Skip to content

Instantly share code, notes, and snippets.

<cfscript>
x = 1
switch ( x ) {
case 1:case 2:case 3:case 4:case 5:
// DO A
break;
case 6:case 7:case 8:case 9:case 10:case 11:case 12:case 13:
// DO B
break;
case 14:case 15:case 16:
<cfscript>
something = '{"something": null}';
writedump(deserializejson(something));
</cfscript>
<!---<cfinput type="date" name="endDate" id="endDate" required="no" mask="MM/dd/yyyy" class="dateField">--->
<!---<cfinput name="stDate" type="datefield" label="date:" mask="mm/dd/yyyy"/>--->
<!---<cfcalendar name="myDate" value="#now()#">--->
<input type="date" name="myDate" value="#dateFormat(now(),'yyyy-mm-dd')#">
<!---<cfinput type="date" name="endDate" id="endDate" required="no" mask="MM/dd/yyyy" class="dateField">--->
<!---<cfinput name="stDate" type="datefield" label="date:" mask="mm/dd/yyyy"/>--->
<!---<cfcalendar name="myDate" value="#now()#">--->
<input type="date" name="myDate" value="#dateFormat(now(),'yyyy-mm-dd')#">
<cfset x = Floor((0.29 *100))>
<cfset a = 0.29 * 100>
<cfset y = Int(x)>
<cfoutput>x=#x#</cfoutput>
<br>
<cfset x = Floor((0.29 *100) + 0.01)>
<cfset a = 0.29 * 100>
<cfset y = Int(x)>
<cfoutput>x=#x#</cfoutput>
<cffunction name="displayEmployeeName" returntype="void" output="true">
<cfargument name="dataSourceName" type="string" required="true">
<cfargument name="sEmployeeID">
<cfquery name="qEmployeeName" datasource="#arguments.DataSourceName#">
SELECT
firstname
,lastname
FROM employee WITH (nolock)
<!---
Intent (goal): return one submission record.
[BAD] url.submissionId is user input.
[BAD] tenant-only scoping without object-level checks.
[BAD] serialise and return without a policy decision.
--->
<cfparam name="url.submissionId" type="string" />
<cfset tenantId = session.tenantId />
<cfset submissionId = url.submissionId /> <!--- [BAD] user-controlled identifier --->
<cfquery name="qSubmission" datasource="appDSN">
<!---
Intent (goal): return one submission record.
[BAD] url.submissionId is user input.
[BAD] tenant-only scoping without object-level checks.
[BAD] serialise and return without a policy decision.
--->
<cfparam name="url.submissionId" type="string" />
<cfset tenantId = session.tenantId />
<cfset submissionId = url.submissionId /> <!--- [BAD] user-controlled identifier --->
<cfquery name="qSubmission" datasource="appDSN">