 | 26 Jun 07:51 If you have a ColdFusion page that contains a form with text inputs or uses URL params, make sure you are not vulnerable to a XSS attack. I'm quite novice at this myself, but learning more about it recently. Here are some inputs to try in your forms or URL param values, if they echo the value back to the user after the page submits/reloads. 26 Jun 05:33 Current setup... I'm on MSSQL Server and autogenerate my bean, DAO, and Gateway with the wizard in Adobe's CF extensions. A lot of the code it generates is crap, but still it saves me a LOT of time and keeps some level of consistency to my code. On an insert, the generated code puts a cftransaction around the insert, then immediately queries the record to get the autogenerated ID. 26 Jun 03:17 I recently updated to Firefox 3 and so far I am loving it. One of the essential tools to anyone in my position is Firebug. I installed the new beat 1.2 and I just could not get it to open. The installation was fine but every time I try to open firebug nothing would happen. This is actually a problem with ColdFire that I had installed. If you are having a similar problem just remove ColdFire and it should work fine. 26 Jun 02:25 A new site for MAX has been launched: http://max.adobe.com/na/experience. The stuff in the background is a bit too cute for me, and frankly, I'm really tired of auto-play video. It's so fun when you load a site while you are on the phone and have to ... 26 Jun 01:23 The list of sessions and speakers is available on the MAX site. The site shows 28 ColdFusion sessions (including two pre-event labs). There are just under 200 sessions total so that's a pretty good percentage in my opinion. 34 sessions cover AIR, 54 sessions cover Flex. Compare that to 13 sessions on Dreamweaver and 14 on the flagship Photoshop product and I think we have no reason to complain (but, of course, some folks will). 26 Jun 00:16 I got an interesting email a week or so ago (sorry folks, behind on my email again - blame CFUNITED, my cold, and a dog that required a 4 hour drive yesterday for a special vet) concerning certification. As folks know I shared my opinions on this back on June 3rd. I still haven't heard an official response from Adobe, which is a bit disappointing (hint hint, Ben, Jason, anyone? :) but hopefully that will come soon. 26 Jun 00:10 CFUnited was kind enough to release 35+ conference presentations. Hopefully it will demonstrate the quality and networking for people unable to attend, like me this year. I added the presentations to Charlie Arehart's UGTV. Sea... 25 Jun 23:29 Probably not but I am apart of the new CFConverstations podcast. I am no episode 2 but that is no reason to pick up the podcast. The podcast has some really good content and 3 of the first 4 episodes were done right from CFUnited. There were some issues with audio because it was everyone huddled around a mic but Brian is doing is best to clean up the issues. I know some of the interviews Brian has lined up for the future and all I can say is stay tuned for great things to come. 25 Jun 19:03 Wow! I cannot believe it has been 14 months since I last posted about Transfer. One would think that this was a result of me not using Transfer, which is actually not the case. I've been using it for nearly a year-and-a-half now, but I've been so busy with other things that I just haven't found the time to really dig into it the way that I want (need?) to. Well, diggin' time has arrived. 25 Jun 18:47 Books That Changed My Life Cool list of books to read. | | | |