When Steve at secretagents.com announced the release of the STOMP tool for
code analysis, I jumped out and bought a 3-month subscription. And that
wasn't only to get the free Visor either, cuz' I just inherited a Palm V
anyway.

Well, if you've got any fusebox apps longer than a few templates, you'd be
NuTz not to use the STOMP tool to scrub your code.

Here's what it does: You upload a .zip file of your fusebox app (just the
.cfm templates), and the tool parses through every single template,
revealing a myriad of common errors, gaffes, screw-ups, and creepy crawlies.

I tossed in one big app I've got, just under 300 templates. Well, I got my
results in about a half-hour, there were 1999 potential problems! Yech!
Some of 'em I simply never thought of. Stuff like a missing <TD> in a table,
which wasn't obvious when the page was viewed. There were suggestions like
changing Find functions to FindNoCase functions. Stuff like appending
ADDTOKEN = 'YES' to CFLOCATIONs. I never thought of doing that at all. 

The tool does a good job of looking at queries and pointing out stuff like
changing any cf vars in a UPDATE/INSERT/DELETE query to #VAL(foo)# so that
any malicious SQL gets translated into a 0. Never paid a ton of attention to
that one either.

After going through my code and doing things like a global search-n-replace
of 'CFLOCATION' with 'CFLOCATION ADDTOKEN = "YES"', on my 2nd pass, my app
went from 1999 errors down to 530. Not bad for an afternoon of code
remediation.f

This isn't a paid plug, its a 'happy user' recommendation to y'all that this
thing is "for real" and you'd be NuTz not to run your apps through it!
Besides, you'll end up with a free Visor when all is done (well, not FREE,
really, more like amortized into the cost of the 3-month subscription. After
all if it was really FREE, you'd get it just for trying the demo, right?
Hehehe).

Anyhow, I'd say we're seeing the emergence of a new class of web apps, those
geared specfically for the Fusebox developer community. I for one am pretty
stoked, so there ya go for my opinion, it's a good one!

Alan McCollough
Web Programmer
Allaire Certified ColdFusion Developer
Alaska Native Medical Center

------------------------------------------------------------------------------
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/fusebox or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to