Tom Chiverton

Recent Blog Comments By Tom Chiverton

• Winners Of My 1,000th ColdFusion Post

  Posted on Jan 26, 2009 at 10:14 AM

  Thank you very much Ben ! I'll let you know what it ends up being...... read more »

• My 1,000th ColdFusion Post - What It Means To Me (And Free Prizes)

  Posted on Jan 23, 2009 at 11:05 AM

  I like ColdFusion *THIS* much (insert huge expansive hand gesture) !... read more »

• Ask Ben: Securely Pinging One ColdFusion Application From Another

  Posted on Jan 19, 2009 at 4:21 AM

  @Jason: Aye, there are additional steps. There are, for instance, a depressing number of DNS servers vunerable to the Kamisnky bug or unpatched Cisco kit though... As others mention, everything boils down to key exchange...... read more »

• Ask Ben: Securely Pinging One ColdFusion Application From Another

  Posted on Jan 16, 2009 at 11:24 AM

  @Jason Dean: "SSL will simply prevent the traffic from being sniffed" SSL does not do this. Performing a MIM attack against SSL traffic is fairly trivial - the WebScarab Java program does this in a point-n-drool cross platform GUI, for instance. You'd need to activly check certificate hashes to prev... read more »

• OOPhoto: Adding A Facade Layer

  Posted on Sep 11, 2008 at 10:52 AM

  What happens (in the future) when the services behind the facade call each other ? You wouldn't want each one to have to run a SELECT statement.... read more »

• OOPhoto: Adding A Facade Layer

  Posted on Sep 11, 2008 at 9:53 AM

  If you don't use VO, you have to update the signature of every single method that uses the object to have the extra fields, even if that method doesn't need the new field.... read more »

• OOPhoto: Adding A Facade Layer

  Posted on Sep 11, 2008 at 9:20 AM

  I suppose I'd do it by making a VO to insulate myself from any future changes, or just out of habit :-)... read more »

• OOPhoto: Adding A Facade Layer

  Posted on Sep 11, 2008 at 8:42 AM

  The form's action page would transform the form fields into a VO and invoke the service.... read more »

• OOPhoto: Adding A Facade Layer

  Posted on Sep 11, 2008 at 5:10 AM

  Not VTO - VO (or TO). I use 'VO' to stop people being confused with something Transfer (the project) specific. I agree there might be little immediate benefit to using VO right now. But if you image a Photo facade, it might have generic 'delete()' methods, and a User facade would also have a 'delete... read more »

• OOPhoto: Adding A Facade Layer

  Posted on Sep 10, 2008 at 11:16 AM

  Just an object which only has properties. In ColdFusion, this is easiest to think of as a CFC with CFPROPERTY tags. If you send and receive only VOs to and from the Facade, there is no way you can send a string to a number property or similar. It also defines exactly what it is you are sending (whe... read more »

• OOPhoto: Adding A Facade Layer

  Posted on Sep 10, 2008 at 10:32 AM

  Seems sensible enough, and grouping into 'chunks' that handle the same sort of stuff is good separation of concerns. Why did you choose to use simple lists of primitive types rather than a strongly typed Value (Transfer) Object ?... read more »

• OOPhoto: Been A Bit Stumped Lately With The Next Step

  Posted on Sep 10, 2008 at 8:31 AM

  Hi Ben: 'but are we starting to think about "Decorators" '. I wasn't, but I could mention 'Aspects' - as in Aspect Orinated Programming, as in AOP, as in ColdSpring. Does what you think it does 'providing additional aspects of processing'. There is an example here : http://www.rachaelandtom.info/bu... read more »

• OOPhoto: Been A Bit Stumped Lately With The Next Step

  Posted on Sep 10, 2008 at 7:56 AM

  Yes the Facade and Service layers do tend to have the same public interface - but the Facade might care about things like security and exception reporting that the Service layer does not.... read more »

• Tracking Data Audits In ColdFusion

  Posted on Jun 25, 2008 at 11:27 AM

  @David Stamm Yeah - the errors that percolate back up are often fairly generic and unhelpful. That said, the GUI shouldn't be letting those invalid values through anyway so it only really occured during testing.... read more »

• Tracking Data Audits In ColdFusion

  Posted on Jun 25, 2008 at 11:01 AM

  " trigger method would be extremely fast, but now you're tied to that particular db engine " Your particular SQL to create the trigger might be, but it's easy enough to rewrite for another engine. The actual table made by the trigger is of course perfectly portable.... read more »

• Tracking Data Audits In ColdFusion

  Posted on Jun 25, 2008 at 10:46 AM

  "storing only what changed since the last update, not all the data" It depends what your use case for the audit trail is. Storing the while row each times makes figuring out 'what was the record at date X' quick, where as only storing what changed makes 'what changed last' quicker.... read more »

• Tracking Data Audits In ColdFusion

  Posted on Jun 25, 2008 at 10:35 AM

  You really should read up on triggers, esp. if there is any chance ever that something or someone other than your code will ever alter the database. It's the default answer to this problem. Even if there is no chance, what if you update the table from more than one place (yeah, bad practise, but may... read more »

• Strange URL Hash Problem With CFLocation In IE6

  Posted on Mar 19, 2008 at 12:43 PM

  @Ben Wireshark is dead easy, works on Linux and Windows. Probably Macs for all I know. Other people swear by Charles (which hijacks the Windows proxy settings automatically) or Fiddler.... read more »

• Strange URL Hash Problem With CFLocation In IE6

  Posted on Mar 19, 2008 at 12:13 PM

  @Ben Could you sniff the HTTP traffic, and verify CF is sending the exact same request to both browsers when you use cflocation ?... read more »

• Strange URL Hash Problem With CFLocation In IE6

  Posted on Mar 19, 2008 at 10:46 AM

  @Ben VmWare is free, but of course means a whole seperate Windows install just for IE6.... read more »