Corrupted CFIDE/scheduler/scheduletasks.cfm
Been a good while... Looks like CFIDE/scheduler/scheduletasks.cfm on one of our CF servers has been corrupted. IIRC, the scheduled task definitions are stored elsewhere. In theory, can I just copy in a scheduletasks.cfm from another CF9 server? Will of course look for other evidence of possible hacking/hijacking. Thanks in advance, Lonny Eckert ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360189 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Hack Attempt on our database last night
Sent from my Verizon Wireless 4G LTE DROID Jen Larkin jlar...@gmail.com wrote: That's because it's not a hacker; it's a script. It's either running in a loop or on a schedule. There's not much point in trying to block the IP address, since they could just change the IP address. It's probably onion routed or otherwise obfuscated through a proxy of some sort; they can just change proxy. Remember that any blocked IP address could be dynamically assigned, so you can end up blocking legit users that way. I've seen scripted attacks go on for months with the IP addresses changed frequently. If you want to block attempts, you would have to use a tool that would detect the pattern and add IP addresses automatically, or you could reject the IP block that it's coming from if the country is blockable per your business requirements. Depending on your business model that may or may not be appropriate but it ultimately may not work since there are proxies and zombies in the US that could used for this. I've blocked IP blocks before but they can change IP blocks too. If you need to buy time to close some holes, you can block the IP block that contains the IP. It will take a little while for the block to get worked around. I've seen one day turn around circumventing that. Blocking a single IP is faster to get around, but they'll get around it. The code needs to be fixed. Anything else is cat and mouse. One thing that I noticed in my last attack was that there was a simultaneous attack on production and on dev, with attempts to log into both via Remote Desktop. You may want to also check your system logs to make sure that they aren't trying to brute force onto the servers as well. If they are, you'll need to implement something at the firewall. (Yes, I know that should have been firewalled to begin with. Don't get me started.) On Mon, Jul 22, 2013 at 11:28 AM, Dave Hatz daveh...@hatzventures.orgwrote: Russ, The query never processed. The hacker was relentless though. For about 5 straight hours he kept trying. Which brings up another security question. How does other sites handle something like this automatically? I mean, if I see an attack from an IP address, is it even worth blocking at the firewall? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356281 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Character Encoding Issues?
Oracle is recognizing that as a variable because of the ampersand. You can replace the ampersand with the appropriate ascii escape sequence in your procedure. From: Robert Nurse [mailto:rnu...@gmail.com] Sent: Mon 12/7/2009 11:54 AM To: cf-talk Subject: Character Encoding Issues? From a CF template, I'm performing an insert into an Oracle (10g) VARCHAR2 column. The characters I'm trying to insert contain #8212. After retrieving the column and displaying it in the browser, #8212 is replaced with an odd character. #8212 is not even in the DB! This leads me to believe that some sort of transformation took place. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:328922 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Overloaded Oracle Procedures
New to CF8. Trying to find an answer whether or not CF8 CFCs support calling of overloaded procedures? In this case, the procedural inputs are the same -- the difference being in the number of reference cursors that are returned. I did see in the online docs that this was not supported in CF7. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:314182 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Alternative Oracle JDBC Driver For Standard Edition
It's funny you say that, one of our clients is going to make the opposite migration: from ColdFusion to Oracle Portal. Why did you client dump Oracle Portal? We may still be able to convince ours to stick with ColdFusion. :-) I believe the license costs are considerably higher for one thing. We did find it difficult to develop and maintain the application, but that may well be reflective of inexperience with Portal compared to our level of experience with CF. It may also be reflective that Portal was relatively new at the time and not nearly as mature as its alternatives. I had not worked on the Portal project so I can't give you any comparitive insight wrt how easy it is to develop in CF versus Portal. My group was not part of the development of the original Portal project design specs so I can't give you any real insight as to why Portal other than the client wanted Portal and that is that is what they got Sorry that my answer isn't so helpful. Lonny Eckert Mi Services Group, Inc. Work Phone: 610-230-2544 E-mail: [EMAIL PROTECTED] www.mi-services.com ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:230826 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations Support: http://www.houseoffusion.com/tiny.cfm/54
Alternative Oracle JDBC Driver For Standard Edition
We looking for a work around for using Oracle Thin JDBC driver with Coldfusion MX7 Standard. There is a documented problem with using REFCURSORS. However, the Oracle driver with Coldfusion MX7 Enterprise does not have this problem nor does DataDirects Oracle JDBC driver. The only problem with these solution is $$$ and we're try to develope a website for a charity organization so have a limited budget. Lonny Eckert Mi Services Group, Inc. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:230629 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Alternative Oracle JDBC Driver For Standard Edition
Did you scour sourceforge.net for JDBC drivers? I'm sure there's at least one for Oracle. Ok, thanks our ops folks will take a look there. You could always go ODBC... but then that kinda hurts the performance and scalability, no doubt the reason you went with Oracle in the first place. Speaking of limited budgets, could you go with SQL Server or MySql? Both are multitudes cheaper than Oracle, and both fully supported by CF Standard ed. Though, it sounds like you're already made a deep Oracle db investment. What I had not bothered to mention was that this is a conversion from Oracle Portal. So yes the client had already invested heavily into Oracle and wanted to stick with Oracle. Had this been a new project I agree that SQL server would have been worth exploring as an option. Lonny Eckert Mi Services Group, Inc. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:230641 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Generating Primary Key in Oracle (part 2)
Having a sequence facilitates the currval and nextval functions. If you are new to Oracle sequences I would read up on these two functions. [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
RE: preventing back button of browser
Another option may be to route through a popup window. Popups are not added to history. Lonny Eckert Mi Services Group, Inc. Work Phone: 610-230-2500 x147 E-mail: [EMAIL PROTECTED] www.mi-services.com http://www.mi-services.com/ -Original Message- From: Mahmut Basaran [mailto:[EMAIL PROTECTED] Sent: Monday, November 24, 2003 4:51 PM To: CF-Talk Subject: Re: preventing back button of browser I wrote that script a while (2 years something) ago with my friend Joseph Thompson (also from the list). http://cfhub.com/contributions/backbutton/ you can probably improve the code (to make it less), anyway, it should be fine as it is. completely server side logic, there is also a live demo you can check. - Original Message - From: Ketan Patel To: CF-Talk Sent: Monday, November 24, 2003 11:31 PM Subject: preventing back button of browser hi all, does anybodyknow a good way of preventingback button of browser. thanks, ketan _ [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
RE: Query to Stored Proc
Hi Mike,
I can't answer your question in regard to SQL 2K Enterprise, but if anyone is interested here is how I do dynamic queries in Oracle. I highly recommend that you put dynamic stored proc calls such as these in their own catch-try blocks as erroneous queries will compile and subsequently may even lock up CF. Debugging these things can be a real pain.
Basically the query is created as a string, output through a refcursor.
**
PROCEDURE get_employee_search_results
(
p_employee_idINemployees.employee_id%TYPE,
p_employer_idINemployers.employer_id%TYPE,
p_lastnameINemployees.last_name%TYPE,
p_firstnameINemployees.first_name%TYPE,
p_ssnINemployees.ssn%TYPE,
p_employer_name INemployers.name%TYPE,
cur_employee_search_results OUT REFCURSORTYPE,
p_success_flagOUT NUMBER,
p_process_messageOUT VARCHAR2
)
IS
v_1 LONG;
v_lastname VARCHAR2(40);
v_firstname VARCHAR2(40);
v_employer_name VARCHAR2(100);
BEGIN
IF instr(p_lastname,CHR(39)) 0 THEN
v_lastname := REPLACE(p_lastname,CHR(39),null);
END IF;
IF instr(p_firstname,CHR(39)) 0 THEN
v_firstname := REPLACE(p_firstname,CHR(39),null);
END IF;
IF instr(p_employer_name,CHR(39)) 0 THEN
v_employer_name := REPLACE(p_employer_name,CHR(39),null);
END IF;
v_1 := 'SELECT /*+FIRST_ROWS */ ee.first_name, ';
v_1 := v_1 || 'ee.last_name, ';
v_1 := v_1 || 'ee.active_flag, ';
v_1 := v_1 || 'ee.employee_id, ';
v_1 := v_1 || 'TO_CHAR(ee.dob,' || CHR(39) || 'MM/DD' || CHR(39) || ') dob, ';
v_1 := v_1 || 'decode(ee.logon_name,null,' || CHR(39) || 'Not Present' || CHR(39) || ',' || CHR(39) || 'Present' || CHR(39) || ') AS logon, ';
v_1 := v_1 || 'SUBSTR(ee.ssn,LENGTH(ee.ssn) - 3, LENGTH(ee.ssn)) ssn, ';
v_1 := v_1 || 'NVL(er.name,' || CHR(39) || 'Unknown' || CHR(39) || ') AS namePart, ';
v_1 := v_1 || 'er.name ';
v_1 := v_1 || 'FROM employees ee, employers er ';
v_1 := v_1 || 'WHERE ee.employer_id = er.employer_id ';
IF p_employee_id IS NOT NULL THEN
v_1 := v_1 || ' AND ee.employee_id =' || p_employee_id;
END IF;
IF p_employer_id IS NOT NULL THEN
v_1 := v_1 || ' AND ee.employer_id =' || p_employer_id;
END IF;
IF p_lastname IS NOT NULL THEN
IF instr(p_lastname,CHR(39)) = 0 THEN
v_1 := v_1 || ' AND UPPER(ee.last_name) LIKE UPPER(' || CHR(39) || p_lastname || '%' || CHR(39) || ')';
ELSE
v_1 := v_1 || ' AND UPPER(REPLACE(ee.last_name,CHR(39),null)) LIKE UPPER(' || CHR(39) || v_lastname || '%' || CHR(39) || ')';
END IF;
END IF;
IF p_firstname IS NOT NULL THEN
IF instr(p_firstname,CHR(39)) = 0 THEN
v_1 := v_1 || ' AND UPPER(ee.first_name) LIKE UPPER(' || CHR(39) || p_firstname || '%' || CHR(39) || ')';
ELSE
v_1 := v_1 || ' AND UPPER(REPLACE(ee.first_name,CHR(39),null)) LIKE UPPER(' || CHR(39) || v_firstname || '%' || CHR(39) || ')';
END IF;
END IF;
IF p_ssn IS NOT NULL THEN
v_1 := v_1 || ' AND ee.ssn LIKE ' || CHR(39) || '%' || p_ssn || '%' || CHR(39);
END IF;
IF p_employer_name IS NOT NULL THEN
IF instr(p_employer_name,CHR(39)) = 0 THEN
v_1 := v_1 || ' AND UPPER(er.name) LIKE UPPER(' || CHR(39) || p_employer_name || '%' || CHR(39) || ')';
ELSE
v_1 := v_1 || ' AND UPPER(REPLACE(er.name,CHR(39),null)) LIKE UPPER(' || CHR(39) || v_employer_name || '%' || CHR(39) || ')';
END IF;
END IF;
OPEN cur_employee_search_results FOR v_1;
p_success_flag := 1;
p_process_message := 'Query successful';
EXCEPTION
WHEN OTHERS THEN
p_success_flag := 0;
p_process_message := 'Query failure: ' || SUBSTR(SQLERRM,1,150);
END get_employee_search_results;
***
[Lonny Eckert]-Original Message-
From: Tangorre, Michael [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 04, 2003 5:57 AM
To: CF-Talk
Subject: Query to Stored Proc
How would you rework the logic in the WHERE clause to get this query put
into a stored proc?
Can you put conditional logic in the WHERE clause inside a stored proc?
SQL 2K Enterprise
cfquery name=selectOpportunityResults datasource=otis
SELECT
O.opportunityId,
O.title,
O.lastUpdateUserId,
O.lastUpdateOn,
O.createDate,
U1.firstName AS creatorFirstName,
U1.lastName AS creatorLastName,
U1.emailAddress AS creatorEmailAddress,
U2.firstName AS updaterFirstName,
U2.lastName AS updaterLastName,
U2.emailAddress AS updaterEmailAddress,
P.phaseName
FROM
tbl_opportunity O
LEFT JOIN tbl_user U1 ON (O.createUserId = U1.userId)
LEFT JOIN tbl_user U2 ON (O.lastUpdateUserId = U2.userId)
LEFT JOIN tbl_phase P ON (O.phaseId = P.phaseId)
WHERE
1=0
cfif form.rfpNumber NEQ
OR O.rfpNumber = '#form.rfpNumber#'
/cfif
cfif form.title NEQ
OR O.title = '#form.title#'
/cfif
cfif form.naicsCode NEQ
OR O.naicsCode = '#form.naicsCode#'
/cfif
cfif form.costCenterLocation NEQ -1
OR O.costCenterId = '#form.costCenterLocation#'
/cfif
cfif form.procurementType NEQ -1
OR O.procurementTypeId = '#form.procurementType#'
/cfif
cfif form.awardType NEQ -1
OR O.awardTypeId = '#form.awardType#'
/cfif
cfif form.classification NEQ -1
OR O.classificationId = '#form.classification#'
/cfif
cfif
CFMX MAIL
We are looking to come up with a better solution in regards to Version 5 of CFMAIL. I've done some researching out of the archives and noted that using a different mail server and writing emails via CFFILE was a solution suggested by serveral people. I understand that CFMAIL is based on the JAVA API. We would like to achieve a throughput of 10-15 k messages per hour. We can upgrade to MX. It will be a dedicated machine (probably a PIII but not certain of which machine will be rebuilt with MX at this time). I tried finding some performance info at the Macromedia site on the MX mail tag but didnt run across anything. What is CFMX capable of straight out of the box in regards to CFMAIL - ie could it achieve my desired throughput? Does the zero-byte email problem still exist in CFMX? Thanks in advance. Lonny Eckert Mi Services Group, Inc. Work Phone: 610-230-2500 x147 E-mail: [EMAIL PROTECTED] www.mi-services.com http://www.mi-services.com/ ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribeforumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Pagination issues
You wrote:
i dont wannt to call both queries everytime... i'm prefer call the first query only
once and store the ID in a variable, like session or anything else...
I can't ?
Can you use an in/out variable? Just pass the count back in and test for a non-null
integer around the rowcount query.
If using Oracle, you might do something like the following for the primary query...
SELECT *
FROM (SELECT rownum row_sequence, v.*
FROM (SELECT fulfiller_name,
quantity,
shipto_name,
shipto_street1,
shipto_street2,
shipto_city,
shipto_state,
shipto_zip_code,
serial_number
FROM SOME_FULFILLMENT_TABLE
WHERE process_log_id = 12345
AND (upper(shipto_name) like upper ('%ar%'))
ORDER BY fulfiller_name) v
)
WHERE row_sequence between 1 and 20
Lonny Eckert
Mi Services Group, Inc.
Work Phone: 610-230-2500 x147
E-mail: [EMAIL PROTECTED]
www.mi-services.com http://www.mi-services.com/
-Original Message-
From: Rodrigo Cohen [mailto:[EMAIL PROTECTED]
Sent: Friday, July 04, 2003 8:17 AM
To: CF-Talk
Subject: Pagination issues
Cedric,
i dont wannt to call both queries everytime... i'm prefer call the first query only
once and store the ID in a variable, like session or anything else...
I can't ?
~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription:
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribeforumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Signup for the Fusion Authority news alert and keep up with the latest news in
ColdFusion and related topics.
http://www.fusionauthority.com/signup.cfm
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Government data list
Dan, There may be something down to presidential appointees, but I wouldn't know where to find it. If you want to drive down to the Senior Executive Service Staff or lower then I doubt you'll find a comprehensive list of employees. I think you'd pretty much have to approach each federal agency. There is no single union of federal employees that you might approach. You might try a federal watchdog group - they would probably know not only who is filling positions, but which positions remain unfilled on the presidential appointee level Lonny Eckert Ex Federal Inspector Mi Services Group, Inc. (formerly Hesta Corporation) Work Phone: 610-230-2500 x147 E-mail: [EMAIL PROTECTED] www.mi-services.com; www.hestacorp.com -Original Message- From: Dan O'Keefe [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 19, 2002 2:53 PM To: CF-Talk Subject: OT: Government data list Does anyone know of a source for a nested federal government data list? I would also be looking for states also. I am looking to be able to drill down into the data to eventually get to the individual in that position. example: Government -Federal --Executive ---Cabinet Secretary of Agriculture Secretary of Commerce Secretary of Defense -Donald Rumsfeld --Legislative --Judicial Dan - Dan O'Keefe TriPoint Technologies 954.501.3115 __ This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: programmer vs. developer
Dave, I think you are right on. If only everyone thought as you do, I'd probably still be working as a Nuclear Engineer/Health Physicist. The number of people who think they know something about nuclear power generation is dumbfounding. With Regards, Lonny Eckert -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 29, 2002 4:10 AM To: CF-Talk Subject: RE: programmer vs. developer I couldn't answer too many of your Software Engineering principles questions, but I can solve problems, and that's what my employer wants. My background is accounting, but I spent all my time automating my tasks using Excel/VBA/VB, so I ended up going into programming. Nothing personal, but you'd be the last type of manager I would want to have. A degree means you made it through four (or more) years of school, and that's it. I've known a lot of people with CS degrees that couldn't solve problems. I think you're selling short the value of a CS background. Sure, there are lots of people with CS degrees who lack problem-solving skills. There are incompetents in every field, except for those fields in which incompetence is weeded out automatically (incompetent soldiers being more likely to die in combat, for example). That's not much of an argument against the value of a CS degree, though. I don't have a CS background either. However, I've always worked with people who do, and I've found myself learning the lessons they'd been taught - and I had to learn them the hard way, by trial and error. I would miss subtleties that they would spot immediately, because of their training. For those people, a degree meant quite a bit more than making it through four years of school - it meant that they had gained a way to examine and classify problems, and provide solutions that meet those software engineering standards. This is not a trivial ability. If I turned your initial statement on its head, I could say something like my background is programming, but I spent all my time adding up numbers, so I ended up going into accounting. I think my CFO would probably take issue with that, if I presented myself as a competent accountant simply because I had decent math skills. Any profession has a body of knowledge that has to be understood by practitioners of that profession. Likewise, I wouldn't necessarily be a competent surgeon just because I'm handy with a knife. I think in both those examples, you can see the value of principles. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 __ Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: cfif inside cflocation?
Dave/Tony, In your specific example, you should be able to get it to work. I do this quite often with CFLOCATION. You do need to bracket the cflocation tag in a cfoutput to get it to work. With Regards, Lonny Eckert Mi Services Group, Inc. (formerly Hesta Corporation) Work Phone: 610-230-2500 x147 E-mail: [EMAIL PROTECTED] www.mi-services.com; www.hestacorp.com Subject: cfif inside cflocation? ... why would this crap out? I don't think you can use a CFML tag within the attribute value of another CFML tag. You can nest tags, but that's not what you're doing. also, is there a better way to do this? There would have to be a better way, since this way doesn't work at all. I'm not sure what the best way would be, since I'm a bit hazy on what exactly you're doing, but you could simply build the string before you do the CFLOCATION. __ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: UDFs, CF Locking, etc., and NEO=fixed
My personal speculation is that the current memory management code is probably the Three Mile Island part of the server codebase, and that even though its problems have been well understood for years, no one has been able to muster up the courage to try and work on it without having the entire server go up in a mushroom cloud. With Neo they could just abandon it rather than fix it, and so the problems are taken care of. First of all, I don't think anyone has made a compelling argument that locking is broken. Secondly, commercial nuclear power reactors don't go up in mushroom clouds. With Regards, Lonny Eckert ex Health Physicist BS RPI NE MS GA Tech HP Lonny Eckert Mi Services Group [EMAIL PROTECTED] (610) 230-2500 x147 __ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Wierd Session Timeouts
Jon Hall Answered: Check your CF Server logs and see if the server is restarting itself for some reason. Jon, You were right on target. Scheduled events are/were causing us some serious problems in restarting the CF Application server (every 3 minutes). I've attached portions of the Executive and Server logs from our TEST environment. Has anyone else having problems with their scheduled events? Should scheduled events be deleted and recreated when upgrading to CF 5? Or in other words, any ideas on fixing this problem? Thanks In Advance, Lonny Eckert Mi Services Group [EMAIL PROTECTED] (610) 230-2500 x147 From executive.log: Warning,1026,10/30/01,16:18:34,,Restarted ColdFusion Application Server. Warning,1026,10/30/01,16:21:34,,Restarted ColdFusion Application Server. Warning,1026,10/30/01,16:24:35,,Restarted ColdFusion Application Server. Warning,1026,10/30/01,16:27:35,,Restarted ColdFusion Application Server. Warning,1026,10/30/01,16:30:35,,Restarted ColdFusion Application Server. Warning,1026,10/30/01,16:33:36,,Restarted ColdFusion Application Server. Warning,1026,10/30/01,16:36:36,,Restarted ColdFusion Application Server. FROM server.log: Information,1024,10/30/01,16:30:40,,The ColdFusion Application Server started. Fatal,8200,10/30/01,16:33:36,,Caught a fatal signal (11) - Aborting Information,1024,10/30/01,16:33:40,,The ColdFusion Application Server started. Fatal,8200,10/30/01,16:36:36,,Caught a fatal signal (11) - Aborting Information,1024,10/30/01,16:36:40,,The ColdFusion Application Server started. Fatal,8200,10/30/01,16:39:36,,Caught a fatal signal (11) - Aborting Information,1024,10/30/01,16:39:40,,The ColdFusion Application Server started. -Original Message- From: Jon Hall [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 25, 2001 4:59 PM To: CF-Talk Subject: Re: Wierd Session Timeouts Check your CF Server logs and see if the server is restarting itself for some reason. jon - Original Message - From: Lonny Eckert [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Sent: Thursday, October 25, 2001 4:19 PM Subject: Wierd Session Timeouts We've recently moved to CF5 and have been experiencing some strange session timeouts in our Test environment with CF5. Other than the timeouts seem to be occurring when packages are called, the timeouts seem to have no discernable reproducible pattern(s) when interacting with the applications. So far, we have not noticed similar problems in our Development or Production environments (which are also CF5). Is there a new CF5 way of locking session and application variables? Other relevant info: *Our session variables in Application.cfm and CF Administrator are set to expire after 4 hours. *We didnt miss on the fact that we needed to change our package calls to handle refcursors to add in that maxrows=-1 parameter. Before we have someone go off and reinstall software, does anyone have any thoughts on what might need to be changed/looked at to eliminate this problem? ~~ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Wierd Session Timeouts
We've recently moved to CF5 and have been experiencing some strange session timeouts in our Test environment with CF5. Other than the timeouts seem to be occurring when packages are called, the timeouts seem to have no discernable reproducible pattern(s) when interacting with the applications. So far, we have not noticed similar problems in our Development or Production environments (which are also CF5). Is there a new CF5 way of locking session and application variables? Other relevant info: *Our session variables in Application.cfm and CF Administrator are set to expire after 4 hours. *We didnt miss on the fact that we needed to change our package calls to handle refcursors to add in that maxrows=-1 parameter. Before we have someone go off and reinstall software, does anyone have any thoughts on what might need to be changed/looked at to eliminate this problem? Thanks In Advance, Lonny Eckert Mi Services Group [EMAIL PROTECTED] (610) 230-2500 x147 ~~ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Disabling back button
There is really no way to directly disable the back button. There are workarounds though that can be implemented. Some methods are better than others because some methods can be defeated by backing via right clicking. The better way is to submit your form through a pop-up window. Pop-ups are not added to the history. Lonny Eckert Mi Services Group [EMAIL PROTECTED] (610) 230-2500 x147 -Original Message- From: W Luke [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 05, 2001 3:51 PM To: CF-Talk Subject: Disabling back button Is there a possible and simple way to do this - or is it a nightmare to do? Will ~~ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Oracle Stored Procedures
I've got a whopping 10 mos. of experience in the field so don't beat on me too harshly if I'm interpreting your question improperly. CF can handle a cursor set from Oracle. If this is not what you meant by result set, then what is the difference between a result set and a cursor set? I've included an example. Lonny Eckert Hesta Corporation [EMAIL PROTECTED] Hesta 610-230-2500 x147 *** Here is an example of a stored procedure call that receives the results of a cursor set: CFSTOREDPROC datasource=#Application.ptcl_ptcl_db# procedure=PKG_CS.fetch_hist_info returncode=No cfprocparam type=In cfsqltype=CF_SQL_NUMERIC dbvarname=p_employee_id value=#Session.SearchResult_EmployeeID# null=No cfprocparam type=Out cfsqltype=CF_SQL_REFCURSOR dbvarname=c_fetch_hist_info variable=procedure_result null=No cfprocresult name=hist_info /CFSTOREDPROC *** Use the procresult tag just as you would a query. In otherwords, a cfoutput tag dumping out the cursor sesults would simply be: cfoutput query=hist_info *** Here is an example of fetching data into a cursor set. The OPEN - FOR method is probably the simplest way of fetching data into a cursur set in Oracle. PROCEDURE fetch_hist_info ( p_employee_id IN NUMBER, c_fetch_hist_info OUT REFCURSORTYPE ) IS BEGIN OPEN c_fetch_hist_info FOR SELECT /*+ ORDERED */ to_char(effective_month,'MONTH, ') Mnth, decode(pe.benefit_type_id,1,'Transit',2,'Parking',3,'Van Pool','Unknown') Product, NVL(to_char(pe.amount,'$999.99'),'$0.00') Cost, to_char(pe.date_entered,'MM/DD/RR HH:MI:SS am') dt_entered, to_char(ps.date_entered,'MM/DD/RR HH:MI:SS am') dt_subscribed, DECODE(pe.status_id, 2, 'Inactivated',3,'Pending',4,'Cancelled',5,'Processed','Unknown') Status, ps.subscription_id sSubscriptionID, ps.Benefit_Type_id sBenefitTypeID, ps.Active_Flag sActiveFlag, ps.Purchasable_Pass_ID sPurchasablePassID, ps.Employee_ID sEmployeeID, NVL(to_char(ps.Expense_Amount,'$999.99'),'$0.00') sExpenseAmount, ps.Quantity sQuantity, ps.Expense_Operator_ID sExpenseOperatorID, ps.Hold_Flag sHoldFlag, to_char(ps.Date_Entered,'MM/DD/RR HH:MI:SS am') sDateEntered, NVL(to_char(ps.Cost,'$999.99'),'$0.00') sCost, pe.Expense_ID eExpenseID, pe.Benefit_Type_ID eBenefitTypeID, pe.Envelope_Num eEnvelopeNum, pe.Storage_Box_Num eStorageBoxNum, NVL(to_char(pe.Amount,'$999.99'),'$0.00') eAmount, pe.Operator_ID eOperatorID, pe.Order_ID eOrderID, pe.Status_ID eStatusID, pe.Envelope_Status eEnvelopeStatus, to_char(pe.Date_Entered,'MM/DD/RR HH:MI:SS am') eDateEntered, to_char(pe.Date_Processed,'MM/DD/RR HH:MI:SS am') eDateProcessed, pe.Audit_ID eAuditID, to_char(pe.Envelope_Received,'MM/DD/RR HH:MI:SS am') eEnvelopeReceived, pe.Subscription_ID eSubscriptionID, pe.Audit_Flag eAuditFlag, pe.Payroll_Processed_Flag ePayrollProcessedFlag, to_char(pe.Payroll_Processed_Date,'MM/DD/RR HH:MI:SS am') ePayrollProcessedDate FROMorders po, expenses pe, subscriptions ps WHERE po.employee_id = p_employee_id AND pe.order_id = po.order_id AND ps.subscription_id(+) = pe.subscription_id AND po.valid = 1 AND pe.status_id = 5 AND 1 = ps.active_flag(+) ORDER BYpe.date_entered desc; END fetch_hist_info; ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Any horror stories from not locking session vars?
Sure, I inherited one. It was a Customer Service application where the customer's unique identification number was a session variable. The application made heavy use of frames to split information along the lines of current and historical activity. Needless to say there were more than one CS rep using the application at the time. Any time one of the reps entered in identification criteria while another rep was using the Application caused the Application to fail. But hey it worked great in development/test when just a single user was using the Application. Suggestion: No great need to tell them horror stories when you can show them first-hand. Just crash the app in dev/test by having multiple people challenge that portion of the code at the same time. Lonny Eckert Hesta Corporation [EMAIL PROTECTED] Hesta 610-230-2500 x147 -Original Message- From: Don Vawter [mailto:[EMAIL PROTECTED]] Sent: Monday, August 06, 2001 10:11 AM To: CF-Talk Subject: Any horror stories from not locking session vars? I have been asked to do a code review of a site and I have found that the developers don't bother to lock session variables when then read or write them. Does anybody have an good horror stories about the dangers of doing this so I legitimately show the customer why this is a problem. He is a nontechnical person so any talk of needing to single-thread processes when using shared variables won't mean a thing to him. Since I always lock around the variables I can't give him any personal horror stories. Perhaps some of you have heard of some (I KNOW they won't come from YOUR sites because you always follow best practices ;-) but maybe you inherited some.) TIA Don ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: HOWTO - Technical Review
While you will be able to review things like functionality and ease-of-use, isn't it going to be a tad difficult to conduct a technical review of a site without reviewing source code? Lonny Eckert Hesta Corporation [EMAIL PROTECTED] Hesta 610-230-2500 x147 -Original Message- From: Keane,John (WDS) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 18, 2001 1:59 PM To: CF-Talk Subject: HOWTO - Technical Review Since I am the only one in my company who can spell ColdFusion, I have been instructed to perform a technical review of a ColdFusion website. The operators of the website are cooperating with me. The review will take place at the website operators location so I should have access to the entire system. They will not be allowing me to review the source code, but I should be able to see a sample. What kind of things should I be looking for? What kind of questions should I ask? etc.I have never done or even seen a technical review, so any help would be greatly appreciated. Thanks John Keane ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: CF5 review in eWEEK
Not that I really care about this thread, but I can't help myself in commenting on this... Yeah, I bought my suv from Isuzu, and they don't call me to tell me the improvements that they have made to the new model, when it is coming out, or which mechanics I should take it to. I guess that if they would be more proactive in keeping me updated it would be better? Yeah they don't cold call people. That's because all of the manuafacturers have multi-million dollar ad campaigns that try and get your attention while your glued to your tv set. Except for some really screwy car commercials the focus is on why their model of the day is the greatest thing since sliced bread. They don't push mechanics because they push their own service centers. They give incentives to use their service centers. I just bought a new vehicle in October. I'm not sure how many times I've been called or mailed for this that or the other thing. Maybe I should have just put a new engine in my F150 than to buy a new sports car. Also, my college doesn't call me and tell me if they have any new degrees that are being offered that might be more up to date than the degrees that I have. Mine do through snail mail. They tell me all kind of things on how they are improving things. Then they ask for money. Unfortunately, I also receive this sort of info from institutions I never attended. Why are we talking about this again? Lonny Eckert ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Disabling the BACK button (again)
Another way is to pass your variables through a popup window. I posted a code snippet a week or so ago. E-mail me if you need more details on this approach. Lonny Eckert Hesta Corporation [EMAIL PROTECTED] Hesta 610-230-2500 x147 ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: javascript question
If I understand you correctly, you are attempting to run functions in the
parent window from a popup window? If so use:
window.opener.functionInMainWindow();
I've attached a code snippet from a popup window. The function SubmitIt()
is a function from the parent window. FWIW, this was done to preclude
double submissions via the browser back button (popup window not added to
browser history).
Hope this helps.
Lonny Eckert
Hesta Corporation
[EMAIL PROTECTED]
Hesta 610-230-2500 x147
**
script language="JavaScript1.2"
!-- HIDE SCRIPT FROM OLDER BROWSERS.
document.write("h3Dont Close This/h3");
cfif (#pendingExist.RecordCount# gt 0) AND (#pendingExist.process_mode# IS
"Process") AND (#pendingExist.run_type# IS "Automated")
if ("cfoutput#URL.process_mode#/cfoutput" == "Process") {
x = (confirm("The parameters you entered have already been scheduled to run
automatically this month. Clicking OK will use the process log that was
already established for the automated run. Clicking CANCEL will stop manual
processing of this month's data."));
if (!x) {
this.close();
}
else {
// alert("A");
// alert (window.name);
window.opener.SubmitIt();
this.close();
}
}
else {
//alert("B");
window.opener.SubmitIt();
this.close();
}
cfelse
//alert("C");
window.opener.SubmitIt();
this.close();
/cfif
// END OF HIDE SCRIPT FROM OLDER BROWSERS. --
/script
-Original Message-
From: Bruce, Rodney [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 19, 2001 5:33 PM
To: CF-Talk
Subject: ot: javascript question
I am having a problem with running javascript on in a second(popup) window.
from the calling page I use:
Script
windnow.open("file.cfm");
/Script
when the page first opens everything works fine, but when I call a function
to rewrite the page, the next time I try to call any function, I get the
error message that its undefined.
sample:
Var 1;
Var 2;
function outsidefunction(){
Take new value and window.close;
}
MainFunction();
function MainFunction(){
var 3;
var 4;
function subfunction1(){
}
function subfunction2();{
}
subfunction2();
subfunction1();
more lines of code;
outsidefunction();
}
if I call the outside function first it works fine, but if I call one of the
subfunctions first,
the subfunction will work the first time, but then any function call get
the undefined error.
Help please
Thanks
Rodney
~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
CF Date Validation Bug?
QUESTIONS
Question 1) Did the v4.5 Service Packs fix any Year 2000 bugs? If so,
could you point me somewhere where I might find a list of
fixes/enhancements?
Question 2) I was wondering if anyone else had encountered a year 2000 bug
in Cold Fusion?
I tried some searching on the Allaire page didn't see anything there
directly addressing this. I apologize up-front if this has been an oft
discussed subject in the past. I've come up with a work-around that I have
included at the end of the post.
Thanks in advance.
Lonny Eckert
Hesta Corporation
[EMAIL PROTECTED]
Hesta 610-230-2500 x147
**
PROBLEM STATEMENT
The CFINPUT tag with date validation did not enforce a four digit year check
as various sources claim (on-line help Mastering Cold Fusion).
JavaScript is wierd in that date math is converted to milliseconds from 1970
(O'Reilly, JavaScript - the definitive guide, p445-449). The JavaScript was
parsing value from the entered_run_date textbox as if the year 2001 was
1901. Therefore, I was seeing the (selected date today) alert message for
times that I should not have. Entering four digit years via the preceding
cfform did not manifest this problem (obviously).
**
SOLUTION
I derived this solution by viewing the source generated from the CF server.
script LANGUAGE="JavaScript"
!-- HIDE SCRIPT FROM OLDER BROWSERS.
function SubmitIt() {
//START OF FIX
isplit = document.processSchedulerForm.entered_run_date.value.indexOf('/');
sMonth = document.processSchedulerForm.entered_run_date.value.substring(0,
isplit);
isplit = document.processSchedulerForm.entered_run_date.value.indexOf('/',
isplit + 1);
sDay =
document.processSchedulerForm.entered_run_date.value.substring((sMonth.lengt
h + 1), isplit);
sYear =
document.processSchedulerForm.entered_run_date.value.substring(isplit + 1);
//END OF FIX
today = new Date();
alert (document.processSchedulerForm.entered_run_date.value);
alert (today);
selectedDate =
Date.parse(document.processSchedulerForm.entered_run_date.value);
alert (selectedDate);
today = Date.parse(today);
alert (today);
//START OF THE NEW TEST FOR PROPER YEAR LENGTH
if (sYear.length 4) {
alert ("Please enter a date in the format MM/DD/ (use four digits
for
the year)!");}
//END OF NEW TEST
else if (document.processSchedulerForm.process_mode.selectedIndex == 0) {
alert ("Please select whether you wish to Preview or Process data!" );}
else if (document.processSchedulerForm.selected_run_type.selectedIndex ==
0) {
alert ("Please select whether you want the process to run
automatically or
manually!" );}
//THIS WAS THE PROBLEM CHILD
else if (selectedDate today) {
alert ("Please enter a Run Date no earlier than today's date. You may
not
set up an automated session for a process earlier than tomorrow (automated
processes will be set to start at 1:00 a.m.)!" );}
//THIS WAS THE PROBLEM CHILD
cfif session.processid IS 1
else if
(document.processSchedulerForm.selected_employer_params.selectedIndex == 0)
{
alert ("Please select an employer!" );}
else if (document.processSchedulerForm.selected_extract.selectedIndex == 0)
{
alert ("Please select an extract type!" );}
else if (document.processSchedulerForm.payroll_day.value == "") {
alert ("Please enter the Due Day!" );}
/cfif
cfif session.processid IS 2
else if (document.processSchedulerForm.selected_employer.selectedIndex == 0)
{
alert ("Please select an employer!" );}
else if
(document.processSchedulerForm.selected_invoicing_month.selectedIndex == 0)
{
alert ('Please select an invoicing month!');}
/cfif
cfif session.processid IS 3
else if (document.processSchedulerForm.cutoff_date.selectedIndex == 0) {
alert ('Please select a cutoff date!');}
/cfif
else {
document.processSchedulerForm.action =
"index.cfm?fuseaction=actScheduleProcess";
document.processSchedulerForm.submit();
}
}
cfif session.processid IS 1
function ReloadSelection() {
//var
params="index.cfm?fuseaction=displayProcessSchedulerselected_employer=v_sel
ected_employer";
//location.href(params);
document.processSchedulerForm.action =
"index.cfm?fuseaction=addScheduledProcess";
document.processSchedulerForm.submit();
}
/cfif
// END OF HIDE SCRIPT FROM OLDER BROWSERS. --
/script
~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Mastering ColdFusion 4.5
Kristin, I had trouble using the guidance for fetching a file directory listing from an FTP server. Used the on-line help. You may want to make sure that that section of the text is correct. Regards, Lonny Eckert Hesta Corporation [EMAIL PROTECTED] Hesta 610-230-2500 x147 ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: was cookies
-Original Message- From: Philip Arnold - ASP [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 19, 2000 7:29 AM To: CF-Talk Subject: RE: Problem with IE and session management IE 5.5 has serious problems with temporary cookies I'm currently trying to find a setting to get them to work properly, but having no luck at the moment - maybe someone else has solved it here Not sure what exactly what your difficulty is but I also had some difficulties using them in a site we just finished using the fusebox methodology. Not sure if this is pertinant, but I had done a search in the Allaire support section and noted that: 1) cookies are not set till the end of interpreting a cfm file 2) because of that CFLOCATION impacts whether or not a cookie is set Lonny Eckert Hesta Corporation [EMAIL PROTECTED] Hesta 610-230-2500 x147 ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
