Sorcerer's Isle :: Open Source

QueryParam Scanner 0.7.5 Release Candidate

Sat, 07 Jan 2012 20:59:44 GMT

I have just pushed an update of QueryParam Scanner to GitHub, containing various improvements.

This update is on the rc0.7.5 branch, and it'd be nice if people could take it for a spin and make sure there are no issues with it. (There is a zip download for anyone without git.)

The visible changes which you might notice are:

Added JSON output format, giving an alternative to XML for anyone using qpscanner in a scripted process.
Added variable for number of potential risk files, and improved related wording in HTML output.
Fixed bug where identical queries were causing incorrect line numbers.
Fixed bug where query names were not being detected.
Fixed bug where blank lines were incorrectly removed.

However, there are also significant under-the-hood changes. I removed my obsolete "Java Regex Utils" library (replacing it with the object part of cfRegex), and made a number of little code clean-ups.

A result of these changes is that qpscanner rc0.7.5 appears to be almost twice as fast as previous versions.

If you have any feedback, please feel free to contact me via GitHub, and similarly if you find any bugs then please raise them on the issue tracker.

Why Railo 3.3?

Sun, 06 Nov 2011 23:54:08 GMT

It's been over two and a half years since my last "why railo" post, and - despite Railo "only" being 0.3 versions on - there's been a lot of improvements!

In fact, because it's been so long, a few of the things here are not new with v3.3 (though they are all new since the previous article), but are still great features that deserve mentioning!

So, what are my ten favourite new features? Read on to find out.

Introducing the cfRegex Project!

Fri, 22 Jul 2011 22:20:48 GMT

The cfRegex project is two things. Firstly, it is a complete regex implementation for CFML, providing more functionality, flexibility, features and power than the existing CFML RE functions. Secondly, it is a drive to encourage people to properly learn and make use of regex.

Read the rest of this article to find out more.

Railo: Still Awesome!

Tue, 26 Jan 2010 21:42:41 GMT

It's nearly a year on from my last Railo blog post so it is well overdue that I write another - just in case there is anyone still sitting on the fence, unsure if they should use Railo - or indeed, anyone who might be unaware of Railo's very existance!

So to start with, a quick summary of what Railo is:

Railo, pronounced /ˈraɪ.ləʊ/, is super fast Enterprise-level sofware for RAD webapp and website creation.
Railo is LGPL-licensed Free Software, so anyone can use it how they like.
Railo runs on any Java EE server, (but doesn't require Java knowledge), and is a Jboss.org project.
Railo uses the CFML language, like Adobe ColdFusion (the primary CFML engine), OpenBlueDragon, and others.
Railo is really awesome.

Find out why Railo is the perfect choice for your next development project.

Beehive Forum 0.9 has been released!

Mon, 06 Jul 2009 23:50:21 GMT

Version 0.9 of Beehive Forum, probably the greatest forum software there is, has recently been officially released.

Since the previous v0.8.4 there have been a variety of fixes and improvements, particularly to client-side caching and UTF-8. There is also now support for Google Analytics and for displaying optional Google Adsense adverts. For full information on what has changed, you can check the release notes.

Download Beehive Forum 0.9 from SourceForge

Also, Beehive is currently a Finalist in the SourceForge Community Choice Awards!

If you're a fan of Beehive and haven't yet voted, please vote for Beehive now:

There is a lot of competition, with many thousands of votes already having been cast, so please help spread the word to as many other Beehive users as you can, to help vote for Beehive to win, and gain the recognition it deserves!

Open Source Railo

Tue, 31 Mar 2009 21:03:00 GMT

Earlier today, the eagely awaited Railo 3.1 public beta was announced!

And the reason for much of this eagerness?

Railo is now Open Source and Free Software, released under the LGPL v2.

This license requires that any changes to Railo's sourcecode itself must also be released under LGPL v2 (or later version).

However, unlike the full GPL, it does not require that you release any packaged applications under a compatible license - so you can still use whatever license you like for your own CFML code, Open Source or otherwise.

Along with the announcement comes two new Railo websites: The commercial-oriented getrailo.com and the community-oriented getrailo.org, which also contains wiki-based documentation.

Details on updating this documentation, as well as information about the new features in Railo 3.1, will come later this week - stay tuned to the Railo blog for the latest details.

The next four months are going to be a very exciting time for Railo and CFML!

Railo goes Open Source with JBoss.org (Update)

Sun, 08 Jun 2008 17:59:40 GMT

As promised previously, here is a more detailed entry on the announcement to Open Source the Railo CFML engine.

Railo goes Open Source with JBoss.org

Thu, 05 Jun 2008 17:30:11 GMT

Today at the midday Scotch keynote, Gert Franz and Luc Texier made an impressive announcement: Railo is going completely Open Source.

This is an exciting move both for Railo and for the CFML community as a whole, and I'll be writing more details about it later, but for now here some some quick key details...

There will be two editions of Railo, with the Community and Professional editions combining into one, and the Enterprise edition being the other:

The new Community+Professional edition will be Open Source and there will be no limit to the number of web contexts allowed.

The Enterprise edition will have added value features, including tools from Intergral.

The license will be LGPL2, which means you can distribute Railo along with commercial software.

The timeline for release of the source code is mid to late October, around the time that Railo 3.1 is due for release.

The announcement is online at the JBoss website at www.jboss.org/railo

More Information available: Railo goes Open Source with JBoss.org (Update)