Here's an easy code modification that is a nice security addition for sites, particularly older stores, and will help somewhat against the recent attacks. Please note that this is far from a comprehensive fix and depending on the level of access the hackers gained, may not help if you have already...

More details have come out about the latest attack, this is a new one that is quite insidious. If you have a recent install you would not be vulnerable (although upgrading to the latest release is still recommended), but any store more than a year old or more may need quick patching. Contact me...

It seems the hackers are making the rounds against ColdFusion sites again so if you are using an older CFWebstore version be aware that you may be vulnerable. I've posted about some of the issues in the past and included some code that can at least provide some level of protection. If you've not...

Here's a topic that came up on the email list this week. It definitely trips a lot of people up, so I thought it'd be worth putting on the blog for others that might run up against it.

In order to do the search-engine-safe URLs, CFWebstore puts a Base Href into the page. However, if you...

My next release kept growing and I have been getting so many good ideas for some nice features to add to it, that I decided it would be best to split it up and release some of the changes as soon as possible, so you will have them sooner rather than later, and then do the bigger release, with all...

Okay, I'm sure when you read this title, you will think, sure, I changed the admin password a long time ago! Well, this is just a reminder that to make things a little less easier for hackers, you might want to actually change the username for the admin account as well. If you are still using the...

Those of you on the CFWebstore Yahoogroup probably know what a fan of Railo I am. This CFML server has really impressed me and we are running several clients on it with great success. Now with it being open source, that...

Finally starting to see the end of the road with this next release! I've completed the large bulk of changed that I wanted to do with the admin files and am just finishing up some other stuff like gateway updates, and some new improvements to layouts. The new sample store design will all be done in...

Haven't had a ton of stuff to blog about, and been very busy with various projects, so sorry for that. I'm continuing work on the next release which will have a few new features and tweaks that people have asked for, as well as a nicer sample design and some changes for PCI Compliance. Basically,...