Thoughts from the mountains

I've always wanted to use ColdFISH as a code syntax highlighter in Mango Blog after viewing other blogs running on BlogCFC. When I noticed Jason Delmore's post announcing ColdFISH 3.1 I inquired about a Mango Blog plugin. With some help from Jason, I was able to put together my first Mango Blog plugin, ColdFISH for Mango Blog.

For some time I have wanted to update the image upload system I have on my photography website. I made it years ago and it only allowed me to upload a single image at a time. For each image the system would upload the file, make a thumbnail, allow me to classify the image and then write the data to the database. Each time I would add a new gallery I would go through this process for each image as well as incrementing a shot number in the description field for each image. Obviously, there was room for improvement as well a the possibility of saving time each time I wanted to upload a new gallery.

I noticed a strange behavior with ColdFusion 9 and maybe earlier versions where using the validate attribute set to numeric will not show an error with a $ in the input. All three validations, onBlur, onSubmit, and onServer allow a input value to contain a $ in the text field. Is this by design and am I misunderstanding something? I tested the same thing in Railo 3.1 and the validation showed an error when I submitted a $ sign in the input. I did learn that Railo does not allow for the validateAt attribut with the input tag and defaults to onSubmit validation, but the validate="numeric" did properly work when submitting the form. A bug?

For a site that falls under PCI compliance scans you will need to have session cookies that have the httpOnly attribute set. With the release of the ColdFusion 9.0.1 release it is now much easier to have your session cookies to contain the httpOnly attribute.

When the ColdFusion 9.0.1 upgrade was released, I noticed a few blog and forum posts mentioning issues. I also noticed many people reporting no problems at all, so I decided to wait for a little while. It seems that the comments and talked died down over the last week so I decided to take the plunge today. The new feature of setting cfid, cftoken, and jsessionid as httponly is something I need so, that pushed me to take a chance.