Sorcerer's Isle :: Projects

QueryParam Scanner 0.7.5 Release Candidate

Sat, 07 Jan 2012 20:59:44 GMT

I have just pushed an update of QueryParam Scanner to GitHub, containing various improvements.

This update is on the rc0.7.5 branch, and it'd be nice if people could take it for a spin and make sure there are no issues with it. (There is a zip download for anyone without git.)

The visible changes which you might notice are:

Added JSON output format, giving an alternative to XML for anyone using qpscanner in a scripted process.
Added variable for number of potential risk files, and improved related wording in HTML output.
Fixed bug where identical queries were causing incorrect line numbers.
Fixed bug where query names were not being detected.
Fixed bug where blank lines were incorrectly removed.

However, there are also significant under-the-hood changes. I removed my obsolete "Java Regex Utils" library (replacing it with the object part of cfRegex), and made a number of little code clean-ups.

A result of these changes is that qpscanner rc0.7.5 appears to be almost twice as fast as previous versions.

If you have any feedback, please feel free to contact me via GitHub, and similarly if you find any bugs then please raise them on the issue tracker.

Introducing the cfRegex Project!

Fri, 22 Jul 2011 22:20:48 GMT

The cfRegex project is two things. Firstly, it is a complete regex implementation for CFML, providing more functionality, flexibility, features and power than the existing CFML RE functions. Secondly, it is a drive to encourage people to properly learn and make use of regex.

Read the rest of this article to find out more.

Java RegEx Utilities - v0.7 preview

Thu, 09 Apr 2009 21:47:00 GMT

Java RegEx Utilities, or jre-utils, is a CFC which provides a convenient way to access Java's regular expression functionality.

Whilst ColdFusion, Railo, and openBD are all built on Java, and CFML does have regular expression functions, they do not actually use the Java regular expression engine, which supports many useful regex constructs.

The purpose of jre-utils is to provide this extra power to CFML developers in a familiar and easy to use way.

I will shortly be releasing v0.7 of jre-utils, which adds a number of new functions, as well as making things more consistent, so I decided I would give this quick preview of what it contains.

QueryParam Scanner - v0.7 Released, v0.8 in progress...

Tue, 23 Sep 2008 20:09:31 GMT

I have released v0.7 of QueryParam Scanner, which introduces a variety of improvements over v0.6.1:

Significantly faster processing
Multiple output formats (HTML, XML, WDDX).
Ability to override Request Timeout.
Option to specify file/directory exclusions (regex).
Option to include/exclude Query of Queries.
Option to include/exclude built-in CFML functions.
Eclipse Plugin for easier execution.

For more details and download information, visit the project page at Hybridchill.

Future Improvements

The following release, v0.8 will have three key features:

A Fix mode, allowing you to manually or automatically correct missing cfqueryparams.
A flexible exclusion system, allowing you to ignore paths and variables you know are ok.
Integration and examples of use for Apache Ant and MXUnit.

Creating my very first Eclipse Plugin

Tue, 23 Sep 2008 00:10:49 GMT

I recently* completed my very first Eclipse Plugin, and I found the whole experience to be very interesting.
*(well about a month ago; took me longer to get writing this than intended)

This blog entry will focus on two main areas - my experience with Eclipse (as opposed to CFEclipse and similar), and the issues I encountered from a development perspective

QueryParam Scanner - Eclipse Plugin

Mon, 25 Aug 2008 23:24:44 GMT

The first pre-release version of the qpScanner Eclipse Plugin is now available.

This is the very first Eclipse plugin I have created. It was an interesting experience, and something that I will be writing up in a separate entry as soon as I can collect my thoughts.

It order to use the plugin, you must be using v0.7 or higher of qpScanner - if you do not yet have this, you can download the latest development version of qpScanner, which contains details of the Update Site to use. If for any reason you cannot use the regular Eclipse Update method, you can directly download the qpScanner Eclipse Plugin instead.

Just to be clear, both v0.7 of QueryParam Scanner and v0.1 of the qpScanner Eclipse Plugin are currently considered development releases, and are being made available so that they can be tested and any bugs that might exist can be found - if you are unwilling to use pre-release software you should wait until the official release.

If you do get the Eclipse Plugin, or even just qpScanner on its own, I welcome any and all feedback you might have - whether to report bugs you have found, request new features you would like, or simply to let me know that works with your local setup.

Please send feedback via email to qpscanner_project@hybridchill.com or alternatively add a comment below.

Related websites:

QueryParam Scanner v0.7-dev

Sun, 17 Aug 2008 00:01:01 GMT

The latest development version of qpScanner is now in SVN at RIAForge.

It would be great if people could test it out and let me know of any issues they encounter.

As before, it is all self-contained, so it can be installed and run with minimal effort.

Note: As this is still the development version, you need to use the zip option at the bottom of the RIAForge page, not the "Download Project" link - the button will only give the old version.

When released, v0.7 will be a significant new version, so I want to give a quick discussion of the new features...

QueryParam Scanner

Sun, 06 Apr 2008 17:42:42 GMT

The code for my QueryParam Scanner has been uploaded to RIAForge.

QueryParam Scanner is a simple tool which scans your code for queries and reports back about any variables that are not inside <cfqueryparam/> tags.

Download QueryParam Scanner from RIAForge.

Java RegEx Utilities

Sat, 05 Apr 2008 23:30:13 GMT

I have just released Java RegEx Utilities on RIAForge, which is a CFC enabling easy access to Java Regular Expression functionality, adding to what is available in the standard CFML functions.

Project:Photon - Part IV

Sat, 16 Feb 2008 20:22:54 GMT

Almost a year since my last update on Project:Photon, and progress is depressingly low.

So for both new readers and those without a perfect memory, a quick reminder of Project:Photon's primary objective: a small and silent device for high-capacity storage with full backup facilities (mirroring and versioning).

This posting is an update on where I have reached.

Previous Parts: