This is *exactly* why you never run as root unless you absolutely have to
(even then you can often get away w/ running only the current command as
root using su).
First suggestion is restoring from your daily backup. You *do* have a daily
backup don't you? :)
As far as recovery goes, assuming
Heh, you answered your own question.
count()
*** Psycically trying to probe your table/field names)***
SELECT c.class_id, c.class_name, count(r.lname)
FROM class c, registrant r
WHERE c.class_id = r.class_id
GROUP BY c.class_id, c.class_name
-Original Message-
From: David Clay
Code smart.
Don't allow input from a form field to ever go directly into a query: Treat
all data recieved from a user as tainted.
Don't rely on JS or HTML, there's nothing to stop someone doing a direct
post to your script.
Get rid of detailed error messages, use error templates and try/catch
Haven't really been following this thread, but at it's highest level your
problem seems to break down into these three steps. (If you want quick fixes
skip to the bottom.)
1. Render the HTML
2. Convert rendered screen to image
3. Resize image
RENDER THE HTML
---
You might check
First of all that's not a 3d array. Secondly from your data I'd say embedded
structs would suit you better (you might also hear the concept reffered to
as hashes or associative arrays).
// init struct
notebook = structNew();
// example using variables
structInsert(notebook, Notebook_Number,
Mapping values is one option, but I really think you should consider leaving
it numeric.
update prod set price = 19 where price = 22;
Would easily change all prices of one type to another.
If it's space you're concerned about (and you use all integer prices) using
an unisigned tinyint (8 bits)
Inline IF? IIF() :)
IIF(expression, true_expr, false_expr)
Check the lang. ref. for more detail.
-Original Message-
From: Stevens, Jason [mailto:[EMAIL PROTECTED]]
Sent: May 16, 2001 23:42
To: CF-Talk
Subject: Imbedding IF statements into a tag...
Is it possible to imbed IF
Sounds like you'd be best be served by a recursive function (or for CF
recursive custom tag).
For performance sake I'd either have a table or application object to store
the full heirchy info of each category; pre-generated on a fixed basis.
You could store it w/ full html formating in a
and much less processor
intensive.
-Original Message-
From: Raymond B. [mailto:[EMAIL PROTECTED]]
Sent: May 17, 2001 05:11
To: CF-Talk
Subject: RE: HELP: Hierarchy
Sounds like you'd be best be served by a recursive function (or for CF
recursive custom tag).
For performance sake I'd either
Starting and stoping CF will generally require root/administrator access
in default install. If you take the following suggestions make sure you're
aware of how to exec system commands safely in a web accessible script.
*NIX:
-
If your under *nix w/ Perl or PHP support; change to a user
The timeout value repressents how long the process will wait to obtain a
lock of the type specified. If throwontimeout is set to Yes it will raise
an exception if a lock can not be obtained, if it's No then the code will
skip to the end of the block (not executing anything in the block).
Eg.
1)
Sorry, it's late and I had completely forgetten about 1 by the time I
finished reading 2.. hehe.
I'm going to go a bit out on a limb here and say no. As you're only checking
the symbol table to see if the name is defined -- not trying to get a
coherent value from it or access the same memory
numberFormat(foo/10^iif(fix(log10(abs(foo))) gt 1,
fix(log10(abs(foo))),fix(log10(abs(foo/10,9.99)Eiif(fix(log10(abs(
foo))) gt 1,fix(log10(abs(foo))),fix(log10(abs(foo/10
Ugly and ineffecient you say? I agree wholeheartedly.
Why log10 and not just len, other than simply the fact it
Yeah, when I had to work on a pharmacutical intranet.
http://www.hl7.org/
It's a 'standard' for exchanging clinical information, etc. I didn't have to
work much w/ it as someone else was writing the parser so the website's your
best bet.
-Original Message-
From: Al Musella, DPM
I'm not sure exactly what you want, but if you're talking a multi-part form
(and you want to use session vars) just keep throwing all the form struct
except form.formfield (if 4.5x+) into a session struct then structClear()
the struct at the end.
-Original Message-
From: Stevens, Jason
I should add, I don't mean structClear(session) but create a substruct then
clear it at the end. So it would be structClear(session.form_a) or something
akin to that.
-Original Message-
From: Raymond B. [mailto:[EMAIL PROTECTED]]
Sent: May 13, 2001 20:37
To: CF-Talk
Subject: RE: Session
You might want to move to a language such as PHP, Perl, (ick) ASP, etc.
Using CF, which is really meant to be an enterprise product and costs min.
$1.2k USD, might not be the solution. I realise it's often much more rapid
development and has a quicker learning curve overall, but PHP and Perl are
Lots of ways, a quick fix is to run it through htmlCodeFormat() or just
enclose it in code/code tags.
-Original Message-
From: Kuehn, Matthew [mailto:[EMAIL PROTECTED]]
Sent: May 10, 2001 12:18
To: CF-Talk
Subject: Outputting Raw CFML
I want to build an app that will traverse our
You could also cfexecute a batch file (w/ 0 timeout) to generate the output.
This is done by calling the shell CF interpretter... cfml.exe on NT? (*nix
person myself). There's no user wait w/ a 0 timeout but the process will run
until completion.
Or if you could wait 15min you could use
Heh, not much to explain about it. On the easiest level just match the ORDER
BY clause in the SQL statement w/ the grouping levels.
[SQL statement]
ORDER BY field1, field2, field3, .. fieldn
;
[CF output]
cfoutput query=foo group=field1
Stuff every time new value in field1.
cfoutput
Eugh, many better ways.
CREATE TABLE table_name (
uid int not null,
gid int not null,
primary key (uid, gid)
);
The junction table's primary key is a composite of the usr and grp tables'
foreign keys. If your dbms supports foreign key contraints set it for
cascading
http://www.allaire.com/cfdocs/Developing_Web_Applications_with_ColdFusion/20
_Extending_ColdFusion_Pages_with_CFML_Scripting/dwa20.htm
Just read the online docs Allaire has up (or in CFStudio) Developing Web
Applications with ColdFusion Extending ColdFusion Pages with CFML
Scripting. Pretty
I'm jumping into this mid-stream w/o reading through the entire history so
bear w/ me if I'm way out there.
It's a bit of a kludge but I'll often just use a for(init_expr; expr;
post_expr) {} style loop for queries if I need good control of the cursor
over multiple loops. For simplicities sake
IIRC, due to security problems IIS disabled that form of var referening in
5.0. Possibly the SP did the same for 4.0...? (so back to ?= )
I'm far from up on most win32 matters, but you may want to check that out.
-Original Message-
From: JAAV [mailto:[EMAIL PROTECTED]]
Sent: May 2, 2001
ARJ/JAR fell into disuse years ago (as LHARC did before it), RAR superseded
it in that vein of compression utils.
Either way though, handing a LHZ, ARJ, RAR, etc. (or the shortlived ACE) to
your average windows user is like handing a gzipped tarball to a Mac user..
if they even did know how to
f you're displaying it alpha order (standard), then . and .. are always at
the top. CFDIRECTORY returns a query object, so just skip the first two
records using the startrow="" property.
-Original Message-
From: Joshua Tipton [mailto:[EMAIL PROTECTED]]
Sent: April 14, 2001 14:57
To:
Yeah, just use proper error control. You should never have detailed error
info showing on a production server. In the admin under the debugging
section disable anything that gives info and/or proper use of cferror and
cftry/cfcatch will remove anything other than "friendly" error messages you
That's US, the "and" is sternly tought to be dropped in CA schools and I'd
image so for other metric countries.
-Original Message-
From: Philip Arnold - ASP [mailto:[EMAIL PROTECTED]]
Sent: April 1, 2001 10:46
To: CF-Talk
Subject: RE: Numbers to Text
If you include the and it implies
As it's your dev server I'd enable RDS and work through that. That way you
can use Studio's full debugging, as well as having direct read/write to the
files, the database view as reference, and quick preview w/in studio. RDS
uses port 80 so there should be no firewall issues to worry about it.
The warning about wildcards (*) is due to users wanting specific fields
yet returning a whole record b/c it's easier to type (which is a huge
waste). If you truely do want every piece of information (and will continue
to do so in the future ie. even if fields are added) then by all means
that's
/* in the Application.cfm */
// if user logging struct isn't there, make it so
if (not isDefined('application.user')) {
application.user = structNew() ;
}
// insert user's id and current time (for last access calcs)
structInsert(application.user, session.uuid, now()) ;
/* on
PROTECTED]
icq: 5202487 aim: lv2bounce
http://www.cs.odu.edu/~bader
-Original Message-
From: Raymond B. [mailto:[EMAIL PROTECTED]]
Sent: Saturday, March 31, 2001 2:03 PM
To: CF-Talk
Subject: RE: Seeing who's logged in
/* in the Application.cfm */
// if user
Heh, you're not going to get anything so nice as Perl string handling.
cfscript
str = "foo123bar" ;
found = reFind("foo([[:digit:]]+)bar", str, 1, true) ;
sub_str = mid(str, found.pos[2], found.len[2]) ;
/cfscript
The last argument of the reFind() is 'return sub expressions', in this case
it's
Yep, using the application scope just set a var in a struct (their id as
key, now() as value) then clean it up for all entries dateAdd('n', -session
timeout, now()) and you'll have a pretty good idea of who's logged in (w/in
the session timeout limit). Just make sure to lock the scope properly,
Shouldn't be doing that given an okay db structure, but try these:
- specify all the fields you wish to retrieve instead of *
- if PartNumber isn't the primary key make sure it has a unique index (I'll
assume it's a numeric field)
- remove the space from behind the first id
-Original
Why define the alphabet? Just use decimal values for the asci char set.
pass = "" ;
for (c=1; c le 7; c=c+1) {
pass = pass chr(randRange(65,90)) ;
}
pass = pass randRange(1000,) ;
That will do the exact same thing as below much more efficiently, if you
want case sensitive
1. urlEncodedFormat()
2. It's not CF it's you :) First off it could be the db field only allows x
chars ie. varchar(20) will store 20 max chars. Secondly, depending on how
you display the info (and where) the " is a sting start/end char so could be
ending the string in a tag (so only the first
Yeah, but they have more security holes than a old fishing net. On most
servers the user "Everyone" is given full read access to all accounts
instead of the IIS anon user, your home dir isn't below the web root, etc.
So you and the other 200+ people on that server can all access each others
Go to the CF Admin, under 'Basic Security' is a list of tags you can
disable. That's of course just the first step towards securing the server.
If you're running a shared environ make sure to grab the Allaire path to
disable the CF Admin undocumented tags/functions as you can do all sorts of
fun
SELECTast, count(ast) AS counter
FROM wweb
WHERE ast IN ('ASTIndex', 'ASTAI', 'ASTft')
GROUP BY ast
You're using LIKE improperly here as it's useless w/o a wildcard (%) char;
just use = if you want a direct match. If you do need the wildcard use a ast
LIKE '%foo%' OR ast LIKE
Expedia uses the IE specific document.readyState and a timer calling the
function (Javascript).
Both the initial search criteria and the "Please wait" section are on the
same page. When you begin the search it hides the one part and displays the
"Please wait" part. A timer is started and it
cfscript
digits = arrayNew(1) ;
passwd = "" ;
/* fill passwd i digits long w/ random selection of number, uppercase, or
lowercase characters */
for (i=1; i le 8; i=i+1) {
digits[1] = chr(randRange(48, 57)) ;
digits[2] = chr(randRange(65, 90)) ;
digits[3] =
Well, I'm not much of an win person... but doesn't the installer keep a
log of all system changes made? I mean, an installer can't do anything you
can't do by hand. Try exporting the applicable registry tree from the NT4
system, copying any dlls required into the system directory on the 2k
ALTER TABLE tablename ADD (fieldname datatype() [other keywords]);
Exactly what you can do w/ the ALTER TABLE ADD|DROP|MODIFY statement is
highly dbms specific, but generally all support adding a single field per
statement. For the exact restrictions your dbms places on a this statement
http://www.srrb.noaa.gov/highlights/sunrise/gen.html
These guys hava a fully JS version. Here's the disclaimer:
NOTE: Algorithm used is an approximation. Times may contain errors of +/- 2
minutes or more. For latitudes greater than 72 degrees N and S, calculations
have not been confirmed by
There's lots of documentation on nesting locks and locking best practices
(albeit not allways overly clear).
http://www.allaire.com/handlers/index.cfm?ID=17318Method=Full
http://www.allaire.com/handlers/index.cfm?ID=17196Method=Full
For this type of interaction a java applet is the best way to go. CF is
server side parser, to use it as a chat interface would require constant
posting and reloading of a page... not exactly ideal. There are a whole
bunch of commercial 'live rep' chat applets available and some free ones as
CFSCRIPT gains about a 10% performance advantage (I wish I still had the
source for this number, but I can't seem to find it anymore... it was a good
article) and generally cleaner code if you're doing a lot of page logic;
obviously it loses out on the ease of screen display to tag based
Well, it's been quite a while since I last delved into GIS and trig but here
goes.
The earth does not lend itself well to simple calculations, all the below
(except the last) assume a spherical earth and ignore any diffences in the
terrain, elevation, roadways, etc. That said, let's look at some
I'm not big into IIS, but in the mappings section there's a "check if file
exists" checkbox. If this was checked for .cfm (for giving custom 404 in IIS
for CF is the standard use I think) would this then effect a url that had
..cfm first in it?
You might try unchecking it and seeing if it works.
Did you accidentally use a filter? In the RDS view far click on the pane to
bring up the context menu, select 'Filter', then 'All Files'. Most likely
you are currently only browsing 'Web Images'.
-Original Message-
From: Smith, Melanie [mailto:[EMAIL PROTECTED]]
Sent: January 25, 2001
Yeah, there's a CFX for win32 systems on the dev exchange. I've used the old
cfx_image tag which this one is based off of, but haven't used this one
much: I think it's what you're looking for though.
"AutoResize uploads an image file and resizes it to a specified width. It
also dynamically
Depends on your dbms what the datatype is called, if I remember correctly
you were using M$ SQL Server, which uses the BIT datatype. You might want to
check out the T-SQL reference on MSDN.
http://msdn.microsoft.com/library/default.asp?URL=/library/psdk/sql/tsqlcon.
htm
You might want to
CF doesn't have fixed dimension arrays like some other languages. So the
best you can do is find the length of the first dimension, then you have to
do each index individually to find the exact length of all the items in the
second dimension.
-Original Message-
From: Rick Lamb
Crystaltech's shared hosting is attrocious for security though. Your web
root is the same as your base dir, and the NT everyone user is given read to
all accounts (on most of their server). This means you if you have any
sensitive data stored, you're sharing it w/ the other 200+ users on the same
At the command prompt type "at /?". There's some GUI way to do it as well, I
think that would either be in the control panel or in the management
console.
CF also has a cycle.bat for win32 systems (located somewhere under the CF
Server root); all this batch file does is setup a bunch of NET STOP
exact same in CF4.0x and 4.5.x, if it isn't I think I'd
contact Allaire on the issue.
Hope it helps,
Raymond B.
Hrmm... interesting if it is something wrong w/ 4.5.1, as that could pose
some problems w/ quite a few commercial apps.
-Original Message-
From: Gene Kra
Not exactly an answer, but...
Instead of passing all the information in the url, you might instead want
to only pass a unique identifier. Then on the page in question, query the
database based on the unique id for the information.
? I was under the impression the info being passed was the property to be
rented/leased etc. not client info (which was being entered next page).
If it was client info, then by all means don't do it the way I suggested;
and don't pass it clear text in url either as that's almost as bad. SSL for
I don't know about Adam, but you don't have to forfeit anything you
mentioned: You develop w/ browser degradation in mind. So you don't use the
img w/ an onclick, as it doesn't degrade (unless you use another option in
addition) but the input can be used by all. Whenever you offer a fancy
--
-Original Message-
From: Raymond B. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 17, 2001 7:25 PM
To: CF-Talk
Subject: RE: retreiving datatypes
Unlike most dbms's Access doesn't have the system tables that allow you to
retrieve table and field info though SQL
CF-Talk
Subject: RE: Validate against a mask
I also believe that I should use Regex, but I can't find any decent
reference for it for CF. It seems to be quite different from Perl's regex.
Am I mistaken?
-Original Message-
From: Raymond B. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, Ja
evaluate() is the function you want
-Original Message-
From: Kevin Schmidt [mailto:[EMAIL PROTECTED]]
Sent: January 18, 2001 15:15
To: CF-Talk
Subject: Questio\n
Dave,
Sorry to bother you but the list is down and I have a project to get done
asap. I am stuck.
I have a variable that
I like using WDDX for multipart forms. You can easily serialise the
entire form struct and pass it in a single hidden field (also means you're
not relying on cookies or session vars). As long as every field name is
unique across the multi-part form it's fast and easy.
I stole a lot of this
familiar w/ SQL Server, so another info
request: Are there any nice tools akin Oracle's Cost-Based Optimizer for it?
Thanks,
Raymond B.
~~
Structure your ColdFusion code with Fusebox. Get the official book at
http
Not using outer join, but this will do the trick.
SELECT DISTINCT g.groupname
FROMgrouptable g
WHERE g.groupID NOT IN (
SELECT m.groupID
FROMgroupusertable m
WHERE
If this is a double post I appologize, my mail server is acting up and I
think it just cacked on the send queue again.
Not using outer join, but this will do the trick.
SELECT DISTINCT g.groupname
FROMgrouptable g
WHERE g.groupID NOT IN (
gs/lr2
_089.htm)
So no, it's not just a toggle that when you hit off it's off. It's more
the same idea as start and end tags.
Hope it helps,
Raymond B.
P.S. I feel your pain, CF is great but it's like working w/ 3 billion sticky
abstraction layers between you and the contro
If it's in a var CF will auto escape it, if not manually escape it. '' is an
escaped single quote for SQL.
INSERT INTO MyTABLE(Stuff)
VALUES ()
Would insert a single quote into the db. Same idea as using ## to get CF to
display a # inside a CFOUTPUT.
-Original Message-
From:
, functions, and general syntax. If you're new
to programming or scripting in general you might want to read some
programming logic books first.
Hope this helps,
Raymond B.
BTW, nice Flash intro on your site.
-Original Message-
From: W Luke [mailto:[EMAIL PROTECTED]]
Sent
INSERT INTO table (field1) VALUES ('#form.field1#') ;
When you do this, CF should automatically escape all single quotes. The
preserveSingleQuotes() function is generally only needed when passing full
SQL statements as variables or inserting lists (generally already quoted).
If you find for
No, you can programatically generate a collection using the cfcollection
tag. It's the same idea as scheduling which can be done either in admin or
w/ the cfschedule tag.
I believe there are a few cases where you might need admin but I'm not
overly fond of verity as it seem to give results that
If you use createODBCDateTime() it will create a timestamp, which is
generally the format you should use all throughout the application (or
datestamp -- createODBCDate() ): Only going to other formats for display.
This solves all sorts of date/time issues as it's a distinct standard
format...
cfcatch type="exception type"
By default the exception type is "APPLICATION" which is only developer
raised exception, ie. cfthrow, cfrethrow.
Syntax for CFCATCH:
http://www.allaire.com/cfdocs/CFML_Language_Reference/2_ColdFusion_Tags/lr2_
101.htm
Exception types:
You want killer internal PHP help support in studio?
- The PHP website (http://www.php.net) supports function look-ups using a
simple url get line
- Studio supports internal scripting using it's object model
The result should be obvious :). It's easy to add F1 support alá CF tags for
PHP
CF-Talk
Subject: RE: Validate against a mask
I also believe that I should use Regex, but I can't find any decent
reference for it for CF. It seems to be quite different from Perl's regex.
Am I mistaken?
-Original Message-
From: Raymond B. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, Ja
I don't want to start a PHP vs. CF war, so first I'll direct you to the
documentation.
CF: http://www.allaire.com/cfdocs/dochome.htm
PHP: http://www.php.net/manual/en/
What follows are opinions, please don't take offence:
I too would prefer to work in PHP, but the job
That's a very, very nice idea. For a bit more added speed though, use array
assignment (given longer list or number of rows).
cfset rowColour = listToArray("E7,FAFAFA,808080")
...
tr bgcolor="rowColour[(query.currentrow mod 3) + 1]"
...
Your solution is
I take it you want to exlude a word from a search.
Valid names:
Apple Time
Sauce and Apples
Invalid:
Bob's Donuts
Oranges and Apples
Apples the colour of Orange
Bananas
Oranges
SELECT DISTINCT c.id, c.firstname, c.lastname
FROM
CFID is simply a sequential integer per machine
CFTOKEN is, in default setting, assigned a random unsigned long int (0 x
2^32-1).
If you're client needs to know the exact algorythm used to generate the
random method, you'll probably have to ask an Allaire programmer. CF doesn't
validate the
Be aware though that the encryption at best is only a slight deterent to
the completely uniformed. Due to the fact that code has to be decrypted by
any system to run (meaning a set key is present) and done quickly so as not
to impede performance (meaning a simple hash) decrypting is extremely
No b/c IIF() is a true/false evaluation. Mod 3 would simply be the two
colours in a false, true, true arrangement.
-Original Message-
From: Scott, Andrew [mailto:[EMAIL PROTECTED]]
Sent: January 17, 2001 23:24
To: CF-Talk
Subject: RE: any ideas?
Wouldn't changing the mod 2 to mod 3 do
input type="Image" src="image.ext"
or an onclick even to submit the form w/ JS.
Both have their drawbacks, you can also use CSS to change the style of the
submit button itself.
-Original Message-
From: Albert K Arhin [mailto:[EMAIL PROTECTED]]
Sent: January 18, 2001 04:56
To: CF-Talk
Nope, they were a navy by default I think. I too quickly changed that lovely
blistering shade of orange to a more retina friendly version.
-Original Message-
From: Aidan Whitehall [mailto:[EMAIL PROTECTED]]
Sent: January 17, 2001 05:44
To: CF-Talk
Subject: RE: Studio 4.5.2 and colour
"Note: Because ColdFusion has short-circuit Boolean evaluation..." this is
the only reference I could find
(http://www.allaire.com/handlers/index.cfm?ID=15923Method=Full) but I'm
sure I read something about it the packaged docs as well. In short CF has
supported short circuit AND statments for a
What you're seeing is most likely perm cookies not being accepted.
Appname_CFID_CFTOKEN
Is how that number breaks down, if cookies aren't being accepted then your
application can't track (by default) the user therefore assigning a new
session every time (as seen by the CFID increasing, CFTOKEN
http://www.dynamicdrive.com
http://www.dynamicdrive.com/dynamicindex1/index.html -- Menu and Nav
scripts
They have a host of free scripts. I'm not much on the front end display side
but I'm sure they'll have something you can use "out of the box" or adapt
easily.
-Original Message-
IIF in an Inline IF statement, so only has boolean TRUE and FALSE (ie.
two states). If you want to vary between more use a switch/case setup again
dependent on the mod and rowcount. The nicest thing about the iif() is it's
inline and clean looking in your code; any type of if/elseif or switch
You could always set a session var w/ the current date and have a not
isDefined() making sure it isn't overwritten.
cfif not isDefined("session.created_at")
cflock scope="session" type="exclusive" timeout=2
cfset session.created_at = now()
/cflock
/cfif
If this was thrown into the
Unlike most dbms's Access doesn't have the system tables that allow you to
retrieve table and field info though SQL statements; to my knowledge (I
avoid Access like the plague so there may be easier ways than what follows).
Under win you can the ADODB.Connection class object and retrieve them
Not sure if you've ever used regexps, but that is what you want. Check out
reFind() and the other regexp functions.
http://www.allaire.com/cfdocs/CFML_Language_Reference/3_ColdFusion_Functions
/lr3_200.htm
-Original Message-
From: Ruslan Sivak [mailto:[EMAIL PROTECTED]]
Sent: January
Oh just to tack on an added note, you'll probably want to do it client side
first in JS (which has even better regexp support). Netscape Dev area and
others have great articles on JS regexps wether you're coming over from Perl
and just need the differences outlined, or completely new to the
You're trouble is you're not using the evaluate() function (and you're
using # gratuitously :).
cfset varname = evaluate("form.id" x)
This will now be the value of from.id1 instead of the string "form.id1"
(through whatever). There are other ways to handle this as well.
One
I've never had that problem myself (and of course saying that it will now
happen all the time). Just my $0.02 ... and seeing as that's CAD, it's
$-2.00 in USD.
-Original Message-
From: Brendan Avery [mailto:[EMAIL PROTECTED]]
Sent: January 16, 2001 21:42
To: CF-Talk
Subject: Re: Studio
94 matches
Mail list logo
