Installing WordPress alongside a ColdFusion app isn’t too difficult, but I need to customise the blog so that it looks identical to the rest of the site, and allow the user to switch seamlessly between the two.

This level of integration requires two main bits of functionality. Firstly I need to use ColdFusion to connect to the WordPress database and pull out articles and comments for use in summary blocks around the rest of the site, and secondly I need to be able to embed CFML templates directly into the WordPress blog to generate headers and footers whilst keeping any session based information such as login status, cart contents etc. – Essentially I need a CFINCLUDE equivalent for PHP.

Using ColdFusion to pull in WordPress content

I created a few components to pull data from a WordPress database. One to grab published articles, one to grab approved comments and one to remove any formatting and strip out extra HTML such as embedded images or videos.

The components are fairly self explanatory, and for the moment provide only basic functionality. It would be possible to build on these to provide greater integration, but for now these do the job nicely.

Pull published blog posts

[coldfusion]

SELECT wp_posts.*
FROM wp_posts

WHERE 0 < 1
AND wp_posts.ID =

AND wp_posts.post_type = “post”

AND wp_posts.post_status = “publish”

ORDER BY wp_posts.post_date DESC

LIMIT #Arguments.iLimit#

;

// Return the query object
return Local.qGetBlogPosts;

[/coldfusion]

Pull approved comments

[coldfusion]

SELECT wp_comments.*,
wp_posts.post_name,
wp_posts.ID,
wp_posts.post_type,
wp_posts.post_status,
wp_posts.post_title

FROM wp_comments

INNER JOIN wp_posts
ON wp_comments.comment_post_ID = wp_posts.ID

WHERE 0 < 1
AND wp_comments.comment_ID =

AND wp_comments.comment_post_ID =

AND wp_comments.comment_approved = 1

AND wp_posts.post_type = “post”

AND wp_posts.post_status = “publish”

ORDER BY wp_comments.comment_date DESC

LIMIT #Arguments.iLimit#

;

// Return the query object
return Local.qGetBlogComments;

[/coldfusion]

Strip HTML from posts

This function uses the ‘TagStripper’ custom tag by Rick Root / Ray Camden, available from http://www.cflib.org
[coldfusion]

// If we’re only showing a summary, strip out everything after wordpress’ ‘‘ tag.
if (Arguments.bShowSummary) {
Arguments.sString = REReplace(Arguments.sString, “.*”, “”);
}

// Stip out any HTML tags and return the output
return tagStripper(Arguments.sString,’strip’,’p,strong,em,a’);

[/coldfusion]

Embedding CFM templates into WordPress / PHP

I don’t know a great deal about PHP, but I can’t find any equivalent to CFINCLUDE – even if I could it would be safe to assume that the PHP version wouldn’t be able to parse the CFML code contained in my CFM pages – what’s needed is some equivalent to CFHTTP that can hit the CFM page as a standard HTTP request, let the CFML server parse the code and return HTML that is then displayed within the PHP template.

Currently I’m using a function in PHP which wraps around ‘fsockopen’ to do exactly this. I found this function a while ago on another project – I’m not sure who wrote it.

[php]

[/php]

With that function set up at the top of the php template, you can use the following code to embed a parsed CFM template.

[php]
echo fetchURL(http://pathto.your.cfm);
[/php]

Now the only issue remaining is session data. As it’s the PHP server hitting your CFML template and not the user’s browser, the ColdFusion server is assigning a new session to PHP, and so any session specific data such as the contents of the user’s cart or login status, is lost in the displayed page.
So to combat this, we’ll need to check the user’s browser for a session cookie using PHP, and pass that along as a URL parameter to the CFML template.

[php]

[/php]

Now we should find that the contents of the CFML page is parsed correctly, using the current CF session.

It’s worth noting that while this technique could be used to pull in your CFML header and footer template, providing a quick way to skin the blog without delving too deeply into the WordPress theme you’re using, this is not the ideal way to go. WordPress themes use variables in the head section of the document to deal with Meta information and other internal functionality, and these often provide hooks for WordPress plugins. If you replace this information with parsed HTML from your CFML templates, you may run into difficulties down the line.
A better method is to abstract individual elements of your site into separate CFML templates, and allow WordPress to create the finished page, pulling in elements where needed.

I’d love to hear what people think of these techniques and if anyone has a better way of integrating WordPress into their ColdFusion apps. Specifically, I’d be interested to know if anyone has combined the login functionality of WordPress with their CFML system – the holy grail, if you will!

I had a look around and came across this post by Simon Bingham, showing how to cache the results of a Twitter feed in the Application scope.

This worked well, but I needed to be able to pull in both outgoing tweets (using the Twitter ID) and incoming tweets (using a search string). This meant not only updating the CFC to take both types of argument and act accordingly, but also to allow mutiple feeds to be cached.
Building on Simon’s original, I’ve created a new CFC that does just that, and even has a bit of error handling for good measure.

[coldfusion]

Application.stTwitterFeedCache[Arguments.sStructureName].data = QueryNew(“Error”);
newRow = QueryAddRow(Application.stTwitterFeedCache[Arguments.sStructureName].data);
QuerySetCell(Application.stTwitterFeedCache[Arguments.sStructureName].data, “Error”, “Invalid query type entered. Please choose 1 for a Twitter ID, or 2 for a Search string.”);

Application.stTwitterFeedCache[Arguments.sStructureName].data = QueryNew(“Error”);
newRow = QueryAddRow(Application.stTwitterFeedCache[Arguments.sStructureName].data);
QuerySetCell(Application.stTwitterFeedCache[Arguments.sStructureName].data, “Error”, “Unable to pull in feed. We all know ColdFusion is awesome, so it’s probably Twitter’s fault.”);

[/coldfusion]

Feasibly, this could be adjusted to cache any kind of feed – the trick is in the dynamic naming of the structures to allow for multiple feeds.

Hope someone out there finds it useful!

In which Gary explains his new found appreciation for anyone who calls themselves a sysadmin.

I’m not a sysadmin. I like to make websites. It’s what I do, what I’ve always done.
Dealing with servers is the un-planned love child of my long term affair with website development. A horrid child that demands constant attention and gives nothing back in return.

In the past, I would point clients in the direction of a decent web host and let them get on with it, but as it turns out these clients would still phone me as the first point of contact when their servers went down, making me a mediator between them and their hosts. Frankly, I figured if I’m spending my time doing this anyway, I may as well get paid into the bargain.

Well, after four years of hosting client’s websites I can quite categorically state that sysadmins have one of the most difficult jobs imaginable. Anything can go wrong, at any time. Running a tight system involves research, dedication, and genuine enjoyment of high level tinkering.

If I’m ever in a position to employ a sysadmin, they will be treated well. I will make them tea. And cake. And give them sympathy.
Recently, after a long and gruelling battle with the most unreliable hosting company I’ve ever used, I finally took the plunge and set up my own Windows VPS using IIS7 & Railo.

The decision making process:

In which Gary explains and attempts to defend, his reasoning.

“Why use IIS?!” I hear you scream at your monitors, which proves that I do in fact possess super-human hearing abilities… Well, as I’ve taken great pains to explain, I am not a sysadmin. Years ago I ran a linux server that was hacked to pieces because I didn’t know enough about securing said system.

Windows and IIS, for all its faults – and there are a great many – is a GUI based system. What this means in the real world is that there’s an icon for everything. So, as a non sysadmin trying to setup and run a server, having an icon for every conceivable thing I’d want to do, serves to actually indicate what I might want to do in a way that a collection of config files simply doesn’t.

Also, having used it for a while now, I have to say that IIS7 isn’t half bad. It’s a damn sight better than IIS5 and IIS6, both of which I’ve had the dubious pleasure of using during the course of my career. Also, Server 2008 is a lot nicer than previous incarnations. Sitting here typing this post in Word 2007, on Windows 7, talking about Server 2008, I have to say that Microsoft seem to be taking an interest in user experience. They’re a long way off Apple, but they’re finally doing something half decent. Well done them.

“So why Railo?”
Well, initially this was an issue of cost. Frankly I can’t afford to shell out for an enterprise CF licence. I’m not a big company, I’m one man making awesome websites for very small companies. So I thought I’d give open source a go, and see how it compares.

I have to say I tried Railo about a year ago and found that it was lacking in too many places to be a viable solution. There were a few tags missing, a few things it just seemed to handle differently, and given that my sites generally like to nudge a few boundaries, it just wasn’t up to the task.

Well, all that has changed. Railo this time around was an absolute pleasure. A steeper learning curve to set up compared to Adobe ColdFusion, granted, but what you’re rewarded with is a blisteringly fast ColdFusion experience, a much higher level of control over your environment, entry into a knowledgeable and welcoming community and a general feeling of wellbeing that can only be gained from not giving Adobe three grand of your hard earned cash.

Hacking my server 101:

In which Gary, in an attempt to offer help to others in a similar situation, provides a step by step guide to the setup of his production server, and hopes that malicious people don’t use it to bring the thing crashing to its knees.

In the beginning, there was the welcome screen and the server was without services.

So, let’s assume that you’ve got yourself a nice sparkling new Windows 2008 server/vps set up.
Depending on how your hosting company has set this up, you may need to install various Windows updates, so it’s best you do this before anything else. Go to Windows update. Go directly to Windows update. Do not pass go, do not collect $200.
Usually I’d advocate installing Anti-Virus software next, but bitter experience tells me it’s best to install that at the end, after installing the various components we’ll need to get the server working.

And the sysadmin said, “Let there be services, and let the server use them to serve pages to the masses”.

Roles:

Firstly you’ll need to install IIS and various roles. I’m not any kind of an expert on this, so I won’t suggest which roles are right for you. Best practice as I understand it, is to only install what you need for the task at hand, thus minimising the chance of attack.

I’m using Windows 2008 Web Edition, which comes with literally nothing but IIS. If you’ve got a better version of 2008, you may want to install the DNS role, email, any number of others. Go wild, have fun.

One way or another you’ll need to install all the IIS6 roles, as well as the IIS management role.

Email:

I’m using MailEnable, basically because it’s free and does the job. When I spoke to my new hosting company about this, they strongly suggested trying ‘SmarterMail’ as a better alternative. Give them a look and make a decision.
Guides to install MailEnable are here:
http://www.mailenable.com/support/MailEnable_Installation_Guide.pdf
http://www.mailenable.com/support/MailEnable_Quick_Start_Guide.pdf

You’ll need to open ports on your firewall to enable… umm… MailEnable… so don’t forget. This includes Windows Firewall as well as any hardware firewall you may have set up.
Incoming: 110 & 25
Outgoing: 25

DNS:

If you want to use your server as a nameserver, (and frankly, if you need to read this tutorial to set up a production server, you’re unlikely to be the kind of person who’ll have a separate DNS server, so I’m talking to you!) you’ll need some kind of DNS service.

I’m using the cut down cheap-ass ‘Web Server Edition’ of 2008 server for which Microsoft have deemed fit to not include DNS services. So, like most of the planet, I’m using Bind.
It’s fiddly to get your head around if you’re unfamiliar with the concepts of DNS, but once you get the hang of what’s happening it’s all very straight forward.
Take a look at this tutorial: http://alex.charrett.com/bind-on-windows-mainmenu-3

You’ll also need to register your domain with the nameserver authority – or more accurately you’ll need to get your domain registrar to do this. A lot of registrars have an automated section in their control panels where you can do this. Others you’ll have to email. But basically, you need to have a domain name pointing to your IP address on the main database of nameservers. This usually takes about 24 hours.

You’ll also need to open your firewall up for BIND services:
Port 53, inbound and outbound, both TCP and UDP

FTP:

Initially, I thought it best to use the IIS built in FTP 7.5… However, after much messing about I decided it wasn’t up to the task.
If, like me, you like to have a ‘private’ folder outside the webroot to keep cfcs and the like, I’d recommend ditching it for FileZilla server.
I’ve left instructions for FTP 7.5 here for posterity.

FTP 7.5
Windows server 2008 has a new FTP module, FTP 7.5. It’s supposedly better for a million reasons, but what I like about it is you no longer have to create windows users to authenticate an FTP session. I’ve never much liked windows user permissions, gimme a username and a password and I’m happy.

It does take a bit of messing about to get the new user system working though. A very handy tutorial exists here:
http://learn.iis.net/page.aspx/321/configure-ftp-with-iis-7-manager-authentication

FileZilla
The FileZilla server is a much nicer solution in my opinion, it works much as I’d expect an FTP server to work, and doesn’t require as much messing about with IIS users and the like.
There’s not much in the way of tutorials out there, but it’s so simple to set up I’d be surprised if you need one. Nevertheless, here’s a link to one for good measure:
http://www.raymond.cc/blog/archives/2007/10/19/how-to-setup-ftp-server-on-windows/

Once you’ve set that up, you’ll want to set up the firewall for FTP.
That means opening up port 21, as well as enabling PASV mode with the following command:
netsh advfirewall set global StatefulFtp enable.

PHP:

Yeah, even though we’re coding awesomeness in CFML, there’s always going to be some client who wants to use PHP for something or other. Usually it’ll be a WordPress installation, which, I’m sorry, is just a better blogging platform than the CF offerings. There, I said it. I feel better.

This tutorial should guide you through the pain:
http://www.trainsignaltraining.com/iis-7-install-fastcgi-php/2008-09-04

IIS modules:

Personally, I found that I needed the IIS7 Administration Pack. I can’t for the life of me remember why, but I’d suggest you just install it and stop asking questions. ‘k? ‘k.
http://www.iis.net/download/AdministrationPack

The URL Rewrite module is a bit more obvious – you want this. It allows us IIS users to do what Apache bods have been doing happily – and somewhat smugly I’ll add – for years… Rewrite URLs using RegEx. Again, if you’re slapping WordPress on any of your domains, you’ll need this for friendly URLs.
http://learn.iis.net/page.aspx/460/using-url-rewrite-module
http://www.iis.net/download/URLRewrite

Perl:

Well sure, no-one uses Perl anymore, but it comes in handy having it on your server. Especially if you intend to install a stats package like AWStats. As it happens, AWStats is such a bitch to get working correctly that I wouldn’t bother, but still… Perl = good.
http://www.activestate.com/activeperl/downloads/
There are a few different things you may have to do to get this running on IIS7, including enabling a 32-bit application pool if your server is 64bit. Check out the instructions here:
http://blogs.iis.net/wadeh/archive/2009/04/13/running-perl-on-iis-7.aspx

AWStats:

Initially I had detailed instructions on installing AWStats here, but basically… just don’t bother. Get all your clients’ sites on Google Analytics. It’s a better package anyway. Honestly, you’ll thank me for that advice.

MySQL:

MySQL is fairly straightforward to install, but if you need a hand explaining the various options, there’s a tutorial here:
http://www.trainsignaltraining.com/install-mysql-on-iis7/2008-09-10/

phpMyAdmin:

If you need it, now would be the time to install phpMyAdmin.
http://www.trainsignaltraining.com/install-phpmyadmin-on-iis7-and-server-2008/2008-09-16/

One thing this tutorial isn’t clear on, is setting up the linked-tables feature. Several comments note the error, but none show how to fix it. You need to create a database specifically for these features. Instructions here:
http://www.phpmyadmin.net/documentation/#linked-tables

And the sysadmin looked at the server, and saw that it was good. And the sysadmin said “Let CFML pages be served, that web developers may rapidly develop and deploy applications”.

Installing Railo on Tomcat on IIS7 with multiple sites… I could write out step by step instructions, but why re-invent the wheel? I followed an excellent tutorial by Doug Boude, and you should too:
http://www.dougboude.com/blog/1/2009/09/Railo-31-on-Windows-Server-2008-and-IIS7–Part-2-of-3.cfm

At some point, this guide will ask you to download a DLL file to connect Tomcat to Railo – the URL in the guide is out of date, but I found the DLL here: http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/

It’s also worth noting that the guide expects you to be using version 1.2.28 of the ISAPI Redirect URL, however there is a newer version, 1.2.30 available. Do NOT use this version! It took me a while to figure out, but 1.2.30 makes everything run incredibly slowly. Don’t ask me why! I moved back down to 1.2.28 and everything worked fine.

One thing that this guide doesn’t mention, is how to handle default documents. You can see in the comments, a suggestion that adding ‘/*=wlb’ to the worker properties file will push all files through to Tomcat, which will indeed handle default documents. However, this will also put all static files, images, js and the like, through to Tomcat. Not only is this overkill (although I didn’t notice a performance hit), but also in my experience Tomcat has difficulty returning static files 100% of the time. I noticed certain images and JS returned as 404 errors, even though they existed.
Cue a helpful bit of info supplied by the Google Railo group.
http://groups.google.com/group/railo/browse_thread/thread/8706a5a4b025f393
This will allow you to set up default documents the *correct* way, leaving your static files to be handled by IIS as they should be. Don’t skip this step, it’s important!

And the server was able to serve CFML and the sysadmin saw that it was good. And the sysadmin said “Let there be protection, that viri may not penetrate the goodness of the server”

Finally, you can install Anti Virus. I’m using McAfee, since I happen to have a copy I’m not using.
Be careful to edit your preferences to ensure that not all files are being scanned – otherwise it’ll kill the server very quickly. Choose to scan files on writing to disk, and only the ‘default files plus additional’ option.
You’ll also want to stop McAfee from blocking any emails sent by the server. In the access protection settings, under the rule for blocking mass email worms, add ‘Tomcat6.exe’ to the list of excluded services.

And the sysadmin saw that McAfee was using way too many system resources on boot, but that it settled down after a few minutes, and the sysadmin saw that it was good enough. And the sysadmin said “Let’s make sure I don’t have to do this shit again!”.

A backup system is a good idea. If you’re smart, you’re using online version control and so losing the files and files of code you’ve carefully crafted, simply isn’t an issue. If not, check out Kiln or Git. I use Kiln and it’s an absolute pleasure. Don’t use SVN, because it’ll cause no end of hassle in the long run… and who needs a VCS subfolder in every single folder in their app anyway?

For MySQL, I’m using a batch script that exports every database, once a day. I built on top of the script in this guide: http://www.iis-aid.com/articles/how_to_guides/backing_mysql_automatically_using_batch_file
My version only holds one backup of each database on the server per day, but FTPs them down to my dev server which holds multiple copies. Have a look here: MySQL Backup Script

And the sysadmin looked at the server and saw that it was good. That it served CFML pages extrodinarily fast, and the sysadmin was pleased. The sysadmin rested. And was rewarded with cake.

Frankly, I think it’s astounding that any SEO company could make such an assertion, anyone in the industry would immediately understand just how ridiculous this statement is – but unfortunaty our clients are not experts and can only make their decisions based on the advice they receive from the people who claim to be. My clients in this case have made an informed choice, based on patently false information…

So I’d like to state definitively: ColdFusion has nothing whatsoever to do with SEO… Neither does php, asp, ruby, python, perl, or in fact any back end language at all…

Search engines read the ‘mark-up’ of a website, that is to say the HTML that anyone can see by clicking ‘view source’ in the browser… A back end language such as ColdFusion, php or asp, will generate HTML mark-up according to the templates that have been coded by a developer. It is entirely possible for any of these back end languages to generate identical mark-up.
My clients in this case have paid to have their website recoded, but the HTML produced will be exactly the same as their existing website and so their search engine results will be completely unaffected… In fact, since the file extensions will change on every page, many incoming links will no longer work, so unless their new developer puts 301 redirects in place, they will most likely drop in the rankings.

As a developer working primarily with ColdFusion, it’s easy to feel angry that my clients have been mislead into believing that the work I have done for them is somehow inferior because of the language used, and indeed if I knew the name of the SEO company involved I would be in contact with them directly to argue the issue as well as naming them here… But what’s worrying is that it’s really the clients that are suffering. Through ignorance of how the Internet works, they have been led down a route that is both costly and futile, by a company that either has no knowledge of their own industry, or even more worrying, is ruthless enough to take advantage of the ignorance of their clients.

I only want what’s best for the people I work for. I want their sites to work well, to become popular, to generate revenue – and I try to give the best advice I can to help clients understand what can be
gained from their web presence. I’m sure we all do… But in a technical industry such as ours, one that combines so many different disciplines, one that every virtually every business needs to interact
with and yet very few understand, how can we combat misinformation like this?

The average client doesn’t need or want to understand how the Internet works. Mention CSS, JavaScript, back end software, web standards, etc. to the average client and they will at best, stare at
you blankly… At worst pretend they know what you’re talking about when in fact they haven’t a clue. In my experience, the best clients to work with are those that have enough knowledge of the web to understand that user experience is key, that copy is important, and that their website is an ongoing project. They don’t need to know the intricacies of code, servers and the like, but they need to trust
us to make certain decisions on their behalf.

Perhaps it’s time we tried to educate our clients. I don’t know how much information is out there to explain the basics. Maybe we should have a simple guide explaining how websites are put together that we can give to clients at the beginning of new projects… Either that or perhaps SEO companies should be licensed and regulated!!!

As I write, I’m not entirely sure what the point of this post is, but I feel it’s an issue not generally discussed and I’d be interested to know what others think. Perhaps the larger agencies don’t run into
this problem due to their reputation as experts or their tendency to work with bigger clients; but at my level, developing for small companies with little or no online strategy, half the battle is guiding them in the right direction.

So how do we compete with liars???

I know as a ColdFusion developer, I should probably be using Mango Blog or BlogCFC – Both of which are pretty awesome in their own right – but at the end of the day WordPress is simply a better tool for the job.
I’ve heard it said before, but I’ll chuck my opinion out there too: The new WordPress UI is absolutely fantastic, and I have to say it’s that more than anything else that made me choose it over the other two.

Of course, integrating WordPress with the rest of my ColdFusion site proved interesting. Several things in the site template are achieved through ColdFusion and had to be replicated in PHP. I ended up writing a CFC to pull data from a WordPress blog, which has proved enormously helpful. If I get the chance, I’ll clean that up a bit and put it up as a download – I can’t be the only one wanting to use WordPress on a ColdFusion powered site.

Props go to Anthony at Afovea.com for the lovely new design.
Also, due largely to two fantastic talks by Jon Tan and Richard Rutter at Skillswap Brighton, I have lovingly embraced typography and this site adheres strictly to a vertical rhythm. The math excites me. Really. It’s actually quite worrying.

That’s all for now. I’ve a few articles in the pipeline that I’ll be posting up here fairly soon. Until then, I’d love to hear any feedback on the new site.
Use the lovely comments box below.

Awesomage.