Modernize or Die® - CFML News for September 28th, 2021 - Episode 120

Gavin and Eric host this weeks episode. They shared a recap of Into the Box 2021 from last week, with lots of great releases, and information on the upcoming Adobe CF Summit and new Adobe ColdFusion Product Manager. They reminded you of the latest CommandBox update, and discussed how the V3 version of the Lucee Spreadsheet got a lot of attention and what you should know about it. They let you know about a Minor Lucee 5.3.8 update and announced the relaunch of the Modernize or Die SoapBox Edition Podcast. They shared the CF9 server exploit getting a lot of press lately with the Cring Randomware group exploit and why its important to update to new engines after the support window ends. They also discussed Ortus' upcoming Webinar in October, as well as Hacktoberfest 2021 coming to a github repo near you. Lots of news this week. They discuss the latest CFCasts content, and some upcoming conferences including Adobe CFSummit 2021 in Dec which is virtual They spotlight a lot of great blog posts, tweets, videos and podcasts, too many to list, so listen to the show. They announce some jobs from They show off the ForgeBox module of the Week - CBWire - ColdBox + Livewire in CFML by Ortus Solution and Grant Copley This week's VS Code Tip of the week is Emoji Logs helps me understand a project's history with a less cognitive load just by looking at the git log. They thanked all their Patreons - they reached the goal of 100% support of the podcast and we're on the way to the next set of goals. They talked a little information about perks for their Patreon supporters, and a new option, Annual Memberships with a discount. For the show notes - visit the website Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio

2021-09-28 Weekly News - Episode 120

Watch the video version on YouTube at


Eric Peterson - Senior Developer for Ortus Solutions
Gavin Pickin - Senior Developer for Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. 
A few ways  to say thanks back to Ortus Solutions:
  • Like and subscribe to our videos on YouTube. 
  • Sign up for a free or paid account on CFCasts, which is releasing new content every week
  • Buy Ortus’s new Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (

Patreon Support

We have 38 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site:
We are now 41% of the way to our next goal, fully funding the site.
Now offering Annual Memberships, pay for the year and save 10% - great for businesses.

News and Events

Into the Box 2021 - Recap

Great Success! Especially the Viral Edgardo Cabezas with his Reggaeton - Video available :D

CBWire v1.0.0 -

Qb v8.7.0 & v8.7.1 Released -

ForgeBox v6.0.0

Stachebox v1.0.0 - ElasticSearch, LogStash, and FileBeats viewer

ContentBox v5.0.0 - Using Tailwind and AlpineJS got some love from attendees and twitter
MULTI-SITE!!!  New CLI installation and manager

New Ortus Github Actions for CFFormat, DocBox, Fixinator, Semantic Release

New Adobe ColdFusion Product Manager - In the Adobe Session Mark Takata had a lot of really encouraging things to say about the new #ColdFusion Product Manager who  is gearing up to take over the direction of CF!

For More information:
Keynote Day 1:
Keynote Day 2:
Full Session Videos coming to CFCasts soon

CommandBox v5.4.1 released

We are pleased to announce the release of CommandBox 5.4.1.  This is a patch release with 5 small fixes for the 5.4.0 release.   There are a few bug fixes, and a couple small enhancements in this release.

Lucee-Spreadsheet Release and Rename

Just released v3.0 of my spreadsheet library. Two big changes:
1) it's now "spreadsheet-cfml" instead of "lucee-spreadsheet"
2) calls can now be chained for simpler code (yeah for fluent builder patterns!)
Ortus fixed the forgebox slug so builds will not fail anymore and updating ForgeBox to have failover redirects for future issues in other projects
New Name -
Old Name -

Minor Stable Lucee Release Out -

Mainly a CFSchedule fix

Modernize Or Die Podcast - SoapBox Edition - Relaunching Oct 7th

Luis Majano is hosting a series of Community Members over the coming months.
Interview format.
Several episodes are recorded and prepped for release.

Security Alert - Cring ransomware group exploits ancient ColdFusion server (CF9)

Active exploit of cf9 servers leading to ransomware attacks. This is why you should not be running software that's no longer updated!
Thank for heads up from @viviotech email to their clients, including one we share

Ortus Webinar for October - Gavin Pickin - Building Quick APIs - the extended version
In this session we will use ColdBox’s built in REST BaseHandler, and with CBSecurity and Quick ORM we will set up a secure API using fluent query language - and you’ll see how quick Quick development can be!
Signup coming soon

Some people think October is pumpkin spice, halloween, but for us, its HACKTOBERFEST

Hacktoberfest 2021

Support open source throughout October!
Hacktoberfest encourages participation in the open source community, which grows bigger every year. Complete the 2021 challenge and earn a limited edition T-shirt.
Open-source projects keep the internet humming—but they can’t do it without resources. Donate and support their awesome work.
Rather than receive t-shirts as swag, you can choose to have a tree planted in your name and help make Hacktoberfest 2021 more carbon neutral.
To win a reward, you must sign up on the Hacktoberfest site and make four pull requests on any repositories classified with the 'hacktoberfest 'topic on GitHub or GitLab by October 31.
If an Ortus Solutions repo that you want to contribute to is not marked with the `hacktoberfest` topic, please let us know so we can fix it.

ICYMI - Adobe ColdFusion Updates Released

We are pleased to announce that we have released the updates for the following ColdFusion versions:
ColdFusion (2021 release) Update 2
ColdFusion (2018 release) Update 12
Note: The ColdFusion (2021 release) installers have also been refreshed with this update. The new server installers bundle Update 2 and JDK 11.0.11. The ColdFusion Add-Ons and other installers are bundled with JDK 11.0.11. The refreshed installers are available at ColdFusion downloads.
Biggest update here is supporting Big Sur.  (A little late with Monterey just around the corner.)

ICYMI - Adobe CF 2021 Docker Images finally on DockerHub

Adobe has been putting their ColdFusion Docker images onto Docker hub

ICYMI - Adobe 1 Day Workshop - Adobe ColdFusion Workshop with Damien Bruyndonckx

Wed, September 22, 2021
Wed, November 10, 2021
09:00 - 17:00 CEST EUROPEAN
Join the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise.

ICYMI - Adobe Webinar for September - Head in the clouds: Installing ColdFusion on Azure and AWS with Mark Takata

Wed, September 22, 2021
09:00 - 10:00 PDT
If you’ve been thinking about getting your CF instance moved into the cloud but don’t know where to start, this webinar will get you rolling. We will explore how to install, configure and update CF2021 installs in both Amazon AWS and Microsoft Azure and give you tips and tricks on how to get things off the ground.

CFCasts Content Updates

Just Released
  • Up and Running with Quick
    • 25 - Serialization
    • 26 - Step 10 Exercise
    • 27 - Subselects and Relationship Counts
Coming this week
  • More Up and Running with Quick

Send your suggestions at

Conferences and Training

Into the Box 2021 - HYBRID - Live in Person in Texas. and Live Online

Great Success!
Keynote Day 1:
Keynote Day 2:
Full Session Videos coming to CFCasts soon

Adobe ColdFusion Summit 2021

December 7th and 8th
Mark let us know the Keynote Speaker will be someone from outside of Adobe - will announce once the contract is inked. She works for a big company.
Register for Free -
Blog -

More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.

Blogs, Tweets and Videos of the Week

Blog - We are Orange - From MURA to MASA
For those that don’t know, MURA is a very powerful CMS that is renowned for it’s fantastic UX – especially for content managers. Previously it was offered as an open source platform but that support ended in August of this year.
As seasoned MURA users – with some big clients running it – this could have presented a major problem. So, we came up with a solution… and we’re proud to announce that We Are Orange has forked the project and are now supporting a new version – called MASA – continuing its lifespan as an open source platform.

Blog - Ben Nadel - Exploring The Scope Of SERIALIZABLE Transaction Row-Locking In Lucee CFML
Earlier this week, I looked at using SERIALIZABLE transactions to enforce unique naming constraints in MySQL and Lucee CFML. Transaction isolation isn't a topic that I'm super comfortable with. As such, I wanted to continue exploring the way in which transaction locking affects concurrent access to a given database table. More specifically, I wanted to better understand the scope of row-locking that is applied in a SERIALIZABLE transaction in MySQL 5.7.32 and Lucee CFML

Blog - Ben Nadel - CFThread "ElapsedTime" Is Not "Processor Time" In Lucee CFML
This morning, as I was trying to perform some follow-up exploration on SERIALIZABLE transactions in MySQL, I noticed something strange about the metadata exposed by the CFThread tag in Lucee CFML. Whereas Adobe ColdFusion (ACF) documents the ElapsedTime property as being "The amount of processor time that was spent handling the thread", this property looks to mean something different in Lucee CFML. It appears to be the amount of time that has elapsed since the CFThread tag was spawned; but, has nothing to do with when it ended; or, how much time it took to execute.

Blog - Ben Nadel - Fixing Protocols In My ColdFusion Custom Tag DSL For HTML Emails
Last week, I looked at the fact that [Yahoo! Mail won't render href attributes with encoded protocols]. In that post, I created a ColdFusion user defined function (UDF) to un-encoded the https:// portion of the href attribute. After letting that approach bake in production at InVison for a while without an issues, I've decided to move the fix into my ColdFusion custom tag DSL for HTML emails. With this new implementation, I've pushed the logic down into the <html:a> and <html:src> custom tag implementations so that the developer can continue to use these tags without any changes to their code.

Blog - Ben Nadel - Request Tracing Propagation When Consuming Amazon SQS Queues In Lucee CFML
As I continue to explore the use of Amazon SQS queues in Lucee CFML, I have to start thinking about request tracing. In a monolithic application, request tracing is much less of a value-add since most operations happen within a single request. Once I start using a message queue to decouple steps within a larger workflow, however, I break out of that single-request boundary. As such, if I want to identify "message creation" as being related to "message consumption", I have to propagate the concept of tracing through the message queue life-cycle. I'm sure there are loads of ways to do this. So, what follows is just one possible way to propagate request tracing through Amazon SQS in a Lucee CFML application.

Tweet - Ben Nadel - Too Clever or Too Cool - Execute assignments as part of return statements
I am sure many people will hate this syntax / technique. But, I love the fact that #Lucee #CFML allows me to execute assignments as part of return statements. This allows my #ColdFusion to look more and more like my #JavaScript. Both of which are my happy place! 💪

Blog - Ben Nadel - Spreading Http And HttpParam Tags Across Multiple Function Calls In Lucee CFML
Back when InVision was running on Adobe ColdFusion 10, I leaned heavily on the native Http.cfc component when making network requests. However, once we switched over to Lucee CFML 5.3, where tag support in CFScript is much more robust, I found myself reverting back to the http and httpParam tags for network requests. There's something I find so elegant about the syntax of tags and their builder-like pattern of construction. One nice about using the Http.cfc ColdFusion component, however, is that it can be passed around and augmented such as with the injection of tracing headers. This got me thinking about augmenting http tags with httpParam tags; and, whether such an augmentation could be spread across function calls in Lucee CFML

Blog - Brad Wood - Ortus Solutions - CommandBox v5.4.1 released
We are pleased to announce the release of CommandBox 5.4.1.  This is a patch release with 5 small fixes for the 5.4.0 release.   There are a few bug fixes, and a couple small enhancements in this release.

Blog - Ben Nadel - Yahoo! Mail Does Not Render Anchor Tags With Encoded HREF Attributes
When rendering view templates in Lucee CFML (or any server-side language for that matter), rule number-one is don't trust the content. This is a corollary to an older rule, don't trust the user. As such, when I render content, I almost always wrap it in one of the many encoding methods that ColdFusion offers: encodeForHtml() or encodeForHtmlAttribute(). And, for the most part, this works wonderfully. However, I just discovered yesterday that Yahoo! Mail won't render Anchor (<a>) tags with fully-encoded href attributes. Specifically, it will strip-out the href attribute entirely if the link protocol is encoded. To fix this, I had to walk-back some of the encoding in my HTML emails. For anyone else that runs into this problem, I thought it might be helpful to put together a demo in Lucee CFML

Tweet - Ben Nadel - Undocumented Features that suddenly don’t work
Hmmm, after installing Adobe #ColdFusion 2018 hotfix earlier this week, I am seeing that this:
query[ column_name ].indexOf( value )
... no longer works. This was an undocumented feature, but it suddenly stopped working. Case in point, don't use undocumented features.


Several positions available on
Listing over 198 ColdFusion positions from 93 companies across 115 locations in 5 Countries.

8 new jobs listed

Full-Time - Middle ColdFusion Developer at Hyderabad, Telangana - India
Posted Sep 27

Full-Time - Full Stack Developer - Java/SQL/ColdFusion at United States - United States
Posted Sep 24

Full-Time - ColdFusion Developer (REMOTE) at REMOTE - United States
Posted Sep 18

Full-Time - ColdFusion Software Developer - Mid to Senior Level - Remote - United States
Posted Sep 17

Full-Time - Coldfusion Engineer at United States - United States
Posted Sep 17

Full-Time - Sr Software Engineer Lead Coldfusion at Pune, Maharashtra - India
Posted Sep 16

Full-Time - Senior Coldfusion Developer |LATAM| at Colon, PA - United States
Posted Sep 15

Full-Time - ColdFusion Developer at Herndon, VA - United States
Posted Sep 15

ForgeBox Module of the Week

CBWire - ColdBox + Livewire

Laravel Livewire is a library that makes it simple to build modern, reactive, dynamic interfaces using Laravel Blade as your templating language. This is a great stack to choose if you want to build an application that is dynamic and reactive but don't feel comfortable jumping into a full JavaScript framework like Vue.

Now we have it in ColdBox for CFML - BETA

VS Code Hint Tips and Tricks of the Week

Emoji Log

After building hundreds of open source software I've ended up inventing a git commit log standard called EMOJI-LOG that helps me understand a project's history with a less cognitive load just by looking at the git log.

Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here

Now offering Annual Memberships, pay for the year and save 10% - great for businesses.

  • Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription.
  • All Patreon supporters have a Profile badge on the Community Website
  • All Patreon supporters have their own Private Forum access on the Community Website


  • John Wilson - Synaptrix 
  • Don Bellamy
  • Eric Hoffman
  • David Belanger
  • Dean Maunder
  • Gary Knight
  • Giancarlo Gomez
  • Jonathan Perret
  • Mario Rodrigues
  • Jeffry McGee - Sunstar Media
  • Yogesh Mathur
  • Joseph Lamoree
  • Ben Nadel
  • Brett DeLine
  • Carl Von Stetten
  • Charlie Arehart
  • Dan Card
  • Daniel Garcia
  • Didier Lesnicki
  • Edgardo Cabezas
  • Jan Jannek
  • Jason Daiger
  • Jeff McClain
  • Jeremy Adams
  • Jonas Eriksson
  • Jordan Clark
  • Kai Koenig
  • Laksma Tirtohadi
  • Leon Seremelis
  • Matthew Darby
  • Matthew Clemente
  • Mingo Hagen
  • Patrick Flynn
  • Ross Phillips
  • Scott Steinbeck - Agri Tracking Systems
  • Shawn Oden
  • Stephany Monge
  • Steven Klotz

You can see an up to date list of all sponsors on Ortus Solutions' Website 

★ Support this podcast on Patreon ★

Switch to Modernize or Die ® Podcast - SoapBox Edition - Switch to Modernize or Die ® Podcast - Conference Edition

Powered by

Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio

© 2019 Ortus Solutions