Community Member Profile

Recent Blog Comments By Tim Brown

• Paginating Record Sets In ColdFusion With One SQL Server Call

  Posted on Mar 5, 2012 at 4:56 PM

  I know this post is old, but you always seem to have a post for whatever my question may be so I wanted to say thanks a lot. One issue I ran into with this approach was that the insert into the @id table variable was that it wasn't respecting any order by clauses inside the insert sub query. <... read more »

• Learning ColdFusion 9: ArrayFind() And ArrayContains() For Searching Arrays

  Posted on Feb 6, 2012 at 5:12 PM

  @Ben - I was curious about using a combination of arrayFind() and other validation approaches to validate incoming arguments for an API. What I'm looking for is a way to validate an incoming array of structures where each structure in the array conforms to my schema. For Example:

  read more »

• Ask Ben: Hiding / Encrypting ColdFusion CFID And CFTOKEN Values

  Posted on Dec 15, 2010 at 2:35 PM

  I tested it using your example as a model and was able to hijack a valid session. Once again this is based on the assumption that a user can (possibly) guess (using UUID for tokens as @carehart said makes this more difficult, but still possible ) and/or obtain your secret value in the cookie.ID t... read more »

• Ask Ben: Hiding / Encrypting ColdFusion CFID And CFTOKEN Values

  Posted on Dec 15, 2010 at 2:02 PM

  Great post Ben. I have been struggling with this for quite sometime. I disagree that jsessionID is secure. In testing my application I have chrome open and log in as an admin and have firefox open and log in as a limited admin. Go into the content settings of Chrome view the cookies that ha... read more »

• Learning ColdFusion 8: Javascript Object Notation (JSON) Part II - Remote Method Calls

  Posted on Sep 20, 2010 at 3:15 PM

  Love your site Ben. It' open all day everyday in my browser referencing your examples! A little gotcha I'm trying to find a solution to is if there is any way to get CF to return the data for Date fields in a format such as Date(1254891982000) instead of "October, 11 2010 00:00:00", for ex... read more »

• CorMVC - My jQuery-Powered Model-View-Controller (MVC) Framework

  Posted on Aug 7, 2010 at 10:41 AM

  @Ben Awesome work here. This looks like a real lifesaver. How would you recommend implementing a login for an administrative area. I have an existing site that I would like to make a back end for. Do I simply create the default route "/" to be the login view if not logged in else show them t... read more »