Modernize or Die® - CFML News for October 8th, 2019

Gavin and Brad hosts this weeks episode. We discuss Hacktoberfest. We discuss Ortus' new releases, Redis Lucee Extension, CB Security v2.0.0, and TestBox v3.1.0. We discuss Adobe's CF Summit, the pre-conference, the conference itself, and Ortus' post conference training. We talk about Ortus Solutions' Bootcamp training in India with Luis Majano ( which is now sold out ) and mention how CF Camp next week, tickets are now available, and Brad and Eric are filling up their workshops they'll be leading at CF Camp. We spotlight a lot of great blog posts, too many to list, so listen to the show. We show off our ForgeBox module of the Week, this week, the CBSecurity module that was just updated. Our VS Code Hint Tip and Trick of the week is the TestBox package, which has code snippets and other great features to make working with TestBox easier from VSCode. We finish the podcast by thanking our Patreon supporters. For the show notes - visit the website Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio

Watch video version on YouTube

2019-10-08 Weekly News - Episode 22


  • Gavin Pickin - Software Consultant for Ortus Solutions
  • Brad Wood - Lead Architect for Ortus Solutions

News and Events


Hacktoberfest® is open to everyone in our global community. Whether you’re a developer, student learning to code, event host, or company of any size, you can help drive growth of open source and make positive contributions to an ever-growing community. All backgrounds and skill levels are encouraged to complete the challenge.

  • Hacktoberfest is open to everyone in our global community!
  • Pull requests can be made in any GitHub-hosted repositories/projects.
  • Sign up anytime between October 1 and October 31.

Signup today - 4 valid pull requests will earn you a free t-shirt.

Redis Lucee Extension V1.3.0 released

We are very excited to bring you another release for our Redis Lucee Extension. This is a minor release and it sports quite a few updates thanks to customer feedback, especially on clients working with hosted Redis solutions that would require SSL and password authentication. We have expanded the connections to have more configuration parameters, especially if you are dealing with high traffic applications.

ColdBox Security V2.0.0 released

The ColdBox cbsecurity module will enhance your ColdBox applications by providing out of the box security in the form of:
  • A security rule engine for incoming requests
  • Annotation driven security for handlers and actions
  • JWT (Json Web Tokens) generator, decoder and authentication services

We are so excited to release The ColdBox Security Module version 2.0.0. It has been quite a few years since we did a major version of our security module, but it is worth the wait. It is just easier to say we completely rewrote it in modern CFML and introduced modern Security practices, HMVC security to modules, annotation driven security and JWT token services. Never again write API security, we got you covered! We also completely rewrote the documentation and now we have yet another awesome security book:

TestBox V3.1.0 released

We are excited to announce a new minor release of TestBox version 3.1.0. To install just use CommandBox: install testbox --saveDev or to update your TestBox installation update testbox. 
In this release, we have 3 bugs fixed, 5 new features and 3 improvements

CF Summit last week

Use #cfsummit2019 to search for lots of amazing tweets, slides, demos and blog posts.
Adobe will be releasing slides on their blog for all the sessions asap.

  • Successful Pre Conference Workshops
    • 125+ attendees in the Adobe CF Specialist Certification
      • Needed 3 rooms
      • 90% pass rate
  • Another great CF Summit
    • Good attendance, and good reviews in the hallways
    • Adobe Keynote highlighted focus for Adobe CF 2020 - Good summary by Nolan Erck here - 
    • 2nd Day Keynote was entertaining and informative - Humor That Works: The Secret to Being More Productive, Less Stressed, and Happier with Andrew Tarvin
    • Good sessions, good networking, great to see new faces and older faces again, special mention for Matt Gifford who travelled 20+ hours to make it.
    • Adobe is planning the next 2 CF Summit’s already so if you missed it, start planning for next year.
  • Ortus Booth
    • Lots of great conversations with current users and potential users
    • Our new stickers were a great hit. Hit up Jorge Eric and Brad at CFCamp if you want some.

Ortus Post CF Summit Training

  • Great attendance and it was awesome to meet some of our Patreon supporters
  • We covered a lot of great content, and attendees were excited to get back to work and start implementing right away.
  • No dev left behind

CF Camp Ortus Training - Last Minute Discount Code

30% discount with the code cfcamprocks


ColdBox From Zero to Hero - Bootcamp Training - SOLD OUT

Bangalore, India | October 16-17, 2019 - by Luis Majano
Very popular ColdBox training, a great way to get your feet wet and jump start your ColdBox development. 

Project Overview: 
We will be building a real twitter clone: SoapBox.  We will use HMVC conventions, including BDD / TDD testing to build out the application including the usage of many different ForgeBox modules and industry standards.

Price: $199 for 2 days
Group discounted pricing available for $99

CF Camp - Workshops and Conference

October 17th and 18th in Munich, Freising, Germany.
Read more now: - Tickets NOW AVAILABLE.
Early bird - July 15, 2019 - 280 EUR - $313.27
Regular - Sep 11 - Oct 15, 2018 - 330 EUR - $369.17
Late - Oct 16 - Nov 8, 2018 - 380 EUR - $425.10

3rd Episode of Code Masters
Don't miss the third episode of CODE MASTERS from your hosts @markdrew and @robdudley
They recorded a video from CFCamp last year as part of the podcast. Watch the Youtube video here 

You can see the great lineup of speakers and sessions from last year on the site now. They will update as the speakers and sessions for this year is finalized.

Call for Speaker Deadline was July 7th - Now closed
Speakers have been announced

On Twitter Kai said “I can honestly say this is the best & most diverse programme, @cf_camp  ever had!“

Ortus Speakers
  • Eric Peterson
  • Jorge Reyes
  • Brad Wood

Lots of Great Community Speakers
  • Charlie Arehart
  • Eleftheria Batsou
  • Miguel Beltran
  • Wil de Bruin
  • Jen Doherty
  • Mark Drew
  • Rob Dudley
  • Seb Duggan
  • Nolan Erck
  • Uma Ghotikar
  • Matt Gifford
  • Majid Hajian
  • Michael Hnat
  • Kenigbolo Meya Stephen
  • Kai König
  • Francisco Mancardi
  • Lara Martín
  • Joel Stobart
  • Maciej Treder
  • Dom Watson
  • Sebastian Zartner

Sessions have been announced

CF CAMP Pre Conference Training Options Announced
Before CFCamp we're offering some interesting training sessions and presentations. The training sessions are held at the CFCamp venue at the Marriott Hotel Munich Airport in Freising.
We're currently putting together a very interesting set of training for you. Please stay tuned.

ColdBox Hero to Superhero (Oct, 15-16th)
BDD with TESTBOX (Oct, 15-16th)
PresideCon (Oct, 16th)
Centralize your logs with the Elastic Stack (Oct, 16th)
Get into Linux (Oct, 16th)

Ortus Training at CF Camp
Ortus will be doing a 2 day workshop on the 15th and 16th of October. 

Eric Peterson will be leading - Rest easy at night with TestBox BDD
Brad Wood will be leading the - Hero to Superhero - API REST Edition - name to be confirmed.

30% discount with the code cfcamprocks

Blogs, Tweets and Videos of the Week

Podcast - CF Alive Podcast - CF Camp 2019 (Everything CFML) with Kai Koenig and Mitchi Hnat
Kai Koenig and Mitchi Hnat talk about “CF Camp 2019 (Everything CFML)” in this episode of the CF Alive Podcast, with host Michaela Light.

More and more people are using CommandBox or our Ortus Docker containers (powered by CommandBox) for production deployments.  Commandbox uses JBoss Undertow which is very lightweight and fast, and capable of service traffic just as fast as IIS or Apache.  A lot of people ask me about running CommandBox in production and I always say it's fine so long as you follow the same basic lockdown procedures you'd take on any web server.  If you have IIS or Apache sitting in front of CommandBox, most of this configuration can happen there, but for people who want drop-dead simple prod servers, here's some quick tips on locking down your CommandBox server.

Blog - Matt Gifford - Adventures with CBStreams
I’ve been using cbstreams a lot recently over the last few years.
It’s a CFML wrapper that interacts with the Java Streams, allowing you to use those streams directly within your CFML code without having to deal with the Java code underneath. In true Ortus Solutions fashion, it’s very well documented.

Blog - Matt Gifford - Adventures with CBStreams - Struct Grouping
Following on from the previous post in the Adventures with CBStreams series, Adventures with CBStreams - API Transformations, today I wanted to show you an example I have used in the past to use streams to effectively group your data.

Blog - Matt Gifford - Adobe ColdFusion Summit 2019
The Adobe ColdFusion 2019 Summit was held at The Mirage hotel, Las Vegas, on October 1st - October 2nd 2019.
It was my first time attending the summit, my first time in Las Vegas, and my first time in the U.S. since 2015, so I was incredibly excited about it.

Blog - Matt Gifford - Monkeh.. where have you been?
I have been blogging in some shape or form for over ten years.
However, three years ago, shortly after my move to Cyprus, I stopped.
The server housing my old blog died. Whilst I still had the source code, it was a blog written in Metalsmith, which needed to be compiled from JS and Markdown into the static site files.
As my server died, so too did the Jenkins process I had managing the compilation and deployment for the site.
As a result, I just stopped blogging.

Ben Nadel - CFQueryParam "Fails Silently" With Empty Lists And IN Clauses In Lucee
About a year ago, we converted our production app from Adobe ColdFusion to Lucee CFML. The conversion itself took several months (depending on how hard you squint); and, since the conversion, we've occasionally stumbled over a few inconsistencies between Adobe ColdFusion and Lucee CFML. Yesterday, I fixed an inconsistency in the way that the cfqueryparam tag was handling empty lists when used with an IN() clause in MySQL. Furthermore, even within Lucee CFML, it appears that an empty list is handled differently between the cfquery tag an the queryExecute() function.

Blogs - Nolan Erck - South of Shasta - Lots and lots of CF Summit reviews
Nolan takes really good notes from the conference he attends, and he blogs those notes. He has a lot of blog posts from last week already, and more on the way, so to get all of them, please visit his site.

Blog - Pete Frietag - Hacktoberfest Tips for Contributors
It never ceases to amaze me how many people will emerge out of the woodwork to earn a free T-Shirt each October! As someone who runs a moderate sized open source project that has merged over 900 pull requests, I always see a big increase in activity in October due to Hacktoberfest. This is a great thing, and I do appreciate each pull request! I personally review each one, which takes time. There are a few things that contributors can be mindful of that will make it easier on project maintainers getting a lot of PRs this month.

Blog - Brian Klaas - Updated Versions of My AWS S3 and CloudFront Request Signing Utilities
About six years ago, I released two utilities for cryptographically signing requests for objects in btoh AWS S3 and CloudFront. The code in those repos still works just fine, but the code relies on bespoke methods for generating the request signature. Back then, all we really had was bespoke methods, and had to do things in a more roundabout way, utilizing multiple Java libraries. Things have definitely changed for the better in the intervening six years.

Video - Matt Gifford - ColdFusion - Faster, Better and Stronger
A video posted to YouTube in 2010, catchy song, great CFML references, pretty dang cool.
We would play it in the Podcast, but we might have some copyright issues, so you all need to go watch it, as soon as this podcast is over.


Several positions available on 

Full-Time - Software Engineer - Coldfusion at Pune, Maharashtra - India

Full-Time - Sr. Software Engineer - Coldfusion at Pune, Maharashtra - India 

Full-Time - ColdFusion Developer at Melbourne, FL - United States 

Full-Time - ColdFusion Developer at Bengaluru, Karnataka - India 

Full-Time - Web Programmer at Marriottsville, MD - United States 

Full-Time - Coldfusion Developer at Irving, TX - United States 

Full-Time - Coldfusion Developer at Bengaluru, Karnataka - India 

Full-Time - ColdFusion Developer at Woodlawn, MD - United States 

Full-Time - ColdFusion Developer at Springfield, VA - United States 

Full-Time - Software Engineer – Coldfusion at Noida, Uttar Pradesh - India 

ForgeBox Module of the Week


This module will enhance your ColdBox applications by providing out of the box security in the form of:

  • A security rule engine for incoming requests
  • Annotation driven security for handlers and actions
  • JWT (Json Web Tokens) generator, decoder and authentication services
  • Pluggable with any Authentication service or can leverage cbauth by default
  • Capability to distinguish between invalid authentication and invalid authorization and determine the outcome of the process.
  • Ability to load/unload security rules from contributing modules. So you can create a nice HMVC hierarchy of security.
  • Ability for each module to define its own validator

Welcome to SecureLand!

box install cbsecurity

Last Update: Oct 02 2019 11:51 AM | Downloads: 1098 | Installs: 33939 | Views: 4477 | Versions: 7

VS Code Hint Tips and Tricks of the Week

TestBox - vscode-testbox

Ortus Solutions - 964 installs

This extension gives you a TestBox toolbox for VS Code, to make writing tests that much easier.

Jump to Spec
Code Skeleton Snippets
TestBox Snippets
ColdBox Testing Snippets

Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. 

If we’re getting your name wrong please let us know.

Andrew  Davis

Brian  White

Carl  Von Stetten

Da Li

Dan  Card

Daniel Garcia

David  Belanger

Didier  Lesnicki 

Don  Bellamy

Erick Hoffman

Gary  Knight

Jan  Jannek

Jeremy Adams

John  Farrar

Jordan Clark

Joseph  Lamoree

Laksma  Tirtohadi

Matthew Clemente

Richard  Herbert

Samuel  Knowlton

Scott Steinbeck


Yogesh  Mathur

You can see an up to date list of all sponsors on Ortus Solutions' Website

★ Support this podcast on Patreon ★

Switch to Modernize or Die ® Podcast - SoapBox Edition - Switch to Modernize or Die ® Podcast - Conference Edition

Powered by

Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio

© 2019 Ortus Solutions