Comments for Andrew Dixon

Comment on Password Hashing in CFML by Christophe

Christophe — Mon, 21 Nov 2022 07:38:45 +0000

Hi,

Thank you for this very very interesting post!

Kind regards,

Christophe

Comment on Password Hashing in CFML by Andrew Dixon

Andrew Dixon — Tue, 25 Oct 2022 09:53:26 +0000

In reply to Heru.

There is no need to include the “pepper” in the checkPassword function as it uses the generateHash function to generate the hash again and compare it to the stored hash. so the pepper is added automatically.

Also, if you are doing something new and using Lucee, then you probably want to use the Argon2 algorithm, see https://www.andrewdixon.co.uk/2020/09/19/using-argon2-in-lucee-cfml/

Comment on Password Hashing in CFML by Heru

Heru — Mon, 17 Oct 2022 21:39:53 +0000

Hi Andrew, I just tried using your code to hash a password for my test application. It’s great that you have your codes here for me to learn BUT I noticed on your generateHash function you added application.pepper which is great BUT on the checkPassword function, you did not include the application.pepper value. So when I used your code to test mine (without the pepper) I got a NO instead of Yes in the value returned by the check password function.
How should I include the application.pepper in the checkPassword function, Thank you

Comment on Using Argon2 in Lucee CFML by Andrew Dixon

Andrew Dixon — Thu, 25 Aug 2022 11:24:31 +0000

In reply to Scott Conklin.

Hi Scott,

Yes, that is correct, you store the result for GenerateArgon2Hash and then use the Argon2CheckHash function to check if the store hash matches the input. So the only thing you can’t do from my other article is add “pepper” as the “salt” is randomly generated by the function, but that is acceptable in my opinion.

Comment on Using Argon2 in Lucee CFML by Scott Conklin

Scott Conklin — Wed, 24 Aug 2022 23:41:47 +0000

Andrew –
Thanks for the great articles and review of this. Do I understand correctly that unlike your “Password Hashing in CFML” post where you showed how to save the iterations, salt etc as a string in the DB and then parse them when checking the password, I now can skip all of this with GenerateArgon2Hash?
It is now pretty much just using Argon2CheckHash to compare the password with the stored string generated from GenerateArgon2Hash for either true or false? is that right?

Comment on Looping over arrays in Lucee CFML by Will B.

Will B. — Sat, 19 Feb 2022 23:49:56 +0000

An old post, but I agree with Richard on this. In my early coding days (lots of PowerBuilder), I was heavily advised against putting any functions in a loop evaluation. Simply because (in most languages) must be re-run constantly and that takes up CPU.

But also, can be dangerous, too, if you’re deleting from that array. Of course, if I’m looping to do that, I always do step=”-1″ and work backwards.

Comment on Datetime Timezone Handling in Lucee CFML by Andrew Dixon

Andrew Dixon — Mon, 28 Jun 2021 15:29:22 +0000

In reply to Christian Küpers. Do you mean inside a <cfthread> the timezone defaults to UTC?

Comment on Datetime Timezone Handling in Lucee CFML by Christian Küpers

Christian Küpers — Mon, 28 Jun 2021 14:13:46 +0000

And very nice is also a bug, which shows in a used thread a different timezone than server defaults…
=> server is Europe/Berlin
and when you use a thread in a request, from that point on the whole request is using UTC.

Quite nice and buggy…

Comment on Insulin Therapy with Loop by Andrew Dixon

Andrew Dixon — Thu, 03 Jun 2021 08:41:15 +0000

In reply to Szabolcs K.. We use NovoRapid, he doesn't eat any special diet, he is a bit of a fussy eater and most of what he likes is stuff with carbs. On the whole it works really well, we average about 85% time in range over a month, he still has some highs and lows and activity is pretty difficult to deal with sometimes. Getting the settings right is the hardest part and given his age, currently 10, things change ALL the time.

Comment on Insulin Therapy with Loop by Szabolcs K.

Szabolcs K. — Thu, 03 Jun 2021 08:02:45 +0000

Hi Andrew! I have some questions if you don’t mind. What type of insulin do you use for looping? Does he eat low-carb or vegan or any special food? Is it “fast” enough to keep Jamie in range?

TIA,
Szabolcs