Rob's Guide to...

SQL Injection Fix for ColdFusion

2008-08-17T10:04:00.001-07:00

This is some code I modified from Ray Berry. It also checks the LEN of the querystring. So, if you pass big stuff through your querystring.. stop, or change the LEN to a different number.

Put this code in your application.cfm:

" or #cgi.query_string# contains "<" or #cgi.query_string# contains "char(40)" or #cgi.query_string# contains "char(41)" or #cgi.query_string# contains "char(60)" or #cgi.query_string# contains "char(62)" or #cgi.query_string# contains "char(37)" or #cgi.query_string# contains "char(91)" or #cgi.query_string# contains "char(93)" or #cgi.query_string# contains "char(94)" or #cgi.query_string# contains "]" or #cgi.query_string# contains "[" or #cgi.query_string# contains "^" or #cgi.query_string# contains "CAST" or #cgi.query_string# contains "DECLARE" or #cgi.query_string# contains "DEFINE" or #cgi.query_string# contains "EXEC" or #cgi.query_string# contains "@" OR len(cgi.querystring) GT 60>

" or #form.CFID# contains "<" or #form.CFID# contains "char(40)" or #form.CFID# contains "char(41)" or #form.CFID# contains "char(60)" or #form.CFID# contains "char(62)" or #form.CFID# contains "char(37)" or #form.CFID# contains "char(91)" or #form.CFID# contains "char(93)" or #form.CFID# contains "char(94)" or #form.CFID# contains "%" or #form.CFID# contains "]" or #form.CFID# contains "[" or #form.CFID# contains "^")>

" or #form.CFTOKEN# contains "<" or #form.CFTOKEN# contains "char(40)" or #form.CFTOKEN# contains "char(41)" or #form.CFTOKEN# contains "char(60)" or #form.CFTOKEN# contains "char(62)" or #form.CFTOKEN# contains "char(37)" or #form.CFTOKEN# contains "char(91)" or #form.CFTOKEN# contains "char(93)" or #form.CFTOKEN# contains "char(94)" or #form.CFTOKEN# contains "%" or #form.CFTOKEN# contains "]" or #form.CFTOKEN# contains "[" or #form.CFTOKEN# contains "^")>

#errorcode#
Your actions have triggered a message to the adminstrator.

Money Woes

2008-07-14T09:17:00.000-07:00

I am 3 hours short of the required 40 hours needed for my private pilots license. But, at $110 an hour to fly I am stuck on the ground for at least another month. I flew with my instructor a few weeks ago for a practice checkride. There are still a few things I need to work on. I keep missing my rollouts for heading and I gain or lose altitude during manuvers. Just some fine tuning. I thought I would do pretty good, but that wasn't the case.

So, in the mean time I am studying for my instrument written. In my search for FREE study materials I found the FAA site that has all the study material you could want. These are the actual books that other companies reprint and sell to you for $20. Having a hard copy book in front of you is nice, but if you're on a budget these will do just fine.

FAA Manuals
Aeronautical Information Manual
Air Quality Handbook
Aviation Instructor's Handbook (PDF)
Aviation Safety Statistical Handbook
Banner Tow Operations (PDF)
Instrument Flying Handbook
Instrument Procedures Handbook
International Flight Information Manual
Pilot Safety Brochures
Pilot's Handbook of Aeronautical Knowledge
Plane Sense - General Aviation Information (PDF)
Safety Risk Management
Student Pilot Guide (PDF)

So, if you have the money to fly or not, start studying. You have 2 years after most tests to actually get your license.

2008-06-13T07:22:00.000-07:00

Here is my XC log from my practice checkride that never happened. It is from VDF - MLB - OCF. As a side note... my instructor later pointed out that I added +5 to the last heading instead of subtracting -5. So, the new heading should be 306, not 316.

First Solo!

2008-03-16T16:43:00.000-07:00

Thursday, March 13th 2007, started like any day. A day of work in anticipation of getting to fly. I knew I was getting close to soloing but didn't think it was going to happen today. I figured at least two more flights. I have just started flying with a new instructor and he was still trying to figure out where I stood as far as skills. When I got to the airport for my 5:30pm lesson I was asked to meet Bennett upstairs in the flight instructors office. So, up I went. Bennett was sitting behind his desk and asked me if I had ever taken the presolo test. I told him that I had just passed my FAA written exam and should count for something. He said that I had to take a local test. Luckily I had printed out and taken a test I found online from an instructor named Darren Smith. (A little plug for Darren: http://www.geocities.com/cfidarren/).

After Bennett reviewed the test real quick he said it was a good test. We went over the test and he asked me some questions and had me do some look ups on the sectional. After he was satisfied I knew my stuff, we got dispatched.

We did a thorough preflight as I explained what I was doing on each step. Bennett had some good info as well.

It was about 6:30pm when we finally got fired up and started taxiing towards the active runway. We did our runup checks and announced our intentions to take the runway. We were departing on rwy 5 for a straight out departure to the practice area north of the airport.

We did some slow flight practice, an engine out and some turning stalls (which I hate). Then we headed back to the airport for some practice landings. We did two touch and go's and Bennett said the next one would be a full stop. I had a suspicion that he was going to hop out and I was 100% correct. We cleared the runway and he popped open the canopy and said he wanted me to do two touch and go's and a full stop.... BY MYSELF! I asked him where his radio was so he could talk me down if things went wrong. He said he didn't have one.

After dropping Bennett off to stand in the field off to the side of the taxiway I headed towards the active runway. Making sure my flaps were set correctly I announced my intentions to the area, I took the runway. Lining up with the centerline I slowly added the power to full throttle. She rolled out just fine and lifted off so quickly it scared me. With just me in the cockpit she took to the sky like I have felt her do. Then I realized as I removed my notch of flaps that I was all my myself. Everything looked different.. there was Tampa off to my right... there was the Hard Rock casino right in front of me... there was the Ford Amphitheater off to my left. I made sure to hit all my altitudes and marks and make all my radio calls at the right time. Things were going great. I did notice that the sun was starting to set and I only had about another 15 minutes until sunset. Turning to final I thought to myself... this is it... I have to nail this. I saw Bennett standing in the field next to the runway. He looked like a little ant down there. I lined up the runway and finished my final descent. Things were looking good. There was a slight crosswind of about 5kts off my right side. It blew me around pretty good but I managed to keep the plane on the centerline. I nailed my first landing perfect... not too hard, no ballooning. The Evecktor LightSport gets a little "squirmy" on touchdown and gets very touchy. I gently fought the plane as it wanted to veer off the runway to the left, then back to the right. I finally got her lined up again and punched the throttle again.. off she went. My next two landings were just as good as the first. I picked up Bennett and we headed back to the parking area. He congratulated me and said it looked good from where he was standing.

Sadly, they don't do anything special at Leading Edge Aviation for your first solo. So, we just filled out my log book and made the endorsements. I can now practice by myself in the local area. I think I'll wait another hour or so with an instructor before I trust myself. Somehow it feels like I was just getting lucky landing the plane by myself.

Here is the link to the presolo exam for the Tampa area on Darren's site.
http://www.geocities.com/tampafbo/presoloexam.pdf

Smooth Air and Happy Landings!

FFA Private Pilot Written Exam

2008-03-02T19:09:00.000-08:00

Finally something to write about. I passed my written PPL FFA exam on March 1, 2008. After months and months (years) to studying I passed the test with a 90%. I missed 5 questions out of 61. The whole time I was taking the test it felt like I was missing alot of the questions. I used the Gleim prep software and the Gleim FFA test prep book. Both have the same questions. The book has a study section before each section. I also paid $50 for some online video's from http://www.americanflyers.net/faaknowledgetest/ipass.htm They have since raised their price up to $125. I don't think I would have done that. But, at $50 it was a nice addition.

Now I can sit back and enjoy the flying part of my license witout have to worry about the written test. The next challange is going to be getting ready for my FFA checkride. Someone told me that the examiner looks at your written test scores and grills you on the sections you missed. Hopefully that means I will have it pretty easy.

I have 13 hours so far. I need a total of 40 hours. 20 of those hours with an instructor and 20 by myself. I am hoping to solo the next time I go up. I have been doing pretty good on landings. I stuck a really good one my last time up.

I might be stuck in a cubicle, but my head is at 30,000 ft. I have already busted out my instrument study books I got for Christmas. While I will still be reading and studying the PPL books for my checkride, I will also be diving head first into the instrument stuff.

I also have to write about another great site I found.
http://www.dauntless-soft.com/products/
This website has a little bit of everything. From simulator and real world airplane checklists to VOR/ADF simulators. They even have a section of handy mnemonics to help remember things.

Website LIVE!

2008-02-14T17:49:00.000-08:00

After a long journey, the new Leading Edge Aviation website is live. The website framework and design was ready months ago. The content was a little slow getting developed.

http://www.LeadingEdgeAviation.com/

Their aircraft sales website is next. We are working out the details now and should have a great looking sales website in about 30 days.

Dec 16th Flight Canx'd

2008-01-02T14:15:00.000-08:00

The only cold and windy day in December and it has to be on the 16th. But, it gave me time to get my flight physical taken care of. I went to see Dr Wartman in Valrico, FL. He is a very personable Dr. I feel I got my money's worth ($95). I picked up my certificate the next day.

I faxed my certificate to the DUATS office so they could add me to their database. I then signed up for my DUATS account. I can now use all the flight planning software without restrictions.

I downloaded "GoldenEagle FlightPrep 2007" from the DUATS website. It is a scaled down free version of a "Pay to Upgrade" software package. Still trying to figure out of I like the AOPA flight planner or this new one.

Just found out today that my instructor Wes bailed on the company too. I got ahold of the head instructor and he will fly with me this weekend. So, my weekend isn't lost. I hope the weather will get better. Forcast says it is supposed to warm up in Tampa and be great flying this weekend.

Got my head in the clouds...

Back in the Air!

2007-12-09T09:07:00.001-08:00

After a short break on the ground, I finally went back up in the air today. I logged 1.4 hours today doing pattern work around KVDF. We did about 9 touch and go landings. The wind starting picking up towards the final few making for some good times. There were also alot of big birds in the pattern riding thermals. My instructor Wes said that I had two really good landings on my own with very little help.

There are so many things to remember while trying to land a plane. Landing seems like a pretty easy thing to do reading it in a book.

Total time logged so far: 10.7 hours

Next flight scheduled Sunday the 16th, 2007.

Flying Update and...

2007-12-06T19:47:00.000-08:00

Well, as you can see by the dates it's been a while sonce I posted. Since my last post I have flown a few more hours. My main instructor got a job with an airline and is gone now. I wish Tyler the best and hope to keep in touch with him to see how he's doing.

I have 9 hours logged so far and am waiting for my medical. I need my medical before I solo. I think with a few more hours of touch and go's I will be ready to fly on my own.

I have been studying hard for my private pilots written test. I am using the Gleim test prep software. http://www.gleim.com/ I have also found a bunch of free resources to help study for all the written tests. Here is some of the cool stuff I found:

http://www.atcsim.nasa.gov/ - Another ATC Sim Game

http://www.faa.gov/library/manuals/aviation/ - Links to FULL (FREE) books by the FAA

http://www.faa.gov/education_research/testing/airmen/test_questions/ - ALL THE QUESTIONS FOR THE WRITTEN EXAMS (no answers)

http://www.exams4pilots.org/ - Tons of FAA practice questions and answers in test format

It is hard to focus on just taking one written at a time when there is so much free information out there.

I have decided to keep going after my private license. I setting up a 2 year plan to get as far as I can with my licenses. The past few months I have been thinking about a little career change. The BIG problem: The starting pay for a First Office is only $20k. It's a little more than scary to think someone with so little pay is responsible for my life and the a multimillion dollar aircraft.

My next flight is this Sunday, the 9th of Dec.

My goal is to take my written for my Private by Jan 18th, 2008.

Hobby Turns Addiction

2007-10-14T08:01:00.000-07:00

I have 5 flying hours logged so far. I have 4 more hours booked today (2 hours) and tomorrow (2 hours). I am determined to solo in 15 hours. So, this may be the month I solo. I have my flight physical scheduled for Saturday the 27th of October.

I found an ATC Sim game last night. Another addiction. I played it until 2am.
ATC-SIM
IT'S FREE! You can pay for additional airports, but they give you 7 airports for free.

Once you get the hang of the commands, it is a very addictive game.

Leading Edge Aviation Website

2007-10-06T12:23:00.000-07:00

I have just been awarded the contract for the redesign of the www.leadingedgeaviation.com website. Work has begun on finalizing the design and features of the new website. The work should be done and the site should launch within the next 30 days.

The best news is... I am working this website for trade in flight/instructor time. I should be able to finish my Private Pilot's license in trade for a new website.

Aviation Links

2007-09-25T20:29:00.000-07:00

Here are some good flying bookmarks I have collected. Some of them are links directly to airports I am near, but you can navigate to other airports when you get to the site.

Links are in no particular order.


Tampa Bay Area Aviation Weather Page
AeroPlanner.com
ADDS - METARs
Aviation.com
Sporty's Pilot Shop - Takeoff Page
XML data feeds - Current Conditions - NOAA's Na...
PilotMall.com Aviation Supplies - Pilot Shop
Link to Skyvector.com - Online Aeronautical Charts
AirNav
Landings: Welcome: News: databases, aircraft sa...
G1000 - Garmin GOS
7-Day Forecast for Latitude 27.96N and Longitud...
AOPA Flight Training - Virtual Flight Bag: Plan...
AOPA Online - Aircraft Owners and Pilots Associ...
Pilot Supplies from Sporty's® Pilot Shop - Home Page
Live Air Traffic Control Audio Feeds | LiveATC.net
FlightAware > Live Flight Tracker > Orlando Intl Airport (Orlando, FL) [KMCO/MCO]
Gleim Publications
KVDF - Vandenberg Airport
Student Pilot - Flight Training Online

Here are a few flight sim links:

FlyTampa
Fly Online with VATSIM.net - Virtual Air Traffi...
Microsoft Flight Simulator - Home
Antonio's Sim Pictures - Revised October 2006

Two Hours Logged

2007-09-02T13:58:00.000-07:00

After raın cancelled my fırst flıght on Saturday I got off the ground on Sunday. I am taking lessons in an Evektor Sportstar Light Sport. N915LS. I have been up twice logging two hours so far. I have 5 landings logged.

The weather this time of year in Tampa is very rainy. It has rained every time I have went to fly. My second flight was almost canceled. A severe thunderstorm rolled through just as I was doing my preflight. The worse of it rolled through pretty quick. We ended up just doing some taxiing practice and 4 touch and go's in the airport traffic pattern. The last landing I did all by myself. I guess learning how to fly in bad weather will help me be a more prepared pilot. If everything was perfect I wouldn't learn too much. I have the flying bug for sure. On average it is costing my about $140 an hour to fly with an instructor. His goal now is to get me to solo as soon as he can. After the last landing I was pretty confident that it will be soon.

The Evektor is a small plane and likes to fly slow. Average speed is around 80 mph. Climbs and landings are at about 70 mph.

I also purchased Gleim's FAA Test Prep 2008 software. Lots of test questions. I now know I have lots to learn. Flying is going to be the easy part.

Intro Flight Scheduled

2007-08-29T12:31:00.000-07:00

My first "Discovery Flight" is scheduled for this Saturday. This is where an instructor takes you up for a 30 minute flight around the area to get you hooked on flying. I will be flying in N733UJ, a Cessna 172.

Brewing Beer

2007-07-20T20:52:00.000-07:00

I have always been fascinated by beer. My kids bought me a Mr Beer kit 10 years ago for Christmas. I made a few batches and they were interesting to say the least. I like all kids of beer. Beer is yummy. So, I have been thinking about taking the plunge and buying a real beer brewing kit. While searching for beer stuff on the Internet I found a pretty cool store for brewing equipment. http://store.homebrewheaven.com/ This site has all sorts of kits. They even have user reviews and question that the staff answers.

I also found a magazine that's "All About Beer" http://www.allaboutbeer.com After receiving my first issue, I read it cover to cover. I realized I have alot to learn about beer.

I was standing in the bathroom at a micro brewery in Fort Walton Beach called Santa Rosa Brewery. I saw an old article from the 1800's about alcohol fermentation. Here it is:

SOLUTION OF THE SECRET OF ALCOHOLIC FERMENTATION
by Freidrich Woehner and Justus von Liebig

Beer yeast, when dispersed in water, breaks down into an infinite number of small spheres. If these spheres are transferred to an aqueous solution of sugar they develop into small animals. They are endowed with a sort of suction trunk with which they gulp up the sugar from the solution. Digestion is immediately and clearly recognized because of the discharge of excrements. These animals evacuate ethyl alcohol from their bowels and carbon dioxide from their urinary organs. Thus one can observe how a specifically lighter fluid is exuded from the anus and rises vertically whereas a stream of carbon dioxide is ejected at very short intervals from their enormously large genitals.

- Annals of Chemistry, Volume 29, 1839

Good stuff, I love it.

Well, I hope you will follow my beer adventures. I am ready to buy my kit and try my hand and crafting my own beers.

Intermediate Homebrew Equipment Kit -- Homebrew...
All About Beer Magazine-Online
Beer Brewing -- Homebrew Heaven Online Store
Homebrew Heaven Beer and Wine Making Supplies, ...
HOMEBREW Digest #1578 Mon 14 November 1994
London pubs off the beaten path - Travel - MSNB...
StoreFront -- Homebrew Heaven Online Store

First Blog

2007-07-20T20:32:00.000-07:00

So, it looks like this blog stuff isn't going anywhere for a while. I've never saw the need for my own blog until recently. I have stuff to say and I hate mySpace. Postings may include beer, ColdFusion, life lessons, kids, babies, women, work, careers and other stuff.