Re: Printing barcode labels from CF
Yay! I'm useful for something. I have much experience with barcodes printing. Part of the system I work on includes creating barcodes for E-Tickets to be used for admission to amusement parks. A couple resources for you to use: http://cfbarbecue.riaforge.org/. It's a CF wrapper to a Java library that can create images of barcodes. Once you install it into your CF server (copy some files to a directory, restart CF), you can call the component to create a CFIMAGE and it will spit out a PNG or JPG or what ever other format it supported. If you're planning on creating a PDF, a couple things you'll have to remember: CFIMAGE and CFDOCUMENT uses an HTTP call to generate those files (or something like that). You'll have to either A) edit your host files to accept your domain B) reference the image using file:\\\. http://www.ravenglass.com/blog/index.cfm/2010/6/9/Including-Images-in-a-PDF-created-in-CFDOCUMENT http://stackoverflow.com/questions/10637542/coldfusion-cfdocument-creates-a-red-x It isn't as complicated as it sounds, just a couple gotcha's you have to be prepared for. Hope that helps. I'm building a membership system where I will need to print barcode labels (Code128) from a CF app. I've got the barcode creation down (using a JQuery plugin), but haven't started the label creation piece. I was thinking of using CSS + cfdocument, but am concerned that PDF's crappy support of CSS will cause me trouble. Has anyone else done something like this? What do I need to look out for? Thanks Pete ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358079 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
ColdFusion code and STIG (DoD / Navy)
We're in the process of trying to get our Production server STIG compliant. The database and OS end seem pretty straight forward. The application end, however, seems to be more complicated than it needs to be. Is there any resources that point to how to handle web development things in the STIG server requirement? How different is the coding practices for STIG and non-STIG? For example, a simple CFM might have (minus any frameworks) a cfquery on the top of the page and a cfoutput on the bottom of the page. Are there different DSN for various security roles a user might be (a regular user might be one DSN and another user might be another)? Would that be necessary? I can give a more detailed example if necessary, but some guidance on how to design and implement the various requirements would be a good first step. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357901 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion code and STIG (DoD / Navy)
Yeah, that's as far as I got also. For reference, here are a few links I found. I apologize if I am not knowledgeable in this, because I'm not. Hence the reason I'm asking. http://iase.disa.mil/stigs/ - Official (to the extent that it's the first result on Google not about TopGear and has a .mil domain). The STIGs contain technical guidance to lock down information systems/software that might otherwise be vulnerable to a malicious computer attack. http://www.stigviewer.com/ - Is supposed to be the guidelines in a searchable format. It's fairly recent (as of January 2014). I don't see anything relating to ColdFusion directly, which makes me question as to whether it's A) applicable or B) under some other naming / category. I got as far as this http://en.wikipedia. org/wiki/Security_Technical_Implementation_Guide Then real work called me. Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com wilg...@trunkful.com www.trunkful.com On Mar 10, 2014, at 11:48 AM, Ben b...@webworldinc.com wrote: For those of us unfamiliar with STIG compliance, can you give a reference? Thanks! Ben On Mar 10, 2014, at 9:15 AM, Chester Austin chesteraustin@gmail. com wrote: We're in the process of trying to get our Production server STIG compliant. The database and OS end seem pretty straight forward. The application end, however, seems to be more complicated than it needs to be. Is there any resources that point to how to handle web development things in the STIG server requirement? How different is the coding practices for STIG and non-STIG? For example, a simple CFM might have (minus any frameworks) a cfquery on the top of the page and a cfoutput on the bottom of the page. Are there different DSN for various security roles a user might be (a regular user might be one DSN and another user might be another)? Would that be necessary? I can give a more detailed example if necessary, but some guidance on how to design and implement the various requirements would be a good first step. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357904 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion code and STIG (DoD / Navy)
Dave, Thanks for the insight. I have a couple questions. When you say roles do you mean roles at the DB end? We use Oracle, so roles mean something specific. Or roles as in user rights as determined by the application (for example, a front end user and a back end user). Encryption would happen at the webserver end, not necessarily ColdFusion, correct? As a general example, let's take a CFC that has a simple query that returns a records of a location's sales. We would want to make that code resuable for various pages, so our DSN can't be something specific like FRONTEND_DSN or BACKEND_DSN. Or do you mean to imply that two different queries would have to be used (using, literally, the same SQL) where one uses the FRONTEND_DSN and another as BACKEND_DSN. I'll look into the concurrent login as an example and am pretty sure that's applicable. A lot of the issue I seem to be having is the way things like user or roles are being used and its scope (OS level, DB level, application). Yeah, that's as far as I got also. For reference, here are a few links I found. I apologize if I am not knowledgeable in this, because I'm not. Hence the reason I'm asking. http://iase.disa.mil/stigs/ - Official (to the extent that it's the first result on Google not about TopGear and has a .mil domain). The STIGs contain technical guidance to lock down information systems/software that might otherwise be vulnerable to a malicious computer attack. http://www.stigviewer.com/ - Is supposed to be the guidelines in a searchable format. It's fairly recent (as of January 2014). I don't see anything relating to ColdFusion directly, which makes me question as to whether it's A) applicable or B) under some other naming / category. I haven't looked at the second link, but the first one is correct. There's a zip file you can download from there that has STIGs for application servers. The zip file contains another zip file, which in turn contains an XML doc and an XSL stylesheet. If you extract both to a directory and open the XML file, your browser should be able to display it properly. There's plenty of stuff in there that applies to CF, although it's not specific to CF at all. It directly targets J2EE application servers. There isn't that much there that you should need to do that you're not already doing. If I recall correctly, there are items about: - limiting concurrent logins from a single user, - encrypting everything in transit, including database connections (you might not be doing that), - using roles to limit user actions, - reviewing mobile code (in other words, JavaScript) to prevent XSS, etc. You don't have to have different database user accounts to comply with the DoD STIGs, but you should separate administrative access from regular user access wherever possible according to the STIGs, and using different user accounts (and therefore datasources) is a good thing to do to make that happen. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357906 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion code and STIG (DoD / Navy)
Makes sense. As a general rule, if you're following general best practices (code modularity, separation of data and views) it shouldn't contradict STIG guidelines, correct? Or, put in another way, STIG wouldn't say you have put all of your information into various, independent tables (for security reasons) which would negate the purpose of a relational database. STIG should be fairly common sense, correct? Thanks for the insight. I have a couple questions. When you say roles do you mean roles at the DB end? We use Oracle, so roles mean something specific. Or roles as in user rights as determined by the application (for example, a front end user and a back end user). The latter, although if you were using different datasources you could perhaps associate Oracle DB roles with these roles. I wouldn't recommend that approach, though. Encryption would happen at the webserver end, not necessarily ColdFusion, correct? Mostly, but not necessarily all of it. For example, you might want to encrypt files at rest - you'd do that in CF. As a general example, let's take a CFC that has a simple query that returns a records of a location's sales. We would want to make that code resuable for various pages, so our DSN can't be something specific like FRONTEND_DSN or BACKEND_DSN. Or do you mean to imply that two different queries would have to be used (using, literally, the same SQL) where one uses the FRONTEND_DSN and another as BACKEND_DSN. I don't think there's a hard-and-fast rule here, but it seems to me like you'd be ok if you simply handled queries that perform admin-specific tasks with a separate datasource. Queries that are used by both administrators and users could be handled by either datasource. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357911 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Barcodes
We use barcodes to generate tickets for admission to parks and things. I've been using CFBarbecue (http://cfbarbecue.riaforge.org/) and it's worked out well. Chad, My company has built an enterprise inventory management system using www.bokai.com java servlet. It's not free but really easy to implement and super easy to use. Hope that helps! Thanks, Brian Sent from my mobile device, please excuse brevity spelling. On Aug 29, 2013, at 11:39 AM, Chad Gray cg...@careyweb.com wrote: Well since Efflare's CFX gFont does not work with 64 bit systems I need to find a new way to make a barcodes on my websites. Anyone recommend a way to create and display barcodes on a webpage? Thanks, Chad ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356660 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Form Fields suddenly self validating? Now required?
It sounds like the browser's built in validation is kicking in. Try it with a different browser and you would most likely get different results. Get rid of the required attribute in your input fields and it should work like it used to. Unless you want the browser to handle some of the validation. Remember that required=no isn't enough. You have to completely remove the required string in the input. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355820 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Form Fields suddenly self validating? Now required?
Sorry if this is a repost. I'm not sure if the form is submitting. It sounds like the browser's built in validation is kicking in. Try it with a different browser and you would most likely get different results. Get rid of the required attribute in your input fields and it should work like it used to. Unless you want the browser to handle some of the validation. Remember that required=no isn't enough. You have to completely remove the required string in the input. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355821 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Code Design help
I was going to post this on StackOverflow but felt that it might not be the right type of question to ask there, so I shall post it here. I am tasked to create a payment form from a balance sheet. I have a created a balance sheet, which is basically an HTML table that has a row item detail of that item. In our case, each line is an event code and the total issues, payments, returns and balance (issues minus payments minus returns) is on each line. Each HTML row is actually a form with a More Info submit button to drilldown on that specific event code with details passed to that form as hidden inputs. I am looking to extend the functionality of this report by adding a new column, Pay amount and, if the user has 75 to pay off of their balance, they can add a number (let's say 50) and they can pay for 50. Ideally, my train of thought is that the text field will do an AJAX submit to a CFC where the value and eventcode will be posted to a session structure, and once the user is done, the structure can be processed to do what it needs to. Am I on the right track in this? Is there a better way to do this? I am concerned about a couple things. 1) I don't want the user to have to press Save or Submit after each entry. There would be at least 100 row items they would have to go through, it would a large wall of text, and am trying to help them out with at least that aspect. 2) I would like the data to be saved at least in the session scope. In case the user has to move to a different page, the information they entered would still be there. Ideally, I would like to save the data and recall / fill in the values so that they can come back, let's say the next day, and continue where they left off. I have attached a screen shot of the HTML table as viewed from the browser: a href=https://dl.dropboxusercontent.com/u/6212377/sample.JPG;https://dl.dropboxusercontent.com/u/6212377/sample.JPG/a Any resources or tutorials is greatly appreciated. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355656 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Newbie question regarding MSSQL queries w/ CF8
Here's an excellent resource for random row generation using SQL. http://www.petefreitag.com/item/466.cfm ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353837 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Subtotals outputed to HTML
Thanks. That was just the final mental push I needed. I knew it had to do something with that, but I just couldn't get it out. I was really over thinking it by trying to do a rollup on the query. Sure can, when using cfoutput and I am sure cfloop has it too, you can output with the group attribute, this will allow you to also create the running subtotal and display it at the end of the group. -- Regards, Andrew Scott WebSite: http://www.andyscott.id.au/ Google+: http://plus.google.com/113032480415921517411http://plus. google.com/108193156965451149543 On Mon, Oct 1, 2012 at 3:30 PM, Chester Austin chesteraustin@gmail. comwrote: Would anyone have any insight on how to output subtotals to HTML? Background: Given an SQL query, select eventcode, basecode, issued from mytable group by eventcode, basecode, issued I would like to output it to be: EventCode BaseCode Issued A/123 100 5 A/123 101 10 Subtotal 15 A/124 100 20 A/124 101 10 Subtotal 30 I've tried SQL, but my order by clause throws everything off. Is there a ColdFusion way to handle this? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352789 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Subtotals outputed to HTML
Would anyone have any insight on how to output subtotals to HTML? Background: Given an SQL query, select eventcode, basecode, issued from mytable group by eventcode, basecode, issued I would like to output it to be: EventCode BaseCode Issued A/123 100 5 A/123 101 10 Subtotal 15 A/124 100 20 A/124 101 10 Subtotal 30 I've tried SQL, but my order by clause throws everything off. Is there a ColdFusion way to handle this? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352787 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
ColdFusion cfquery and Oracle Temporary Tables
I am running ColdFusion 8 and Oracle 10g. I am running three stored procedures to insert data into three separate temporary tables. From there, I run a union statement to against the three temporary tables and output out the results. However, I am running into an unexpected error: Stored Procedure A writes to Temporary Table A, Stored Procedure B writes to Temporary Table B, Stored Procedure C writes to Temporary Table C. Query 1 performs a select union on TTA, TTB, and TTC. Depending on some logic, Stored Procedure A, B, or C may or may not run and therefore, TTA, TTB, or TTC SHOULD be empty. However, it is not. I am sure that these tables are temporary and are created as a global temporary table. Any help is greatly appreciated. Please let me know if more information needed. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:343111 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
