Have code that should only ever be executed locally by the server itself (and not be client requests)? You can protect these pages by simple enclosing all the code within a statement like this: ... . (Applies to: ColdFusion All)
Within a block all variables and expressions are parsed and evaluated. True? Actually, no, not exactly. This only occurs if the expressions are in the same file, but if a is used inside of a block, that is not honored within the included code, and a separate will be needed within the included file....
The new Verity search engine (included with CF5) can safely index XML data - intelligently parsing the data from tags. For files to be indexed as XML data (instead of as straight text) the files must have a .xml extension. (Applies to: ColdFusion 5)
Have a containing an unreadable legend? The problem is likely the length of one or more of the legend descriptions. Shorten the text and the legend will be resized dynamically so as to better display the content. (Applies to: ColdFusion 5)
can generate graphs as Flash movies - the benefits of which are the small load size as well as the interactivity. The generated Flash content is Flash version 3 so as to be compatible with all Flash players from version 3 on (in other words, just about every copy out there). (Applies to: ColdFusion...
is used to perform servers-side HTTP requests - allowing you to retrieve HTTP content programmatically within your CFML code. If the content being retrieved is a Web page then it will likely contain links and other URL's, and these will often use relative paths which will not be useable within your...
Writing code? It should be well commented (like all your code) but not with HTML style comments. There are two ways to mark comments in - a single comment line should be preceded by //, multiple lines (well, single lines too if you are so inclined) should be enclosed within /* and */. (Applies to:...
can be used to process files uploaded via HTML forms. By default any and all uploaded files are accepted, and for security reasons this default behavior should never be used. Instead, use the ACCEPT attribute to specify the MIME types that will be accepted when uploaded. (Applies to: ColdFusion All)
Using to access an FTP server that is responding slowly? Make sure to raise the TIMEOUT value in the tag - the default is 30 seconds. (Applies to: ColdFusion All)
Extending ColdFusion with Java? Remember that unlike CFML, Java is case-sensitive - myMethod() is not the same as MyMethod(). Use the wrong case and you'll either throw an error, or invoke the wrong code. (Applies to: ColdFusion 4.5 or later)