A while back, it was exposed that if using the legacy form submission struts path (e.g. /sendEmail, /submitWebForm, etc), a spammer could remotely invoke the tool and use it to send spam emails to people. While this wasn’t exactly a bug in the strictest sense, it could prove to be a headache for users should [...]
Recent Articles
dotCMS and Mobile Techniques: Notes from Boot Camp 2011
At dotCMS Boot Camp 2011, I was invited to come and talk about mobile implementation techniques using dotCMS. Luckily, this isn’t as much as issue with trying to pull off clever dotCMS tricks as it is just knowing good mobile techniques. Below are a number of links and examples from my talk. This isn’t so [...]
Continue →Enter Nutch, Stage Left
Spindle sucked. Say it with me. Spindle sucked. As far as search goes, sure, it was better than nothing. The problem was that the Spindle backbone wasn’t very robust as far as search algorithms go, there was no UI for it, and the kind of results you could get were pretty limited. Not to mention [...]
Continue →User Role Based Custom Content
Today let’s take a look at a way of leveraging the CMSUserWebAPI in order to serve custom content to registered users on your site. The basic premise is quite simple: check for certain user roles in a loop, and conditionally pull content into a widget. For the sake of argument, we’ll assume you’re already versed [...]
Continue →Apache and dotCMS: Happily Ever After
dotCMS has many ways to handle multiple hosts, permission hosts and force https. But sometimes you just need more… For instance, you want a host to only be visible from certain IP’s or you want to password protect a site before it goes live. All things that could be handled by permissions or plugins if [...]
Continue →oEmbed and JSON Plugins Available
Today, I am announcing the release of two new plugins for dotCMS, available now. The reason I am announcing them together is because the macro relies on the viewtool, but the viewtool has applications beyond the macro, so I didn’t feel that it was right to make it one big plugin. Also, the viewtool is [...]
Continue →Email from Velocity
The more applications I build in dotCMS, the more I find myself trying to accomplish them with just Velocity coding. This saves me from having to create a plugin and make sure it is maintained through my systems. However, lately I have needed to write a lot of Form Handling with dotCMS. Not your basic, [...]
Continue →



