Watch the full video version on YouTube https://youtu.be/BYOtC8_Lv8g

2019-09-24 Weekly News - Episode 20

Hosts:
Gavin Pickin - Software Consultant for Ortus Solutions



News and Events


Adobe Security Bulletin - ColdFusion (2018 release) Update 5 and ColdFusion (2016 release) Update 12 released

Adobe has released security updates for ColdFusion versions 2018 and 2016. These updates resolve two critical and one important vulnerability that could lead to arbitrary code execution.   

Brad also tweeted that Adobe snuck in some non security features to 2018, like Fat arrow support.

https://helpx.adobe.com/security/products/coldfusion/apsb19-47.html
https://coldfusion.adobe.com/2019/09/coldfusion-2018-release-update-5-coldfusion-2016-release-update-12/


Fusion Reactor 8.2.1 was released

Fixes some pesty bugs
https://www.fusion-reactor.com/support/kb/frs-456/
https://www.fusion-reactor.com/download/


CF Mobile Development is still alive?

Looks like Adobe have been updating CF Mobile development, and a few blogs have been posted to prove it.

Uday Ogra - Building a server side functionalities rich mobile application using new CF Mobile features
https://coldfusion.adobe.com/2019/09/building-server-side-functionalities-rich-mobile-application-using-new-cf-mobile-features/

Blog - Uday Ogra - Support for server side tags and functions in CF Mobile development
https://coldfusion.adobe.com/2019/09/support-server-side-tags-functions-cf-mobile-development/


Adobe CF Summit early bird

Still available as of September 24th. Get them before they go up.

Certificate Program + Conference Pass $498.00
ColdFusion Security Preconference + Conference Pass $348.00
Conference Pass $99.00
ColdFusion Docker Preconference + Conference Pass $348.00
ColdFusion PMT Preconference + Conference Pass $348.00

Adobe CF Summit Speakers Announced - 31 so far
https://cfsummit.adobeevents.com/speakers/


Adobe CF Summit - Conference

- Las Vegas at the Mirage October 1-2 ( Tuesday + Wednesday )
- Biggest CFML Conference of the Year - 500+ people
- Great Adobe Party
- Register Now - Early bird was only $99
https://cfsummit.adobeevents.com/
Early-bird registration has been extended to June 30, 2019

Call for Speakers is now closed!!!
Speakers are listed on the website
https://cfsummit.adobeevents.com/speakers/

Lots of Ortus Speakers
- Luis Majano
- Brad Wood
- Eric Peterson
- Gavin Pickin

Adobe Speakers 5+
- Rakshith Naresh
- Uday Ogra
- Kailash Bihani
- Piyush Kumar Nayak
- Suchika Singh

Lots of other great community speakers 15+
Including but not limited to:
- Pete Frietag
- George Murphy
- Brian Klaas
- Matt Clemente
- Giancarlo Gomez
- Matt Gifford
- Carl Von Stetten
- Daniel Fredericks
- Uma Ghotikar
- Abram Adams
- Dan Wilson
- David Tattersal ( Fusion Reactor )
- Charlie Arehart
- Dave Ferguson


Adobe CF Summit - Workshops

Adobe ColdFusion Specialist Certificate Program

From Elishia
People should know that for the Specialist Certificate they will be asked to review about 20 hours of video content in the month of September before the classroom session on September 30th. The in-person workshop will be a review of material and include an exam at the end. Space is limited in all of these, so they should sign up soon.

From the CF Summit Website:
The Adobe ColdFusion Specialist is a full-day certificate classroom program, delivered by top Adobe ColdFusion experts. You will be enrolled into the course as soon as you register and will receive course instructions and prep materials two weeks prior to the on-site program date. Following the training you will complete an online assessment – upon successful completion, you will receive your Adobe ColdFusion Specialist certificate.

Related Tweet

Tweet - Grae Desmond - ColdFusion Specialist Cert
Work springed for me to get the #ColdFusion Specialist cert.  Who am i to say no.  Just got the training materials so time to see if there's anything I missed in last decade or so.  Spoiler...im sure there is.  First video, all samples shown are in script. #webdev #CFML
https://twitter.com/dakuwan/status/1172146583900577793
https://twitter.com/dakuwan



Register: https://cfsummit.adobeevents.com/adobe-coldfusion-specialist/
Blog post for more information: https://coldfusion.adobe.com/?p=5760

Location
The Mirage, Las Vegas
3400 S Las Vegas Blvd
Las Vegas, Nevada, United States 89109

Dates:
Monday September 30, 2019 - 8:00 AM - 5:00 PM
Price: $399.00 - early bird pricing

Pre-conference Training 1: Hands-on ColdFusion Security Workshop
Trainer : Pete Freitag, Principal Consultant, Foundeo Inc.
Pre-conference Training 2: Going from Zero to 60 with Docker and ColdFusion images
Trainer: Charlie Arehart, Independent Consultant, Carehart
Pre-conference Training 3: Performance Monitoring Toolset
Trainer: Adobe ColdFusion Team

https://cfsummit.adobeevents.com/register/registration/select


Ortus Solutions Training Workshops at CF Summit after the Conference

Ortus will be doing 2  2-day trainings on Thursday October 3rd, and Friday October the 4th.

We have two great workshops to select from and they will be held in a much more exclusive and comfortable environment that will allow us to bring you a better learning experience at Executive Hospitality Suite from ARIA Tower Suites . Register as soon as possible as space is very limited!

ColdBox From Zero to Hero
Lead by Gavin Pickin & Eric Peterson

ColdBox From Hero to SuperHero : API Edition
Lead by Luis Majano and Brad Wood

Dates: Thursday, October 3, 2019 at 9:00 AM - Friday, October 4, 2019 at 5:00 PM (PDT)

Location:
ARIA Resort & Casino
3730 S Las Vegas Blvd

More information and a link to register here: https://www.ortussolutions.com/blog/cfsummit-2019-training-bootcamps


ColdBox From Zero to Hero - Bootcamp Training - SOLD OUT

Bangalore, India | October 16-17, 2019 - by Luis Majano
Very popular ColdBox training, a great way to get your feet wet and jump start your ColdBox development.

Project Overview:
We will be building a real twitter clone: SoapBox.  We will use HMVC conventions, including BDD / TDD testing to build out the application including the usage of many different ForgeBox modules and industry standards.

SOLD OUT
Price: $199 for 2 days
Group discounted pricing available for $99
Register now: https://www.eventbrite.com/e/hmvc-web-applications-from-zero-to-hero-bangalore-india-2019-tickets-58595141646


CF Camp - Workshops and Conference

October 17th and 18th in Munich, Freising, Germany.
Read more now: https://www.cfcamp.org/ - Tickets NOW AVAILABLE.
Early bird - July 15, 2019 - 280 EUR - $313.27
Regular - Sep 11 - Oct 15, 2018 - 330 EUR - $369.17
Late - Oct 16 - Nov 8, 2018 - 380 EUR - $425.10

3rd Episode of Code Masters
Don't miss the third episode of CODE MASTERS from your hosts @markdrew and @robdudley
They recorded a video from CFCamp last year as part of the LocalHost.fm podcast. Watch the Youtube video here https://www.youtube.com/watch?v=-MECBMAMw0A

You can see the great lineup of speakers and sessions from last year on the site now. They will update as the speakers and sessions for this year is finalized.

Call for Speaker Deadline was July 7th - Now closed
Speakers have been announced
https://www.cfcamp.org/speakers.html

On Twitter Kai said “I can honestly say this is the best & most diverse programme, @cf_camp  ever had!“

Ortus Speakers
- Eric Peterson
- Jorge Reyes
- Brad Wood

Lots of Great Community Speakers
- Charlie Arehart
- Eleftheria Batsou
- Miguel Beltran
- Wil de Bruin
- Jen Doherty
- Mark Drew
- Rob Dudley
- Seb Duggan
- Nolan Erck
- Uma Ghotikar
- Matt Gifford
- Majid Hajian
- Michael Hnat
- Kenigbolo Meya Stephen
- Kai König
- Francisco Mancardi
- Lara Martín
- Joel Stobart
- Maciej Treder
- Dom Watson
- Sebastian Zartner

Sessions have been announced
https://www.cfcamp.org/sessions.html

CF CAMP Pre Conference Training Options Announced
Before CFCamp we're offering some interesting training sessions and presentations. The training sessions are held at the CFCamp venue at the Marriott Hotel Munich Airport in Freising.
We're currently putting together a very interesting set of training for you. Please stay tuned.

ColdBox Hero to Superhero (Oct, 15-16th)
BDD with TESTBOX (Oct, 15-16th)
PresideCon (Oct, 16th)
Centralize your logs with the Elastic Stack (Oct, 16th)
Get into Linux (Oct, 16th)
https://www.cfcamp.org/pre-conference.html


Ortus Training at CF Camp

Ortus will be doing a 2 day workshop on the 15th and 16th of October.

Eric Peterson will be leading - Rest easy at night with TestBox BDD
Brad Wood will be leading the - Hero to Superhero - API REST Edition - name to be confirmed.



Blogs, Tweets and Videos of the Week

Tweet - Brad Wood - Something missing from Adobe Security Patches
New security patches from Adobe and one thing is missing from previous patches: ColdFuson 11!  Only 2016 abd 2018 were patched which is a sign CF11 users are now in the dark. Kick that upgrade in gear!
helpx.adobe.com/security/products/coldfusion/apsb19-47.html…
#CFML #ColdFusion #ModernizeOrDie
https://twitter.com/bdw429s/status/1176539956841504774?s=20
https://twitter.com/bdw429s

Tweet - Brad Wood - More than just security patches
ColdFusion 2018 update 5 included more than security patches, it also has the so-called "fat arrow" syntax support!
func = (x) => x+1
func(1)
I was able to test it a little early and it's fairly solid, but not without a few bugs which I've reported to Adobe for fixing. #CFML
https://twitter.com/bdw429s/status/1176542411864051713?s=20
https://twitter.com/bdw429s

Blog - Ben Nadel - JavaLoader Needs Access To Internal ColdFusion Java Components In ColdFusion 2018
This past week, I updated my blog from ColdFusion 10 to ColdFusion 2018. ColdFusion is generally backwards compatible; so I figured this would be a seamless transition. However, I ended up running into an issue with JavaLoader, which I wanted to share because my Google searches for the related error yielded no results. As such, I thought sharing the details could help others who run into the same JavaLoader issue.
https://www.bennadel.com/blog/3699-javaloader-needs-access-to-internal-coldfusion-java-components-in-coldfusion-2018.htm

Blog - Pete Frietag - Passing Environment Variables to Sudo Command
Suppose you have a bash script that sets an environment variable, and then invokes something with sudo. You will find that the environment variable you set using export is not avaliable to the /do/something command.
When you run sudo, you are actually starting a new environment as the root user, so any environment variables that exist in your current shell will not be passed. There are two ways to get around this.
https://www.petefreitag.com/item/877.cfm

Blog - Michael Born - Adobe, You Piece of Work, I'm Through
Lest that title and opening surprise or scare you, let me put it simply: I am fed up with Adobe's handling of Adobe ColdFusion. The product stinks (compared to Lucee), the support and marketing stinks, and this recent "bait and switch" pricing tactic is the last straw.
https://dev.to/mikeborn/adobe-you-piece-of-work-i-m-through-52b1

Blog - iSummation - CFML functional programming approach
Being a coder, I can say most of from us don’t want to walk much on a street. In the concern of cleaning written code that working perfectly fine, sometimes things are getting done with simple copy n paste that we did before. Simple and very easy, we normally do. There might be some solid reason to do like time not permit to find a better way, on-demand work, etc. I am not blaming anyone but it’s all my experience said, nobody likes to write the same code again and again and also would love to write less line of code to get the same amount of result, If so, It’s never too late to start doing the right thing. Let’s start digging, what the term functional programming is?
https://www.isummation.com/blog/cfml-functional-programming-approach/

Blog - Uday Ogra - Building a server side functionalities rich mobile application using new CF Mobile features
Let’s build a simple mobile application which will extensively use the server side tags and functionalities of coldfusion.
https://coldfusion.adobe.com/2019/09/building-server-side-functionalities-rich-mobile-application-using-new-cf-mobile-features/

Blog - Uday Ogra - Support for server side tags and functions in CF Mobile development
In this article, we will explain the recent changes made in CF Mobile, which helps in developing end to end mobile applications.
https://coldfusion.adobe.com/2019/09/support-server-side-tags-functions-cf-mobile-development/

Pete Frietag - Development SSL / TLS with CommandBox
I've been working on my upcoming Fully Day ColdFusion Security Training Class at CFSummit. The training takes place on a VM which I have preloaded with everything the trainees will need. Because I'm a big fan of CommandBox I thought I would set it up fully using CommandBox instead of Apache and the CF installer.
In order to teach certain sections we need HTTPS support, so here's a quick rundown of how I set it up on Linux, but the same approach should work on a Mac.
https://www.petefreitag.com/item/876.cfm

Tweet - Jay is Painting
Hey look! One of my tweets in a @troyhunt blog post. :)
No really go look...and implement the @lithnet_io AD + @haveibeenpwned code.
PS. If you run #CFML on #Coldfusion or #Lucee you can grab my HIBP/CFC password checker  github.com/JayIsPainting/…
troyhunt.com/pwned-password…
https://twitter.com/JayIsPainting/status/1174685720402751493
https://twitter.com/JayIsPainting

Blog - Troy Hunt - Pwned Passwords, Version 5
Almost 2 years ago to the day, I wrote about Passwords Evolved: Authentication Guidance for the Modern Era. This wasn't so much an original work on my behalf as it was a consolidation of advice from the likes of NIST, the NCSC and Microsoft about how we should be doing authentication today.
https://www.troyhunt.com/pwned-passwords-version-5/

Blog - Evagoras Charalambous- A ForgeBox ColdBox module for the Lucee server 5.3.3 scheduled tasks
I found myself needing a front-end user interface for the Lucee server version 5.3.3+62 scheduled tasks (which includes the new unique property), which would run inside my web app and mimic what is already there in the Administrator. Since there wasn’t one I could find, I built it. While creating a modern UI was fairly easy to do with Bootstrap 4 and jQuery, I thought it might be useful to have it published as a module on ForgeBox for anyone else to use.
https://www.evagoras.com/2019/09/19/a-forgebox-coldbox-module-for-the-lucee-server-5-3-3-scheduled-tasks/

Tweet - Brad Wood - CommandBox DotENV
The latest version of commandbox-dotenv 1.7.1 lets you have a global ~/.box.env file that loads default env vars into the CLI every time you start it regardless of working dir. I've seeded mine with cfconfig_adminPassword and when you first use Lucee 5.3.4 you'll see why :) #CFML
https://twitter.com/bdw429s/status/1174380941470588929
https://twitter.com/bdw429s



CFML Jobs

ColdFusion Software Engineer - Full time for WebstaurantStore in Tampa, FL,  United States
Looking for the start-up feel, but with a well-established and still rapidly growing company? Do you have a desire to work on a variety of projects? Want to be an integral part in forming a core development team at a satellite location in Tampa due to expansion? This is an opportunity for you! Take a look at our careers page and video: https://www.webstaurantstore.com/careers/
https://www.getcfmljobs.com/viewjob.cfm?jobid=10929



ForgeBox Module of the Week

CBValidation

This module is a server side rules validation engine that can provide you with a unified approach to object, struct and form validation. You can construct validation constraint rules and then tell the engine to validate them accordingly.

box install cbvalidation

Last Update: Aug 30 2019 12:35 PM | Downloads: 2971 | Installs: 64916 | Views: 4500 | Versions: 17
https://www.forgebox.io/view/cbvalidation



VS Code Hint Tips and Tricks of the Week

Regex Previewer

Christof Marti - 118070 downloads

Shows the current regular expression's matches in a side-by-side document. Global and multiline options can be added for evaluation with a side-by-side document through a status bar entry. This can be useful when the side-by-side document has multiple examples to match.

https://marketplace.visualstudio.com/items?itemName=chrmarti.regex



Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

If we’re getting your name wrong please let us know.

- Andrew  Davis
- Brian  White
- Carl  Von Stetten
- Da Li
- Dan  Card
- Daniel Garcia
- David  Belanger
- Didier  Lesnicki
- Don  Bellamy
- Eric Hoffman
- Gary  Knight
- Jan  Jannek
- Jeremy Adams
- John  Farrar
- Jordan Clark
- Joseph  Lamoree
- Laksma  Tirtohadi
- Matthew Clemente
- Richard  Herbert
- Samuel  Knowlton
- Scott Steinbeck
- VJ
- Yogesh  Mathur

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors