<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0">
   <channel>
      <title>Tom Mollerus&apos; Weblog</title>
      <link>http://www.mollerus.net/tom/blog/</link>
      <description>Web Security, Usability, CSS/XHTML, ColdFusion, and PHP</description>
      <language>en</language>
      <copyright>Copyright 2008</copyright>
      <lastBuildDate>Mon, 21 Jul 2008 08:56:37 -0500</lastBuildDate>
      <generator>http://www.sixapart.com/movabletype/</generator>
      <docs>http://blogs.law.harvard.edu/tech/rss</docs> 

      
      <item>
         <title>Always use server-side data validation</title>
         <description><![CDATA[<p>I've just come back from an <a href="http://www.paperthin.com/products/index.cfm">CommonSpot</a> Advanced Developer's Training class, where some people expressed the thought that server-side validation wasn't required as long as you have sufficient client-side validation through JavaScript.  Then this morning I read Mark Kruger's excellent (if rather unfortunate) example of <a href="http://www.coldfusionmuse.com/index.cfm/2008/7/18/Injection-Using-CAST-And-ASCII">why you should always implement server-side data validation</a> in your applications. Always remember that users, whether friendly or malicious, can submit anything they please via form submissions, URL query strings, or even cookies.</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/07/always_use_serverside_data_validation.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/07/always_use_serverside_data_validation.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">Databases/SQL Code</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Security</category>
        
        
         <pubDate>Mon, 21 Jul 2008 08:56:37 -0500</pubDate>
      </item>
      
      <item>
         <title>Boston CFUG meeting tonight at Adobe&apos;s offices</title>
         <description><![CDATA[<p>For those of you in the Boston area, you'll really enjoy the <a href="http://www.bostoncfug.org/index.cfm">Boston ColdFusion User Group's</a> meeting tonight at Adobe's offices in Newton. Luis Majano will be presenting his ColdBox framework-- it's a great, easy way to get introduced to OOP programming. Make sure to come!</p>

<p><a href="http://www.bostoncfug.org/index.cfm?event=showMeeting&meetingID=CA04FA80-D61B-FA8C-8A343B03A53B5745" title="View the details of the Boston CFUG meeting where Luis Majano will discuss his ColdBox framework">http://www.bostoncfug.org/index.cfm?event=showMeeting&meetingID=CA04FA80-D61B-FA8C-8A343B03A53B5745</a></p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/07/boston_cfug_meeting_tonight_at_adobes_offices.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/07/boston_cfug_meeting_tonight_at_adobes_offices.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">ColdFusion</category>
        
        
         <pubDate>Wed, 16 Jul 2008 09:15:56 -0500</pubDate>
      </item>
      
      <item>
         <title>I&apos;m now a co-manager of the Boston CFUG</title>
         <description><![CDATA[<p>I'm pleased to say that Brian Rinaldi recently offered for me to be his co-manager for the <a href="http://www.bostoncfug.org/index.cfm">Boston Coldfusion User Group</a>, and I happily (and immediately) accepted. I'll be helping Brian with some of the management activities that he's always wanted to do but hasn't had time for, and I hope that it gives me the chance to meet more people in the community and to spread the word about ColdFusion to new users who are interested in seeing what it's about.</p>

<p>For those of you in the Boston area, we'd love to see you at the meetings. We've got some <a href="http://www.bostoncfug.org/index.cfm?event=showMeetings">great ones lined up</a> in the near future!</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/07/im_now_a_comanager_of_the_boston_cfug.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/07/im_now_a_comanager_of_the_boston_cfug.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">ColdFusion</category>
        
        
         <pubDate>Wed, 02 Jul 2008 10:54:22 -0500</pubDate>
      </item>
      
      <item>
         <title>Adobe MAX 2008 has an interactive background</title>
         <description><![CDATA[<p>I visited the <a href="http://max.adobe.com/na/experience/#?s=0&p=0">Adobe MAX 2008 site</a> after reading <a href="http://www.forta.com/blog/index.cfm/2008/6/30/Ray-Camden-To-Lead-MAX-CF-Unconference">Ben Forta's blog post about the ColdFusion "unconference"</a> behind held during MAX.</p>

<p>After noticing a little animation in the very-grayed-out background, I clicked to see if anything would happen. It turns out that there are three adjacent mini-worlds, each with its own short puzzle for you to solve, which lead to one easter egg apiece. They're pretty fun. Follow the link above to MAX if you want to see for yourself, or read more if you want to know the easter eggs that I found.</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/06/adobe_max_2008_has_an_interactive_background.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/06/adobe_max_2008_has_an_interactive_background.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">ColdFusion</category>
        
        
         <pubDate>Mon, 30 Jun 2008 22:24:29 -0500</pubDate>
      </item>
      
      <item>
         <title>Getting Windows applications into your MacOSX dock</title>
         <description><![CDATA[<p>I just discovered a neat little trick with VMWare on my MacBook Pro. I  still need to QA against IE/Win, and I still love using Homesite+. Up until now, to use either of them I've launched VMWare, launched those programs, then switched to Unity mode. The next day, I would have to do the same thing all over again.  But with less than 5 minutes of work, you can get your favorite old Windows apps to appear on and launch from the Dock.  It works like this: if you switch your Windows VM to "Unity" mode so that the applications you have open appear each in their own window, their icons will appear on the right side of the Dock (note the Windows Remote Desktop and Firefox icons):</p>

<p><span class="mt-enclosure mt-enclosure-image"><img alt="temporary-doc-icons.jpg" src="http://www.mollerus.net/tom/blog/images/temporary-doc-icons.jpg" width="240" height="56" class="mt-image-center" style="text-align: center; display: block; margin: 0 auto 20px;"/></span></p>

<p>Now if you click-and-drag those icons from the right side of the Dock to the left side, they'll stay there permanently (note the Internet Explorer and Homesite+ icons):</p>

<p><span class="mt-enclosure mt-enclosure-image"><img alt="permanent-dock-icons.jpg" src="http://www.mollerus.net/tom/blog/images/permanent-dock-icons.jpg" width="262" height="57" class="mt-image-center" style="text-align: center; display: block; margin: 0 auto 20px;"/></span></p>

<p>And whenever you click on these icons, VMWare will start up and bring up the application for you-- in Unity mode! It's just like... no, it really <em>is</em> having your favorite Windows apps available to you just like any other MacOS app. Awesomeness, no extra charge.</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/06/getting_windows_applications_into_your_macosx_dock.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/06/getting_windows_applications_into_your_macosx_dock.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">Office Life</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Web Development</category>
        
        
         <pubDate>Wed, 11 Jun 2008 17:15:31 -0500</pubDate>
      </item>
      
      <item>
         <title>Open letter to Hillary Clinton</title>
         <description><![CDATA[<p><em>Dear Hillary,</em></p>

<p><em>In your speech after the South Dakota primary tonight you asked for suggestions from the public on what to do about your campaign. Here is my response to your call for advice.</p>

<p>Tonight, you chose not to confirm Senator Obama's clear victory in amassing the delegates needed to claim the Democratic nomination, and in doing so you withheld support from him when he could have used it the most.</p>

<p>You insulted the American public by not acknowledging his historic victory when he became the first minority nominee. You chose to sacrifice the strength of the Democratic Party in order to guard your pride and your political leverage. If you continue to do so, you will only damage and diminish your own reputation.</em></p>

<p><em>Suspend your campaign.</em></p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/06/open_letter_to_hillary_clinton.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/06/open_letter_to_hillary_clinton.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">Life</category>
        
        
         <pubDate>Tue, 03 Jun 2008 23:37:55 -0500</pubDate>
      </item>
      
      <item>
         <title>Boston CFUG Subversion presentation follow-up</title>
         <description><![CDATA[<p>Thanks to everyone who attended tonight's <a href="http://www.bostoncfug.org/index.cfm?event=showMeeting&meetingID=CDD54882-D61B-FA8C-80CA554D0D405245">Boston CFUG presentation on using Subversion</a>. If I can help anyone get set up with the server or a client, just <a href="http://www.mollerus.net/tom/contact/">let me know</a>.</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/05/boston_cfug_subversion_presentation_followup.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/05/boston_cfug_subversion_presentation_followup.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">Code Building\Versioning</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Web Development</category>
        
        
         <pubDate>Tue, 27 May 2008 23:08:34 -0500</pubDate>
      </item>
      
      <item>
         <title>So, you think there&apos;s no worthy Subversion client for the Mac?</title>
         <description><![CDATA[<p>Wow. Between a <a href="http://www.mollerus.net/tom/blog/2008/04/new_job_today.html">new job with Ping Identity</a> and attending the <a href="http://www.cfobjective.com/">cf.Objective() conference</a>, it's been at least 3 weeks since my last posting. Well, one of the things I learned at the conference came after asking a presenter for his opinion on whether there was <em>any</em> Subversion client for Macintosh that was worth using. The Finder plugin is a great idea, since it's like TortoiseSVN, but it's not full-featured and doesn't always show status overlays correctly; and other clients keep views of working folders and repositories in separate windows. Finally, other clients don't have a built-in diff program. The presenter didn't think that any Mac client was worth using either.</p>

<p>But someone from the end of my row in the audience told me to speak to him after the session was over, and he told me about <a href="http://www.syncrosvnclient.com/">Syncro SVN</a>. It has everything you could want in a client-- an integrated view of your repositories, working directories, a great diff viewer, and session log. Plus, it has all of the features you might want, such as the ability to relocate working directories between repositories. If you're not satisfied with other Subversion clients on the Macintosh, I'd suggest you give Syncro SVN a look.</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/05/so_you_think_theres_no_worthy_subversion_client_fo.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/05/so_you_think_theres_no_worthy_subversion_client_fo.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">Code Building\Versioning</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Web Development</category>
        
        
         <pubDate>Fri, 16 May 2008 19:51:23 -0500</pubDate>
      </item>
      
      <item>
         <title>New job today</title>
         <description><![CDATA[<p>I'm in a new position today, as Senior Web Developer at the <a href="http://www.pingidentity.com">leading secure single sign-on provider, PingIdentity.</a> They've set me up with a sweet 30" Macintosh HD screen, plus a nice, light MacBook Pro. The fridge is even stocked with Cokes.  I think I may just sleep here.</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/04/new_job_today.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/04/new_job_today.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">Life</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Office Life</category>
        
        
         <pubDate>Wed, 23 Apr 2008 16:40:50 -0500</pubDate>
      </item>
      
      <item>
         <title>You know, I don&apos;t mind this web ad-- I love it</title>
         <description><![CDATA[<p>While browsing the web tonight my wife came across what is the first enjoyable advertisement I've ever seen on the web (those fun Orbitz games don't count-- while I like to play with the baseball or putt-putt golf widgets, I didn't like the ads themselves). And the great thing about it is that it's more than just an interactive game and more than a running commercial-- it's an entertaining combination of both, almost like an example of that semi-mythical idea of "interactive TV" that pundits have written about for the last decade.</p>

<p>On <a href="http://www.hgtv.com">HGTV</a>'s web site, a Flash ad showed up for Sears showing a static picture of some guy dressed up as a dandelion. Beneath him there's a button requesting that you "Roll over the weed". If you do, that's when the commercial gets hilarious.</p>

<span class="mt-enclosure mt-enclosure-image"><img alt="sears-no-audio.jpg" src="http://www.mollerus.net/tom/blog/images/sears-no-audio.jpg" width="280" height="203" class="mt-image-center" style="text-align: center; display: block; margin: 0 auto 20px;"/></span>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/04/you_know_i_dont_mind_this_web_ad_i_love_it.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/04/you_know_i_dont_mind_this_web_ad_i_love_it.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">Humor</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Web Marketing</category>
        
        
         <pubDate>Mon, 21 Apr 2008 22:04:32 -0500</pubDate>
      </item>
      
      <item>
         <title>Unit testing (and beers) with the Boston CFUG</title>
         <description><![CDATA[<p>If you're in the Boston area and didn't make it to the <a href="http://www.bostoncfug.org/index.cfm">ColdFusion User's Group</a> meeting tonight on <a href="http://www.bostoncfug.org/index.cfm?event=showMeeting&meetingID=ADD6C48A-D61B-FA8C-87C331C527E86067">unit testing with MXUnit</a>, you missed a good time. Marc Esher and Bill Shelton gave us an intro to unit testing, and a few of us went out afterwards to <a href="http://dunngaherins.com/">Dunn-Gaherin's</a> to toss a few back with our visiting ColdFusion evangelist, Adam Lehman. Adam kindly said a few words about Adobe's current efforts with CF, and also raffled off a copy of ColdFusion Server.</p>

<p>Be sure to make it to the next meeting, when yours truly will be presenting on version-tracking your code with Subversion.  I'll be raffling off a free copy of Subversion.  ;)</p>

<p><em>P.S. So that no one misses the joke, then shows up expecting a chance at free software and gets angry at me: I'm kidding. Subversion is already a free download.</em></p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/04/beers_with_the_boston_cfug.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/04/beers_with_the_boston_cfug.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">ColdFusion</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Office Life</category>
        
        
         <pubDate>Tue, 15 Apr 2008 22:26:22 -0500</pubDate>
      </item>
      
      <item>
         <title>Spam/RBL lookup added to EmailParse.CFC</title>
         <description><![CDATA[<p>I made yet another update to EmailParse.CFC last week while I was <a href="http://www.mollerus.net/tom/blog/2008/04/updates_to_emailparsecfc_quotedprintable_parsing_a.html">working in the code for other reasons</a>: I've added spam lookup on the sender's IP address courtesy of SpamHaus.org.</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/04/rbllookup_added_to_emailparsecfc.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/04/rbllookup_added_to_emailparsecfc.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">ColdFusion</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Web Development</category>
        
        
         <pubDate>Mon, 14 Apr 2008 11:25:28 -0500</pubDate>
      </item>
      
      <item>
         <title>Updates to EmailParse.CFC: Quoted-printable parsing and Received header</title>
         <description><![CDATA[<p>I've posted an update and a fix to my EmailParse.CFC today:

<ul>
     <li>The quoted-printable parsing for text and html body parts has been corrected.  When you use EmailParse.CFC to forward an email, you can't tell CF that a mailpart is encoded with quoted-printable or Base-64. So, these mailparts need to be converted back to text in order to forward them correctly.<br /><br /></li>
     <li>The parsing mechanism has been updated so that the values of the "Received" header, which often is often repeated several times in one email head, are aggregated in one property of the component. Previously, each instance of the Received header would overwrite the previous one, leaving only the last one for you to work with once the parsing was done.</li>
</ul>
</p>

<p>You can read more about my email-parsing code for ColdFusion in the <a href="http://www.mollerus.net/tom/projects/emailParseCFC/">EmailParse.CFC Project area.</a></p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/04/updates_to_emailparsecfc_quotedprintable_parsing_a.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/04/updates_to_emailparsecfc_quotedprintable_parsing_a.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">ColdFusion</category>
        
          <category domain="http://www.sixapart.com/ns/types#category">Email Marketing</category>
        
        
         <pubDate>Fri, 11 Apr 2008 12:04:22 -0500</pubDate>
      </item>
      
      <item>
         <title>How to upgrade to CF 8.0.1 on Linux</title>
         <description><![CDATA[<p>In my previous post, I <a href="http://www.mollerus.net/tom/blog/2008/04/problems_with_cf8_updater_for_linux.html">wrote about the trouble I had</a> trying to install the <a href="http://www.adobe.com/support/coldfusion/downloads_updates.html#cf8">CF 8.0.1 Updater for Linux</a>.  Thanks to a few good tips from Brian and Todd, I now know how to install the Updater without a problem-- but I think that I might as well post the solution since Adobe doesn't seem to realize that it may not be obvious to everyone.</p>

<p>Because the Updater has a .zip extension, I took it for a zip file. Without <em>any</em> other direction from Adobe, that seems like a reasonable course of action to me. But when you try to unzip the updater, you get errors. The solution is pretty simple: just download the updater file, change its extension from .sh to .bin, make it executable, and then call it directly:</p>

<pre><code>
# wget http://download.macromedia.com/pub/coldfusion/updates/801/coldfusion-801-lin_updater.zip
# mv coldfusion-801-lin_updater.zip coldfusion-801-lin_updater.bin
# chmod 755 coldfusion-801-lin_updater.bin
# ./coldfusion-801-lin_updater.bin
</code></pre>

<p>That will start the Updater quite nicely. Oh, and one other thing-- when the Updater finished and I went to view my site, I got a 500 error from the webserver.  A simple stop-and-start of the coldfusion_8 service did the trick:</p>

<pre><code>
# service coldfusion_8 stop
Stopping ColdFusion 8, please wait
Stopping coldfusion server..stopped
ColdFusion 8 has been stopped
# service coldfusion_8 start
Starting ColdFusion 8...
The ColdFusion 8 server is starting up and will be available shortly.
======================================================================
ColdFusion 8 has been started.
ColdFusion 8 will write logs to /opt/coldfusion8/logs/cfserver.log
======================================================================
#
</code></pre>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/04/how_to_upgrade_to_cf_801_on_linux.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/04/how_to_upgrade_to_cf_801_on_linux.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">ColdFusion</category>
        
        
         <pubDate>Mon, 07 Apr 2008 10:38:05 -0500</pubDate>
      </item>
      
      <item>
         <title>Problems with CF8 Updater for Linux?</title>
         <description><![CDATA[<p>I've written in to Adobe Support about it, but I want to know if anyone else has experienced the same problem that I have with the <a href="http://www.adobe.com/support/coldfusion/downloads_updates.html#cf8">ColdFusion 8 Updater</a>.  Whenever I download the Linux version of the Updater and try to unzip it, I see the following issue:</p>

<pre><code>
[root@elmcedar src]# unzip coldfusion-801-lin_updater.zip
Archive:  coldfusion-801-lin_updater.zip
warning [coldfusion-801-lin_updater.zip]:  69730304 extra bytes at beginning or within zipfile
  (attempting to process anyway)
 extracting: Z_/installers/LiveCycleDataservice/flex-for-cf.zip  
 extracting: Z_/installers/JNBridge/JNBridge.jar  
   ...
</code>
</pre>

<p>When I download the same file to a Windows machine, I'm told that the archive is corrupt and I don't see any files. Has anyone else experienced a similar problem, or has anyone else successfully unzipped and installed the Updater for Linux?</p>]]></description>
         <link>http://www.mollerus.net/tom/blog/2008/04/problems_with_cf8_updater_for_linux.html</link>
         <guid>http://www.mollerus.net/tom/blog/2008/04/problems_with_cf8_updater_for_linux.html</guid>
        
          <category domain="http://www.sixapart.com/ns/types#category">ColdFusion</category>
        
        
         <pubDate>Fri, 04 Apr 2008 17:15:56 -0500</pubDate>
      </item>
      
   </channel>
</rss>
