RE: Cfloop List Multiple Charecter Delimiters
Hey guys thank you all for your help. I think the answer to my original question is no ColdFusion doesn't support multiple character delimiters however there are a few options for replacements. Charlie, I actually have been using conditional statements like your example for instances where I need to use multiple character delimiters, I just wasn't sure if there was a better way of doing this. Thanks though! Paul -Original Message- From: Leigh [mailto:cfsearch...@yahoo.com] Sent: Thursday, February 11, 2010 10:55 PM To: cf-talk Subject: Re: Cfloop List Multiple Charecter Delimiters My answer was just... keep it simple :) Always good advice :) ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330641 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: how do I create a new file with cffile?
I agree with Barney. This sounds like either a permissions issue, or your destination folder doesn't exist. Paul -Original Message- From: Matthew Smith [mailto:chedders...@gmail.com] Sent: Thursday, February 11, 2010 10:14 PM To: cf-talk Subject: how do I create a new file with cffile? I am trying to save dynamic pages as static html with cffile. I have the html I want to write, but when I go to write it, I get: An error occurred when performing a file operation write on file D:\inetpub\site\page.htm. The cause of this exception was: java.io.FileNotFoundException: D:\inetpub\sitepage.htm (The system cannot find the path specified). The file does not exist. I am trying to create a new file. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330642 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Cfloop List Multiple Charecter Delimiters
Why not make a duplicate of the list, use RegExp to replace oat with a single delimiter such as a pipe | and then loop though the list. That way you only have to do the loop once. On Fri, Feb 12, 2010 at 9:12 AM, Paul Alkema paulalkemadesi...@gmail.comwrote: Hey guys thank you all for your help. I think the answer to my original question is no ColdFusion doesn't support multiple character delimiters however there are a few options for replacements. Charlie, I actually have been using conditional statements like your example for instances where I need to use multiple character delimiters, I just wasn't sure if there was a better way of doing this. Thanks though! Paul -Original Message- From: Leigh [mailto:cfsearch...@yahoo.com] Sent: Thursday, February 11, 2010 10:55 PM To: cf-talk Subject: Re: Cfloop List Multiple Charecter Delimiters My answer was just... keep it simple :) Always good advice :) ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330643 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: My ColdFusion JRun service is running at 50% CPU but I have no Idea why.
http://www.ilsweb.com/JRun4-stack-traces/ Hmm, I don't see anything too useful in there. There were a few threads running, but I'm thinking they were all related to getting the stack trace. To allow the jConsole tool to connect to each instance I had to configure each one with a separate jvm.config so that each instance uses a different port number to report the JRun statistics to the console. Thus I can tell what instance I am looking at by the port number of the jConsole window and that is the one I connected to and dumped the threads. So, you know which instance jConsole is attached to, but do you know which instance is causing the CPU usage? Are you getting CPU usage from jConsole somewhere or are you looking at Windows Processes? If you are super duper sure you are getting stack traces from the instance that is causing the CPU spike, then I would add garbage collection debugging args to your JVM and analyze if garbage collection is running. I'm not sure if GC shows up as a thread in your stack trace or not. ~Brad ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330644 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: My ColdFusion JRun service is running at 50% CPU but I have no Idea why.
On 2/12/2010 6:58 AM, Brad Wood wrote: http://www.ilsweb.com/JRun4-stack-traces/ Hmm, I don't see anything too useful in there. There were a few threads running, but I'm thinking they were all related to getting the stack trace. That is all I could see too, the only ColdFusion threads I could see running was the Monitor used to get the stack traces. To allow the jConsole tool to connect to each instance I had to configure each one with a separate jvm.config so that each instance uses a different port number to report the JRun statistics to the console. Thus I can tell what instance I am looking at by the port number of the jConsole window and that is the one I connected to and dumped the threads. So, you know which instance jConsole is attached to, but do you know which instance is causing the CPU usage? Are you getting CPU usage from jConsole somewhere or are you looking at Windows Processes? Yes, jConsole has a panel that tracks the CPU usage of the JVM. I am now off for a Furlough Friday, the weekend and then the Monday holiday. So I won't be back on this system until Tuesday. If you are super duper sure you are getting stack traces from the instance that is causing the CPU spike, then I would add garbage collection debugging args to your JVM and analyze if garbage collection is running. I'm not sure if GC shows up as a thread in your stack trace or not. I will look into this next week. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330645 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Cfloop List Multiple Charecter Delimiters
Do this:
cfloop index=i array=#variables.exampleList.split('oat')#
...
/cfloop
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330646
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
SOT: directory protection
We have an app with a protected area that just using a basic session check in application.cfm. In the protected area there is a directory of PDFs. No one can access them through the app without logging in. If the person knew the url to the pdf though it would serve since application.cfm would not run to check the session. Is there any quick way to secure these? Maybe with windows authentication? I know we could make a cfm page to look up and serve the file so the link to the pdf is never exposed but these are uploaded via a cms and the link put into the page by the client that would be more of a training exercise to make sure they are using the right link to the pdf, etc. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330647 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: directory protection
Why not route the downloads through a single CFM file (download.cfm?f=some identifier) and then use CFCONTENT to serve up the PDF file. On Fri, Feb 12, 2010 at 10:38 AM, Scott Mulholland smulholl...@aimg.comwrote: We have an app with a protected area that just using a basic session check in application.cfm. In the protected area there is a directory of PDFs. No one can access them through the app without logging in. If the person knew the url to the pdf though it would serve since application.cfm would not run to check the session. Is there any quick way to secure these? Maybe with windows authentication? I know we could make a cfm page to look up and serve the file so the link to the pdf is never exposed but these are uploaded via a cms and the link put into the page by the client that would be more of a training exercise to make sure they are using the right link to the pdf, etc. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330648 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
SOT: Preventing Link-Builders
Sorry, this is a bit OT, but we're using CF for the site, so thought I'd see what other CF folks are doing about it. We've got a very busy legacy home-grown forum that since late August 2009 or so has been getting hit heavily by the Link-Building industry. Posting requires membership, which requires a captcha to be entered, and a confirmation email link to be clicked. Everyday, I search and invalidate hundreds of link-building memberships (the ones I can find). Interestingly, none of the links ever get posted -- we're using akismet, which does a pretty good job of stopping these. But, time is money, and hunting these suckers down (not to mention the ones I don't find out of oh, 700+ new memberships a day), plus just their presence in our database (more records == more processing time) is not a good thing. What are folks doing about this kind of abuse? And, can someone educate me on why the link-builders keep creating accounts when it's obvious their posts aren't getting published? I can tell from the data I'm seeing that it's the same people/scripts day after day. I'm at a loss. -KJ ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330649 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
So... Let me make sure I understand. They pass the Captcha and they also click the link in the email? That's some serious scripting. The reCaptcha stopped all spam to my site. If they are clicking on the email links as well, that's pretty advanced.. On Fri, Feb 12, 2010 at 8:27 AM, Kris Jones kris.jon...@verizon.net wrote: Sorry, this is a bit OT, but we're using CF for the site, so thought I'd see what other CF folks are doing about it. We've got a very busy legacy home-grown forum that since late August 2009 or so has been getting hit heavily by the Link-Building industry. Posting requires membership, which requires a captcha to be entered, and a confirmation email link to be clicked. Everyday, I search and invalidate hundreds of link-building memberships (the ones I can find). Interestingly, none of the links ever get posted -- we're using akismet, which does a pretty good job of stopping these. But, time is money, and hunting these suckers down (not to mention the ones I don't find out of oh, 700+ new memberships a day), plus just their presence in our database (more records == more processing time) is not a good thing. What are folks doing about this kind of abuse? And, can someone educate me on why the link-builders keep creating accounts when it's obvious their posts aren't getting published? I can tell from the data I'm seeing that it's the same people/scripts day after day. I'm at a loss. -KJ ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330650 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
Yeah, this is what is so astounding. Most of the emails are yahoo.comaddresses, but we're seeing an increase in gmail.com addresses as well. And we do require unique email address for membership. Figure it has to be manual to some extent. Cheers, Kris On Fri, Feb 12, 2010 at 11:33 AM, Phillip Vector vec...@mostdeadlygame.comwrote: So... Let me make sure I understand. They pass the Captcha and they also click the link in the email? That's some serious scripting. The reCaptcha stopped all spam to my site. If they are clicking on the email links as well, that's pretty advanced.. On Fri, Feb 12, 2010 at 8:27 AM, Kris Jones kris.jon...@verizon.net wrote: Sorry, this is a bit OT, but we're using CF for the site, so thought I'd see what other CF folks are doing about it. We've got a very busy legacy home-grown forum that since late August 2009 or so has been getting hit heavily by the Link-Building industry. Posting requires membership, which requires a captcha to be entered, and a confirmation email link to be clicked. Everyday, I search and invalidate hundreds of link-building memberships (the ones I can find). Interestingly, none of the links ever get posted -- we're using akismet, which does a pretty good job of stopping these. But, time is money, and hunting these suckers down (not to mention the ones I don't find out of oh, 700+ new memberships a day), plus just their presence in our database (more records == more processing time) is not a good thing. What are folks doing about this kind of abuse? And, can someone educate me on why the link-builders keep creating accounts when it's obvious their posts aren't getting published? I can tell from the data I'm seeing that it's the same people/scripts day after day. I'm at a loss. -KJ ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330651 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
If they are clicking on the email links as well, that's pretty advanced.. No its not. It's simple. A small challenge for a general purpose one, but trivial if you're targeting a specific site/application. If you know how to use cfpop, rematch and cfhttp, you can throw an email validation link clicker together in mere minutes. For beating captchas, it depends on how complex they are: a lot of them can be beaten by OCR, and the rest can be beaten by cheap labour in eastern europe/russian/etc. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330652 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
Look in your Web server logs to see exactly what path someone takes in order to do those posts. First verify that they are going through your security mechanism, instead of bypassing it entirely. It could be that your site has a security vulnerability that is being exploited. You might also be able to determine whether it is a robot or a human by analyzing the logs. If it is the same people every day, you could ban them based on their IP address. You should also distinguish between the SEO industry and spammers. My guess is that these are spammers, which isn't the same industry as SEO. When you say link builder do you mean spam ads, or do you mean something else? -Mike Chabot On Fri, Feb 12, 2010 at 11:33 AM, Phillip Vector vec...@mostdeadlygame.com wrote: So... Let me make sure I understand. They pass the Captcha and they also click the link in the email? That's some serious scripting. The reCaptcha stopped all spam to my site. If they are clicking on the email links as well, that's pretty advanced.. On Fri, Feb 12, 2010 at 8:27 AM, Kris Jones kris.jon...@verizon.net wrote: Sorry, this is a bit OT, but we're using CF for the site, so thought I'd see what other CF folks are doing about it. We've got a very busy legacy home-grown forum that since late August 2009 or so has been getting hit heavily by the Link-Building industry. Posting requires membership, which requires a captcha to be entered, and a confirmation email link to be clicked. Everyday, I search and invalidate hundreds of link-building memberships (the ones I can find). Interestingly, none of the links ever get posted -- we're using akismet, which does a pretty good job of stopping these. But, time is money, and hunting these suckers down (not to mention the ones I don't find out of oh, 700+ new memberships a day), plus just their presence in our database (more records == more processing time) is not a good thing. What are folks doing about this kind of abuse? And, can someone educate me on why the link-builders keep creating accounts when it's obvious their posts aren't getting published? I can tell from the data I'm seeing that it's the same people/scripts day after day. I'm at a loss. -KJ ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330653 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
Actually I would be more inclined to think that your link spammers came from a low cost human labor pool like Amazon Mechanical Turk. https://www.mturk.com/mturk/welcome But if not, that is some pretty sophisticated coding. SEO is the new spam. G! On Fri, Feb 12, 2010 at 11:33 AM, Phillip Vector vec...@mostdeadlygame.comwrote: So... Let me make sure I understand. They pass the Captcha and they also click the link in the email? That's some serious scripting. The reCaptcha stopped all spam to my site. If they are clicking on the email links as well, that's pretty advanced.. On ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330654 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: NullPointer exceptions
Hi have the same thing on CF 8 windows 32 bit ent and on 2 linux boxes 64 bit ent. For no reason it will sometime give a nullpointer error with webservices, but I think it has to do with CFC's in some way. I've been trying to debug it, but for the last 2 months I haven't had any luck on pointing to the exact cause. There has to be some sort of bug in CF as it looks that generates this nullpointer randomly. If I find anything, I'll let you know! Mike 2010/2/11 Brad Wood b...@bradwood.com Hmm, looks like the error happened while getMetaData was being called from Transfer. Have you posted this on the Transfer list? Also, out of curiosity, are you using trusted cache? ~Brad - Original Message - From: Tom McNeer tmcn...@gmail.com To: cf-talk cf-talk@houseoffusion.com Sent: Thursday, February 11, 2010 8:54 AM Subject: Re: NullPointer exceptions On Thu, Feb 11, 2010 at 9:40 AM, Brad Wood b...@bradwood.com wrote: Can you give us a sample stack trace for one of the errors? Sure. But hang on - they're long. This one is from the CF exception log: = Error,jrpp-3,02/10/10,22:38:05,, java.lang.NullPointerException at coldfusion.util.Utils.getServletPath(Utils.java:86) at coldfusion.util.Utils.getServletPath(Utils.java:76) at coldfusion.util.Utils.getBaseTemplatePath(Utils.java:405) at coldfusion.runtime.TemplateProxyFactory.getTemplateFileHelper(TemplateProxyFactory.java:1514) at coldfusion.runtime.MetadataUtils.getComponentMetadata(MetadataUtils.java:112) at coldfusion.runtime.CfJspPage.GetComponentMetaData(CfJspPage.java:2667) at coldfusion.runtime.TemplateProxy.getRuntimeComponentMetadata(TemplateProxy.java:1755) at coldfusion.runtime.TemplateProxy.getRuntimeMetadata(TemplateProxy.java:1616) at coldfusion.runtime.MetadataUtils.getMetaData(MetadataUtils.java:54) at coldfusion.runtime.CfJspPage.GetMetaData(CfJspPage.java:2640) at cfAbstractBaseMeta2ecfc803585718$funcCLONE.runFunction(C:\webApps\frameworks\transfer\com\object\AbstractBaseMeta.cfc:33) ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330655 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
By Link-Builders, spam, call it what you will. I mean stuff like (and I can only hope this post doesn't get halted by HOF) chiropractic ads, weight reducing, timeshare investments, cooking dvds, sports equipment, food preparation equipment, you name it. I will start taking a look at the logs more carefully. It will required a concerted effort -- the site is very busy. Cheers, Kris On Fri, Feb 12, 2010 at 11:54 AM, Mike Chabot mcha...@gmail.com wrote: Look in your Web server logs to see exactly what path someone takes in order to do those posts. First verify that they are going through your security mechanism, instead of bypassing it entirely. It could be that your site has a security vulnerability that is being exploited. You might also be able to determine whether it is a robot or a human by analyzing the logs. If it is the same people every day, you could ban them based on their IP address. You should also distinguish between the SEO industry and spammers. My guess is that these are spammers, which isn't the same industry as SEO. When you say link builder do you mean spam ads, or do you mean something else? -Mike Chabot On Fri, Feb 12, 2010 at 11:33 AM, Phillip Vector vec...@mostdeadlygame.com wrote: So... Let me make sure I understand. They pass the Captcha and they also click the link in the email? That's some serious scripting. The reCaptcha stopped all spam to my site. If they are clicking on the email links as well, that's pretty advanced.. On Fri, Feb 12, 2010 at 8:27 AM, Kris Jones kris.jon...@verizon.net wrote: Sorry, this is a bit OT, but we're using CF for the site, so thought I'd see what other CF folks are doing about it. We've got a very busy legacy home-grown forum that since late August 2009 or so has been getting hit heavily by the Link-Building industry. Posting requires membership, which requires a captcha to be entered, and a confirmation email link to be clicked. Everyday, I search and invalidate hundreds of link-building memberships (the ones I can find). Interestingly, none of the links ever get posted -- we're using akismet, which does a pretty good job of stopping these. But, time is money, and hunting these suckers down (not to mention the ones I don't find out of oh, 700+ new memberships a day), plus just their presence in our database (more records == more processing time) is not a good thing. What are folks doing about this kind of abuse? And, can someone educate me on why the link-builders keep creating accounts when it's obvious their posts aren't getting published? I can tell from the data I'm seeing that it's the same people/scripts day after day. I'm at a loss. -KJ ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330656 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
On Fri, Feb 12, 2010 at 4:56 PM, Gerald Guido gerald.gu...@gmail.comwrote: SEO is the new spam. Certainly is - I've just spent a couple of days putting in an approval system for www.nibblous.com - getting more and more spam in comments and recipe postings, and even profiles. -- mac jordan www.reactivecooking.com | www.nibblous.com | www.jordan-cats.org twitter: @ramtops ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330657 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
Not even suggesting it can't be done. Of course it can be done, and with fairly basic skills. However, I can tell, from at least 2 of the most egregious offenders, that they are getting links inserted (with success) on other sites. So it's not just our site. And yeah, many of the IPs (that aren't spoofed) are eastern european in origin, or resolve to the Philippines. Would still like to stop this in it's tracks. Thoughts? Cheers, Kris On Fri, Feb 12, 2010 at 11:39 AM, Peter Boughton bought...@gmail.comwrote: If they are clicking on the email links as well, that's pretty advanced.. No its not. It's simple. A small challenge for a general purpose one, but trivial if you're targeting a specific site/application. If you know how to use cfpop, rematch and cfhttp, you can throw an email validation link clicker together in mere minutes. For beating captchas, it depends on how complex they are: a lot of them can be beaten by OCR, and the rest can be beaten by cheap labour in eastern europe/russian/etc. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330658 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: SOT: Preventing Link-Builders
I dont think you mentioned using CFFormProtect, but it is another layer that I have used. http://cfformprotect.riaforge.org/ -Original Message- From: Kris Jones [mailto:kris.jon...@verizon.net] Sent: Friday, February 12, 2010 12:08 PM To: cf-talk Subject: Re: SOT: Preventing Link-Builders Not even suggesting it can't be done. Of course it can be done, and with fairly basic skills. However, I can tell, from at least 2 of the most egregious offenders, that they are getting links inserted (with success) on other sites. So it's not just our site. And yeah, many of the IPs (that aren't spoofed) are eastern european in origin, or resolve to the Philippines. Would still like to stop this in it's tracks. Thoughts? Cheers, Kris ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330659 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
We're using akismet now, which IS stopping the actual spam / link post from getting entered. I'm extremely dubious about IP-blocking, particularly given that most of the offenders change IPs frequently, or spoof IPs. We also have seen bad accounts come through with IPs that are generic comcast, cox, verizon IP ranges. We don't want to be IP-banning willy-nilly. But I like the idea of checking for mouse movement and keyboard entry, along with hidden field for culling out automated membership accounts. Maybe it'll help. Cheers, Kris On Fri, Feb 12, 2010 at 12:13 PM, Chad Gray cg...@careyweb.com wrote: I donât think you mentioned using CFFormProtect, but it is another layer that I have used. http://cfformprotect.riaforge.org/ -Original Message- From: Kris Jones [mailto:kris.jon...@verizon.net] Sent: Friday, February 12, 2010 12:08 PM To: cf-talk Subject: Re: SOT: Preventing Link-Builders Not even suggesting it can't be done. Of course it can be done, and with fairly basic skills. However, I can tell, from at least 2 of the most egregious offenders, that they are getting links inserted (with success) on other sites. So it's not just our site. And yeah, many of the IPs (that aren't spoofed) are eastern european in origin, or resolve to the Philippines. Would still like to stop this in it's tracks. Thoughts? Cheers, Kris ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330660 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
On Fri, Feb 12, 2010 at 11:56 AM, Gerald Guido gerald.gu...@gmail.comwrote: Actually I would be more inclined to think that your link spammers came from a low cost human labor pool like Amazon Mechanical Turk. https://www.mturk.com/mturk/welcome But if not, that is some pretty sophisticated coding. SEO is the new spam. G! Complete simple tasks on FarmVille for five days and record the results https://www.mturk.com/mturk/sorthits?searchSpec=HITGroupSearch%23T%232%2310%23-1%23T%23%21%23%21NumHITs%211%21%23%21selectedSearchType=hitgroupssearchWords=sortType=Reward%3A1%2Fsort.x=15%2Fsort.y=13# Reward: $5.00 No wonder I get so many farmville updates LOL ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330661 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: Preventing Link-Builders
I don't know if this is an option for you but I thought I would throw it out there for consideration. I had some comment spam on my blog for some world of warcraft gold sites (whatever TF *that* is). I had a captcha on it but they were getting around that. So I added a snippet of code that would sniff out the names of these sites and if I got a positive I would Rick Roll their dumb asses. The comment spam came to an abrupt halt after that. Just a thought. G! On Fri, Feb 12, 2010 at 12:07 PM, Kris Jones kris.jon...@verizon.netwrote: Not even suggesting it can't be done. Of course it can be done, and with fairly basic skills. However, I can tell, from at least 2 of the most egregious offenders, that they are getting links inserted (with success) on other sites. So it's not just our site. And yeah, many of the IPs (that aren't spoofed) are eastern european in origin, or resolve to the Philippines. Would still like to stop this in it's tracks. Thoughts? Cheers, Kris On Fri, Feb 12, 2010 at 11:39 AM, Peter Boughton bought...@gmail.com wrote: If they are clicking on the email links as well, that's pretty advanced.. No its not. It's simple. A small challenge for a general purpose one, but trivial if you're targeting a specific site/application. If you know how to use cfpop, rematch and cfhttp, you can throw an email validation link clicker together in mere minutes. For beating captchas, it depends on how complex they are: a lot of them can be beaten by OCR, and the rest can be beaten by cheap labour in eastern europe/russian/etc. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330662 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: directory protection
We have an app with a protected area that just using a basic session check in application.cfm. In the protected area there is a directory of PDFs. No one can access them through the app without logging in. If the person knew the url to the pdf though it would serve since application.cfm would not run to check the session. Is there any quick way to secure these? Maybe with windows authentication? I know we could make a cfm page to look up and serve the file so the link to the pdf is never exposed but these are uploaded via a cms and the link put into the page by the client that would be more of a training exercise to make sure they are using the right link to the pdf, etc. This kind of thing comes up quite a bit on the list, did you search the archives? Your options are: 1. Implement web server authentication on a per-directory basis. This is somewhat unsatisfactory, since it would require authenticated users to reenter their credentials when downloading the PDF from within the CMS. 2. Place the files in a directory that's not web-accessible, and use CFCONTENT to serve the files. This is somewhat unsatisfactory also, since it requires you to use CF to serve files instead of your web server. That can cause performance problems on a busy site. 3. Configure CF to serve ALL files that may be downloaded through the site. This approach has the performance problems of the previous approach (and then some, potentially, since you may have files that are unrestricted but still processed by CF), but it doesn't require you to write any code. 4. Keep the files in a directory that's not web-accessible, but make the files or the directory web-accessible on a temporary basis. This can be done several ways: using symlinks, copying and deleting files, creating and destroying virtual directories in your web server. This is also somewhat unsatisfactory, since it requires you to write code to make this happen. However, it's the approach I prefer, as it solves the problems of the first three approaches. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or o ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330663 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
CF8 - Google Maps - Center zoom
hey guys... i am trying to figure out what to do on this google map.
i have a bunch of points any where from 0 - 12, usually more then 2
there is the start location and then the results based on radius returned.
right now the map centers on the the address you enter.
but i would like to be able to have it zoom out so you can see all
points that are on the map..
script
src=http://maps.google.com/maps?file=apiamp;v=2amp;key=cfoutput#key#/cfoutput
type=text/javascript/script
script type=text/javascript
//![CDATA[
function load() {
if (GBrowserIsCompatible()) {
var map = new GMap2(document.getElementById(map));
map.setCenter(new
GLatLng(cfoutput#fRez.latitude#,#fRez.longitude#/cfoutput), 4);
map.addControl(new GSmallMapControl());
map.addControl(new GMapTypeControl());
!--- This is the enterd address ---
var point = new
GLatLng(cfoutput#fRez.latitude#,#fRez.longitude#/cfoutput);
map.addOverlay(new GMarker(point));
!--- This is the results found within the radius passed. ---
cfoutput query=g_dis
var point = new GLatLng(#g_dis.latitude#,#g_dis.longitude#);
map.openInfoWindowHtml(point,h2#g_dis.partner_name#/h2);
map.addOverlay(new GMarker(point))
/cfoutput
}
}
//]]
/script
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330664
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Cfloop List Multiple Charecter Delimiters
Hi Paul, Just fyi, CF9 added a 4th parameter (boolean multiCharacterDelimiter) to the listToArray function: cfloop array=#listToArray(variables.myList, 'oat', false, true)# index=i You have a few options! HTH, -Aaron I have a list that I'm trying to loop, I was wondering if it was possible to have multiple character delimiter. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330665 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: CF8 - Google Maps - Center zoom
Paul - I figured out how to do this by browsing/asking the Google Maps forums... But essentially you need to extend the bounds of the map to include all your markers. A rough sketch would be: (My markers have tabs... but you should get the point..) First -setup the bounds: // It is necessary to make a setCenter call of some description before adding markers // At this point we dont know the real values map.setCenter(new GLatLng(0,0),0); // = Start with an empty GLatLngBounds object = var bounds = new GLatLngBounds(); Then for every Marker - extend the bounds to include the point: var point = new GLatLng(#ThisLat#,#ThisLong#); var marker = createMarker(point, homeIcon, Your Location, strongYour Location/strong, This is thebrlocation You Entered., Nothing, Address, Special) map.addOverlay(marker); // Each time a point is found, extent the bounds auto include it = bounds.extend(point); When all points are made - Set Bounds: // = determine the zoom level from the bounds = map.setZoom(map.getBoundsZoomLevel(bounds)); // = determine the centre from the bounds == map.setCenter(bounds.getCenter()); - Nick ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330666 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Resizing cflayout based on browser window
How can I base the cflayout on the browser window's visible area? Every time I resize the window my controls are being displayed off screen with no scroll bars to get to them. Ideally I'd like the layout to be dynamic enough to resize gracefully without needing the scroll bars. Thanks ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330667 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Cfgid in cf9 sorting case sensitive
All my html cfgrids are sorting case sensitive. I added the type=string_noCase parameter but still am getting the same results with strings starting with uppercase chars displaying first and lower case strings displayed alphabetically after the uppercase strings. Thanks ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330668 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Cfloop List Multiple Charecter Delimiters
Hey Aaron, Thanks for the information. Very helpful. :) Paul -Original Message- From: Aaron Neff [mailto:w...@itisdesign.com] Sent: Friday, February 12, 2010 1:05 PM To: cf-talk Subject: Re: Cfloop List Multiple Charecter Delimiters Hi Paul, Just fyi, CF9 added a 4th parameter (boolean multiCharacterDelimiter) to the listToArray function: cfloop array=#listToArray(variables.myList, 'oat', false, true)# index=i You have a few options! HTH, -Aaron I have a list that I'm trying to loop, I was wondering if it was possible to have multiple character delimiter. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330669 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Null pointer exceptions in call from Flex
Hi, I have a ColdFusion application that uses a Flex app as a front end. Until recently, everything worked smoothly. But now, I am getting a stack of NullPointerException errors that seem to come from the gateway's serializer. I am seeing this occur in both dev and production environments, and I have determined that it happens with both ColdFusion 8 and ColdFusion 9. Since it's a recent occurrence, there must be some issue with my application code, possibly in the objects coming from Flex. But the errors do not happen consistently - meaning, the same method call with the same parameters may succeed or fail with the same error. Unfortunately, the stack trace (this is from CF8) does not direct me to anything in my code, or even to a specific method. Here's a sample of many, identical exceptions: === Error,jrpp-37,02/12/10,14:47:57,,java.lang.NullPointerException java.lang.RuntimeException: java.lang.NullPointerException at coldfusion.flash.messaging.io.amf.Translator.CFASSerializer.translate(CFASSerializer.java:341) at coldfusion.flash.messaging.io.amf.Translator.CFASSerializer.translate(CFASSerializer.java:81) at coldfusion.flash.messaging.io.amf.Translator.CFASSerializer.translate(CFASSerializer.java:140) at coldfusion.flash.messaging.io.amf.Translator.CFASSerializer.translate(CFASSerializer.java:85) at coldfusion.flash.messaging.io.amf.Translator.CFASSerializer.translate(CFASSerializer.java:512) at coldfusion.flash.messaging.io.amf.Translator.CFASSerializer.translate(CFASSerializer.java:494) at coldfusion.flash.filter.CFCInvokeFilter.invoke(CFCInvokeFilter.java:160) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:282) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.flash.filter.CFCInvokePathFilter.invoke(CFCInvokePathFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.flash.messaging.ColdFusionAdapter.invoke(ColdFusionAdapter.java:223) at flex.messaging.services.RemotingService.serviceMessage(RemotingService.java:173) at flex.messaging.MessageBroker.routeMessageToService(MessageBroker.java:1165) at flex.messaging.endpoints.AbstractEndpoint.serviceMessage(AbstractEndpoint.java:757) at flex.messaging.endpoints.amf.MessageBrokerFilter.invoke(MessageBrokerFilter.java:117) at flex.messaging.endpoints.amf.LegacyFilter.invoke(LegacyFilter.java:158) at flex.messaging.endpoints.amf.SessionFilter.invoke(SessionFilter.java:48) at flex.messaging.endpoints.amf.BatchProcessFilter.invoke(BatchProcessFilter.java:67) at flex.messaging.endpoints.amf.SerializationFilter.invoke(SerializationFilter.java:145) at flex.messaging.endpoints.AMFEndpoint.service(AMFEndpoint.java:122) at flex.messaging.MessageBrokerServlet.service(MessageBrokerServlet.java:438) at coldfusion.flex.ColdFusionMessageBrokerServlet.service(ColdFusionMessageBrokerServlet.java:50) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.filter.FlashRequestControlFilter.doFilter(FlashRequestControlFilter.java:71) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) Caused by: java.lang.NullPointerException Has anyone seen anything like this, or can anyone suggest a way to determine the cause? I hate cross-posts, but I'm going to place this on both the CF-Talk and the FlexCoders list, since it apparently deals with the interaction of the two. Thanks in advance for any insight. -- Thanks, Tom Tom McNeer MediumCool http://www.mediumcool.com 1735 Johnson Road NE Atlanta, GA 30306 404.589.0560 ~| Want to reach the
Re: Cfloop List Multiple Charecter Delimiters
Treating 'OAT' as a deimiter isn't going to get you what you want. The delimiter is not considered part of the list element itself. So if you have GOAT,BOAT,MOAT,BOOBS, and you want to delimit on the string 'OAT', if you're successful then you'd end up with: G,B,M,BOOBS ... because the delimiter that you specified (OAT) is now defined as just that... a delimiter that's not going to be returned with the list element. I suppose you could output the loop index and concatenate an OAT onto it. But that's assuming the business rule that you're looking to satisfy is that the word *ends* with OAT. Originally you said contains. So what if it's Goats, plural? So... you've got working code that currently loops over the list, and does a conditional check for each iteration. You're looking for a better way. Better is subjective. Unless you're encountering performance issues that you can attribute to your loop and the subsequent conditional... what would be better? Doing it in one line? Is that better? If another developer has to work on this code, would he or she easily understand what the code does? For me, part of better is legible code. You described a need. I need to loop over this list, and if the list element contains OAT, show it. The loop/conditional code is almost a literal translation of that need. Anyone should be able to easily maintain that code. You can get into some ninja regular expression mindset and probably do what you're looking to do. But in the end... what does it buy you? Is the code more performant? Is it easier to read? Just my $0.02 :) On Fri, Feb 12, 2010 at 11:54 AM, Paul Alkema paulalkemadesi...@gmail.comwrote: Hey Aaron, Thanks for the information. Very helpful. :) Paul -Original Message- From: Aaron Neff [mailto:w...@itisdesign.com] Sent: Friday, February 12, 2010 1:05 PM To: cf-talk Subject: Re: Cfloop List Multiple Charecter Delimiters Hi Paul, Just fyi, CF9 added a 4th parameter (boolean multiCharacterDelimiter) to the listToArray function: cfloop array=#listToArray(variables.myList, 'oat', false, true)# index=i You have a few options! HTH, -Aaron I have a list that I'm trying to loop, I was wondering if it was possible to have multiple character delimiter. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330671 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
cfhttp on dev box and the hosts file
If I have an entry in my hosts file, does it affect cf server when it does a cfhttp call? I was looking at the logs of the live site and saw some traffic with the alias. Could be a coding mistake on my part, just wanted to know. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330672 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: cfhttp on dev box and the hosts file
If I have an entry in my hosts file, does it affect cf server when it does a cfhttp call? I was looking at the logs of the live site and saw some traffic with the alias. Could be a coding mistake on my part, just wanted to know. Yes, in my experience, CF will ask the OS to resolve names, and the OS will do so using the hosts file if a matching entry is present and it was created prior to any previous queries for the same entry. You can remove the entry, then flush the local DNS cache to prevent future name resolution for that entry using the cached value. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsit ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330673 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: cfhttp on dev box and the hosts file
If you mean a host file on the server making the HTTP call then typically YES. Most OS are configured to check HOSTS first before making a DNS query. You can alter this behavior, but most admins don't. It is sometimes useful to be able to short circuit DNS on a server. -Mark Mark A. Kruger, MCSE, CFG (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Matthew Smith [mailto:chedders...@gmail.com] Sent: Friday, February 12, 2010 3:54 PM To: cf-talk Subject: cfhttp on dev box and the hosts file If I have an entry in my hosts file, does it affect cf server when it does a cfhttp call? I was looking at the logs of the live site and saw some traffic with the alias. Could be a coding mistake on my part, just wanted to know. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330674 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: cfhttp on dev box and the hosts file
You can remove the entry, then flush the local DNS cache to prevent future name resolution for that entry using the cached value. In my experience, CF must be restarted too. Java doesn't obey TTLs and likes to cache DNS infinitely. http://tjordahl.blogspot.com/2004/10/cfmx-and-dns-caching.html ~Brad ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330675 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: cfhttp on dev box and the hosts file
Brad, I was just going to write that as well... flushing the DNS and then restarting CF is usually what is needed. Mark A. Kruger, MCSE, CFG (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: b...@bradwood.com [mailto:b...@bradwood.com] Sent: Friday, February 12, 2010 4:29 PM To: cf-talk Subject: RE: cfhttp on dev box and the hosts file You can remove the entry, then flush the local DNS cache to prevent future name resolution for that entry using the cached value. In my experience, CF must be restarted too. Java doesn't obey TTLs and likes to cache DNS infinitely. http://tjordahl.blogspot.com/2004/10/cfmx-and-dns-caching.html ~Brad ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330676 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: directory protection
I have used this product with great success. http://www.coolfusion.com/products/iAuth/ -Original Message- From: Scott Mulholland [mailto:smulholl...@aimg.com] Sent: Friday, February 12, 2010 10:38 AM To: cf-talk Subject: SOT: directory protection We have an app with a protected area that just using a basic session check in application.cfm. In the protected area there is a directory of PDFs. No one can access them through the app without logging in. If the person knew the url to the pdf though it would serve since application.cfm would not run to check the session. Is there any quick way to secure these? Maybe with windows authentication? I know we could make a cfm page to look up and serve the file so the link to the pdf is never exposed but these are uploaded via a cms and the link put into the page by the client that would be more of a training exercise to make sure they are using the right link to the pdf, etc. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330677 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: directory protection
I have used this product with great success. http://www.coolfusion.com/products/iAuth/ I thought they went out of business. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330678 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
help with replace
I am generating static html for item pages. I am trying to remove everything but the words and replace the spaces with -. The inner replace works properly, the outer one is removing the hyphens. cfset request.generation.filename = #lcase(rereplacenocase(#replace(qry_allItemsInProductKeyList.name, , -, all)#, [^a-z|-], , all))# I guess the dash is a special character? Not sure how to properly address it. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330679 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: help with replace
Hyphenated words exist in real text. Any reason to use the hyphen as the separator? If not, I would use a character just as tilde or underscore that does not occur naturally in text. On Fri, Feb 12, 2010 at 3:24 PM, Matthew Smith chedders...@gmail.com wrote: I am generating static html for item pages. I am trying to remove everything but the words and replace the spaces with -. The inner replace works properly, the outer one is removing the hyphens. cfset request.generation.filename = #lcase(rereplacenocase(#replace(qry_allItemsInProductKeyList.name, , -, all)#, [^a-z|-], , all))# I guess the dash is a special character? Not sure how to properly address ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330680 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: directory protection
5. rename all you pdf files with cfm extensions so that if users call them they will be filtered by application.cfm and use some download CF code like GetPdf.cfm?file=MyPdf that will send MyPdf.cfm as a pdf file using CFCONTENT. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330681 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
CF8 changing the coldfusion directory
Hey Hey I have an oddball issue and hope one opf you can point me in the right direction. I installed CF8 standard 32 bit on W2008R2 Standard. I was not paying attention and when the install path choice was available instead of leaving it as the default which I prefer I instead pointed it to my Web Server root which is D:\http\. It installed to d:\http\default actually. I am not even sure where the default dir came from since the IIS web root is at the system default of c:\inetpub\wwwroot and that is where cfide was physically installed (correctly). So everything is installed and works properly but I now have my CF Install in my HTTP directory. The directory is not within a website but it just does not belong there and I need to correct it. So my question is can I rerun the install on top of the current but change the location to C:\ColdFusion8 which I believe is the default still. Alternatively if I uninstall and then reinstall making sure the CFIDE ends up in the same place it is now (c:\inetpub\wwwroot) will my existing sites continue to operate properly. I realize this was a dumb mistake and I was going to just leave it alone but 2 years from now when I look at it again I know I am going to be mighty annoyed at the idiot that installed CF8 in the http default website folder. TIA Have a good weekend and happy dead pres day ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330682 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: directory protection
I would not include renaming PDF files as an option, since the #3 option in Dave's list is a similar idea that is better. ColdFusion can handle PDF files as if they were CFM files without changing the PDF file extension. Keep in mind that if CF starts serving a large downloadable file, it will tie up one of the limited CF processing threads, which I believe is the performance issue Dave is suggesting with #2 and #3. When all the CF processing threads are busy, incoming requests start to queue up, even if CF isn't doing much of anything. -Mike Chabot On Fri, Feb 12, 2010 at 8:04 PM, wrote: 5. rename all you pdf files with cfm extensions so that if users call them they will be filtered by application.cfm and use some download CF code like GetPdf.cfm?file=MyPdf that will send MyPdf.cfm as a pdf file using CFCONTENT. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330683 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: SOT: directory protection
I would not include renaming PDF files as an option, since the #3 option in Dave's list is a similar idea that is better. I suppose you mean solution #4, which is not a bad idea indeed, if you can create a non Web accessible directory, which is not always allowed by all providers. My solution is an alternative which does not require some special directory. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330684 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: help with replace
Hyphenated words exist in real text. Any reason to use the hyphen as the separator? If not, I would use a character just as tilde or underscore that does not occur naturally in text. I'm doing this to benefit SEO. What would be the best character to use to separate words for page names and directories? ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330685 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: CF8 changing the coldfusion directory
I installed CF8 standard 32 bit on W2008R2 Standard. I was not paying attention and when the install path choice was available instead of leaving it as the default which I prefer I instead pointed it to my Web Server root which is D:\http\. It installed to d:\http\default actually. I am not even sure where the default dir came from since the IIS web root is at the system default of c:\inetpub\wwwroot and that is where cfide was physically installed (correctly). So everything is installed and works properly but I now have my CF Install in my HTTP directory. The directory is not within a website but it just does not belong there and I need to correct it. So my question is can I rerun the install on top of the current but change the location to C:\ColdFusion8 which I believe is the default still. Alternatively if I uninstall and then reinstall making sure the CFIDE ends up in the same place it is now (c:\inetpub\wwwroot) will my existing sites continue to operate properly. I realize this was a dumb mistake and I was going to just leave it alone but 2 years from now when I look at it again I know I am going to be mighty annoyed at the idiot that installed CF8 in the http default website folder. I don't think you'll be able to rerun the install without uninstalling first. But yes, it's very easy to uninstall and reinstall. You can export settings first by saving the neo-*.xml files that are installed by default in \cfusion\lib (but you'll need to be careful to not overwrite some settings - look at the contents of the individual files for guidance). All that said, you don't even need to do that much. You could simply stop CF, uninstall the web server connectors, move the CF folder where you want it, change the service information in the registry, restart CF and reinstall the web server connectors. Because CF is a Java application, it's not tied very tightly to the operating system, and easy to move around. But if it makes you more comfortable to just use the installer, do that instead - there's nothing wrong with that approach. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsi ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330686 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: SOT: directory protection
5. rename all you pdf files with cfm extensions so that if users call them they will be filtered by application.cfm and use some download CF code like GetPdf.cfm?file=MyPdf that will send MyPdf.cfm as a pdf file using CFCONTENT. Well, if you're going to use CFCONTENT to serve the files, there's no point in renaming them, is there? By the way, Claude, your email address isn't showing up properly in list messages. It's showing up blank in the From part of my mail client (Gmail) and like this in the message headers: From: =?ISO-8859-1?Q?Claude_Schn=E9egans schneeg...@interneti=71?= =?ISO-8859-1?Q?ue.com=3E?= I don't know if that's a problem with your mail client, or with the list, but I thought you might want to know. I'd have sent this to you directly, but I'm too lazy to decypher the escaped characters. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330687 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Can someone w/CF9 run a quick test of this code?
This code produces a pdf with distorted (and blank) pages under XP / CF 9,0,0,251028. Does anyone else see the same results? Thanks -Leigh cfdocument format=pdf name=testPdf cfloop from=1 to=15 index=x cfoutputdivThis is the content for page #x#/div/cfoutput cfdocumentitem type=pagebreak / /cfloop /cfdocument cfpdf action=transform source=testPdf destination=rotationFromVariable.pdf rotation=90 overwrite=true / ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330688 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Can someone w/CF9 run a quick test of this code?
I dont have cf9 running but, I had a issue like that once. It turned out that the Coldfusion server was a development server and not licensed to use the pdf generator, the rotation=90 hides the default message. Switching to a production server fixed the issue for me. Hope that helps -- /Kevin Pepperman ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330689 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Can someone w/CF9 run a quick test of this code?
It turned out that the Coldfusion server was a development server and not licensed to use the pdf generator Weird. I thought the development server was equal in most respects, except for a few things like ip limitations? -Leigh ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330690 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
