Pete Freitag's Homepage

Recent Blog Entries...

J2EE Session Cookies on ColdFusion / JRun

20 hours ago

As you are probably aware ColdFusion allows you to use the integrated J2EE sessions that are provided as part of the J2EE server (by enabling the Use J2EE session variables setting in ColdFusion Administrator)....

Hands on ColdFusion Security Training

4 days ago

One of the best ways to really learn about something, is to roll up your sleeves, get your hands dirty. This is especially true for learning about security, it can be difficult to fully understand how attacks work by just reading about it....

ColdFusion 9 Solr Vulnerability - Are you at Risk?

10 days ago

Adobe just released a security bulletin APSB10-04 for ColdFusion 9. If you have the Solr Search Service running on a ColdFusion 9 server it binds the Solr Web Service to port 8983 on all IP addresses....

FCKEditor Year 2010 Bug for Firefox 3.6

18 days ago

If you are having problems using FCKeditor on Firefox 3.6, it's due to a, lets call it a Year 2010 bug. You will see a textarea instead of the editor. This probably only exists in the ColdFusion version, I haven't checked the other versions......

jQuery UI Sortable Tutorial

32 days ago

Here's a simple tutorial showing how to use jQuery UI's sortable plugin to update a database table's sort order field on the fly using ajax....

CFLogin Security Considerations

60 days ago

If you use the cflogin tag to manage authentication you should consider setting loginstorage="session" in your Application.cfc or Application.cfm file for better security....

Use varchar(max) instead of text in SQL Server

61 days ago

As you may know on SQL Server a varchar column can hold up to 8000 characters (each row can hold up to 8K, so it depends on the size of other columns), when you need to store more it is common to use the text or ntext datatypes....

ColdFusion SOAP Web Services and onRequestStart

81 days ago

I knew there are some issues with using onRequest in your Application.cfc and web services, but I didn't think there were any issues with onRequestStart and ColdFusion 8 SOAP web services....