Re: Honest question about cfform

2014-03-04 Thread Mike K
Gerald, I used to use CFFORM, and it quickly got outdated as HTML and CSS and Javascript and jquery moved on. These days HTML5 is the go with CSS3. CFFORM doesnt produce those. Therefore things like client side validation, placeholder text, cross-browser issues, mobile devices are all

Re: Honest question about cfform

2014-03-04 Thread Russ Michaels
The cfide has caused so many security issues that it is best to simply avoid using it all and do not even have it in your site. The other issue is that you are reliant on this virtual dir. I have seen many customers who were oblivious to this requirement when they moved their hosting and as a

SQL Global String Replace

2014-03-04 Thread Robert Harrison
Does anyone have an update program that can update a text string in all tables/rows/columns of an MS SQL data base? Need to do a global text string replace on several sites. Any help appreciated. Thanks, Robert Harrison Director of Interactive Services Austin Williams Advertising I

Re: Honest question about cfform

2014-03-04 Thread Scott Stewart
On 3/3/2014 10:39 PM, Gerald Guido wrote: Why are people so vehemently opposed so to CFForm? Many TIA in advance, Curious-G! -- Gerald Guido Twitter https://twitter.com/CozmoTrouble Blarg http://www.myinternetisbroken.com Facebook https://www.facebook.com/gerald.guido.9

Re: SQL Global String Replace

2014-03-04 Thread Russ Michaels
you mean like this http://www.mssqltips.com/sqlservertip/1555/sql-server-find-and-replace-values-in-all-tables-and-all-text-columns/ On Tue, Mar 4, 2014 at 1:55 PM, Robert Harrison rob...@austin-williams.comwrote: Does anyone have an update program that can update a text string in all

RE: SQL Global String Replace

2014-03-04 Thread Jeff Garza
Take a look at the sys.tables and sys.columns tables in your SQL database. You should be able to write a couple of cursors to loop over each and just print out the SQL to run separately (or you can get fancy and generate the SQL statement and run it via EXEC sp_executeSQL functions). I don't

RE: SQL Global String Replace

2014-03-04 Thread Robert Harrison
Yes, I do mean like that, but I was really hoping someone had it already written up in CF with a tested procedure they would be willing to share. I was able to find several downloads for PHP, but nothing for CF. Thanks Robert Harrison Director of Interactive Services Austin Williams

RE: SQL Global String Replace

2014-03-04 Thread Ben Forta
Actually, that's the kind of operation that you'd not want to perform in CF (or PHP or any other database client). Unless you truly need all that data within a CF page for some other reason, you shouldn't be sending it all back and forth between DBMS and CF. --- Ben (Sent from my newest Android

RE: SQL Global String Replace

2014-03-04 Thread Robert Harrison
Actually, that's the kind of operation that you'd not want to perform in CF (or PHP or any other database client). Unless you truly need all that data within a CF page for some other reason, you shouldn't be sending it all back and forth between DBMS and CF. ... I'm going to do this locally,

Re: Honest question about cfform

2014-03-04 Thread Raymond Camden
I think it is acceptable to let CF do some things for you. For example, I don't want to go to Java and write the code to handle database calls. Could I? Sure. (Ok, I lie.) But is it a good use of my time? Probably not. I let CF handle that aspect for me and it has never been a problem. On the

Re: Honest question about cfform

2014-03-04 Thread Claude Schnéegans
Why are people so vehemently opposed so to CFForm? Mainly for historical reason. I don't know how is CFForm nowadays, but when it first appeared in CF, it was really week, missing a lot of essential features, and every message coming out of it was only in English, making it not an option for

Re: Honest question about cfform

2014-03-04 Thread Russ Michaels
I have used cf since v4 and it has always had both client side and server side validation On Tue, Mar 4, 2014 at 2:45 PM, wrote: Why are people so vehemently opposed so to CFForm? Mainly for historical reason. I don't know how is CFForm nowadays, but when it first appeared in CF, it was

RE: Honest question about cfform

2014-03-04 Thread Robert Harrison
I have used cf since v4 and it has always had both client side and server side validation Ditto... but for client side validation I seldom use CFFORM unless it is a very simple form. CFFORM is good for required fields and for some validation of data types entered in fields. It falls short

Re: Honest question about cfform

2014-03-04 Thread Cameron Childress
On Mon, Mar 3, 2014 at 10:42 PM, Gerald Guido wrote: My bad: Why are people so vehemently opposed to CFForm? Rule of thumb: Anything that is built into CF and spits out Java, Javascript, Flash, or any other client side parsed in the browser stuff should be avoided. Adobe has a roughly 18

Re: Honest question about cfform

2014-03-04 Thread Larry Lyons
That may have been the case at one time. HOWEVER with HTML 5 and such jQuery plugins as jQuery.Validate, even that argument in favour of CFFORM is no longer valid. With HTML 5 (assuming that the client browser can handle it) even required fields are much easier to do than with CF now. About

Re: Honest question about cfform

2014-03-04 Thread Jochem van Dieten
On Mar 4, 2014 5:40 AM, Gerald Guido wrote: Why are people so vehemently opposed so to CFForm? Because it will only get you so far. And once you want to go further, you'll find that you can't. So then you have to go back, rip out cfform and replace it with something else. At which point you

Re: Honest question about cfform

2014-03-04 Thread Raymond Camden
And btw - don't forget - there is a whole project dedicated to helping you replace these items. (So instead of just saying Dont Do X, we can do Do This) - https://github.com/cfjedimaster/ColdFusion-UI-the-Right-Way On Tue, Mar 4, 2014 at 11:25 AM, Jochem van Dieten joch...@gmail.comwrote:

Re: Best practices for xss security in CMS? - Related Question

2014-03-04 Thread Pete Freitag
On Mon, Mar 3, 2014 at 5:11 PM, Nick Gleason n.glea...@citysoft.com wrote: Pete, Much appreciated. I guess where I'm being a bit of a dunce is that in your example, if a malicious url.query variable was passed in by a hacker, wouldn't the display only be available on that single request?

RE: SQL Global String Replace

2014-03-04 Thread Jeff Garza
I agree with Ben...this is something that you should be running in SQL Management Studio. ColdFusion is not meant to run this kind of stuff (unless you set the timeout on your templates to 0). The code attached below will loop over all of the user tables, and then loop over all of the text

Re: ColdFusion ListServ app

2014-03-04 Thread Jeff Horne
Thanks Graham. Unfortunately creating accounts in GMail is not something our users will want to do, nor managing their email addresses in the group account something we want to do. Thanks for the ideas but I think we will use Exchange to do the ListServ and CF to manage the subscriptions and

Re: Honest question about cfform

2014-03-04 Thread Gerald Guido
Thank you all for taking the time to answer. It has been most enlightening.I must say that assumptions made were more interesting than the answers themselves. G! -- Gerald Guido Twitter https://twitter.com/CozmoTrouble Blarg http://www.myinternetisbroken.com Facebook