Testing

2014-05-18 Thread Rick Faircloth
Testing... ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358654

Re: Testing

2014-05-18 Thread Mike K
Nope. I never received it Rick. On Mon, May 19, 2014 at 12:31 PM, Rick Faircloth r...@whitestonemedia.comwrote: Testing... ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology

Re: Testing

2014-05-18 Thread Rick Faircloth
Faircloth r...@whitestonemedia.comwrote: Testing... ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf

Testing new account

2014-05-07 Thread Robert Harrison
Test to see if this post to a new account I just added to the list. Please ignore. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

Testing

2014-01-01 Thread Jenny Gavin-Wear
Testing .. please ignore. -- I am using the free version of SPAMfighter. SPAMfighter has removed 7659 of my spam emails to date. Get the free SPAMfighter here: http://www.spamfighter.com/len Do you have a slow PC? Try a Free scan http://www.spamfighter.com/SLOW-PCfighter?cid=sigen

Re: A live CFML code testing tool

2013-05-20 Thread Casey Dougall - Uber Website Solutions
On Sun, May 19, 2013 at 11:41 PM, Russ Michaels r...@michaels.me.uk wrote: Feel free to hack away and let me know if you find any problems or other potential security issues. it should provide an URL so we can send people back to test code without requiring pasting into the fields like those

Re: A live CFML code testing tool

2013-05-20 Thread Raymond Camden
I'd still be concerned with code that runs forever, or uses other 'heavy' calls like lots of cfhttp, etc. On Sun, May 19, 2013 at 10:41 PM, Russ Michaels r...@michaels.me.uk wrote: OK I have done a complete rewrite of how it works now. All saved code is now executed in a totally difference

Re: A live CFML code testing tool

2013-05-20 Thread Russ Michaels
That is on the list of forthcoming features :-) On Mon, May 20, 2013 at 11:10 AM, Casey Dougall - Uber Website Solutions ca...@uberwebsitesolutions.com wrote: On Sun, May 19, 2013 at 11:41 PM, Russ Michaels r...@michaels.me.uk wrote: Feel free to hack away and let me know if you find

Re: A live CFML code testing tool

2013-05-20 Thread Russ Michaels
Well Ray there will always be people who will try that, however this is far less likely to cause an issue here because Java is running as a process inside an application pool, not as a service. So if a request takes too long the process gets killed and the application pool recycled just like

Re: A live CFML code testing tool

2013-05-19 Thread Russ Michaels
OK I have done a complete rewrite of how it works now. All saved code is now executed in a totally difference instance than the site itself, so uploaded code no longer has any access to the site files, so that avoids all the permissions issues, and that instance is not remotely accessible either.

A live CFML code testing tool

2013-05-18 Thread Russ Michaels
I was just thinking the other day, wouldn't it be handy if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support

Re: A live CFML code testing tool

2013-05-18 Thread Rick Mason
, 2013 at 10:26 PM, Russ Michaels r...@michaels.me.uk wrote: I was just thinking the other day, wouldn't it be handy if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when

Re: A live CFML code testing tool

2013-05-18 Thread Raymond Camden
it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one. http://cflive.cfmldeveloper.com If you have any suggestions

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one. http://cflive.cfmldeveloper.com If you have any

Re: A live CFML code testing tool

2013-05-18 Thread AJ Mercer
if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write

Re: A live CFML code testing tool

2013-05-18 Thread Raymond Camden
it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one. http://cflive.cfmldeveloper.com If you have any

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one

Re: A live CFML code testing tool

2013-05-18 Thread Raymond Camden
make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one. http://cflive.cfmldeveloper.com If you have any suggestions, use the feedback button

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
May 2013 10:26, Russ Michaels r...@michaels.me.uk wrote: I was just thinking the other day, wouldn't it be handy if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets

Re: A live CFML code testing tool

2013-05-18 Thread Raymond Camden
you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one

Re: A live CFML code testing tool

2013-05-18 Thread AJ Mercer
easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one. http://cflive.cfmldeveloper.com If you have any suggestions, use the feedback button

Re: A live CFML code testing tool

2013-05-18 Thread Raymond Camden
for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one. http://cflive.cfmldeveloper.com If you have any suggestions, use the feedback button

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
it be handy if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
Michaels r...@michaels.me.uk wrote: I was just thinking the other day, wouldn't it be handy if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets

Re: A live CFML code testing tool

2013-05-18 Thread Raymond Camden
if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I

Re: A live CFML code testing tool

2013-05-18 Thread AJ Mercer
it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one. http://cflive.cfmldeveloper.com If you have any suggestions, use the feedback button. -- -- Russ

Re: A live CFML code testing tool

2013-05-18 Thread Raymond Camden
...@michaels.me.uk wrote: I was just thinking the other day, wouldn't it be handy if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support in general. I couldn't find such a tool, so I decided to write one. http

Re: A live CFML code testing tool

2013-05-18 Thread Russ Michaels
the other day, wouldn't it be handy if there was a website where you could just type in some CF code and have it executed instantly. this would really make it so much easier for testing quick snippets of code when answering questions on lists or forums, or providing support

Memory management during load testing

2013-03-07 Thread Nick Gleason
Hi folks, We're doing some load testing on our application - particularly focused on a registration process. We're monitoring the test with a number of tools, including FusionReactor. As the test progresses, it's pretty easy to see the Memory Used statistic climbing. That's expected but we'd

Re: Memory management during load testing

2013-03-07 Thread Dave Watts
We're doing some load testing on our application - particularly focused on a registration process. We're monitoring the test with a number of tools, including FusionReactor. As the test progresses, it's pretty easy to see the Memory Used statistic climbing. That's expected but we'd

Re: Memory management during load testing

2013-03-07 Thread Nick Gleason
Hi Dave, Yes, we are on 64 bit with CF9 and a pretty good amount of memory allocated to the jvm (I'd have to check to find out exactly how much). As our load test progresses, the memory used stat in FusionReactor got as high as 75% for a little while. CF / Garbage collection seems pretty good

Re: Memory management during load testing

2013-03-07 Thread Byron Mann
Sounds like you are on the right track by using FusionReactor. Somewhat refreshing to see someone this concerned with memory usage in the age of affordable hardware. If everyone was like this our shared CF servers would probably be much happier. My example, we had a template that just did a

Re: Load Testing - what to look for and monitor/report

2012-02-12 Thread Dave Watts
the point at which the application becomes unresponsive as described above. Proper performance analysis testing can really only happen once you've removed functionality and operation bugs from your application, and memory leaks would fall into that category. That said, it's unlikely you'll run into true

Re: Load Testing - what to look for and monitor/report

2012-02-11 Thread Dave Watts
and track memory etc? And then scale up after a specific duration? Or for the second test interval? I don't have much experience with load testing and just want to make sure that this is money well spend in terms of having some actionable data. It's hard to answer this without more

RE: Load Testing - what to look for and monitor/report

2012-02-11 Thread Brook Davies
[mailto:dwa...@figleaf.com] Sent: February-11-12 7:46 AM To: cf-talk Subject: Re: Load Testing - what to look for and monitor/report Anyhow, what I really want to know from you experts is what should I be watching and recording during these load tests? Generally, you're interested in response time

Load Testing - what to look for and monitor/report

2012-02-10 Thread Brook Davies
Hey Guys, I am hiring a load testing company, Neustar, to run some load tests on a new cf app and server deployment. I have FusionReactor installed and the platform is CF9 Standard on windows 2008 web server, and the backend is a separate MS SQL box. A beefy one at that J. The server

Best thing for testing code?

2011-08-30 Thread Eric Cobb
We are wanting to put some type of testing system in place here at work. I know there's a ton of stuff out there, and I'm really at a loss as to where to start. I'm not sure if any of the TDD frameworks are what we're after or not. Our main concern right now is setting up something to help

Re: Best thing for testing code?

2011-08-30 Thread Russ Michaels
there are several cf unit testing solutions available. http://mxunit.org/ http://www.cfcunit.org/cfcunit/ http://cfunit.sourceforge.net/ You can use these not only to test that everything is working, but also to test the data being returned is correct as you require. -- Russ Michaels

Re: Best thing for testing code?

2011-08-30 Thread sm...@ibsys.com sm...@ibsys.com
are wanting to put some type of testing system in place here at work. I know there's a ton of stuff out there, and I'm really at a loss as to where to start. I'm not sure if any of the TDD frameworks are what we're after or not. Our main concern right now is setting up something to help test our existing

My limited testing shows this won't work...

2011-08-18 Thread Rick Faircloth
Am I correct? The image upload, using makeunique can't be used in conjuction with reReplace as in: cffile action= upload filefield = image destination = #expandPath('images\')##reReplace(image, '[^a-zA-Z0-9_.]', '', 'all')# accept= image/jpg,

Re: My limited testing shows this won't work...

2011-08-18 Thread Leigh
At that stage, the server has already received the uploaded file. Action=upload just moves and/or renames the file. However, I still do not think it will work as you expect. #form.image# only contains a temporary file path at that point. The original/client file name is not available until

Re: My limited testing shows this won't work...

2011-08-18 Thread Pete Freitag
Rick, You want to make sure you upload into a temporary directory that is outside of the web root first, otherwise as Leigh pointed out the mime type could be spoofed, and the file could be executed before you've even had a chance to perform any other validation on it. The link got truncated in

RE: My limited testing shows this won't work...

2011-08-18 Thread Rick Faircloth
Thanks, Pete! I'll check out the link! Rick -Original Message- From: Pete Freitag [mailto:p...@foundeo.com] Sent: Thursday, August 18, 2011 4:52 PM To: cf-talk Subject: Re: My limited testing shows this won't work... Rick, You want to make sure you upload into a temporary directory

Testing

2011-04-05 Thread dB
It *appears* as though I've subscribed... ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

Re: Testing

2011-04-05 Thread Michael Grant
Appearances can be deceiving though. On Tue, Apr 5, 2011 at 3:59 PM, dB dbfu...@gmail.com wrote: It *appears* as though I've subscribed... ~| Order the Adobe Coldfusion Anthology now!

Re: Testing

2011-04-05 Thread Alan Rother
However in THIS case, it does seem to be true On Tue, Apr 5, 2011 at 1:05 PM, Michael Grant mgr...@modus.bz wrote: Appearances can be deceiving though. On Tue, Apr 5, 2011 at 3:59 PM, dB dbfu...@gmail.com wrote: It *appears* as though I've subscribed...

Re: ColdFusion and Internet Explorer Compatibility testing tool

2010-09-18 Thread Dave Watts
There's nothing there to correct. CF's behavior is correct in both cases. If those show up as errors in the testing tool, that's a flaw with the tool. You can easily verify this by visiting the site directly with IE. Dave Watts, CTO, Fig Leaf Software Sent from my Droid On Sep 17, 2010 7:57 AM

ColdFusion and Internet Explorer Compatibility testing tool

2010-09-17 Thread DURETTE, STEVEN J (ATTASIAIT)
I have to do testing for a migration project using the Internet Explorer Compatibility Testing Tool, IE8 and Windows 7. Before we get into an IE/Firefox/Chrome war, this is a corporate requirement! During testing the following issues have come up: 1) I've found that any time

Re: Image manipulation code: unit testing approach

2010-08-19 Thread Dominic Watson
Perfect, thanks guys :) Dominic On 18 August 2010 21:18, Alan Rother alan.rot...@gmail.com wrote: You should have a set of baseline images that you know the source of. Things you made in Photoshop using your digital camera, that you can validate the color space and dimensions of. I would

Image manipulation code: unit testing approach

2010-08-18 Thread Dominic Watson
I'm writing a small utility to perform some image resizing with options such as 'limitFileSize', 'maintainAspectRatio', etc. and I'd like to write unit tests for this (something I'm new to). How would any of you l33t unit testers go about this? i.e. How would you source the images for the unit

Re: Image manipulation code: unit testing approach

2010-08-18 Thread Pete Freitag
Hi Dominic, I think when it comes to image files you will want to have some local test files, because you can potentially run into issues with the way different image editors save files. If you generate all your test image files through your test code, then your test environment may not

Re: Image manipulation code: unit testing approach

2010-08-18 Thread Alan Rother
You should have a set of baseline images that you know the source of. Things you made in Photoshop using your digital camera, that you can validate the color space and dimensions of. I would also collect random images from around the web from various sources such as a Google Image search,

Re: development and testing server

2010-07-14 Thread Adrocknaphobia
Won, Unfortunately, the EULA is about as official as it gets. The best I can offer is to send you and your admin and email from my Adobe account confirming that the same key can be used between production, staging, testing and development environments. It's important to note that licenses

Re: development and testing server

2010-07-14 Thread Won Lee
account confirming that the same key can be used between production, staging, testing and development environments. It's important to note that licenses and license keys are not one in the same. For example, if you buy a volume license for ColdFusion that covers many servers, we commonly issue

development and testing server

2010-07-13 Thread Won Lee
Hi folks, I've been using CF 9 developer on edition on my dev box and the standard version on my production box. I want to change the dev box to standard for development only purpose under the EULA 3.1.3. Any directions for this or do I just enter the same key? W

Re: development and testing server

2010-07-13 Thread Adrocknaphobia
Just use the same key. -Adam On Tue, Jul 13, 2010 at 1:03 PM, Won Lee won...@gmail.com wrote: Hi folks, I've been using CF 9 developer on edition on my dev box and the standard version on my production box. I want to change the dev box to standard for development only purpose under the

Re: development and testing server

2010-07-13 Thread Won Lee
Thanks On Tue, Jul 13, 2010 at 1:36 PM, Adrocknaphobia adrocknapho...@gmail.comwrote: Just use the same key. -Adam On Tue, Jul 13, 2010 at 1:03 PM, Won Lee won...@gmail.com wrote: Hi folks, I've been using CF 9 developer on edition on my dev box and the standard version on my

Re: development and testing server

2010-07-13 Thread Won Lee
Adam, my network admin is asking me for a URL or documenation that specifically states that. I showed him the EULA but he is asking for the part where we can use a production key for development and testing. He understands those servers will only be used for development and testing. W

Re: development and testing server

2010-07-13 Thread Judah McAuley
http://www.terrenceryan.com/blog/post.cfm/coldfusion-9-testing-staging-and-development-changes-to-eula On Tue, Jul 13, 2010 at 12:16 PM, Won Lee won...@gmail.com wrote: Adam, my network admin is asking me for a URL or documenation that specifically states that.  I showed him the EULA but he

Re: development and testing server

2010-07-13 Thread Won Lee
He was looking for something more official. We take licenses very seriously here. W On Tue, Jul 13, 2010 at 3:19 PM, Judah McAuley ju...@wiredotter.com wrote: http://www.terrenceryan.com/blog/post.cfm/coldfusion-9-testing-staging-and-development-changes-to-eula On Tue, Jul 13, 2010 at 12

Re: development and testing server

2010-07-13 Thread Judah McAuley
13, 2010 at 3:19 PM, Judah McAuley ju...@wiredotter.com wrote: http://www.terrenceryan.com/blog/post.cfm/coldfusion-9-testing-staging-and-development-changes-to-eula On Tue, Jul 13, 2010 at 12:16 PM, Won Lee won...@gmail.com wrote: Adam, my network admin is asking me for a URL

Re: development and testing server

2010-07-13 Thread Won Lee
-9-testing-staging-and-development-changes-to-eula On Tue, Jul 13, 2010 at 12:16 PM, Won Lee won...@gmail.com wrote: Adam, my network admin is asking me for a URL or documenation that specifically states that. I showed him the EULA but he is asking for the part where we can

Re: development and testing server

2010-07-13 Thread Eric Cobb
, 2010 at 3:19 PM, Judah McAuley ju...@wiredotter.com wrote: http://www.terrenceryan.com/blog/post.cfm/coldfusion-9-testing-staging-and-development-changes-to-eula On Tue, Jul 13, 2010 at 12:16 PM, Won Lee won...@gmail.com wrote: Adam, my network admin is asking me for a URL

Re: development and testing server

2010-07-13 Thread Dave Watts
Not only that, let's not forget that Adam (adrocknaphobia) is the main man in charge of all things CF at Adobe, so his direct response to this post instructing Won to use the same key should suffice.  I realize some people want to see official documentation in writing, but short of having

Re: development and testing server

2010-07-13 Thread Roger Austin
is not the same as a license audit, but comes from the governmental regulatory agencies and internal company QA departments that demand detailed records of all components of the system and a detailed plan for testing the system for use. If you change a component (hardware or software) you have to document

RE: form testing

2010-04-14 Thread Jason Durham
Download the Firefox Web Developer toolbar and disable Javascript. Or... simply comment out the client-side Javascript. -Original Message- From: succ...@ramonecung.com [mailto:succ...@ramonecung.com] Sent: Tuesday, April 13, 2010 8:34 AM To: cf-talk Subject: form testing Heya! I'm

form testing

2010-04-13 Thread success
Heya! I'm testing an in house developed app and I'm wondering what the best wat to post data to a form is that gets around client side validation (including the maxlength property of a text field and select boxes having pre-defined data). I basically want to ensure the server side validation

re: form testing

2010-04-13 Thread Jason Fisher
cfhttp method=POST url=yerForm.cfm cfhttpparam type=FORMFIELD name=field1 value=val1 / cfhttpparam type=FORMFIELD name=field2 value=val2 / cfhttpparam type=FORMFIELD name=field3 value=val3 / cfhttpparam type=FORMFIELD name=field4 value=val4 / /cfhttp Then you also have access to

Re: form testing

2010-04-13 Thread Casey Dougall
On Tue, Apr 13, 2010 at 9:34 AM, succ...@ramonecung.com wrote: Heya! I'm testing an in house developed app and I'm wondering what the best wat to post data to a form is that gets around client side validation (including the maxlength property of a text field and select boxes having pre

RE: form testing

2010-04-13 Thread Andy Matthews
] Sent: Tuesday, April 13, 2010 8:34 AM To: cf-talk Subject: form testing Heya! I'm testing an in house developed app and I'm wondering what the best wat to post data to a form is that gets around client side validation (including the maxlength property of a text field and select boxes having pre

RE: Development and Testing Environment Recommendations

2010-03-11 Thread Bobby Hartsfield
be on separate boxes. If the entire VM host goes down, you lose access to all machines on it. In a dev/test environment, that would most likely just mean some dev/testing downtime until they are back up. In production, there should be some kind of fail over anyway. -Original Message- From

Re: Development and Testing Environment Recommendations

2010-03-10 Thread Jessica Garruto
testing on our sites; our sites don't typically experience heavy traffic. Moving forward, we are open to doing things differently or implementing virtualization if the flexibility it allows outweighs the issue raised by Dave. In an ideal world, everything is on a separate physical server

Development and Testing Environment Recommendations

2010-03-09 Thread Jessica Garruto
We are formalizing new development and testing environments for our ColdFusion web sites and I would like to know what recommendations other developers/administrators have regarding server configuration and/or best practices. We are currently running multiple ColdFusion 8 sites (~10) on IIS

Re: Development and Testing Environment Recommendations

2010-03-09 Thread Tony Bentley
Jess, Have you considered VM? This could solve the problem without needing another server. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive:

Re: Development and Testing Environment Recommendations

2010-03-09 Thread Dave Watts
that a failure in your development environment could cause a resource-based denial of service in your test environment? Do you plan to run load tests in your testing environment? Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned

RE: Development and Testing Environment Recommendations

2010-03-09 Thread Bobby
At work, we handle all of our Dev and QA environments on virtual servers so we can set it up exactly like production without buying all of the same hardware twice. At home, I use VMWare Fusion on my Mac to mimic whatever environment I need to when developing/testing. Virtualization gives you

Re: Development and Testing Environment Recommendations

2010-03-09 Thread Kevin Pepperman
Another vote for VM from me. elasticserver.com is great-- I have an paid account there, I want to support them because they are awesome! Another very nice thing is you can test ANYTHING without worrying about a sever failing. Plus, it is very easy to load test an app-- you can limit the memory

Re: Injection Testing/Monitoring

2010-01-19 Thread Al Musella, DPM
I monitor my home page every 15 minutes for change. You can use any of the free tools, or set up a cf scheduled task to do it. I add a url parameter that tells the home page to dump all of the data in the users table for my own entry. (My name, address, phone, etc). IF that page changes, I

Re: Injection Testing/Monitoring

2010-01-19 Thread Will Tomlinson
Does anyone have any good methods for testing or monitoring SQL Injection they are willing to share? Thanks! Here's a good resource we use to test attacks: http://ha.ckers.org/xss.html Will ~| Want to reach

Re: Injection Testing/Monitoring

2010-01-19 Thread Jordan Michaels
was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. Monitor downtime and all that is covered, but I don't have anything too useful for testing SQL Injection on new code and monitoring for SQL Injection on existing sites. Does anyone have

Injection Testing/Monitoring

2010-01-18 Thread Andrew Tegenkamp
With the recent SQL Injection talk, I was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. Monitor downtime and all that is covered, but I don't have anything too useful for testing SQL Injection on new code and monitoring for SQL Injection

RE: Injection Testing/Monitoring

2010-01-18 Thread brad
One of the best ways to test your site is to post the URL here and claim it can't be hacked. Usually people will help you out. :) As far as specific testing tools, I think good practice and code reviews are one of the best things here. You should be able to look at a query and spot any

Re: Injection Testing/Monitoring

2010-01-18 Thread Cameron Childress
On Mon, Jan 18, 2010 at 12:44 PM, b...@bradwood.com wrote: As far as specific testing tools, I think good practice and code reviews are one of the best things here.  You should be able to look at a query and spot any dynamic parts that are out of a cfqueryparam or not sanitized in some other

Injection Testing/Monitoring

2010-01-18 Thread Andrew Tegenkamp
With the recent SQL Injection talk, I was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. Monitor downtime and all that is covered, but I don't have anything too useful for testing SQL Injection on new code and monitoring for SQL Injection

RE: Injection Testing/Monitoring

2010-01-18 Thread Justin Scott
With the recent SQL Injection talk, I was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. One of the prevention tools that I made available a while back will find many SQL injection attempts and can stop them and notify you. It's not perfect

RE: Injection Testing/Monitoring

2010-01-18 Thread brad
On the topic, I guess to be fair I could mention that there are web application firewalls out there that filter for attacks such as these. They are probably going to be able to filter a high amount of traffic faster that CF can, and if you pay $$ the vendor keeps up with all the latest attack

JDK patch testing

2009-11-16 Thread Raymond Chiu
A JDK patch boogered up our Coldfusion site. Is there a regression test out there that will exercise the JDK to determine any shortcomings created by a JDK patch? ~| Want to reach the ColdFusion community with something

Re: JDK patch testing

2009-11-16 Thread Cutter (ColdFusion)
I would *ALWAYS* test system patches in development and staging, prior to putting them in production. Load Balance testing in staging is a must during this as well. Steve Cutter Blades Adobe Certified Professional Advanced Macromedia ColdFusion MX 7 Developer Co-Author of Learning Ext JS http

Re: Unit Testing Frameworks

2009-10-27 Thread Sean Corfield
On Mon, Oct 26, 2009 at 9:15 PM, Judith Dinowitz jdino...@houseoffusion.com wrote: From what I can see, the last thing posted on the CFCUnit website is dated 2006. Is CFCUnit still a going concern? What Unit-Testing Frameworks are people using in the CF community? As others have said

Unit Testing Frameworks

2009-10-26 Thread Judith Dinowitz
From what I can see, the last thing posted on the CFCUnit website is dated 2006. Is CFCUnit still a going concern? What Unit-Testing Frameworks are people using in the CF community? Judith ~| Want to reach the ColdFusion

Re: Unit Testing Frameworks

2009-10-26 Thread Patrick Santora
Yes, CFCUnit has not been update for some time. CFer's have moved to unit testing frameworks such as MXUnit ( http://www.mxunit.org/) for back end testing and have started to use cfSpec (http://github.com/adelphus/cfspec/) for behavioral front end testing. I'm sure there are others out

Re: Unit Testing Frameworks

2009-10-26 Thread AJ Mercer
there is also RocketUnit: A Simple Unit Testing Framework for ColdFusion http://www.rocketboots.com/blog/index.cfm?mode=entryentry=E565633C-E081-51EF-A7F883614F752942 2009/10/27 Patrick Santora patwe...@gmail.com Yes, CFCUnit has not been update for some time. CFer's have moved to unit

Re: Unit Testing Frameworks

2009-10-26 Thread Barney Boisvert
MXUnit pretty much superceded CFCUnit. CFCUnit is still viable, of course, but MXUnit is certainly seeing a lot more activity, and is pretty much the de facto standard for unit testing of CF apps. cheers, barneyb On Mon, Oct 26, 2009 at 9:15 PM, Judith Dinowitz jdino...@houseoffusion.com wrote

Penetration Testing Tools

2009-07-30 Thread Joseph Bugeja
Hello Friends, I am in the process of doing penetration testing on a Web Site that runs solely on IE (Internet Explorer). We need to identity problems such as XSS, Injections, Insecure Direct Object References, etc. Do you recommend or suggest any good tool, ideally a free or open-source tool

Split testing A/B pages with Cold Fusion

2009-07-23 Thread cftalk
Hello, I am trying to make a split testing script to track two landing pages. Should I: a) Just use random() to select the page assuming I'll end up with even distribution (its 50/50 no?) b) Store the last viewed page in an application var, single thread it, and toggle

Re: Split testing A/B pages with Cold Fusion

2009-07-23 Thread Alan Rother
. Will this be a bottleneck? It would be a pretty small piece of code.. I would use this if you really have to have a perfect distribution of 50 / 50 OR if you have a non technical boss who insists on testing it and wants to see the A/B split every time he reloads the page. It's more complex, but may

Coldbox - mxunit testing database interaction

2009-05-12 Thread Jake Pilgrim
I'm just starting to get into Coldbox and I'm encountering some confusion as to how to *really* test my models and database interaction. So I have the following handler function which is fired upon form submission: cffunction name=editAction cfargument name=event

  1   2   3   4   5   6   7   8   9   10   >