RE: Securing CF Apps.

2004-03-24 Thread Jochem van Dieten
Steve Nelson said: Is that true? Every time I've heard about some big new hack on Windows, big enough to make the news, the patch was either already available or available in less than 24 hours. That they only make the news when Microsoft's marketing department starts advertizing patch

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Jochem van Dieten
Steve Nelson said: Just out silly curiousity, I'd love to hear the advantages/disadvantages between these three versions of selecting a recordset from a db. version 1 - cfquery name=getuser datasource=#request.dsn# select first_name from users where

RE: [OT] How do you make a DIV take up space?

2004-03-24 Thread Craig Earls
Thanks I signed up for the css-d mailing list and am learning a ton... -Original Message- From: mayo [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 10:24 PM To: CF-Talk Subject: RE: [OT] How do you make a DIV take up space? http://www.css-discuss.org/mailman/listinfo/css-d is

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Stephen Barry
While not wanting to get into the whole Stored Procedures V CFQUERY argument, I have to say there are times when stored procedures are a more suitable solution. For example in a large company looking to add limited intranet access to an important DB - its quite likely they already have their DB

Re: JRun has closed connection

2004-03-24 Thread John Croney
I removed the first line but that has not help. The code below is the page that is causing the problem? Remove the first line. John Croney wrote: [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
The use of cfquery vs cfstoredproc has nothing to do with separation of presentation from business logic. You always want to do that and it can be achieved with both. -Matt On Mar 24, 2004, at 5:23 AM, Stephen Barry wrote: While not wanting to get into the whole Stored Procedures V CFQUERY

OT Viewing Source Code

2004-03-24 Thread Greg Luce
A few weeks ago there was a thread here about changing the edit functionality in IE to use DWMX. For some reason I did what was suggested on my laptop, and now when I right-click and View-Source, or View-Source from the menu I get nothing! I've been back through the microsoft article that told you

RE: Is Parallel Processing Possible With CF?

2004-03-24 Thread Bill Grover
Maybe I'm way off base but what if you created a page with multiple frames and in each frame loaded a page that synced a different site.Wouldn't each frame be processed as a different request causing CF to process them in parallel? __

RE: OT Viewing Source Code

2004-03-24 Thread Philip Arnold
From: Greg Luce A few weeks ago there was a thread here about changing the edit functionality in IE to use DWMX. For some reason I did what was suggested on my laptop, and now when I right-click and View-Source, or View-Source from the menu I get nothing! I've been back through the

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Deanna Schneider
-Original Message- From: Matt Liotta If that's all, I guess I'll continue to use cfquery. I find that the most valid reason for using stored procedures is for transaction processing. If I need to tie several pieces of functionality together in one database hit, then I'll put it in a

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Tony Weeg
I cant see the correlation either... psycho nazi dba's need to first get over themselves... a view to the tables can obscure enough if that's the reason... and Im not sure that I can even come close to agreeing that cf code will look better if you use stored procs... that's like saying

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Tony Weeg
there ya go... a valid reason...however it has no bearing on security, more on functionality... good stuff -Original Message- From: Deanna Schneider [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 24, 2004 8:39 AM To: CF-Talk Subject: Re: why are procedures better? (was: RE:

Re: Is Parallel Processing Possible With CF?

2004-03-24 Thread Thomas Chiverton
On Wednesday 24 Mar 2004 13:15 pm, Bill Grover wrote: each frame be processed as a different request causing CF to process them in parallel? __ It would. -- Tom Chiverton Advanced ColdFusion Programmer Tel: +44(0)1749 834997 email: [EMAIL

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
I find that the most valid reason for using stored procedures is for transaction processing. If I need to tie several pieces of functionality together in one database hit, then I'll put it in a stored proc. For example, I'm working on a nested set procedure right now, where I need to find the

RE: Is Parallel Processing Possible With CF?

2004-03-24 Thread Peter Tilbrook
Tom, are you getting two copies of every single message sent to this list or am I succintly targeted by the arseholes of the world to be pushed to the limit and say GTFOOH!? [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Tangorre, Michael
I find that the most valid reason for using stored procedures is for transaction processing. If I need to tie several pieces of functionality together in one database hit, then I'll put it in a stored proc. For example, I'm working on a nested set procedure right now, where I need to find

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Greg Luce
Deanna, Have you used ER Studio? If you engineer a db with it, the tool will poop out all the procs for select, add, update, and delete automatically. It's really handy. I've done it and run whole sites on stored procs without ever writing a line of SQL (except a few custom procs). Last time I

RE: Image Tag

2004-03-24 Thread Burns, John D
De skewing?Now sure I understand what you mean. John -Original Message- From: brobborb [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 4:58 PM To: CF-Talk Subject: Re: Image Tag John u know of any command for deskewing?all i see is one for Skew. If you know of any tag or CFX

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
Finally, I work in small teams quite often where we all need to make bets use of our time, so sometimes if we are pressed for time, one person will write the stored procs, while another works on the pages and another the layout and UI. Imagine the hassle of trying to work on the same page

Re: OT Viewing Source Code

2004-03-24 Thread brobborb
Me thinks it is an IIS setting :) I THINK - Original Message - From: Greg Luce To: CF-Talk Sent: Wednesday, March 24, 2004 7:11 AM Subject: OT Viewing Source Code A few weeks ago there was a thread here about changing the edit functionality in IE to use DWMX. For some reason I did

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Greg Luce
I don't think there have been convincing arguments that SPs help from a security standpoint, but from a performance standpoint I don't think it's debatable. 1. Stored Procedures allow developers to encapsulate business logic and provide users (programmers) with a simple interface to that logic.

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Steve Nelson
Yeah, but CF will double up those quotes automatically. At least I thought it did. Steve -Original Message- From: Jochem van Dieten [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 24, 2004 3:34 AM To: CF-Talk Subject: RE: why are procedures better? (was: RE: Securing CF Apps.) This type

Re: Image Tag

2004-03-24 Thread brobborb
basically it straightens an image.Lets say you scan a document, but it's kinda crooked cos you accidentally moved the paper right before you scanned.I'm not sure how deskewing works programatically, but it straightens the image for you.I can't believe you've never heard of deskewing tho!To me it's

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
I don't think there have been convincing arguments that SPs help from a security standpoint, but from a performance standpoint I don't think it's debatable. That is a myth. Stored procedures are only faster than dynamic queries; not prepared statements. In fact, in some cases it is possible for

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Stephen Moretti
You are quite correct. Jochem's example will wind up with all the DROP TABLE junk in the text field. If you try that against a numeric field, then you wind up with invalid SQL which will throw an error. Besides, shouldn't there be some data validation before you get to the stage of running

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Tangorre, Michael
If your application is properly modularized there shouldn't be all those different things in the same file anyway. Well not all of us are in positions to control every aspect of a project.. Nor are the people that are in charge always in line proper ways of doing things. I'm just another

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Tony Weeg
your not weird, that's the truth...validate validate validate junk in = junk out good in = good out prevent the problem and you will fare much better than trying to obscure something. and whats the point of hiding data structure from developers and the like? no point...doesnt having a better

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Steve Nelson
Just to double check, I tested this by doing this: http://192.168.0.100/experiments/temp/queries.cfm?user_id='1' note the single quotes In the Debugging, I get this: getuser (Records=0, Time=0ms) SQL = select first_name from users where user_id='''1''' note the extra doubled up single quotes

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Jochem van Dieten
Stephen Moretti wrote: You are quite correct. Jochem's example will wind up with all the DROP TABLE junk in the text field. Read again what I wrote about C-style escaping. Or just test it. If you try that against a numeric field, then you wind up with invalid SQL which will throw an

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Marlon Moyer
My biggest beef with ms stored procs is the cheesy error handling.If they would update t-sql to be a more robust language, maybe then I'd do more stored procs. I've also never figured out a good way to create a stored proc for searching a table if your search terms can be any combination of

Re: Securing CF Apps.

2004-03-24 Thread Adrocknaphobia
yes matt. it is true that there is a dba login to every database. of course no one using the application has the role of dba. so what is your point? -adam -Original Message- From: Matt Liotta [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 10:09 PM To: 'CF-Talk' Subject: Re:

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Philip Arnold
From: Jochem van Dieten This type of coding can be insecure. Just imagine what would happen in Oracle, MySQL or any other database that use C-style escaping when combined with: cfset url.user_id = h4ck3r\'; DROP TABLE users; COMMIT; -- But if you're using CFQUERYPARAM, then that

Re: OT Viewing Source Code

2004-03-24 Thread Kevin Graeme
A few weeks ago there was a thread here about changing the edit functionality in IE to use DWMX. For some reason I did what was suggested on my laptop, and now when I right-click and View-Source, or View-Source from the menu I get nothing! I've been back through the microsoft article that

Re: why are procedures better?

2004-03-24 Thread Jochem van Dieten
Steve Nelson wrote: http://192.168.0.100/experiments/temp/queries.cfm?user_id='1' note the single quotes It should be without quotes here. SQL = select first_name from users where user_id='''1''' note the extra doubled up single quotes Without quotes that would be: where user_id='1'

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Greg Luce
-Original Message- From: Matt Liotta [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 24, 2004 9:13 AM To: CF-Talk Subject: Re: why are procedures better? (was: RE: Securing CF Apps.) I don't think there have been convincing arguments that SPs help from asecurity standpoint, but from

Re: Securing CF Apps.

2004-03-24 Thread Adrocknaphobia
Alright, so far you've just said all these ideas are pointless. What do you suggest? -adam -Original Message- From: Matt Liotta [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 10:15 PM To: 'CF-Talk' Subject: Re: Securing CF Apps. Where do people get the idea that adding

Re: why are procedures better?

2004-03-24 Thread Jochem van Dieten
Philip Arnold wrote: From: Jochem van Dieten This type of coding can be insecure. Just imagine what would happen in Oracle, MySQL or any other database that use C-style escaping when combined with: cfset url.user_id = h4ck3r\'; DROP TABLE users; COMMIT; -- But if you're using

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
Well not all of us are in positions to control every aspect of a project.. Nor are the people that are in charge always in line proper ways of doing things. I'm just another person on the lower end of the totem pole. If everything ran as it should we wouldn't be having this conversation. I

Re: Securing CF Apps.

2004-03-24 Thread Matt Liotta
yes matt. it is true that there is a dba login to every database. of course no one using the application has the role of dba. so what is your point? The point is the login is there and can be exploited. No matter how much you lock down the schema, there is always one user account which has

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Tangorre, Michael
I certainly understand your position. But what does that have to do with comparing stored procedures to queries? It may matter in your particular situation, but we are supposed to be having a generic technical debate. Yes, we are having a generic technical debate, and what I am saying is

Re: JRun CFMX Error

2004-03-24 Thread Bryan F. Hogan
I have only seen this error popup when a user chooses to cancel the download of a file with me using cfcontent. The error in my case is never seen by the user it does however right to the logs. To make it stop I used cftry around the cfcontent tags. cftry cfcontent ... cflocation ...

RE: OT Viewing Source Code

2004-03-24 Thread Philip Arnold
From: Greg Luce A few weeks ago there was a thread here about changing the edit functionality in IE to use DWMX. For some reason I did what was suggested on my laptop, and now when I right-click and View-Source, or View-Source from the menu I get nothing! I've been back through the

RE: Java CFX for CF-Excel

2004-03-24 Thread Douglas.Knudsen
anyone actually use this?has like no docs.I can see some class files in the jar and all, but... Doug -Original Message- From: Matt Liotta [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 8:59 PM To: CF-Talk Subject: Re: Java CFX for CF-Excel

RE: why are procedures better?

2004-03-24 Thread Philip Arnold
From: Jochem van Dieten Which is why I advocate cfqueryparam. Why is why EVERYBODY should advocate CFQUERYPARAM g [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

RE: OT Viewing Source Code

2004-03-24 Thread Burns, John D
No, it's in the browser.You can view source on a machine that doesn't have IIS installed. John -Original Message- From: brobborb [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 24, 2004 9:00 AM To: CF-Talk Subject: Re: OT Viewing Source Code Me thinks it is an IIS setting :) I

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
This is simply your opinion which differs greatly from the DBAs I've been involved with. It isn't my opinion; it is an easily provable fact. Go ask your DBAs what the difference in execution between a prepared statement and a stored procedure is. The answer is nothing. But, don't take my word

Re: Securing CF Apps.

2004-03-24 Thread Matt Liotta
Alright, so far you've just said all these ideas are pointless. What do you suggest? See the archives where I answered that question. -Matt [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

RE: Image Tag

2004-03-24 Thread Burns, John D
But no imaging software knows what your intended image was.To an imaging program, the white edges around your skewed image is just as important to the image as your photo (or whatever it is that you scanned.Basically, to deskew it, you'd have to rotate the entire image x degrees until the image

Re: Securing CF Apps.

2004-03-24 Thread Adrocknaphobia
Actually there isn't. Common sense dictates that your schema owner / dba is disabled on production once its deployed. Furthermore there is never a need for the schema owner or dba to have an account in your application. So again, you trying to argue against Oracle and SQL security, which should be

Re: Image Tag

2004-03-24 Thread Ernie Pena
I created some a simple install script that will install or add the table to a current databse (ms access) and also created the cfm files for you. Here is the example of the app http://www.katyheat.com/gallery.cfm I use image.dll and autoresize. Image.dll is ok and does the job, all that is

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
Yes, we are having a generic technical debate, and what I am saying is that when the team setup or hierarchical setup is not ideal, separating work out makes the project move along faster. Stored procs come into play here in that someone can tackle this aspect while other things are being

Re: Java CFX for CF-Excel

2004-03-24 Thread Matt Liotta
I use it. See http://devilm.com/archives/99.html for more information. BTW, OpenXCF is always looking for contributors. Maybe you could write the documentation. -Matt On Mar 24, 2004, at 9:38 AM, [EMAIL PROTECTED] wrote: anyone actually use this?  has like no docs.  I can see some class

# Signs for anchor in cflocation

2004-03-24 Thread Yves Arsenault
Hello, How could I redirect a user to a page with cflocation to a page with an anchor? And the anchor is to be determined by a query var. cflocation url=""> That doesn't work any ideas? I've never had to do this. Thanks, Yves [Todays Threads] [This Message] [Subscription] [Fast

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Dave Watts
That is a myth. Stored procedures are only faster than dynamic queries; not prepared statements. In fact, in some cases it is possible for a stored procedure to actually be slower than a dynamic query. This is simply your opinion which differs greatly from the DBAs I've been

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Stephen Moretti
Stephen Moretti wrote: You are quite correct. Jochem's example will wind up with all the DROP TABLE junk in the text field. Read again what I wrote about C-style escaping. Or just test it. Blows up on mySQL, but I see your point for less secure databases like Oracle The problem I

RE: # Signs for anchor in cflocation

2004-03-24 Thread Dave Watts
How could I redirect a user to a page with cflocation to a page with an anchor? And the anchor is to be determined by a query var. cflocation url=""> That doesn't work any ideas? My guess is that you'd have to have two hashes to escape, and one hash at each end of your _expression_:

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Stephen Barry
Hi Matt I'm not quite clear on this. Of course SP's aren't the only way of separating business logic from presentation but aren't they one possible means of doing so? SP's allow developers to abstract or separate server-side functions from the client-side GUI. Multiple statements and conditional

Weird CFC Problem

2004-03-24 Thread Brad Roberts
The only way I know to explain this is to give an example. // THIS STRUCT IS IN SERVER SCOPE (3 simple values and a query) server.myData = structNew(); server.myData.var_1 = ; server.myData.var_2 = ; server.myData.var_3 = ; server.myData.myQuery = queryNew(c1,c2,c3); // THIS IS MY CFC

RE: why are procedures better?

2004-03-24 Thread Steve Nelson
http://192.168.0.100/experiments/temp/queries.cfm?user_id=\'1\' getuser (Records=0, Time=141ms) SQL = select first_name from users where user_id='\''1\''' I just gave it a try. It looks like it is doubled up by CF. Steve -Original Message- From: Jochem van Dieten [mailto:[EMAIL

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Jochem van Dieten
Stephen Moretti wrote: Stephen Moretti wrote: You are quite correct. Jochem's example will wind up with all the DROP TABLE junk in the text field. Read again what I wrote about C-style escaping. Or just test it. Blows up on mySQL, but I see your point for less secure databases like

RE: why are procedures better?

2004-03-24 Thread Tony Weeg
another reason why sp's may be slower than sql logic in a cfquery tag... http://www.winnetmag.com/SQLServer/Article/ArticleID/23011/23011.html -Original Message- From: Steve Nelson [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 24, 2004 10:03 AM To: CF-Talk Subject: RE: why are

Re: Image Tag

2004-03-24 Thread brobborb
There are plenty!!!You definitely have not seen a document being deskewed!!!But it works best for images that have some kind of line pattern on them (like say, a page that has a sentence or paragrahp or a whole article).Then it does some math and decides the actual orientation.Something like that.

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Tangorre, Michael
Maybe I wasn't clear in my reply to that statement. There is nothing inherent about stored procedures which makes them better for separating out work. It is in fact the same amount of work to separate queries as it is stored procedures. Well... As I already pointed out: Developer1 - User

Re: Securing CF Apps.

2004-03-24 Thread Matt Liotta
Actually there isn't. Common sense dictates that your schema owner / dba is disabled on production once its deployed. Furthermore there is never a need for the schema owner or dba to have an account in your application. So again, you trying to argue against Oracle and SQL security, which

Re: # Signs for anchor in cflocation

2004-03-24 Thread Yves Arsenault
You were absolutely right. Thanks, Yves - Original Message - From: Dave Watts To: CF-Talk Sent: Wednesday, March 24, 2004 11:04 AM Subject: RE: # Signs for anchor in cflocation How could I redirect a user to a page with cflocation to a page with an anchor? And the anchor is to be

RE: Weird CFC Problem

2004-03-24 Thread Raymond Camden
When you run structAppend(a,b) you are appending B onto A. In your case, you appended Server onto Data. If you wanted to update the server scope why didn't you just manipulate it directly? If you prefer using a pointer, you can use data = ""> Note - I do not recommend directly accessing server

Re: why are procedures better?

2004-03-24 Thread Jochem van Dieten
Steve Nelson wrote: http://192.168.0.100/experiments/temp/queries.cfm?user_id=\'1\' Why are you using a backslashes - single quotes combnation twice? It won't work that way and I only had one. Please try exactly the following link against a database that supports C-style escaping:

Re: # Signs for anchor in cflocation

2004-03-24 Thread Yves Arsenault
You were right. Thanks, Yves - Original Message - From: Dave Watts To: CF-Talk Sent: Wednesday, March 24, 2004 11:04 AM Subject: RE: # Signs for anchor in cflocation How could I redirect a user to a page with cflocation to a page with an anchor? And the anchor is to be determined

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
I'm not quite clear on this. Of course SP's aren't the only way of separating business logic from presentation but aren't they one possible means of doing so? SP's allow developers to abstract or separate server-side functions from the client-side GUI. Multiple statements and conditional

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Stephen Moretti
The problem I always have with this example, despite the fact that 9/10 the example itself doesn't work, is that it takes 2 minutes to set up appropriate users for databases with appropriate grant levels and you can even set the statements that can be executed in the DNS settings in

RE: Java CFX for CF-Excel

2004-03-24 Thread Douglas.Knudsen
kewl, me have a look-see.I was looking for a way to export graphs from cfchart into an Excel sheet, without COM and work on Excel97.Why my interests in your stuff was piqued.I see the ExcelQuery imports only.What about the PDFText.class?Its on my list of things to play with this some, I'll attempt

Re: # Signs for anchor in cflocation

2004-03-24 Thread Yves Arsenault
Sorry about that The first email seemed to be rejected ... Yves - Original Message - From: Yves Arsenault To: CF-Talk Sent: Wednesday, March 24, 2004 11:13 AM Subject: Re: # Signs for anchor in cflocation You were right. Thanks, Yves - Original Message - From: Dave

RE: why are procedures better?

2004-03-24 Thread Steve Nelson
When I did my comparison I used the stored procedure name getuser, i.e. no sp_ That is weird though. Just to restate my performance results, this is what i found: version 1, cfquery, no cfqueryparam : averaged 0.5098ms version 2, cfquery w/ cfqueryparam: averaged 0.5744ms version 3, cfstoredproc:

RE: Image Tag

2004-03-24 Thread Burns, John D
Ok, but I would imagine that in the background that's all that it's doing is rotating based on lines and such and then cropping.It's finding out what part of the image is what is desired and then doing those operations.I don't know anything that you can leverage in CF to do that with, but you

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
Maybe I don't understand your setup. In some CFM, you have to either call cfquery or cfstoredproc. If you need to change either the query or the stored procedure, you will need to edit this file. Now in either case, you could simply use a cfinclude to separate out either into a separate file

RE: why are procedures better?

2004-03-24 Thread Steve Nelson
I don't think it's going to matter, because CF is generating the doubled up single quotes that are sent to the db. Here are a few combinations: http://192.168.0.100/experiments/temp/queries.cfm?user_id=1\' getuser (Records=0, Time=0ms) SQL = select first_name from users where

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Deanna Schneider
- Original Message - From: Greg Luce Have you used ER Studio? Nope, I use SQL Navigator SQL Plus, Oracle behind those. Don't think there's any auto-generating of stored procs in it. Don't think my boss would think it worthwhile to plop down more money just for that, either. [Todays

Re: Java CFX for CF-Excel

2004-03-24 Thread Matt Liotta
Actually, the version of ExcelQuery up at OpenXCF can both read and write files. It accepts an action attribute, which specifies which way to go. For example, the following. cfx_excelquery action="" file=/Applications/BlueDragon_Server_JX/wwwroot/openxcf/test.xls variable=qry -Matt On Mar

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Deanna Schneider
- Original Message - From: Steve Nelson Do you have a development Oracle server you could try this on? I'm very curious if there is a difference. I haven't tested since we switched to CFMX, but on CF 5.0 with Oracle 8.17, the injected sql would fail as invalid when it hit the

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Stephen Barry
psycho nazi dba's need to first get over themselves... a view to the tables can obscure enough if that's the reason... Now Tony, I think thats a bit strong! Some companies employ people to know exactly whats going on with the DB. More a reflection of the value of information and the

Re: Securing CF Apps.

2004-03-24 Thread Adrocknaphobia
That's precisely what I'm saing. Once deployed, the schema owner is disabled. Now of course an sa account exists, but an sa account will exists on every db server, just as and admin account exists on every OS. Furthermore, all client tool connections are disabled as well. The only thing that isn't

RE: Java CFX for CF-Excel

2004-03-24 Thread Stacy Young
Thanks Matt, we will experiment...I didn't realize it could also write files...long shot but does it currently allow for any column formatting? If not we'll look to extend it and contribute changes back to the project. Thx! _ From: Matt Liotta [mailto:[EMAIL PROTECTED] Sent: Wednesday,

Re: Image Tag

2004-03-24 Thread brobborb
I tried looking for tags/ CFX's that have deskwing, but to no avail.So i decided instead to have a field where the user inputs a number.The user basically guesses roughly about how many degrees to rotate theimage in order to get the lines straight. Didnt go pass management though haha. -

CF based Sales Lead Mgmt App

2004-03-24 Thread Dharmesh Goel
Has anybody come across a sales lead / contact management application. CF based apps would be a preference, but I would like to see what else is available as well. I have tried googling as well as the list archives but am not getting much. I may not be using the right keywords to search. Thanks,

Re: Securing CF Apps.

2004-03-24 Thread Matt Liotta
That's precisely what I'm saing. Once deployed, the schema owner is disabled. Now of course an sa account exists, but an sa account will exists on every db server, just as and admin account exists on every OS. Furthermore, all client tool connections are disabled as well. The only thing

Re: Java CFX for CF-Excel

2004-03-24 Thread Matt Liotta
It only allows setting cell values and formulas. I suggest all formating be done in a template. -Matt On Mar 24, 2004, at 10:42 AM, Stacy Young wrote: Thanks Matt, we will experiment...I didn't realize it could also write files...long shot but does it currently allow for any column

Re: why are procedures better?

2004-03-24 Thread Jochem van Dieten
Steve Nelson wrote: I don't think it's going to matter, because CF is generating the doubled up single quotes that are sent to the db. Here are a few combinations: http://192.168.0.100/experiments/temp/queries.cfm?user_id=1\' getuser (Records=0, Time=0ms) SQL = select first_name from

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Steve Nelson
So are you advocating cfincludes with queries instead of stored procs? Steve -Original Message- From: Matt Liotta [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 24, 2004 10:26 AM To: CF-Talk Subject: Re: why are procedures better? (was: RE: Securing CF Apps.) Maybe I don't understand

RE: why are procedures better?

2004-03-24 Thread Steve Nelson
Does that mean SQL2000 is more secure than Oracle?!hahaha Seriously, what does it do in Oracle? Will it throw an error? Can you run a simple test to see what happens? Steve -Original Message- From: Jochem van Dieten [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 24, 2004 10:56 AM To:

test msg

2004-03-24 Thread Ray Champagne
Just testing to see if my messages are getting through = Ray Champagne - Senior Application Developer CrystalVision Web Site Design and Internet Services 603.433.9559 www.crystalvision.org = The information

Site mapping software?

2004-03-24 Thread Ray Champagne
Hi all: Looking into taking over a huge web site project that a potential client recently asked us about.The problem is, the site is so sprawling and mis-managed, there are TONS of files on the server that I have no idea whether or not are in use.I was wondering if there was any software out

RE: Weird CFC Problem

2004-03-24 Thread Brad Roberts
Actually, I DON'T want to update the server struct.It has default data that I use to populate local structures.My problem is that the server struct is being updated somehow, but I don't want it to.Only the query is updated, not the simple values of the struct. Hope that makes sense. -Brad

RE: Weird CFC Problem

2004-03-24 Thread Raymond Camden
Ah, then change it to: cfset structAppend(data, duplicate(server.myData), false) Notice the use of duplicate. Before you were ending up with a pointer. [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

RE: Site mapping software?

2004-03-24 Thread Steve Nelson
This isn't exactly a map like you're thinking, but might help none the less. http://www.fusebox.org/forums/messageview.cfm?catid=11threadid=299highligh t_key=ykeyword1=prototype In a nutshell you include the file in your Application.cfm, then you click through the site. Every time you hit a

Re: JRun CFMX Error

2004-03-24 Thread Joe Eugene
Thanks, i have seen this in the JRun Error Logs occationally without using any CFCONTENT. Well we do have some Large CFMX Generated HTML(output) Reports... Is it possible that the user might have clicked Stop while the report was downloading to the browser and that threw an error on the Log

Re: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-24 Thread Matt Liotta
Nope, simply pointing out that if the problem is related to two people needing to edit the same file then that particular problem can be easily solved. -Matt On Mar 24, 2004, at 11:00 AM, Steve Nelson wrote: So are you advocating cfincludes with queries instead of stored procs? Steve   

Quick Question, RE: Datatype and future date/time calculations

2004-03-24 Thread Jeff Small
Let's say a table was going to contain AllocatedTime which would be the total time allocation for a task, say...an hour, possibly 8, maybe 16, maybe even a half hour or 45 minutes...you get it, a range of hours and minutes, and another table was going to contain separate entries to track progress

RE: Quick Question, RE: Datatype and future date/time calculation s

2004-03-24 Thread Bosky, Dave
Use datetime datatypes with datediff/dateadd functions. -Original Message- From: Jeff Small [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 24, 2004 11:58 AM To: CF-Talk Subject: Quick Question, RE: Datatype and future date/time calculations Let's say a table was going to contain

RE: Web application testing

2004-03-24 Thread Jon Gunnip
[EMAIL PROTECTED] 03/23/04 8:50 PM I generally test my workflow by creating a non-functional html prototype then applying Interaction Design techniques (ala Cooper.com). It's a manual process though, requires a lot of thinking. What are you trying to achieve by testing the User Interface?

Re: Quick Question, RE: Datatype and future date/time calculation

2004-03-24 Thread Jeff Small
Use datetime datatypes with datediff/dateadd functions. Will date time allow me to insert dates/times that are larger than 24 hours? I mean, no harm in trying, of course... I was actually planning on taking advantage of datediff/dateadd, that's why I was hoping a datetime datatype would

  1   2   >