Modernize or Die® - CFML News for November 16th, 2021 - Episode 126

Eric hosts this weeks episode. They discussed this months Ortus Webinar about ForgeBox's new features. They discussed last week's Mid Michigan's CFUG about AI and Machine Learning with ColdFusion for smarter call centers, and they discussed Online CF Meetup's last meetup with Brian Reilly. They discuss the latest CFCasts content, and some upcoming conferences including Into the Box LATAM and Adobe CFSummit 2021 in Dec which is virtual They spotlight a lot of great blog posts, tweets, videos and podcasts, too many to list, so listen to the show. They announce some jobs from They show off the ForgeBox module of the Week -Globber - By Brad Wood and Ortus Solutions - A utility module to match file system path patterns (globbing) in a similar manner as Unix file systems or .gitignore syntax. This week's VS Code Tip of the week is Encode Decode - The Encode/Decode (ecdc) extension allows you to quickly convert one or more selections of text to and from various formats They thanked all their Patreons - they reached the goal of 100% support of the podcast and we're on the way to the next set of goals. They talked a little information about perks for their Patreon supporters, and a new option, Annual Memberships with a discount. For the show notes - visit the website Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio

2021-11-16 Weekly News - Episode 126

Watch the video version on YouTube at


Eric Peterson - Senior Developer for Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. 
A few ways  to say thanks back to Ortus Solutions:
  • Like and subscribe to our videos on YouTube. 
  • Subscribe to our Podcast on your Podcast Apps and leave us a review
  • Sign up for a free or paid account on CFCasts, which is releasing new content every week
  • Buy Ortus’s new Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (

Patreon Support

We have 38 patreons providing 98% of the funding for our Modernize or Die Podcasts via our Patreon site:

News and Events

Ortus Webinar for November - Javier Quintero - FORGEBOX Business Plan: Introducing Organizations and Teams

November 19th at 11:00 AM Central Time (US and Canada)
In this webinar, Javier Quintero, lead developer of FORGEBOX, will present the new features and the improved UI that is now available on FORGEBOX 6. Moreover, he’ll explore in depth the Business Plan that is directed towards organizations and teams so they can collaborate and support their software building needs. He will show us how to create a new organization, how you can add members to it with specific roles, and how you can control teams, members, packages and publish access.
with Javier Quintero

ICYMI - Mid Michigan CFUG Meeting - Using AI and machine learning along with ColdFusion to build a smarter call center with Nick Kwiatkowski

Tuesday 11/9/21 at 7 pm eastern
Using AI and machine learning along with ColdFusion to build a smarter call center at the next Mid-Michigan CFUG meeting Tuesday 11/9/21 at 7 pm eastern. 
Michigan State University’s, Nick Kwiatkowski, will be showing how to create voice and text-based chat bots that you can deploy to your contact centers (and help desks!) to help automate frequently asked questions.
Recording - check Facebook group

ICYMI - Online CF Meetup - "Avoiding Server-Side Request Forgery (SSRF) Vulns in CFML", with Brian Reilly
Thursday, November 11, 2021 - 9:00 AM to 10:00 AM PST
Server-Side Request Forgery (SSRF) vulnerabilities allow an attacker to make arbitrary web requests (and in some cases, other protocols too) from the application environment. Exploiting these flaws can lead to leaking sensitive data, accessing internal resources, and under certain circumstances, remote command execution.
Several ColdFusion/CFML tags and functions can process URLs as file path arguments -- including some tags and and functions that you might not expect. If these tags and functions process unvalidated user-controlled input, this can lead to SSRF vulnerabilities in your applications. In addition to providing a list of affected tags and functions, I'll cover some approaches for identifying and remediating vulnerable code. My goal for this talk is to raise awareness about what may be a security blindspot for some ColdFusion/CFML developers.

CFCasts Content Updates

Just Released
  • SoapBox - ColdBox Anniversary Edition with Brad Wood

Coming this week
  • Youth Trainings - Universidad Don Bosco
A new series of ForgeBox coming very soon

Send your suggestions at

Conferences and Training

Deploy by Digital Ocean - THIS WEEK

November 16-17, 2021

AWS re:Invent

NOV. 29 – DEC. 3, 2021 | LAS VEGAS, NV
Virtual: Free
In Person: $1799

Postgres Build

Online - Free
Nov 30-Dec 1 2021

ITB Latam 2021

December 2-3, 2021
Into the Box LATAM is back and better than ever! Our virtual conference will include speakers from El Salvador and all over the world, who'll present on the latest web and mobile technologies in Latin America.
Registration is completely free so don't miss out!
ITB Latam Schedule Posted

Adobe ColdFusion Summit 2021

December 7th and 8th - Virtual
Agenda is out!!!
@Adobe @coldfusion #CFSummit2021 keynote we will be featuring @ashleymcnamara! Her talk will focus on the history & future of DevRel how we got here & where we're going.
2 tracks - 1 all CFML - the other a mix of CFML and semi-related topics
Register for Free -
Blog -

Now a free virtual event
December 9th starting at 8:30 am CDT/2:30 pm UTC.

VueJS Nation Conference

Online Live Event
January 26th & 27th 2022
Register for Free
Call for Speakers is open until Dec 31 2021

More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.

Blogs, Tweets and Videos of the Week

Blog - Charlie Arehart - Should you “bother” to file bug reports at Yes you should
I just wanted to offer a quick plug to get folks to please consider filing bugs (and feature requests) at the Adobe site for tracking them, I’ve blogged before about how it can be used for more than most may realize. What I want to share here is that it’s not a “waste of time to bother”.
Some may wonder first, “why is is worth pointing out Tracker? Doesn’t everyone know about it?” The answer to the second question is “no”: many do NOT know about it. But the more important question may be the first, and it’s the real reason I’m writing this post.

Blog - Ben Nadel - Phill Nacelli's SQL Tip Is Making My CFQuery Upgrades In Adobe ColdFusion 2021 Easy
As I've started to modernize my blogging platform for Adobe ColdFusion 2021, one of the things that I was dreading was the lack of Lucee CFML's Tag Islands. Tag Islands have really been a game changer for me, allowing me to seamlessly execute the CFQuery tag inside CFScript. I was afraid that I was going to have to keep using Tag-based syntax for my Gateway / Data Access components. But then, I remembered a hot tip from Phill Nacelli on giving dynamic SQL statements a consistent structure. It turns out, Phill's technique is making it bearable for me to use the queryExecute() Function in lieu of the CFQuery inside a Tag Island.

Blog - Ben Nadel - A Query Object Maintains Its CurrentRow When Passed Out-Of-Context In Adobe ColdFusion 2021
As I'm attempting to modernize my blogging platform for Adobe ColdFusion 2021, I'm moving a lot of my old-school, inline CFQuery tags into various "Service" and "Data Access" ColdFusion components where they can be reused across multiple templates. And, as much as I love the ColdFusion Query object, my "service boundaries" deals with Arrays and Structs, not queries. As such, I have code that deals with mapping queries onto other normalized data structures. While writing this code, I was tickled by the fact that the Query object maintains its .currentRow property even when passed out-of-context. This .currentRow can then be used a default argument value in Function signatures. This is a really old behavior of ColdFusion; but, I thought it would be fun to demonstrate since it may not be a feature people consider very often.


Several positions available on
Listing over 233 ColdFusion positions from 103 companies across 123 locations in 5 Countries.

6 new jobs listed

Full-Time - Senior Coldfusion Developer |LATAM| at Colon, PA - United States
Posted Nov 15

Full-Time - ColdFusion Developer | 4 to 6 years | Pune at Pune, Maharash.. - India
Posted Nov 12

Full-Time - Senior Coldfusion Developer (RQ02208) at Toronto, ON - Canada
Posted Nov 11

Full-Time - Programmer (Coldfusion Java - Remote) at United States - United States
Posted Nov 11

Full-Time - Front End / Coldfusion Developer - Salford Quays + WFH at Sa.. - United Kingdom
Posted Nov 10

Full-Time - ColdFusion Jr. Web Developer at Pune, Maharashtra - India
Posted Nov 09

ForgeBox Module of the Week


By Brad Wood and Ortus Solutions

A utility module to match file system path patterns (globbing) in a similar manner as Unix file systems or .gitignore syntax.
box install globber

Last Update: August 10, 2021 - 3.0.7

VS Code Hint Tips and Tricks of the Week

Encode Decode

The Encode/Decode (ecdc) extension allows you to quickly convert one or more selections of text to and from various formats

The extension provides a single command to the command palette. To active the command simply launch the command palette (Shift-CMD-P on OSX or Shift-Ctrl-P on Windows and Linux), then just type Encode/Decode: Convert Selection, then a menu of possible conversions will be displayed. Alternatively you can use the keyboard bindings CMD-ALT-C and CTRL-ALT-C for Mac & PC respectively.

Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here

Now offering Annual Memberships, pay for the year and save 10% - great for businesses.
  • Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription.
  • All Patreon supporters have a Profile badge on the Community Website
  • All Patreon supporters have their own Private Forum access on the Community Website


  • John Wilson - Synaptrix 
  • Eric Hoffman
  • Gary Knight
  • Mario Rodrigues
  • Giancarlo Gomez
  • David Belanger
  • Jonathan Perret
  • Jeffry McGee - Sunstar Media
  • Dean Maunder
  • Joseph Lamoree
  • Don Bellamy
  • Jan Jannek
  • Laksma Tirtohadi
  • Carl Von Stetten
  • Dan Card
  • Jeremy Adams
  • Jordan Clark
  • Matthew Clemente
  • Daniel Garcia
  • Scott Steinbeck - Agri Tracking Systems
  • Ben Nadel
  • Mingo Hagen
  • Brett DeLine
  • Kai Koenig
  • Charlie Arehart
  • Jonas Eriksson
  • Jason Daiger
  • Jeff McClain
  • Shawn Oden
  • Matthew Darby
  • Ross Phillips
  • Edgardo Cabezas
  • Patrick Flynn
  • Stephany Monge
  • Kevin Wright
  • Steven Klotz

You can see an up to date list of all sponsors on Ortus Solutions' Website

★ Support this podcast on Patreon ★

Switch to Modernize or Die ® Podcast - SoapBox Edition - Switch to Modernize or Die ® Podcast - Conference Edition

Powered by

Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio

© 2019 Ortus Solutions