Being built in the spirit of Ruby on Rails, ColdFusion on Wheels is very promising.

As posted to Slashdot today, the source code for an algorithm has been posted that promises to find MD5 collisions, making it even more important to add some salt to any use of hash().

Two posts back to back about the same SDCFUG meeting? Yes! In addition to talking about Lazlo and WebOrb, Charlie Arehart will be giving us an update on integrating .NET with CFML on BlueDragon. This is a welcome and timely update for our group as several of our SDCFUG members work in shops where both .NET and ColdFusion are used side by side, with varied levels of success.

This week at SDCFUG, Charlie Arehart will be presenting Lazlo and WebOrb, which provide functionality similar to Flex and Flash Remoting, respectively. If you are in the San Diego area this Wednesday, I would strongly suggest checking the presentations out!

Occasionally, when dealing with a CFMX cluster you are unsure of which instance or even what machine is really executing the code you are running. In these cases, the following codebit can be a lifesaver to discover where your code's really running. Hat tip to Pete Keleher for the instance code.

I just noted today that the login screen for CFMX 6 and 7 includes a version number and patch level. Using this information an attacker can readily identify unpatched machines which are ripe for attack. This is yet another reason to protect your entire CFIDE directory from prying eyes, and perhaps it would be a good idea for Macromedia to remove this information from the administrator login screen in future versions.

I was participating in a thread today on the ACFUG email list and something occurred to me about many developer's mental quest to develop the "Perfect Application". The thread was about the use of "SELECT *" in SQL code and debated the real performance cost or gain from using or not using "SELECT *". Lots of people had opinions, and in the end a semi-consensus was reached that while it was important to consider the implications of using "SELECT *", there are plenty of scenarios where it doesn't really matter. So many development questions are answered with "it depends". On the CFCDev list, I see so much "it depends" that I can predict the contents of some replies before even opening them. If I only had a nickel... But "it depends" isn't satisfying! A frequent lifecycle of a CF developer begins with a budding newbie roaming email lists and websites seeking "rules of thumb" and dutifully collecting them, jotting them down and attempting to "follow all the rules". They may learn that "SELECT * is evil", that "stored procedures are better for performance", or that slightly different syntax in an if statement results in some virtually unperceivable performance gain. As your bag of tricks grows, you mentally start to build the Perfect Application in your head. You think that if only you could implement all the things you've learned in one application it would be Perfect! It would be speedy and sexy and would finally prove you've arrived as a seasoned developer! As you continue to grow as a CF developer you realize that this list is not, in fact, the guide to the Perfect Application. You learn that while using Stored Procedures can speed up code, it can also increase development time and make the code less portable. That your tweaked if() statements are confusing to other developers on your team and slow development down. One by one each Rule of Thumb from your collection is slowly disassembled as you learn that there are very few actual Rules of Thumb. Perhaps along the way you discover Design Patterns and add them to your list, only to find out that they too have exceptions. In the end you realize that there is no such thing as the Perfect Application. Every rule has it's exceptions, and everything has a time and place. The makings of a great developer include not only knowledge of the tricks from your former Rule of Thumb list, but when NOT to use them.

Earn a 40% off voucher - Macromedia is looking for participants to take the ColdFusion MX 7 Developer Beta exam. Anyone who is selected will receive a 40% off voucher to take the final exam when published. To apply, visit - http://www.donathgroup.com/macromedia/candidate/.

Additional News on Certification!

Macromedia Certified Professional Upgrade Discount Get certified for less-all Macromedia Certified Professionals are eligible for a 25% discount when upgrading their certification. To receive this discount, contact a Pearson VUE representative(www.vue.com/macromedia) or email mmcp@macromedia.com.

For anyone who missed Phil Cruz's presentation to the San Diego ColdFusion User Group in January, you can catch up by reading his 3 part series about it in the CFDJ and by checking out the FAQ and email list on his CFEverywhere page.

As already noted on a couple of other blogs CFMX 7 was released today. Woohoo!