Pete Freitag

Posted slides and examples for my #intothebox talk: Continuos Integration Zero to Infinity. It features lots of different ways ColdFusion developers can use CI: petefreitag.com/item/902.cfm

@gamesover You have the time mask in dateFormat and then again in timeFormat

I'm reviewing some ai-generated #ColdFusion. Anyone see anything wrong with this CFML? #smh dateAdded = isDate(row.DateAdded) ? dateFormat(row.DateAdded, "yyyy-mm-dd hh:nn:ss") & " " & timeFormat(row.DateAdded, "HH:nn:ss") : row.DateAdded;

Are you a #ColdFusion or #cfml developer? Check out the weekly #CFBreak newsletter from @foundeo cfbreak.com Stream the #ModernizeOrDie CFML News Edition podcast from @ortussolutions podcast.modernizeordie.io

@ryanguill Interesting, thanks Ryan

@pfreitag it struggles because it thinks in tokens not letters or words. look up the “strawberry problem”. there are ways around it if you really need to do it.

Equally as amazing as what AI can do, is what AI struggles with. Who can explain this? Gotta love the Drafts too 😅

@philkellr Beyond ensuring your following secure coding practices keep an eye on the security patches in the software you use. I built stack.watch for this purpose.

Builders who already validated your products: How do you deal with security? Security audits are too expensive. Are you just following "best practices" or is there another way?

For context I was asking for a list of three letter verbs, and it kept listing make

Great issue of CFBreak today, thanks for writing @bennadel @mjclemente84 @gamesover @ortussolutions

Awesome Eric feel free to email me with any feedback. Btw here’s my blog entry about the feature with more details: petefreitag.com/blog/coldfusio…

New version of Fixinator out this week with the ability to scan ColdFusion / CFML code for compatibility issues. Hopefully this will help people upgrade from older versions of ColdFusion.

@gamesover @hoyahaxa Ah I see, when the scope is dynamic, then I usually would write a few if statements, since there are not that many scopes to deal with.

@pfreitag @hoyahaxa Bracket notation is what I usually use, but what can you do when the scope (versus only the key) is dynamic?

I just realized that many of my #ColdFusion unsafe evaluate() functions can be replaced with structget(). stackoverflow.com/a/25278540/693… This isn't mentioned or recommended in any #cfml documentation. Is it advisable? (I'm using it w/dynamic internal vars that have different scopes.)

@gamesover @hoyahaxa Instead of structGet you can use bracket notation, form[key] or form[“checkbox” & key], etc. There is also bracket notation for accessing query cell values with a dynamic column name.

@hoyahaxa Yes, I avoid blindly passing all request variables (form/url/head) to evaluate & structget. I explicitly use a scoped "keyExists" member function to ensure only the correct scope is searched.

Was surprised to learn that this spec was not published on April 1: ietf.org/archive/id/dra… send SQL to your server via a new http request method QUERY. What could go wrong? 🤔

@nolanerck Hi Nolan!

Is anybody still reading my Twitter stuffs? I'm hardly ever here. Hi.

Adobe @coldfusion security update released today: petefreitag.com/blog/coldfusio… get em while their hot!

@daniel_nguyenx @levelsio @Cloudflare That sounds like a different kind of problem. With the setting at "Flexible" CloudFlare talks to your server with HTTP. People who hit the problem he is talking about have setup their server to use HTTPS only (port 80 closed). So they would hit the problem when setting up.

@levelsio @Cloudflare Wow this might be the reason I occasionally run into SSL issue with Cloudflare. Going to set to full now

99% of the problems me and my friends have with @Cloudflare is it defaults the SSL setting to Flexible Then when you change it to Full everything always suddenly works? Full should be the default?

@levelsio @Cloudflare One thing many people don't realize is that with just two lines of apache / nginx config, and one toggle in CloudFlare's dashboard you can ensure that your web server only handles requests coming from CloudFlare. It's called Authenticated Origin Pulls: petefreitag.com/blog/cloudflar…

@gamesover Yeah good catch James, I think string would be a better type for the argument.

Hey @pfreitag booleanFormat() is your "Function of the Week". cfdocs.org/booleanformat CFDocs indicates "numeric", but ACF actually accepts "a number, boolean value, null, or an empty string" and Lucee accepts "any; a value that can be casted to a boolean".

@QuinnyPig via HackerNews: news.ycombinator.com/item?id=392090…

Leave it to @QuinnyPig to find the best use case for this DNS over HTTPS JSON API:

DNS over HTTPS is not what I thought petefreitag.com/blog/dns-over-…