Join Central Alabama ColdFusion User Group - cacfug.org

Home Employment Why ColdFusion? Demonstrations Archives Tips Other Groups Local Sites

Be Productive. Central Alabama ColdFusion User Group logo Adobe User Group logo ColdFusion logo Macromedia logo Allaire logo
Ask questions - Come to a meeting
  • Help ColdFusion developers share, learn, hone, and practice their craft.
  • Promote ColdFusion - the language of innovation - as a key to agile business.

4 February 2010 Meeting

Risk!

Just because you can imagine it doesn't mean you should do it. We'll explore business forms, the Payment Card Industry (PCI) Data Security Standard (DSS), and some Open Web Application Security Project (OWASP) cautions.

Business Forms

How do you know that an individual who comes to your site is authorized to represent a business? How do you know that the business exists? How do you gain a sense of how reliable the business is? How do you satisfy a purchase order? We'll review Internet-capable versions of answers to these questions normally handled through paper forms or personal interaction.

PCI DSS

Cheap, shared hosts are fine for some purposes, but when you start accepting credit cards, support requirements increase dramatically. You can dodge some of this by having the payment gateway accept the card information directly from the customer, but whatever path you take has an impact on the user experience.

OWASP

The OWASP top 10 critical risks should be required reading for every developer. They change periodically based on impact and on real-world exploitation. A real eye-opener since 2007 is cross-site request forgery (CSRF). Any site your customer browses while his session at your site is still active can pretend to be your customer and will be able to use your customer's credentials (cookies, etc) to do it.

7 January 2010 Meeting

IDEs

It's time to stop relying on Wordpad and nimble fingers. Here are IDEs we reviewed:

Disk Space

For Marty, the toughest part was moving 45 Gigabytes of family photos to external storage to make room for an IDE.

3 December 2009 Meeting

Finished Business: Jrun

Marty reports that Jrun behaves better on Vista if you tell it to run in compatibility mode for Windows XP! It uses one-half to one-third as much memory as it did before the change.

Activity: Conversion to ColdFusion 8

First, make it work. That was the order of business today: quickly check applications on hand to see how many run under CF8 without changes.

More Activity...

Looking for previous meetings? Looking for pictures of CFUnited Express/Atlanta - 15 March 2007? They're in the Archives.

Meetings

Group Managers
=Marty= (R Martin Ladner) is a Certified ColdFusion Developer whose weekly series "ColdFusion in Context" was published for two years by "CFTipsPlus.com". See his tips demonstrated at http://futureEC.com/context. Reach him at 334 294-8990 or martin.ladner@knology.net Don Gilliland is a Certified ColdFusion Developer who reads voraciously, continually seeks increased productivity in design and development, is fluent in several Web languages, and supervises Web-based solutions for Faulkner University in Montgomery, Alabama. Reach him at dgillilandjr@hotmail.com
Home Employment Why ColdFusion? Demonstrations Archives Tips Other Groups Local Sites