through-amazons-load-balancers.htm


Tweet - Brad Wood - New CommandBox FusionReactor Module feature
I added an enhancement to the CommandBox FusionReactor module to set a diff host for FR vs your server. Use case: CommandBox HTTP listener is on localhost behind a proxy, but you want FR's port to be directly accessible externally.
https://commandbox.ortusbooks.com/embedded-server/fusionreactor#custom-host
https://twitter.com/bdw429s/status/1397595274260930562
https://twitter.com/bdw429s



CFML Jobs

Several positions available on https://www.getcfmljobs.com/
Listing over 130 ColdFusion positions from 57 companies across 96 locations in 5 Countries since Dec 1st.

0 new jobs listed this week


Ortus - Senior Developer
https://www.ortussolutions.com/about-us/careers



ForgeBox Module of the Week

qb v8.5 (query builder ) by Eric Peterson

qb is a fluent query builder for CFML. It is heavily inspired by Eloquent from Laravel.
Using qb, you can:

https://www.forgebox.io/view/qb



VS Code Hint Tips and Tricks of the Week

Highlight Bad Chars by Kevin Wenger

Extension to highlight bad characters such as No-break space ( ) and the Greek question mark (;) in your source files.
With this package you'll easily notice invisible and easy-to-confuse characters, which can be the cause for incredibly annoying syntax errors in source code.

Save yourself the burden of debugging invisible bugs for hours!

https://marketplace.visualstudio.com/items?itemName=wengerk.highlight-bad-chars&WT.mc_id=devcloud-00000-cxa



Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

Our Patreon Supporters 

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors