2022-03-01 Weekly News - Episode 137

Watch the video version on YouTube at https://youtu.be/kRi3dMfLPxA


Hosts:
 
Gavin Pickin - Senior Developer for Ortus Solutions
Dan Card  - Senior Developer for Ortus Solutions



Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. 
A few ways  to say thanks back to Ortus Solutions:

 
Patreon Support

We have 36 patreons providing 97% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions.



News and Events


ICYMI - Lucee 5.3.9.80 Release Candidate 1 - This release removes all traces of Log4j1

With the advent of Lucee 5.3.9 -RC, we now have a build of CommandBox (5.5.0-alpha) which is 100% FREE OF LOG4J 1.x!
https://downloads.ortussolutions.com/#/ortussolutions/commandbox/5.5.0-alpha/
Please help us test and use it if you need to get those #infosec monkeys off your back! 🐒 #CFML #ColdFusion
https://dev.lucee.org/t/5-3-9-80-release-candidate-1/9672/4
https://downloads.ortussolutions.com/#/ortussolutions/commandbox/5.5.0-alpha/


ICYMI - This Week Ortus Webinar - What's new in CommandBox 5.x with Brad Wood

February 24th, 2022 at 11:00 AM Central Time (US and Canada)
In this webinar, Brad Wood, lead developer of CommandBox will cover all the new features available in CommandBox 5.x. Tune in to make sure you're getting the most out of your CLI.
RECORDING: https://www.cfcasts.com/series/ortus-webinars-2022/videos/brad-wood-on-commandbox-5.x.
https://www.ortussolutions.com/events/webinars


ICYMI This Week Hawaii CFUG - Using CFCs in your ColdFusion Applications with John Barrett - Last minute cancellation :(

Friday, February 25, 2022 - 5:00 PM CT - Central Time (US and Canada)
This will be a talk on using CFCs in your ColdFusion applications. Creating and developing applications using CFCs enables you to separate the code logic from the design and presentation. Utilizing CFCs and creating a clear structured format for your code will help reduce the complexity of logic within your pages and improve the application speed. Having a clearly structured, the well-organized code base will make it easier to develop as an individual and share resources within a team. This is the instant benefit of CFC development.
https://www.meetup.com/hawaii-coldfusion-meetup-group/events/283506895/
https://cfhawaii.net/


ICYMI - This Week Adobe Webinar - Cloud Report Building Using ColdFusion & PDF

THURSDAY, FEBRUARY 24, 2022
10:00 AM PST
Join Mark Takata as he leverages the power of Adobe ColdFusion and Adobe PDF to build reports using cloud based no-code data-sources. Mark will be connecting to Google Sheets and generating PDF based reports with pagination, charting and data grids using GraphQL, CFML and PDF services.
https://cloud-report-building-using-coldfusion-pdf.meetus.adobeevents.com/


Adobe Workshops

Join the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise

WEDNESDAY, MARCH 9, 2022
9:00 AM CET
Damien Bruyndonckx
https://workshop-cf-adobe.meetus.adobeevents.com/

FREE :)
Full list - https://meetus.adobeevents.com/coldfusion/


 
CFCasts Content Updates

https://www.cfcasts.com

Just Released

Conferences and Training


DevNexus 2022 - The largest Java conference in the US

April 12-14, 2022
Atlanta, GA
Brad & Luis will be speaking
Luis - Alpine.js: Declare and React with Simplicity
Brad - What's a Pull Request? (Contributing to Open Source)
https://devnexus.com/


DockerCon

May 10, 2022
Free Online Virtual Conference
DockerCon will be a free, immersive online experience complete with Docker product demos , breakout sessions, deep technical sessions from Docker and our partners, Docker experts, Docker Captains, our community and luminaries from across the industry and much more. Don’t miss your chance to gather and connect with colleagues from around the world at the largest developer conference of the year. Sign up to pre-register for DockerCon 2022!
https://www.docker.com/dockercon/


US VueJS Conf

FORT LAUDERDALE, FL • JUNE 8-10, 2022
Beach. Code. Vue.
Workshop day: June 8
Main Conference: June 9-10
CFP now CLOSED! - Deadline: February 28
https://us.vuejs.org/


Other Conferences

Into The Box 2022 - Tentative dates - September 27-30
Into the Box Latam 2022 - Tentative dates - Dec 1-2
CF Summit - Still waiting on news from Adobe.


More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/




Blogs, Tweets, and Videos of the Week


Blog - Wil De Bruin - Logbox: track your database changes (part 2)
In my previous post on tracking database changes I described how you can log all database changes for a quick orm system. I also mentioned you can do a similar thing for cborm systems which are based on coldfusion ORM (hibernate). I have used cborm a lot in the past, and even did some presentations on orm, but I noticed there are quite some people who don’t like or even hate the coldfusion orm, for being slow, memory consuming and hard to understand. I am not sure if this reputation is well deserved.
https://shiftinsert.nl/logbox-track-your-database-changes-part-2/


Blog - Ben Nadel - Upgrading My ColdFusion Blog From MySQL 5.7.10 To MySQL 8.0.28
The other day, I asked my managed hosting provider to upgrade my MySQL version from 5.7.10 to 5.7.37 - the most recent general availability release of the 5.7 edition. I didn't want to go any farther than that because I didn't want to test the update - I just wanted access to the JSON functions and column-type. There was a little miscommunication, however, and the Support team ended up putting me on the latest version of MySQL, 8.0.28. This caused a few hours of accidental downtime (due to an incompatibility with the datasource connection-string). But, once I hotfixed that, the site appeared to be running smoothly. Once the dust settled, I took this an opportunity to cleanup a bunch of database schema and connectivity issues.
https://www.bennadel.com/blog/4218-upgrading-my-coldfusion-blog-from-mysql-5-7-10-to-mysql-8-0-28.htm


Blog - Matthew Clemente - An Approach to Using Hyper, qb, Logbox, and Other ColdBox Modules with FW/1
I’ll begin by saying that a substantial portion of this post is deeply indebted to Tony Junkes, who has blogged quite a bit about using ColdBox modules with FW/1. The approach I ended up taking is slightly different than his, so I thought it worth documenting.
https://blog.mattclemente.com/2022/02/25/qb-hyper-logbox-modules-with-fw1/


Blog - Mark Takata - Adobe - Blog series: Part 2: Building a data import workflow using Cloud datasources and CFML
If you remember, in the last part of this blog series we tackled writing to a DynamoDB. This week, we’re tackling the editable table structures that will let us do a little ETL and massaging to our data before we push it to the dynamoDB.
https://coldfusion.adobe.com/2022/02/blog-series-part-2-building-data-import-workflow-using-cloud-datasources-cfml/


Blog - Charlie Arehart - CF ‘downloads’ page moved into docs, JVM downloads UI tweaked
I just wanted to share something rather minor that I observed: the CF “downloads” page–which offers downloads for things RELATED to CF but not CF itself–has been moved to “within” the CF docs. It used to be offered at https://www.adobe.com/support/coldfusion/downloads.html, but that now redirects to https://helpx.adobe.com/coldfusion/kb/coldfusion-downloads.html.
There’s no change to the content of the page, though you’ll notice now that there’s a left nav bar with all the other pages of the CF docs. See the screenshot below. That may be of some value to those who find this page. FWIW, this move of the page took place last week.
https://coldfusion.adobe.com/2022/02/cf-downloads-page-changed/


Blog - Ben Nadel - POC: Embedding Encryption Key-Version Within Encrypted Payload In Lucee CFML 5.3.8.201
Earlier this week, I mentioned how fascinating it was that password hashing algorithms like bCrypt, sCrypt, and Argon2 all generate opaque tokens in which metadata about the hashing algorithm is stored directly within the resultant hash. This makes it easy(ier) for the hashing algorithm to evolve over time, keeping step with the increasing power of computing. I thought it might be interesting to take this approach and apply it to encrypted values as well. That is, to store the encryption key-version within the encrypted payload itself. As a follow-up to that thought-experiment, I wanted to see what implementing such an approach could look like in Lucee CFML 5.3.8.201.
https://www.bennadel.com/blog/4216-poc-embedding-encryption-key-version-within-encrypted-payload-in-lucee-cfml-5-3-8-201.htm


Blog - Ben Nadel - Installing FusionReactor APM Showed Me A Huge Oversight In My ColdFusion Queries
In an ongoing effort to modernize and improve my ColdFusion blogging platform, I installed the FusionReactor Application Performance Monitoring (APM) java agent earlier this week. I've talked about FusionReactor before and how critical it's been for debugging complex problems at InVision. And while my blogging platform is orders-of-magnitude more simple, I'm hoping that it can still offer me a different perspective on my ColdFusion application performance. And, wouldn't you know it, the moment I installed it, I immediately spotted a huge oversight in the way I'm writing my ColdFusion queries.
https://www.bennadel.com/blog/4215-installing-fusionreactor-apm-showed-me-a-huge-oversight-in-my-coldfusion-queries.htm


Blog - Ben Nadel - Irrational Guilt Over Using ORDER BY id In My ColdFusion SQL Queries
Most of the relational database tables that I create in my ColdFusion applications have an AUTO_INCREMENT primary key, id, and some sort of createdAt date/time column. The nature of the primary key along with the nature of a timestamp means that both of these columns "increase" at the same time. Which means that - in almost all cases - I can use the id to sort the query results in chronological order. But, I have a lot of irrational guilt over doing this since the id column is not semantically the same as the createAt column. But, this guilt is stupid; and succumbing to it would actually lead to worse performance in my ColdFusion and MySQL applications.
https://www.bennadel.com/blog/4214-irrational-guilt-over-using-order-by-id-in-my-coldfusion-sql-queries.htm



CFML Jobs

Several positions available on https://www.getcfmljobs.com/
Listing over 47 ColdFusion positions from 28 companies across 28 locations in 5 Countries.

5 new jobs listed


Full-Time - Remote Senior Coldfusion Developer at Boston, MA - United States
Feb 25
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Remote-Senior-Coldfusion-Developer-at-Boston-MA/11434

Full-Time - Software Developer - Coldfusion at Overland Park, KS - United States
Feb 23
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Software-Developer-Coldfusion-at-Overland-Park-KS/11433

Full-Time - Developer - ColdFusion/JavaScript at Ottawa, ON - Canada
Feb 23
https://www.getcfmljobs.com/jobs/index.cfm/canada/Developer-ColdFusionJavaScript-at-Ottawa-ON/11431

Full-Time - Developer - ColdFusion/JavaScript at Montréal, QC - Canada
Feb 23
https://www.getcfmljobs.com/jobs/index.cfm/canada/Developer-ColdFusionJavaScript-at-Montral-QC/11432

Full-Time - Developer - ColdFusion/JavaScript at Toronto, ON - Canada
Feb 23
https://www.getcfmljobs.com/jobs/index.cfm/canada/Developer-ColdFusionJavaScript-at-Toronto-ON/11430


Other Job Links

https://www.ortussolutions.com/about-us/careers



ForgeBox Module of the Week

CommandBox Log4j Detect

This module is a simple wrapper for the Log4j Detect project found here:
https://github.com/whitesource/log4j-detect-distribution

The Log4j Detect project is a native Go binary which will scan any folder of jars for vulnerable files. This module will download the latest binary for your OS and run it.

https://www.forgebox.io/view/commandbox-log4j-detect



VS Code Hint Tips and Tricks of the Week

Icon Fonts for Visual Studio Code

Snippets for popular icon fonts such as Font Awesome, Ionicons, Glyphicons, Octicons, Material Design Icons and many more!

Snippets are limited to the html, css|less|sass|scss|stylus, jsx, blade and vue scopes. Typing the class name of an icon using the designated prefix will complete to a tag containing the icon class. Exceptions are fa-layers, fa-layers-counter, fa-layers-text and fa-layers (<span>).

https://marketplace.visualstudio.com/items?itemName=idleberg.icon-fonts




Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

Don’t forget, we have Annual Memberships, pay for the year and save 10% - great for businesses.

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors