CTO @sunstarmedia. Web applications developer (since '97) with a focus on ColdFusion/CFML, MSSQL & security/anti-abuse. Occasional blogger.

Joined January 2009
1,086 Photos and videos
ClaudeBot aggressively spidered an old website of mine with ~650k requests from the same IP in a less than 48 hours. I don't want to block AI, but I don't want to be abused by it either. Here's my new "1 minute per page" rule. #rateLImited User-agent: ClaudeBot Crawl-delay: 60
1
19
I'm excited ready for the 2026 Adobe #ColdFusion Summit and it all starts with a 500 miles road trip. Here's six fresh tracks that are on my playlist... <tags>. Enjoy!
Jun 12
"Tags" - a 6-song EP about the platform that outlived its own funeral. Americana, blues, funk, synthwave & more. My soundtrack for the 500-mile drive to #CFSummit2026. mycfml.com/articles/tags-a-s… "In 2002 they wrote ColdFusion's obituary. The deceased declined to attend."
1
23
Whenever I receive telemarketer calls (which I shouldn't because I'm on the FTC's Do-Not-Call list, right?), I start by stating, "You're on a recorded line." They either immediately hang up or say something derogatory & then hang up. Either way, I count it as a win.
14
I spoke at the 2025 Adobe #ColdFusion Summit in Las Vegas regarding leveraging the command line. I created a dedicated website with live examples and am sharing the CFCs. (It's still a work in progress.) Enjoy!
cfExec - Just open-sourced #ColdFusion CFC wrappers for 91 command-line tools: curl, ImageMagick, Pandoc, ripgrep, ExifTool, 7-Zip & more... each with a typed CFC interface, cfexecute handling, version detection & metadata access. Live "try it" demos.
1
4
99
Ever needed a quick way to tell if an IP is a VPN exit, a datacenter range, or a real residential visitor without signing up for another paid service? cf-iplogs is a #CFML CFC for the ipLogs.com reputation API & returns a clean verdict plus ASN, org & country.
New #CFML library: iplogs Ask "is this IP a VPN, a datacenter, or a real person?" with no API key and no signup. Same IPLogs.cfc on Adobe @coldfusion 2016–2025, @lucee_server & @TryBoxLang. Caching offline fallback against 10 CC-BY data sets.
1
67
Hey @Shopify I received a invoice from a store on your platform named "My Store" that sent me a PayPal confirmation bill for $487.41. I tried to use the iOS app to report, but it hasn't been 30 days yet. Please add a method to report abuse.
1
77
What should I do to remove this from my dashboard? Archive or Delete? I don't want to "mark as delivered" or "Copy order number". "Report an issue with the order" can't be performed for 30 days. #smh
26
Going forward with CommandBox #CFML, here's the available JDKs that I will be testing and configuring in the server.json files: openjdk11: Lucee 5, CF2016, CF2018 & CF2021 openjdk17: CF2023 openjdk21: Lucee 6, Lucee 7 & CF2025
1
19
I recently had to explain to a non-web developer that their CDN had stale data & the latest version of their software wasn't available "everywhere". Their response? "Works for me; go away." #smh This EXE uncovered the issue. #receipts Now with a #CFML wrapper. Enjoy!
New open-source #CFML library: cfGlobalping. Run ping, DNS, HTTP, traceroute & mtr from probes around the world - straight from #ColdFusion or #Lucee, with results as typed structs. Verify your CDN, cert, or DNS from everywhere, not just origin. Apache-2.0.
1
1
3
291
This CLI is made possible by @jsDelivr. I recently discovered that I'm in good company. This CLI is also used by my cloud-based WAF provider and my hosting provider. They also have many integrations for API, Slack, MCP, Zapier, IDE extensions, etx. globalping.io/integrations
1
71
This is what I enjoying see when I use CommandBox to unit test seven (7) different #ColdFusion platforms (ARC 2016/2018/2021/2023/2025, Lucee #CFML 5.4.8 and #BoxLang 1.13). "Verified - your changes work correctly across all engines." Phew!
1
42
Drop in three JARs and you can write WebP from CFML on Adobe #ColdFusion 2016 forward, Lucee #cfml 5 , and BoxLang 1.13 . No native install, no shell-outs, no Photoshop trip.
May 29
New on MyCFML: cf-scrimage - a CFML wrapper for the Scrimage JVM image library. WebP encoding, a stack of filters, and a dual API (fluent chain or one-shot). Works on Adobe @coldfusion , @lucee_server & @TryBoxLang . #ColdFusion #CFML #BoxLang
1
51
Hey @sendgrid_ops & @twilio Are you able to do anything regarding SendGrid phishing messages? They look legit. Some use SendGrid click tracking (or they may be reusing a single tracking URL; not sure.) Is there anything that clients can do to assist?
1
106
I've been avoiding using CFImage since #ColdFusion 9 due to performance issues when compared to GraphicsMagick or ImageMagick. Thumbnailator fills the void when I can't use an executable.
May 22
Just released a clean #CFML wrapper for Thumbnailator. Fluent image resizing, EXIF auto-rotate, watermarks, batch processing & more. Single JAR, no deps, faster than cfimage in many cases. mycfml.com/articles/a-cfml-w… Demo benchmarks included. Perfect for #ColdFusion & Lucee apps.
2
4
310
TOML turned thirteen this year and is supported by Python, Rust, Go, JavaScript, Java. C, C , C#. Ruby, PHP, Swift, Kotlin. PowerShell. Common Lisp... and finally @coldfusion, @lucee_server & @TryBoxLang . cfTOML is a pure CFML library for parsing and emitting TOML 1.0.0 & 1.1.0.
May 15
#CFML is about to be in the TOML “all popular programming languages” list now. It parses and emits TOML, runs on Adobe #ColdFusion 2016 - 2025, Lucee 5 , and BoxLang. One CFC. mycfml.com/articles/cftoml-a…
2
112
Dell's SupportAssist Remediation = All-day BSOD I installed it this morning and had multiple reboots during the day while trying to get work done. I finally figured this out and thought I'd search if this was a real thing... yup. I'm not alone. x.com/search?q=dell supporta…
1
94
I found another nuanced isValid() difference between #CFML platforms. According to RFC 5322, the following email is valid, but restricted (requires quoting). "!john"@example.com Return TRUE: CF2016-2023 & Lucee 4.5-6 Return FALSE: CF2025, Lucee 7 & BoxLang Is this a regression or a correction?
1
1
60
Are you using AI as an oracle or as a sparring partner? youtu.be/pd1Km6bT104?si=J7SE… I don't trust AI's confidence. I've been using AI to challenge my understanding in areas that I have knowledge in or have independently researched in order to apply my knowledge against the output.
1
47
PowerToys has saved lots of time for me as a developer. I use the "Command Palette Dock" (new) on all my remotely accessed machines so I can quickly identify them & access the programs I need (without cluttering the task bar). "Grab and Move" (new) saves me lots of time when resizing windows. "Always On Top" to keep my important window pinned to the top. "Text Extractor" for when clients send me a screenshot instead of text. (Easy screen-based OCR-to-clipboard shortcut)
Windows has been missing basic features for 30 years. Mac users have had Spotlight, Quick Look, and proper window snapping for over a decade. Windows users have been downloading sketchy third-party tools for every single one. Microsoft knows your Start Menu shows Bing ads. Microsoft knows your search bar opens Edge when Chrome is your default. Microsoft knows you cannot rename 200 files at once. Microsoft knows "this file is in use" never tells you which program. Microsoft knows you cannot extract text from a screenshot. Microsoft's own engineers got tired of knowing. So they built 30 utilities that fix everything Windows got wrong. Then they put it on GitHub instead of putting it in the operating system. They just never told anyone. A billion people use Windows every day. And they all just... live with it. It is called PowerToys. 132,500 stars. Built by Microsoft. Maintained by Microsoft. MIT licensed. Shipped v0.99.1 yesterday. Still not in Windows. Not a third-party hack. Not some sketchy utility pack. Microsoft's own engineers, on Microsoft's own GitHub. Here is what is missing from your operating system: → Command Palette. Spotlight for Windows. One shortcut. Launch anything. → PowerToys Run. Alt Space. Search apps, files, math, the web. No Bing ads. No Edge hijack. → FancyZones. Drag any window into custom screen zones. Any layout you want. → PowerRename. Rename 500 files at once. Search-and-replace or regex. → Text Extractor. Draw a box around any text on your screen. Even inside images. Even inside videos. OCR built in. → File Locksmith. Right-click any locked file. See exactly which program is locking it. Kill the lock. → Color Picker. One shortcut. Click anywhere. HEX, RGB, HSL. → Image Resizer. Right-click. Resize. Batch entire folders. No Photoshop. → Mouse Without Borders. One mouse and keyboard across 4 computers. → Keyboard Manager. Remap any key to any other key. → Peek. Press Space on any file. Preview instantly. Quick Look for Windows. → Always on Top. Pin any window above all others. One shortcut. → Awake. Keep your screen on without touching power settings. → Crop and Lock. Crop any window into a pinned thumbnail. That's 14. There are 16 more. Here's the wildest part: Microsoft built every one of these. Microsoft's own engineers maintain them. Microsoft shipped a release yesterday. None of it ships with Windows. A billion people have been living with a half-finished operating system. The fixes exist. Microsoft made them. And hid them on GitHub. 132,500 stars. 30 utilities. 400 contributors. MIT licensed. Works on Windows 10 and 11. Install in one command: winget install Microsoft.PowerToys Your Windows. Finally complete. 100% Open Source. (Link in the comments)
1
1
64
What that bing said, the recent v0.99 released caused a headache for me. The Windows "Game Bar" would launched every time I press the "g" key (which resulted in me using PowerShell to disable it entirely.) This next-day release fixes that issue. github.com/microsoft/PowerTo…
16
I prefer using ASCII7 and often need to preserve emojis using #ColdFusion. Using a #cfml wrapper for jemoji solves this problem by converting them to aliases. They can also be easily converted back to Unicode or HTML entities. Enjoy!
Apr 30
I've finally got around to updating my emoji java wrapper CFC. cf-JEmoji: a CFML Emoji Wrapper for the Post-emoji-java Era - does this string contain an emoji? - what's its alias? - swap unicode for :thumbsup:
1
67