Re: I/O Exception: Name in certificate does not match host name

[Dave Watts]

 3) The dev API is (real domain names replaced with domain1 and domain2)
 prerelease-api.domain2.com initially this gave the error:

 I/O Exception: Name in certificate `*.domain1.net' does not match host name
 `prelease-api.domain2.com'

 I tried adding to the hosts:

 xx.xxx.xxx.xxx  prelease-api.domain1.net

 where xx.xxx.xxx.xxx is the resolving IP address of prelease-api.domain2.com

 restarted CF and called prelease-api.domain1.net in my CFHTTP request and I
 get a 404 error, so I no longer get the IO error but I'm not hitting the
 correct server/application

It's possible they're looking for host headers to figure out how to
resolve requests. You might be able to specify the host header
separately within your CFHTTP request, but I've never tried it to be
honest.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360431
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: cfindex is taking forever

[Dave Watts]

 The collection was created successfully as far as I can tell. However,
 indexing has been running (or at least the wheel on my browser is still
 turning) for almost 3 hours now. I'm going to forget about it and go mow
 my grass and see what's happening when I finish.

 I'm thinking though ... too much stuff to index? Or is amount of time
 not out of line for a very large collection of files?

That doesn't actually sound unreasonable, but it might be useful to
come up with a document count more specific than very large.

 Thoughts? Try something else? What exactly?

Have you considered Solr instead of Verity? Not that this would solve
the problem of indexing a lot of files, specifically.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360433
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: I/O Exception: Name in certificate does not match host name

[Dave Watts]

 I think you'll need to update the hosts file so that:

 prerelease-api.anotherdomain.com

 ...points to the right IP and then refer to:

 prerelease-api.anotherdomain.com

 ...in your code. That should make everything line up.

I think this is nearly right, except that you'll need to find the IP
address for prerelease-api.anotherdomain.com and create a hosts entry
for prerelease-api.domain.com that points to this IP address.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360428
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Enable Request Debugging Output not working

[Dave Watts]

 You're right Dave you may need to re-read the threads again, because I am
 well aware of the error status pages. I was mainly talking to Charles about
 Friendly Error messages when you dropped by, if you are confused by that,
 this is not my problem.

You wrote an email. I responded to that email. If your goal is to
communicate clearly with other people, it is your problem if you are
unable to do that.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360399
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Enable Request Debugging Output not working

[Dave Watts]

 Whatever Dave, like I said this option is for ASP only.

 Here is a support article that a quick Google search dug up, if you can
 provide where in IIS you make this change I will eat my words.

 https://support.microsoft.com/en-us/kb/294807?wa=wsignin1.0

I'm not sure what posting a page about an IE issue has to do with IIS.
It sounds like you're talking about one thing and I'm talking about
another.

IIS has the ability to postprocess any sort of server-side error
messages (or any other responses for that matter). This is not
specific to ASP.NET - it applies to all messages that pass through
IIS. Here's a screenshot I just put together demonstrating this
feature.

http://i.imgur.com/tBfFfC9.png

In this screenshot, the only thing I've changed from the default
behavior is the Edit Error Pages Settings - the default value is the
third radio button.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360397
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Enable Request Debugging Output not working

[Dave Watts]

 I am very well aware after nearly 20 years of CF Development how it works,
 IIS doesn't capture CF errors at all. It only displays what is sent to it,
 in ColdFusion's case if it is not sending the status codes it usually ends
 up with a blank page. You can make any adjustments to IIS you like it will
 make no difference.

That has not been my experience. More than once I've had to change IIS
settings to view CF's error messages.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360388
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Enable Request Debugging Output not working

[Dave Watts]

 I guess my installs of IIS work, cause the only time I have to make any
 changes is in CF where it says send HTTP status codes, nothing more and
 nothing less.

That's good for you! But there are many installs of IIS out there
besides your own, and those installs might be configured differently
from yours for a variety of reasons.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360390
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Enable Request Debugging Output not working

[Dave Watts]

 This in IIS

 friendly error messages

 Has nothing to do with ColdFusion output, nothing at all.

No, but that's not what I responded to. Here's what I responded to,
specifically:

I am very well aware after nearly 20 years of CF Development how it
works, IIS doesn't capture CF errors at all. It only displays what is
sent to it, in ColdFusion's case if it is not sending the status codes
it usually ends up with a blank page. You can make any adjustments to
IIS you like it will make no difference.

This has not been true, in my experience. And all it takes is one case
where it's not true, to be able to state categorically that it's not
always true.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360394
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Scheduler directory missing.

[Dave Watts]

 Is it possible to run a CF7 reinstall to recover this directory without
 overwriting my existing installation and configuration?

No, I don't think so, but you could export your existing configuration
first then reinstall and import the configuration.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360298
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Scheduler directory missing.

[Dave Watts]

 Thanks, Dave.  Could I install on another server and just copy the directory
 over?

Without testing it myself I can't say for sure, but I think it
probably would work just fine.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360300
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Decrypting MD5

[Dave Watts]

 I want to know if I can decrypt passwords stored as MD5 in a SQL Server 
 database using the Decrypt
 function? There are online tools out there that decrypt MD5 so I'm hoping 
 that I can do this in CF.

There are no tools that actually decrypt MD5 hashes, to the best of my
knowledge. MD5 is a hashing algorithm, not an encryption algorithm. It
lets you take a plaintext value and generates a hashed value, which
cannot be decrypted.

These online tools don't decrypt MD5 hashes. Instead, they have large
databases of plaintext values and their corresponding MD5 hashes. When
you hash a value, you should always get the same hash, so these tools
compare the hash you provide against their database of existing hash
values, and then lookup the corresponding plaintext value.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360235
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Decrypting MD5

[Dave Watts]

 So basically MD5 is useless if you can't decrypt the value! That sucks.

I don't know about useless. Hashing is not the same as encryption.
They're intended to solve different problems.

Let's say you're using a Windows network, with Active Directory.
Active Directory doesn't actually know your password, because it
doesn't need to know. All it needs to know is, did you enter the
correct password when you hit Ctrl+Alt+Delete this morning - and it
doesn't need to know what the password is in that case. Your
workstation takes your plaintext password, generates a hash, and sends
it to AD. AD compares the hash to the one it stored when you set your
password in the first place. If they match, there's an extremely high
likelihood that the plaintext passwords match as well.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360240
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404

[Dave Watts]

 In IIS, the handler for *.cfm is:

 C:\ColdFusion10\config\wsconfig\1\isapi_redirect.dll

 Does that look right...?

Yes.

 Could this be a permissions issue...?

Are you able to run any CF pages? If so, probably not.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360203
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404

[Dave Watts]

 Found it, I think: I was missing the IIS virtual directory /jakarta mapped
 to C:\ColdFusion10\config\wsconfig\1

 Does that look right?

Yes, you will need that. The web server configuration tool should have
created that for you.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360207
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404

[Dave Watts]

 I think it did. Then I deleted it. Genius.

Don't feel too bad, it's not immediately obvious what it's for unless
you're familiar with Tomcat already. I know I did a double-take the
first time I installed CF 10, then I remembered there was no more
JRun.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360210
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: ACF10 32 - 64 bit

[Dave Watts]

 Hi. So we're moving from ACF10 32 bit to ACF10 64 bit. On ACF10 32 bit, we
 settled on:

 Minimum JVM Heap Size (in MB)1369
 Maximum JVM Heap Size (in MB)1369

 On the ACF10 64 bit box, we have 32 GB of RAM to play with. Given that this
 box is just:

 ACF10
 The OS (Windows Server 2012)
 FusionReactor

 ...what's the best recommendation(s) for min/max heap to guarantee ACF10
 always has as much RAM as it could possible want/need?

This question requires more information. How much memory did your
application use in the 32-bit environment? Were you having
out-of-memory issues in the old enviroment?

Just because you have loads of memory doesn't mean you want CF to have
to manage it all, unless it's going to use it.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360211
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: ACF10 32 - 64 bit

[Dave Watts]

   Hi. So we're moving from ACF10 32 bit to ACF10 64 bit. On ACF10 32 bit,
   we settled on:
  
   Minimum JVM Heap Size (in MB)1369
   Maximum JVM Heap Size (in MB)1369
  
   On the ACF10 64 bit box, we have 32 GB of RAM to play with. Given that
   this box is just:
  
   ACF10
   The OS (Windows Server 2012)
   FusionReactor
  
   ...what's the best recommendation(s) for min/max heap to guarantee ACF10
   always has as much RAM as it could possible want/need?
 
  This question requires more information. How much memory did your
  application use in the 32-bit environment? Were you having
  out-of-memory issues in the old enviroment?
 
  Just because you have loads of memory doesn't mean you want CF to have
  to manage it all, unless it's going to use it.

 In the last week, we maxed out at 960 MB.

OK, so maybe you'd leave the minimum heap size right around where it
is now, and increase the maximum by 1.5 or 2 times the current value -
these are just guesses, of course. See how that works, then change
accordingly.

If you're using Java 8 (which you can with the latest CF patches), you
might want to look at your PermGen settings, as Java 8 doesn't really
have a permanent generation any more.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360214
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: ACF10 32 - 64 bit

[Dave Watts]

 In the old days, the wisdom was to make min and max match so that CF
 wasn't spending horsepower constantly re-sizing the heap. Is that no
 longer true?

It's never been true, in an unqualified sense. That's why they give
you two fields. Any place there's a choice in the CF Administrator,
it's there for a reason.

There is a cost to constantly increasing the heap size over time.
There is also a cost to starting with a large heap when you're not
currently using that much.

What's the right value for you? Only load testing can tell you for
sure. Anyone who tells you that they can give you the correct value
for a configuration field in all situations is wrong.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360216
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: (ot) JavaScript detecting foreign scripts

[Dave Watts]

   Second, if you use TLS (SSL) exclusively, you should be able to prevent
  this.

 I tested for this and yes it does prevent it.  However that is not actually
 the point.  The point is much bigger than the pennies they sole from my
 websites ad revenue.  Maybe I am the only one but to me this practice,
 replacing the content of a webpage with their own content, is a heinous
 affront to the idea of an open Internet.

 Maybe I am going off the rails here but isn't this exactly what the Net
 Neutrality fight was all about? Not fast lanes and slow lanes but data
 integrity!

 Thanks for the pointer on the JS code I will look into it and take a step
 down off my soapbox.

I agree with you that Comcast should die in a fire, but it'll take a
while for the FCC to fix that problem I'm sure. In the meantime,
rent-seekers gonna rent-seek, I guess.

I like Jochem's solution, of which I was unaware, but still recommend
you use HTTPS.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360185
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: (ot) JavaScript detecting foreign scripts

[Dave Watts]

 It appears as if in some locations Comcast's proxies are intercepting
 advertising scripts (google/doubleclick) and replacing them with their own
 JS that substitutes their own contracted ads.   I am looking for a way to
 detect this on a test page to determine how wide spread the practice is.

 I would be greatly appreciative if that person would contact me directly
 either by email or phone.

I'm not that person, but I have some suggestions.

First, my understanding is that this only happens for users of Comcast
public access hotspots, not for subscribed users:

http://arstechnica.com/tech-policy/2014/09/why-comcasts-javascript-ad-injections-threaten-security-net-neutrality/

Second, if you use TLS (SSL) exclusively, you should be able to
prevent this. Google/Doubleclick support this, and I really think it's
the way of the future. We recommend exclusive TLS use for all of our
customers. Not specifically just for this problem, but because it
limits exposure generally and because it may positively affect SEO in
the near future:

http://googlewebmastercentral.blogspot.com/2014/08/https-as-ranking-signal.html

Third, there's an IEEE paper that provides some sample code for
handling this problem. I haven't read it myself, and it's not a free
paper, but it may be worth the money to you:

http://ieeexplore.ieee.org/xpl/login.jsp?tp=arnumber=6032221url=http%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D6032221

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360182
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Loading a java jar outside of the webroot and not in a standard CF/Railo jar directory

[Dave Watts]

 My brain isn’t working well today and this one has me stumped even after 
 googling for
 hours.  I need to be able to load some jar files in both CF9 and Railo 4.2.  
 Because of
 rules imposed on me, I cannot put them in the standard jar directories (they 
 would
 break cf/railo functionality) and I cannot put them into the webroot.

 Normally I would do a cfset myJar = createObject(“java”, 
 “org.my.jarfile”).init() / but
 because it’s outside of the webroot I can’t figure out what I need to do. 
  Will
 createobject work with coldfusion mappings?

 Oh, and I have to try to keep the code a generic as possible because it will 
 need to run
 on both ColdFusion 9 and Railo 4.2.

I don't know about Railo, but Mark Mandel's Java class loader works
fine on CF 9:

http://www.compoundtheory.com/javaloader-cfc-v0-1-released-loading-java-from-coldfusion-part-2/

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360105
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Iif() Evaluation Weirdness

[Dave Watts]

 I've run into a problem that I could use some new eyes on... I have a 
 function inside a CFC that accepts a
 query (importData) and a series of indicators (nicknameInd) that indicate if 
 the value from the query should
 be used (indicator = 1) or not (indicator = 0).  In the below code, the first 
 argument in the IIF() function
 evaluates to false (both conditions are false) so only the third argument, 
 De(), should be evaluated. However,
 for some reason, both the second and third arguments are being evaluated and 
 I'm getting an error message
 that Element NICKNAME is undefined in IMPORTDATA. Because 
 importData.nickname is not defined.

 cfset variables.nickname = Iif( (arguments.nicknameInd NEQ 0) AND 
 (IsDefined(importData.nickname)),
 De(importData.Nickname), De())

 I've replaced both the second and third arguments with debugging code that 
 showed that they are both being
 evaluated, regardless of the condition in the first argument.  Not sure why 
 that is though given that they're
 both wrapped in DE() functions.

 Any suggestions?

The word evaluated here, I don't think it means what you think it means.

Whenever you have a CF statement, the entire statement is evaluated.
So, if you have something like this:

function(variable)

CF is going to verify that the variable exists, because you're referring to it.

That's what's happening here. Just because you're using the DE()
function doesn't mean that CF isn't going to evaluate
importData.nickname at runtime to verify that there's actually
something called importData.nickname in case it needs to reference
that value.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360046
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Iif() Evaluation Weirdness

[Dave Watts]

   cfset variables.nickname = Iif( (arguments.nicknameInd NEQ 0) AND
   (IsDefined(importData.nickname)),
   De(importData.Nickname), De())
 
  CF is going to verify that the variable exists, because you're referring to 
  it.
 
  That's what's happening here. Just because you're using the DE() function 
  doesn't
  mean that CF isn't going to evaluate importData.nickname at runtime
  to verify that there's actually something called importData.nickname in 
  case it needs
  to reference that value.

 Thanks for the reply.  My misuse of terminology aside, that would mean that 
 the
 following cannot be converted to using IIF():

 cfif IsDefined(importData.nickname)
 cfset variables.nickname = importData.nickname
 cfelse
 cfset variables.nickname = 
 /cfif

 I thought the whole point of the DE() function was to delay evaluation of its 
 argument
 until it was actually needed (e.g., when the IIF() function's first argument 
 evaluates to
 true).  If not, then the only way to use a variable, that may not be defined, 
 is by way of
 the full cfif treatment.  Is that right?

No, that's not entirely right. But the CFIF is more readable, so you
might want to go with that anyway. Honestly, I find IIF to be hard to
read a lot of the time, so I try to avoid it.

Now that you have a corresponding CFIF, it's a bit clearer to me what
you're trying to do. Here's how you'd do that, I think, in IIF:

cfset variables.nickname = iif(arguments.nicknameInd neq 0 and
isDefined(importData.nickname), importData.nickname, )

(note, I haven't tested this because I'm not in my office)

The IIF function will automatically evaluate the last two arguments
and return their values, but you'll notice that the arguments
themselves are strings. Your second argument doesn't actually refer to
the variable until that branch is executed. Does that make sense?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360050
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: ckeditor in CF 11?

[Dave Watts]

It looks like your other questions have been answered already, so I'll
just answer this one.

 4. Are there licensing issues with the CF bundled version?  In other words,
 if you use the free version from cksource in a commercial product, there is
 typically a license fee.  If you use the CF bundled version in a commercial
 product, is there still a licensing fee?  Or is that waived in the context
 of using CF server?

No, there are no additional licensing fees to any components included
in CF Server.

One point in response to Russ: if you properly secure your server,
there really isn't a problem with relying on the CFIDE folder. Of
course, it's not easy to properly secure your server, and if that's
the case for you, you should certainly follow Russ' advice. He's also
correct about the bundled version being out of date.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359987
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: validating email CF11

[Dave Watts]

  isValid(email,name@gmail) is returning a Yes

 Am I missing something or is this a bug. As far as I know CF9 would have 
 returned NO

Well, it's not really a bug. Within certain contexts, that would in
fact be a valid email address. It obviously wouldn't be a valid email
address on a public network, but on an internal network you can have
all sorts of wacky things.

And validation of public addresses is a difficult thing, due to
constant changes and the flexibility of characters allowed in email
addresses for both the local and domain parts.

I recommend that you not validate email addresses at all! As an
end-user, I get very frustrated when I encounter forms that tell me
that my (perfectly valid) email address is not valid (not
dwa...@figleaf.com, but I have many email addresses). Taking a quick
look, all of the validation functions provided in this thread would
fail with those email addresses. I don't think any of them allow plus
signs, for example, which are (a) valid characters and (b) used more
often than you might think.

Instead, consider simple, user-friendly alternatives. Perhaps you
could just look for an @ character with preceding and following
characters, then validate it by attempting to send an email to it. Use
that email to allow the user to proceed, if it's something important,
or tell the user that they should have received an email and if they
don't get it, there may be a problem with their email address. Ask the
user to enter it twice, if you like.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359975
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF Builder 3

[Dave Watts]

 I don't know about pre dating it, I have been using Studio since 1995, when
 Allaire purchased it. They then decided to release Homesite and then
 Homesite+

I know about it, because I used Homesite before Allaire bought it. I
switched from HotDog to Homesite before Allaire got involved. After
Allaire purchased Homesite, I'm not entirely sure whether they
continued to offer Homesite along with CF Studio, but I think they may
have. After the Macromedia acquisition, around the timeframe of the CF
6 release if I recall correctly, they dropped CF Studio in favor of
Homesite+ - which again was the same thing as CF Studio had been (RDS,
CF wizards, etc).

The Homesite product line (Homesite, CF Studio, Homesite+) were
written in Delphi, and I think no one at Macromedia really wanted to
support that once Nick Bradbury left.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359957
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF Builder 3

[Dave Watts]

 Nick Bradley created a product called Top Style, which I used extensively
 in those days. Allaire then purchased that program from Nick and rebadged
 it as Homesite, Homesite Studio was the first version which followed by the
 free version called Homesite. Studio did things that Homesite could not do.

 Studio was then let go in favor of making Homesite more powerful, hence
 HomeSite+, problem was that the best features of Studio where lost forever.

 So how is that misinformed?

Nick created Homesite long before TopStyle. TopStyle was a CSS editor
(thus the name, TopStyle, I guess). After he started with Allaire,
CF-specific functionality was added to give us CF Studio. Later on, CF
Studio was rebranded as Homesite+.

I defy you to find one feature in CF Studio that doesn't also exist in
Homesite+.

But you don't have to trust me, just go to Nick Bradbury's personal
site (http://nickbradbury.com/), where he describes himself:

I created HomeSite, TopStyle  FeedDemon for Windows and developed
the Android version of Glassboard. I'm now a mobile developer at
Automattic.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359958
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF Builder 3

[Dave Watts]

 hotdog? homesite? geez, kids today don't know how lucky they got it.

 hands up if you remember the 1st commercial windows webserver (hint it wasn't 
 IIS)?

In fairness, Bob Denny's WebSite Pro was around about the same time -
in fact, there was some sort of bundling available with it and CF from
O'Reilly - so if you remember HotDog and Homesite you probably
remember it too. I still have my WebSite Pro books - they were really
well written!

My first web site used WebSite Pro on NT 3.51, and CGI code written in
... Visual Basic. Good times!

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359961
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF Builder 3

[Dave Watts]

 I can never understand why Homesite was so popular, it's bigger brother was
 the better of the two. Which was Studio.

My memory here is a little hazy, as I haven't used either one for a
long time, but I recall it being a little more complicated than that.

As Wil mentioned, Homesite predated CF Studio. Allaire purchased it
and kept Nick on to make future versions. The next version was CF
Studio, which was basically Homesite with RDS functionality and
CF-specific code generators and wizards. But after a while, the
product was renamed Homesite+, and still had the RDS functionality and
CF-specific stuff. So for me at least, I think of all three as
Homesite, because they're all basically the same thing. Homesite+
was the final version released by Macromedia, and I think it was still
supported for a while after the Adobe acquisition.

https://www.adobe.com/support/homesite/releasenotes/plus/releasenotes_plus.html

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359950
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Adobe ColdFusion Blog futzed?

[Dave Watts]

 Is it just me or is the Adobe ColdFusion Blog (http://blogs.coldfusion.com/) 
 messed up?

 I go to the home page and there are only two entries, one for Jan 1, 2015, 
 and another for
 December 18, 2014. Nothing else, not even links to go anywhere else.

 If I go to one of those two pages I then get the right sidebar with links to 
 other pages and
 sections, but even if I go to the archives for each month they are incomplete.

It's working fine for me (Chrome on Windows 7, no proxy server).

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359932
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CFthread

[Dave Watts]

 Let's say I declare a series of CFthreads on a single page. These will
 process serially, not concurrently, right?

Yes.

 What if one fails? Do the subsequent threads die with it, or do they continue 
 to process
 after the failed one craps out?

Each thread is a separate program. The failure of one will not affect
the others, unless they're accessing a shared resource which is
blocked by the failed thread (which is generally unlikely).

 And, is there a way to control/choose either of these behaviors?

Not directly, but you can certainly do this sort of thing indirectly
by writing monitoring code. There's an example of this in the last
version of the Advanced ColdFusion course that we wrote for Adobe. In
a nutshell, threads can sleep and wake up, expose their status, and
you could read that status in another thread. You won't be able to
tell that a thread has failed, but you could tell that a thread is
still busy, and make an assumption that a thread that's been busy for
too long has failed.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359902
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: local install - ses non working(I think)

[Dave Watts]

 Yes, this is the code:
 cfinclude
 template=/site_theartoflovingcatsanddogs_com/index.cfm/cfid/#session.cfid#/cftoken/
 #session.cftoken#/index.cfm

 What caught me off guard is that this has been working without problem for
 many months on the live site, http://www.theartoflovingcatsanddogs.com

 I guess my actual question, rephrased better, is why does this work on
 crystaltech but not on my new cf11 install?  I'm not sure of the cf version
 for ct.  I'm sorry I was not clear.

My guess is that you have something not specifically related to CF
that's dynamically generating files, or something along those lines,
on your live site. Perhaps you have some sort of SES URL handler
that's parsing the URLs on your live site, and a corresponding error
handler that knows what to do with the incorrect template path.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359887
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: bypassing the site-wide error handler

[Dave Watts]

 Hi, when can an application bypass the CF v9 site-wide error handler?

 We host an app, that uses cftry/catch, but that appears to not handle the 
 errors correctly. The errors do not trigger the site-wide error handler, and 
 the errors are displayed to the users.

 The site-wide error handler works fine for other applications, and testing.

I don't think the application can, by itself, bypass the site-wide
error handler. I'd take a look at the code in the site-wide error
handler to see if there's anything in there that would prevent it from
doing anything when an error occurs.

You might also look at how you're using CFTRY/CFCATCH - maybe you are
catching the error after all, and your error trapping code doesn't do
anything useful.

Finally, the site-wide error handler will only catch run-time
exceptions, I think. I could be wrong about this, as I haven't worked
with the site-wide error handler in a while, but if this is the case
and you have a compile-time error in your code, it's going to be
displayed. This is something that used to be handled with the CFERROR
tag (type=request), but you really just shouldn't have any
compile-time errors anyway.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359775
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CFqueryParam Coldfusion 11

[Dave Watts]

 Does anyone know of any supposed issues with CF 11 and cfqueryparam ?

 I had a few of them in a query. One by one I removed them to see if I could 
 get the
 query working and then, adding them in. All but one work.

 Any ideas?

You need to provide more information. Did the query work with CF 9 and
CFQUERYPARAM? What is the error you're seeing, exactly?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359723
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CFqueryParam Coldfusion 11

[Dave Watts]

 The errors getting back are all The request has exceeded the allowable time 
 limit Tag

What's happening on the database server?

Have you stopped and restarted the database server? Have you disabled
and reenabled the Maintain Connections option in your database
driver?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359726
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Work Around for SSLv3 Vulnerability?

[Dave Watts]

 did you check if SOLR still works after the upgrade ?

Doesn't Solr use a separate JVM?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359657
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: incoming tabular data stream error?

[Dave Watts]

 Running a page that reads a text file into an array - then writes the
 array to the database.
 I get the following error:*

 Detail:* [Macromedia][SQLServer JDBC Driver][SQLServer]The incoming
 tabular data stream (TDS) remote procedure call (RPC) protocol stream is
 incorrect. Too many parameters were provided in this RPC request. The
 maximum is 2100.

 Looking that up, Ben Nadle says it's from a valuelist being too large:
 /id IN ( //cfqueryparamvalue=//#ValueList( qSelected.id
 )#cfsqltype=//cf_sql_integerlist=//true///)

 /But, I don't have one of those on the page!/

 /Dumping the array in question, it looks OK. There's only 1001 rows.
 /Hmmm.
 /Trying a smaller list - 604 records - same error./
 /Smaller yet - 200 records - no error.

 cfquery name=insertLIST
  cfloop from=1 index=i to=#arrayLen(mailREC)#
  INSERT INTO nl_mailgroups (
ml_email,
ml_firstname,
ml_lastname,
other
  ) VALUES (
cfqueryparam value=#mailREC[i][1]#
 cfsqltype=CF_SQL_VARCHAR /,
cfqueryparam value=#mailREC[i][2]#
 cfsqltype=CF_SQL_VARCHAR null=#not len(mailREC[i][2])# /,
cfqueryparam value=#mailREC[i][3]#
 cfsqltype=CF_SQL_VARCHAR null=#not len(mailREC[i][3])# /,
cfqueryparam value=#mailREC[i][4]#
 cfsqltype=CF_SQL_VARCHAR null=#not len(mailREC[i][4])# / );
INSERT INTO nl_catREL
( groups_id, ml_id ) VALUES (  cfqueryparam
 value=#req.thisGROUPID# cfsqltype=CF_SQL_INTEGER /, scope_identity() );
   /cfloop
/cfquery/

Yeah, pretty clearly, there's a limit to the number of parameters you
can insert within a single SQL batch. Your query has six parameters.
Multiplying 6 by 600 gives you 3600, which is significantly higher
than 2100.

You can either remove your CFQUERYPARAMs (which might be ok if your
data isn't coming from an untrusted source), or you can limit your
batch size so you don't exceed 2100 parameters per CFQUERY tag. You
could either loop over the CFQUERY tag itself (which might well cause
other performance issues) or you could make sure your loop doesn't
exceed 350 records (2100 divided by 6) by having an outer loop and an
inner loop.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359663
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: incoming tabular data stream error?

[Dave Watts]

  or you could make sure your loop doesn't exceed 350 records (2100
  divided by 6) by having an outer loop and an inner loop.

 Could this be a job for cfthread? Split a large list up into 4 or 5
 threads and just let them run (as soon as I get my head around the
 math... heh)? Seems that would speed things up a good bit, but I've
 never used cfthread before. Might be fun...

Yes, you could use CFTHREAD here pretty easily, and the records will
probably get into the database more quickly, but at the cost of other
things that might be happening on the server at the same time.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359673
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: cfpdf package

[Dave Watts]

 Has anyone had any success using pdf packages and displaying it in any 
 browsers other than ie 8?
 I'm generating a pdf from cfpdf with package=yes. The pdf opens in acrobat 
 and ie8 but not in
 chrome,ff and ie9 and later.

I don't think the built-in PDF viewers used by most browsers will
support PDF packages. You'd need to force the user to download the
file, so that it can be viewed in a recent version of Acrobat or
Reader.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359620
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: FW: CF9.02 administrator hack

[Dave Watts]

 My one questions is you say that view source is identical from a hacked and
 non hacked  server - that seems odd. There are a number of hacks that could
 produce results that manipulate your files by adding content.

Not necessarily. There's no reason that content can't be injected at
serve time. You can do this in CF using the onRequest event in
Application.cfc, but you can also do it at a lower level via Java
servlet filters. For CF, those are the first places I'd look.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359624
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: FW: CF9.02 administrator hack

[Dave Watts]

 Obviously, I still hope someone has seen a similar attack, because I'm not
 all that relieved that the symptom has gone away.

Honestly, I would assume the worst, and do the following. Back up
server settings and the source files themselves, review the server
settings manually, review the source files (hopefully less
manually), and build a clean CF/IIS install following the lockdown
guides where possible/appropriate. Then, deploy the server settings
and source to the new install.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359625
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: FW: CF9.02 administrator hack

[Dave Watts]

   There's no reason that content can't be injected at serve time.

 In this case, there would be a difference in the files delivered to the 
 visitor.
 IMO the hack is in the browser, not on the server.

Yes, I missed the reference by the original poster about using view
source. If that's the case, the problem is almost certainly in the
browser itself or some other piece of malware installed on the client.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359627
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: FW: CF9.02 administrator hack

[Dave Watts]

 The idea that there's no visible indication in the view source makes me
 consider that as well - but why would it just appear on a login page for the
 cfadmin? Perhaps it looks for specific form field names and throws up the
 java out of date message to prey on fears of folks logging in to various
 things...

There are two possibilities here. One is that, while it doesn't show
up in the view source for a given page, a JS library referenced in the
page has been compromised to rewrite page content. The other is that
there's a local malware issue that's rewriting the page content. In
either case, it could be designed only to respond to specific URLs or
URL patterns.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359629
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: FW: CF9.02 administrator hack

[Dave Watts]

  One is that, while it doesn't show up in the view source for a given page, 
  a JS library referenced in
  the page has been compromised to rewrite page content.

 Of course, this is quite possible in theory, however it would imply that the 
 hacker has already hacked
 the server, and one could ask what he is still trying to hack.

That's pretty obvious: the client. Lots of server hacks are pretty
trivial in their effect on the server, and are ultimately aimed at
compromising clients (whether the client is a browser or a search
engine).

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359636
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Is time for a change?

[Dave Watts]

 Ideally I'd like to get everything shifted to a VPS, but would I be able to
 run these old applications?  And where could I get an inexpensive yet
 reliable service?

If your primary goal is just to get this infrastructure out of your
garage, you could set it up in Amazon. It's not going to be as cheap
as a VPS, but you could run exactly what you liked, and if you don't
have very much server load you might even be able to qualify for the
AWS Free Tier. You'd have to set everything up yourself though, more
or less. And as Matt points out, you may have some unintended
security features you don't want.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359614
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: cfqueryparam EncodeForHTML

[Dave Watts]

 Text input field
 Entry is Johnson  Johnson's
 I store it in a table using cfqueryparam. All is good.

 Let's say the hacked entry is Johnson  Johnson's;delete * (or something akin 
 to that - you get the
 drift) I use cfqueryparam but it won't catch the hack; it's still just a 
 string.

Actually, it will prevent the value from being used to execute
malicious SQL. To me, that's catching the hack. Converting the
entire value to a string prevents the hack from working.

 At some point, before storing or after retrieval, I use EncodeForHTML to make 
 that safe. Now I have
 either ...

I'm not sure what you're trying to accomplish. If it's to remove the
part of the value containing something that would be malicious SQL if
it were executable, you have to determine what exactly is that part of
the string, and how you differentiate it from other parts of the value
that wouldn't be malicious SQL if they were executable. But at this
point, this has nothing to do with safety unless your application
sends the string as-is to another application which isn't
parameterizing its SQL statements.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359559
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Alternative to shared SMTP server

[Dave Watts]

 Maybe Amazon SES? I haven't used it in a CF project so I can't speak to
 that specifically, but I did use it in a Node.js project and it was a piece
 of cake.

Amazon SES works fine from CF. We use it quite a bit. But we also host
our CF infrastructure with Amazon, so it makes sense there.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359535
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Problem with CF11 starting after boot

[Dave Watts]

 Got a little bit of a strange one here.  I have installed CF11 dev on my 
 laptop with the tomcat internal web server and I set the port to use
 80.  Everything works fine, however after a reboot, when I hit pages I get 
 the error below.  If I restart CF it runs fine until I reboot again.  It
 seems strange that restarting the CF service solves the problem after it just 
 came up clean from a boot.

 Any ideas so I don't have to restart it every morning?

You could try delaying the service start so that it waits until other
services have started. Search for delay service start Windows 7 for
more information.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359538
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Distributive Mode

[Dave Watts]

 Looking for help. We currently run CF9 on windows and run it in distributive 
 mode. I set this up by
 installing coldfusion on one server(using JRUN to run multiple instances), 
 setup a cluster.. then copy
 the wsconfig.jar file to the IIS web server, install the JRE on web server 
 then run the java -jar
 wsconfig.jar to load to the web config tool.. I then would enter the host 
 name of the coldfusion box.. it
 would display the cf cluster on the coldfusion box.. then I would choose the 
 website I wanted to add the
 coldfusion mapping to.. and all would be good.

 I am currently trying to setup CF11 in this configuration and am having 
 trouble.. A. finding any
 documentation on this for CF11
 B. getting it to work ..

Wow, I didn't think anyone used distributed mode any more.

Anyway, the underlying infrastructure has changed quite a bit between
CF 9 and CF 10/11 from using JRun to using Tomcat. I don't even know
offhand if distributed mode is even supported in CF 10+.

In any case, I would instead recommend that you set up the
public-facing server as a reverse proxy, instead of a CF distributed
mode server. This will let you use more reliable and well-documented
web server functionality and get you the same benefits as distributed
mode.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359479
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Distributive Mode

[Dave Watts]

 Distributive mode allowed us to have three servers on three separated tiers. 
 Presentation, Application
 and Database. Presentation never talking to DB. To me it doesn't seem a good 
 idea to run IIS and
 Coldfusion on the same server. There is already a load balancer(reverse 
 proxy) in front of the web
 servers but I prefer not to run IIS and Coldfusion on the same server.

Everything you can do with distributed mode you can also do with a
reverse proxy. I have several customers using public-facing Apache
reverse proxies to talk to internal CF servers running IIS (which you
can't really do with distributed mode as file paths etc have to
match).

Beyond that, there's no reason why you shouldn't run IIS and CF on the
same machine. There aren't any resource contention issues between the
two services or anything like that. And if you already have a
(properly configured) reverse proxy, adding distributed mode to that
will likely degrade performance and not enhance security.

 Are all Coldfusion installations done on the web server now? Thanks

Pretty much all CF installations have always been done on the web
server. Very few people use either distributed mode or reverse
proxies, actually.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359481
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Distributive Mode

[Dave Watts]

 For better security...piece of mind, I prefer to have my web servers 
 physically separated from my
 database servers and distributed mode lets me do this.

Again, so does using a reverse proxy. There is no additional security
provided by distributed mode that isn't provided by a reverse proxy.
The goal of both is to separate your application server (CF) from your
public-facing web server. This prevents any exploit of the
public-facing web server from allowing attackers to inject application
server code.

A reverse proxy is arguably a more secure approach than distributed
mode, since you can use different platforms for your public-facing web
server and your internal web+application server.

 I finally did find a good article
 https://wikidocs.adobe.com/wiki/display/coldfusionen/WebSocket+Enhancements 
 that describes exactly
 what I need to do within CF11. I will give this a go and see if I have 
 success. Thanks for the help and
 advice.

That's not what web sockets are for, actually.
http://en.wikipedia.org/wiki/WebSocket

But you're welcome, and good luck with your CF endeavors!

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359483
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Distributive Mode

[Dave Watts]

 Dave - he likes it the way it is let it go! (with my apologies to Elsa)
 :D

But since CF 10+ doesn't support it, he'd be ...
























FROZEN at CF 9.

http://www.badum-tish.com/

I'm here all week. Try the veal!

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359485
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Adobe is just a spammer now

[Dave Watts]

 In the process of installing it,  I have to also install McAfee, even
 though I have paid for Norton's product.   Now i have the conflict between
 the two.  I DONT BLOODY WANT McAFEE!!!

I'm pretty sure you can deselect this during the installation.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359488
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: XMLRPC Request with CFHTTP

[Dave Watts]

 Thanks for the quick response.  I don't believe this is helpful.  I have the 
 correct XML to send and it has
 been confirmed.  The issue is with the web service interpreting my request 
 and processing the XML.  I
 believe the issue is in the header that CFHTTP creates.

Actually, take a look at the code sample included at the link (not the
CFC itself). There's the answer to your question.

Also, honestly, a good book about HTTP would be useful here. There's a
really good O'Reilly pocket guide to HTTP that would help you out.
This isn't intended as a personal criticism - I think every CF
developer would benefit from rereading this (including me). But
understanding how HTTP works is fundamental to web programming,
especially today with all the AJAX etc stuff going on.

In the first line of your HTTP request, there's always something like this:

[VERB] [RELATIVE URL FROM SERVER ROOT] [PROTOCOL]

For example, when your browser requests the page
http://training.figleaf.com/courses/acfd9.cfm, the first line of its
request will look like this:

GET /courses/acfd9.cfm HTTP/1.1

In your case, you want to send an XMLRPC request, so you have to POST
to http://yourserver.com/XMLRPC.

I don't think it will matter whether you specify HTTP/1.1 or HTTP/1.0.
It shouldn't matter, anyway - that just tells the server what version
of HTTP the client supports. I'm also not sure if there's a way to
specify HTTP/1.0 support with CFHTTP. I suspect there is, but I don't
know what it is offhand because again it generally doesn't matter.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359473
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CFHTTP Raw Request

[Dave Watts]

 you will need a sniffer on the server to see any HTTP request from CF.  If
 you are doing local development (where cf is installed on your laptop or
 desktop) then that's where your proxy/sniffer needs to live. CFHTTP is
 technically not a browser request - just a straight HTTP request using
 tcp.  I use wireshark for this - fiddler is more of a browser plugin - or at
 least, it proxys it's data to a browser. I suspect it could work for
 cfhttp request -just not positive as I've never tried it. Steve's suggestion
 is a good one and fiddler (or Charles) is a great addition to your toolkit
 but it may not work in this specific instance. Sorry to redirect your
 efforts :)

Fiddler is more than a browser plugin. It's a proxy server, and can in
fact capture all outbound HTTP requests from your machine, regardless
of what they come from. I prefer Fiddler to Wireshark for this because
it's purely focused on HTTP/HTTPS and a lot easier to read.

However, you have to configure clients to use it as a proxy. With CF,
you can do this at the JVM level, or you can change your CFHTTP code
to use a specific proxy server.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359467
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Ruby Gems

[Dave Watts]

 Can Ruby Gems be installed without conflict along side of Coldfusion 8 on a 
 Windows 2003 Server? thanks!

Yes, but you won't want Ruby itself connected to the same IIS virtual
server(s) being used by CF, if you're using IIS.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business
(SDVOSB) on GSA Schedule, and provides the highest caliber vendor-
authorized instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359456
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Using caching for a RSS feed

[Dave Watts]

 ...

 cfcache action = cache timespan = #createtimespan(0,0,2,0)#
   cffeed action=read source=#rssUrl# query=entriesNews 
 properties=info timeout = 180

 ...

 For Application Server Caching, we have Cache Template in Request and Save 
 Class Files enabled. Since lot of files are in ColdFusion,
 Trusted Cache is disabled.

  I added a basic cache so that the server running ColdFusion 9 reaches out to 
 the server hosting Wordpress site every 2 minutes

  1. If 10(or 1000) people visit the webpage in an hour, where the above code 
 exists, will it connect to the server hosting Wordpress site every 2 minutes 
 for the RSS feed?

Not necessarily. Assuming it starts with nothing in the cache, the
first request will cause CF to fetch the RSS feed and store it for two
minutes. Any subsequent requests in those two minutes will read from
the cache. After those two minutes, the next request will again cause
CF to fetch the RSS feed and store it for two more minutes.

  2. Or, will it be sooner if the RSS feed on WordPress changes between the 2 
 minute interval?

No, it will not be sooner. CF has no way of knowing whether the RSS
feed changed without fetching it, which would defeat the point of
caching.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359447
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Using caching and threading to load a page quickly

[Dave Watts]

 Another approach would have the feed fetching functionality in a
 separate template which is run as a scheduled task every 2 minutes. That
 task can shove the parsed (and potentially formatted) feed into the
 application scope. (With a lock.) And then your main page can output
 that variable (with a lock). Then your home page would load as fast as
 it would as if the feed were local.

Based on all the information exchanged so far, this is the approach
I'd recommend. Just fetch it periodically and store it locally. Don't
wait for a user to request it first (as you're doing in another post).

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359448
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Not able to read a RSS feed from a WordPress website

[Dave Watts]

  This is no longer a programming issue, though. It has nothing to do
  with reading and displaying the RSS feeds at this point. Instead, it
  has to do with fixing the connectivity problem between the two
  machines.
 
  People on a mailing list are not going to be able to help you do this
  effectively. And, you should be able to demonstrate to a network
  administrator somewhere (your organization, the hosting company where
  your CF server is) that this is not a CF problem but rather a
  networking problem.

 I agree, but here is where it becomes strange. They(hosting company where
 your CF server is) claim packets can leave the server, but then they are 
 getting
 lost on the route so tell me to check with the hosting company where the 
 wordpress
 website who say that they are not blocking any requests from the machine 
 running
 CF server. I need to dive into it and solve it.

Packets can leave which server? Your CF server?

The relevant question here (to me) is: what happens when you ping the
WP server from the CF server console? What happens when you run a
traceroute to the WP server from the CF server console?

 Anyway, I appreciate all your assistance and time.

You're welcome! Good luck!

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359340
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Forms not passing data?

[Dave Watts]

 I don't know if this is a CFML issue or what... But perhaps someone has run
 across this and can offer a hand...

 form action=#myself#Login.CheckLogin method=post
 enctype=multipart/form-data
 input type=text name=username
 input type=Password name=Password
 input type=Submit class=submit name=Login
 value=Log in
 /form

 (It's not this bad, but I removed the formatting and so on). This works
 with all the browsers. When I try it with IE, Chrome, Firefox, it works
 fine.

Out of curiosity, why are you sending this with the MIME type
multipart/form-data instead of application/x-www-urlencoded?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359332
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: cf incorrectly thinks compiled java byte code is correct

[Dave Watts]

 I am wondering if many others have run into this issue. Basically, when we 
 deploy certain high volume .cfm
 files (i.e. index.cfm), they are sometimes incorrectly compiled to java byte 
 code.

How do you know this? What do you mean exactly by incorrectly
compiled? What version of CF are you running? What are the exact
error messages you're seeing?

 What I believe is happening is when several requests come in while ColdFusion 
 is trying to compile the .cfm file
 to java byte code, the byte code gets created, but the process bombs out 
 before it is able to complete successfully.

 Since CF in fact DID generate the byte code (albeit not correctly), on 
 subsequent requests, CF thinks it already
 compiled the byte code successfully so it doesn't try to compile it on future 
 requests. What we end up with is a .cfm
 file on the server with all the source code in place, and some incorrect byte 
 code somewhere.

I've never seen this problem, even in many high-volume environments -
some of which had their own problems. And it doesn't really make
sense, given my (admittedly limited) knowledge of CF internals. So, I
kind of think this is unlikely. Something else is probably happening.

 In order to fix the problem, we need to deploy the file again (sometimes one 
 or two more times) in order to get lucky
 in that when the high traffic file is hit, another request doesn't come in 
 just then and interrupt the compilation process.

 Has anyone else come across this problem?

 Here is a related article: 
 http://www.neiland.net/blog/article/compile-cfml-to-java-bytecode-plus-fusebox-fix/

That article isn't really related, although it could solve the problem
you describe. You can precompile CF code, then deploy that instead of
the source code. You could try doing this to solve your problem, but
again I don't think that's really the problem you're having.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359312
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: IIS not being recognized by CF 11 install

[Dave Watts]

 from the cf logs...
 Sep 16, 2014 17:49:10 PM Information [localhost-startStop-1] - Starting
 WebSocket...
 Sep 16, 2014 17:49:10 PM Information [localhost-startStop-1] - WebSocket
 server listens on port: 8577
 Sep 16, 2014 17:49:11 PM Information [localhost-startStop-1] - ColdFusion
 started
 Sep 16, 2014 17:49:11 PM Information [localhost-startStop-1] - ColdFusion:
 application services are now available

 this kinda looks like the internal CF webserver is running... s I just
 tried this:
 http://127.0.0.1:8577/CFIDE/administrator/index.cfm ... and this seemed to
 try to run and I got a 403 error.
 http://127.0.0.1/CFIDE/administrator/index.cfm  ... this delivers 404...
 and of course CFIDE is Not in the IIS web root... not yet anyway

Actually, this doesn't indicate anything about the internal CF web
server. CF 11 supports web sockets, which are listening on a separate
port (8577).

But, in general, I do recommend that people install CF using its own
web server, then manually run the web server configuration tool as
needed to connect to IIS or Apache. This helps differentiate between
CF problems and web server problems.

Also, once you've run the web server configuration tool, you should be
able to look at a separate set of log files just for that.

Finally, by default, once you run the web server configuration tool
successfully, the CF Administrator URL you listed should work
regardless of whether CFIDE is in the web root, or you've set up a
virtual directory, etc.

 I'm starting to think I don't know how to add IIS to a server... but it's
 pretty straight up.

There isn't that much to it, so I doubt it's your fault. An
out-of-the-box IIS install should work fine with CF 11.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359314
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: IIS not being recognized by CF 11 install

[Dave Watts]

 I have just opened up wide all the permission on the Default Web Site in
 IIS... I am still not getting CF 11 Std Install to see that IIS is running.
 wsconfig.exe is not seeing it either.

 What am I doing wrong? Totally baffled now.

My guess is that there's some sort of network port restriction in
place - a software firewall, perhaps - that's keeping wsconfig from
being able to see IIS.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359315
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: cf incorrectly thinks compiled java byte code is correct

[Dave Watts]

  How do you know this? What do you mean exactly by incorrectly compiled? 
  What version of CF are you running?
  What are the exact error messages you're seeing?

 The reason I know it's not being compiled correctly is because when this 
 issue occurs, the errors that happen are
 indicative of the .cfm file being in place, but the byte code being empty.

 What I mean is, let's say page.cfm does a cfinclude on a high volume file 
 called set_first_name.cfm which simply
 sets a variable called firstName.

 If that file is corrupted in the way I am describing, a firstName variable 
 is undefined error would occur when
 firstName was referenced back in page.cfm (after the cfinclude). Because even 
 though the included
 set_first_name.cfm file does indeed exist, the byte code that was generated 
 is behaving as if it is blank (for lack
 of a better term).

 I haven't personally examined the byte code, but 1) I don't have access to 
 the live server, and 2) I wouldn't really
 know how to read it.

Well, my take on this is that you wouldn't see this problem if the
file is corrupted. Instead, the entire page would simply fail to
render unless you had the CFINCLUDE in a CFTRY/CFCATCH. The generated
byte code has to be a fully-formed Java class that conforms to the
Java Servlet API, and it seems to me to be unlikely that the class
would be created correctly but just without your custom code. Again, I
don't know enough about the internals of CF to guarantee this, but I
do know a little bit about compilers and Java, and it seems unlikely.

It would be useful if you could simply compare the bytecode size
between good and bad versions of the same compiled class, if you
could access those from the live server. They may be written to disk,
in the cfclasses directory, if you have Save cache files to disk
enabled in the CF Administrator.

  I've never seen this problem, even in many high-volume environments - some 
  of which had their own problems.
  And it doesn't really make sense, given my (admittedly limited) knowledge 
  of CF internals. So, I kind of think this
  is unlikely. Something else is probably happening.

 You may be right, but this is what we're experiencing. I also admit a limited 
 knowledge of CF internals.

I guess what I'm getting at here is: you definitely have a problem.
But I don't think your description of the cause of the problem is
accurate at all, and you could easily go down a rabbit-hole here by
focusing on what you imagine is the cause of the problem, rather than
the problem itself. The basic description of the problem is that
you're not getting the output under load that you get without load,
right?

What happens if you block incoming traffic to the server, stop and
restart the CF service, and rerun the same pages, with Save cache
files to disk enabled? My guess is that you'll get the correct
output.

  That article isn't really related, although it could solve the problem you 
  describe. You can precompile CF code,
  then deploy that instead of the source code. You could try doing this to 
  solve your problem, but again I don't
  think that's really the problem you're having.

 I agree that the article is only somewhat related, but it is related in the 
 fact that, yes, there seems to be some sort of
 problem with the compilation process. We have thought about deploying the 
 compiled code, but wanted to see if anyone
 else had experienced this problem first.

You could certainly try to just deploy compiled classes and see what
happens. It's generally a good thing to do in production anyway.

Another approach you could try is to force the server to precompile
everything by running a test script that generates an HTTP request for
each CF file before you open access to users.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359320
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: IIS not being recognized by CF 11 install

[Dave Watts]

 Yep, that's why I re installed IIS. Thanks Russ!

I think what Russ is getting at is that you can install individual IIS
components without uninstalling and reinstalling IIS itself, for
future reference.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359325
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: IIS not being recognized by CF 11 install

[Dave Watts]

 IIS not being recognized by CF 11 install... at least that is what I am
 thinking now. It's there... it's running... it has a Default Web Site with
 a couple of user installed folders... which serve up .html files across the
 net no problem.

Are you explicitly right-clicking on wsconfig.exe and running it as
administrator?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359309
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Not able to read a RSS feed from a WordPress website

[Dave Watts]

 Hosting company B says we are not blocking the website your CF server is 
 trying to read. They say all
 is well with the machine running CF server. We went with a hosting company 
 because network engineers  in our organization did not have time for such 
 things. Reading the RSS feeds and getting them to display
  is my task.

This is no longer a programming issue, though. It has nothing to do
with reading and displaying the RSS feeds at this point. Instead, it
has to do with fixing the connectivity problem between the two
machines.

People on a mailing list are not going to be able to help you do this
effectively. And, you should be able to demonstrate to a network
administrator somewhere (your organization, the hosting company where
your CF server is) that this is not a CF problem but rather a
networking problem.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359286
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Not able to read a RSS feed from a WordPress website

[Dave Watts]

 Just to clarify: from the machine running CF, if you use a browser,
 can you get to the site correctly?

 No, I cannot access the site from the machine running CF.

OK, this is good! This means it's not a CF problem.

 If the server admin can't tell you why a machine he or she manages
 can't get to a remote server, you need to replace your server admin.

 I am not the decision maker who can replace server admins. The server admin 
 told me they do not
 restrict outbound traffic nor there are any rules in firewall blocking that 
 site. I already checked the
 localhosts file and nothing in it also could be stopping it.

Well, I was being a bit facetious. I didn't expect you to fire the server admin.

But - and now I'm being completely serious - the server admin should
be able to diagnose the problem preventing the server that he manages
from connecting to this other server. This is clearly not a CF
problem.

This could be caused by many things. Here's what I'd try to look at,
if I were you (assuming you have console access):

Do you get the correct IP address when you ping the server?
Where does it fail if you do a traceroute to the server?
Are other servers from the same network able to connect to the server?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359276
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Not able to read a RSS feed from a WordPress website

[Dave Watts]

   If I use a browser, I can see the feeds. Using a feed reader in
   Google Chrome browser, I can notice the feeds load correctly.
 
  Are you using a browser from the machine running CF?

 No, the machine running CF cannot access the website. I get a message that 
 the request timed out. But, the server
 admin cannot tell me what could be causing it. 1000's of people can access 
 the website properly from their computers.

Just to clarify: from the machine running CF, if you use a browser,
can you get to the site correctly?

If the server admin can't tell you why a machine he or she manages
can't get to a remote server, you need to replace your server admin.

 Well, the CF service was restarted and so was the server, so if the DNS entry 
 changed, CF should have updated its cache.

 1. Should I change the below line in 
 C:\ColdFusion9\runtime\jre\lib\security\java.security

 #networkaddress.cache.ttl=-1 to something like
 networkaddress.cache.ttl= 14400

 2. Also, does CF9 cache a positive lookup forever? Meaning if 
 http://www.testsite.com/?feed=rss2 was on IP address
 A.B.C.1 when CF cached it, it will not update its cache when the feed's IP 
 address changes to A.B.C.10

If you can't get to the site from a browser on the machine running CF,
I wouldn't bother messing with CF - the problem isn't with CF. If you
can get to the site from a browser on the machine running CF, but CF
itself can't get to it, there's probably some sort of DNS caching
issue within CF itself.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359267
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Not able to read a RSS feed from a WordPress website

[Dave Watts]

 If I use a browser, I can see the feeds. Using a feed reader in Google Chrome 
 browser, I can notice the
 feeds load correctly.

Are you using a browser from the machine running CF?

 Message:Connection refused by the specified host on the specified 
 port.

 ...

 1. What could have caused a working WordPress RSS feed which was parsed 
 correctly by ColdFusion
 till last week to stop suddenly?

 2. How can I resolve the issue?

Looks like the CF server can't connect to that host on that port. This
could be all kinds of things, but it probably doesn't actually have
anything to do with CF itself. Perhaps the CF server is on a network
segment that can't access this server. Perhaps the DNS entry changed
for the WP server, and the CF server hasn't updated its cache. Etc,
etc, etc.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359246
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: OT, but stil...

[Dave Watts]

  so it becomes a part of the client side page request
 against your will as it were.

 Yes, but this rises a question:
 If my window.onerror can get events from some plugin code, this means that 
 this code is embeded and is treated as if it belonged to my window.
 Thus, it has access to everything in my window, including the document, 
 forms, input fields in the forms, even those containing passwords, etc.

 What kind of breach is that?

This is exactly how user scripts work. They are installed by the user
in some fashion, and can control browser functionality. This is how
online password managers work, how Greasemonkey works, etc, etc, etc.
If a user installs malware, of course that malware can do this sort of
thing. There's nothing magically sacrosanct in HTTP or HTML to prevent
this sort of thing.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359231
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: OT, but stil...

[Dave Watts]

 I can understand that a plugin can run a script when a page is loaded, but it 
 is absolutely stupid this script can be part
 of the page and have all privileges granted to the user after a legitimate 
 authentication. The script could run by itself, but
 have no access to the DOM and not be able to read or define cookies from the 
 original domain.

Well, that's the way user scripts work, and how they've always worked.
I'm not sure what to tell you beyond that. That's the whole point of
user scripts - to have access to the DOM, etc. Greasemonkey has been
around since 2005.

And this approach follows the basic model of the web itself - in the
beginning, the intent was for users to control the appearance of
logical formatting tags (h1, etc) with local style configurations.

The problem you're having is the basic problem that the user's own
machine has to be accepted as trustworthy. If that isn't the case, all
bets are off.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359238
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: OT, but stil...

[Dave Watts]

 How come this code at in2.perfectnavigator.com (which is not on my server) 
 can be executed from one
 of my pages, or at least the error event reported to one of my pages ?

Users can choose to run their own scripts, or install plugins that run
scripts for them. This is pretty common. The in2.perfectnavigator.com
is an ad-server script of some sort.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359224
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Opening Local Files

[Dave Watts]

 We have created an online database program. I have a requirement for a user 
 to store links to files
 contained on their local machines, then at the click of a button it will open 
 the file.

 If we were to store these files on our server I know we could use cfheader 
 and cfcontent to open the
 file. However, seeing as the files are stored on their local machines how can 
 I achieve this?

 I have read this is not possible. There MUST be a way of ding it though!

You'll need local applications to manipulate local files. This is not
possible with a CF web application by itself. Those local applications
will need to be downloaded and installed by the user, but they can
otherwise be very lightweight - for example, Java applets.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359190
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: error accessing cfadministrator after install(iis)

[Dave Watts]

 something else I noticed...

 These is no cfide folder under wwwroot.

 see pics

You can't post pics here.

That said, you'll need to do the following:
1. Make sure that the CF user account can access the IIS webroot
(read/execute) and the CF directory itself
(read/write/execute/delete).
2. Make sure that the IIS virtual server user account can access the
IIS webroot (read/execute) and the subdirectory within the CF
directory that contains the IIS integration component
(c:\coldfusion11\config\wsconfig if you're using CF 11).

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359188
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Simultaneous threads and maintain database connections

[Dave Watts]

Hi, George!

 Is there a relationship between CF simultaneous requests and maintained 
 database connections?

No, not really.

 Does a maintained database connection use one of the threads allocated for 
 simultaneous requests?

No. Database connections use their own separate thread pool. The basic
pooling mechanism is pretty similar, though.

 For example, suppose in Request Tuning I have simultaneous (Template) 
 requests  set to 10 and in
 CF data source settings I have Maintain Connections checked with Timeout set 
 to 20 (minutes).

 A request completes. The database connection now is inactive and remains so 
 for at least 20 minutes.
 CF maintains the connection to the database for 20 minutes.

 Does the maintained database connection also continue to hold on to the 
 thread that was being used
 by the request that completed for the same 20 minutes?

No.

 Or do the request thread and the database connection operate independently of 
 each other?

Yes, they're completely independent.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359169
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Auto File Uploading...

[Dave Watts]

 This isn't the right tool for the job. But this code seems to work.

 !DOCTYPE html
 html
 head
 title/title
 /head

 body

 cfif StructKeyExists(FORM , 'fieldnames')
  cfdump var=#FORM# /
 scriptsetTimeout(function(){window.history.back();} , 2000);/script
  cfelse
  scriptsetTimeout(function(){document.getElementById('somefrm').submit();}
 , 2);/script
  form method=post id=somefrm enctype='multipart/form-data'
 input type=file name=somefile
 /form
  /cfif
 /body
 /html

I'd be surprised if this worked, actually, since it's not going to
reload the document from the filesystem. So, it'll continue uploading
the file already loaded within the browser, but changes wouldn't be
sent.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359088
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Auto File Uploading...

[Dave Watts]

 Interesting point Dave.

 But I just tested on Chrome (Mac) and it does pick up the changed file.

I'm surprised! But that's interesting to know, so thanks!

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359094
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Emails MIA

[Dave Watts]

 Issues only occur with service provider emails (BCC to me is OK). Their
 network provider advises the missing emails don't even hit their mail server
 - they run their own mail server and don't use their ISP's mail system. The
 usual suspects of anti-spam systems and junk mail have been checked but
 nothing extraordinary there.

 I've approached the hosting provider to see if we can get SMTP logs but they
 won't provide them because they contain other customer data  - that's
 understandable but we could only ask.

 Is there anything I can do application side to provide some tracking or
 auditing or something so we can try to track this down.

First, some anti-spam systems will not actually put all identified
spam in a folder, etc, where it could be found. For example, Postini
has a feature, on by default, called Blatant Spam Blocking. BSB-tagged
messages won't be moved to the user's quarantine, they'll simply be
treated as if they never existed. Postini may have actually accepted
the message and closed the SMTP transaction normally, so from the
client's side the mail has been successfully sent. So you'll really
need SMTP logs to verify the disposition on the receiver side.

Most spam filtering systems allow you to search SMTP logs without
having to export the whole thing.

On the application side, all you can do is demonstrate that it was
successfully sent. The SMTP server you're using locally can probably
log this, but honestly if it's processed and not rejected, it's been
sent successfully.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359057
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Sort by file extension in CFDIRECTORY

[Dave Watts]

 It does, unfortunately it doesn't have the file extension as part of the 
 object, so you'll need to add that column
 to the query object and run through the results separating the file name and 
 filee xtension out to then sort by
 either column interchangeably.

Good point! Sometimes I forget we can't just use ANSI SQL-92 substring
functions in query of queries.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359053
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Sort by file extension in CFDIRECTORY

[Dave Watts]

 I'd look at putting it into a custom query object and using queries of 
 queries.  So loop over the
 cfdirectory output inserting into a new query object that has file extension 
 as a column and use a call
 like (filename,listLen(filename,.)-1,.) to retrieve the extension.  Once 
 it's stored it's a simple matter
 of query of queries to sort the results.

I'm pretty sure that CFDIRECTORY returns a query object that can
directly be sorted using query of queries.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359043
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Invalid Data for Parameter but which one?

[Dave Watts]

 I received the following error within a query 'Invalid data value false 
 exceeds maxlength setting 1.'

 I understand the error but I need to trace which parameter is having this 
 issue as there are lots. Is there
 any way of getting coldfusion to tell me?

No, I don't think so. You'll basically have to go through them
one-by-one until you figure it out. CF doesn't really know anything
other than what the database tells it.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359027
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Implementing Kerberos Authentication with ColdFusion

[Dave Watts]

 I've got an unusual situation. I need to be able to access/invoke Kerberos
 Authentication for an E-Sign system.

 The app does single sign on just fine using IIS, But we have a module that
 requires the user to enter their account password as an E-Signature. It was
 working fine with just active directory, now the enterprise is going to a
 PIV card system and I'd like to be able to access the Kerberos ticket or
 create a new one..

 Has anyone been able to get ColdFusion to access Kerberos?

I'm not sure what your goal is here. What exactly are you trying to do?
a) have CF be able to read the Kerberos ticket the user sends to IIS
automatically?
b) have CF be able to impersonate the user in some way?
c) simply verify that the user is authenticated in your module?

The reason this isn't immediately obvious to me has to do with how
Kerberos works. When you authenticate with Kerberos in a typical
Windows environment by hitting Ctrl-Alt-Del and logging in, your
workstation has a private conversation with the DC (which in
Kerberos-speak is the Key Distribution Center) to get something called
a Ticket-Granting Ticket. Then, when you want to talk to another
server like IIS, you receive a 401 challenge response from IIS, then
go back to the KDC with your TGT to get a service ticket, which is
then sent to IIS. IIS then sends that back to the KDC to validate it,
but IIS can't actually use the service ticket to do anything else,
like impersonation. In other words, all IIS can do is verify that it's
you - it can't send your credentials anywhere else. It doesn't even
actually have your credentials. (That's arguably the value proposition
of Kerberos - your credentials can't be as easily hijacked as with
NTLM.)

For IIS (or your CF app, by extension) to do impersonation, the
service account running IIS has to be granted permission within AD (in
the account Delegation tab). In that case, your workstation will
send the TGT along with the service ticket, and IIS can then use the
TGT to get additional service tickets on your behalf.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359017
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Implementing Kerberos Authentication with ColdFusion

[Dave Watts]

 That's the thing Dave, I'm not sure that this is even possible. The folks
 using PIV cards enter a PIN number at login, and all that does is wake up
 the card, and then the chip on the card handles the rest.

 We would somehow have to access the card through the PIV reader and have
 the card ask for a ticket I think...  and then somehow determine if a
 valid ticket has been created.

I don't think you'd have to do that. My guess is that once the user
initially logs in, the card is not required for future tickets. The
TGT and any service tickets are stored by the OS (something you can
easily confirm with the klist command: klist tickets).

But again, what exactly are you trying to do? If you're just trying to
see the user's verified identity, why not just read the appropriate
CGI variables that IIS presents? I mean, it sounds like that would be
sufficient for verification of your user in a Kerberos realm. What
would be served here by getting another ticket?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359019
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Implementing Kerberos Authentication with ColdFusion

[Dave Watts]

 The way that it originally worked. was this. The user would re-enter their
 login name and password to E-Sign in a module. We would check this
 against AD via CFLDAP and if it was valid the module would be Signed The
 original paper process required a supervisor's signature for approval.

 The enterprise is implementing a mandatory PIV card system which does away
 with the user entering a password. Instead they enter a PIN number, this is
 never passed to AD it only serves to initialize the PIV card. The Kerberos
 system generates a password which is changed on a regular basis. The end
 user never knows what the password is, only the PIN number.

But what exactly is the purpose of reentering your login name and
password if you've already successfully authenticated to get into the
app in the first place? Why not just put a big button there that says
Sign This?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359021
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Implementing Kerberos Authentication with ColdFusion

[Dave Watts]

 The product owner's thought process is What if they leave their computer
 open someone could just sign off on whatever This is why we did the
 original E-Sign methodology.

 What were suggesting to the PO, is exactly what you're saying, a big button
 that records the username and a time stamp. I just want to be ready with an
 alternative or a very valid reason why we need to use the big button.

Well, you might still be able to just use NTLM for this - in many
Windows domains that use Kerberos, NTLM is also enabled. But it may be
disabled. I think that you'd be better off not having users present
their passwords over the network in a Kerberos environment, and
perhaps just making sure that people follow standard procedures for
workstation security.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359023
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Package routing and maps

[Dave Watts]

 I'm doing some research on routing packages using something like Google
 maps. Basically, if you take a starting location, give it a few waypoints,
 and an ending location, the program/api will calculate the best route for
 it. The classic traveling salesman problem.
 I've found a few examples but I was wondering if anyone has such a system
 in place with CF and what they are using? What pitfalls have they found?
 What spurred the choice for one system over another?

Google has an application specifically for this, called Google Maps
Coordinate. It has an API that would let you build a CF front end if
you like:

http://www.google.com/enterprise/mapsearth/products/coordinate.html

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359002
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: element undefined

[Dave Watts]

 The web site you are accessing has experienced an unexpected error.
 Please contact the website administrator.

 The following information is meant for the website developer for debugging
 purposes. Error Occurred While Processing Request Element CURRENTSITENAME
 is undefined in REQUEST.

 cfset request.CURRENTSITENAME = fatcate-juice.com
 I have this in application.cfc.  What gives?

There are several possibilities:
- the portion of Application.cfc that has this line isn't being
executed prior to your request - where is this line in
Application.cfc? is it in one of the event handlers?
- the request being executed isn't covered by that Application.cfc -
is it in the same directory?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358923
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: help

[Dave Watts]

  Instead of a physical path like C:\magedirector\imagename.ext  you
  need a url like http://domainname.com/imagedirectory/imagename.ext
 
  You use the physical path to determine if the file exists, but you
  need the url to display it.

 \taolcad_images\products\resize\qry_latest24items.largepic1

 Still doesn't work...?

That's still not a URL, is it?

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358901
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Dynamic variable Name in cfif

[Dave Watts]

 I'm having no trouble setting and outputting a dynamic variable name:

 cfoutputExpires_#UpdateMe#= #form[ 'Expires_'  UpdateMe]#/cfoutput


 but when I go to evaluate that variable:

 cfif form[ 'Expires_'  UpdateMe ] EQ Yes

 it returns:

 Variable YES is undefined

 because the VALUE of the Variable named Expires7 is indeed YES.

Without quotes around Yes, CF sees it as a variable name, not a
literal string.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358902
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Dynamic variable Name in cfif

[Dave Watts]

 Also, shouldn't it be

 cfif form[ 'Expires_'  UpdateMe ] is 'Yes'

 ???

 or is it the current trend to use EQ when checking a text field nowadays? :)

They're equivalent, so it doesn't matter which one you use. It's
purely a matter of personal preference.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358913
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF 9 admin login problem

[Dave Watts]

 Tried to log in to the CF 9 admin this evening and got the following: ...

My first guess, whenever I see CF admin login failures of any sort, is
that you might have more than one CF admin directory and CF is using
the wrong one.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358887
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: looping over PDF subforms

[Dave Watts]

 So I'm still trying to produce a section 508 Compliant PDF using
 cfdocument, or cfpdf or something

 I know there are methods to populate pre defined PDF forms, which would
 work except that alot of my data is multiple row format and I don't know
 how many rows may be returned and I can't limit it

 I'm wondering if I can either dynamically populate pre defined subforms,
 making each returned row it's own sub form and fill in the blanks..

 I'm reaching, here because we need to come up with a solution, and
 CFDOCUMENT just doesn't seem to cut it.

I think the best way to go about this is to use LiveCycle form
scripting to build dynamic forms, then have them load a data set at
runtime. The data set could be served by CF, but you wouldn't use CF
to actually build the form or populate it. For example, the form could
load data from a web service call.

Dynamic forms can have repeating subforms. For example, you could have
a table which would have one row per record in your data set. The user
would open the form, but it could load the data before it renders on
screen, then render itself with the appropriate number of rows in the
table.

http://blogs.adobe.com/LiveCycleHelp/2012/09/livecycle-designer-and-accessibility.html

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358889
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: help

[Dave Watts]

 Yes, this code is broken. You have a logic error.  The code inside the
 CFCATCH will only execute of the code in the CFTRY fails.  The syntax
 on the CFCATCH tag is wrong as you have no type declared, and the code
 on the first line inside the CFCATCH is the same as what you just
 tried.  So if it fails on the TRY it will fail inside the CFCATCH.

This is all very accurate except for one portion. CFCATCH doesn't
require a type. It's generally recommended that you specify a type,
but in the absence of that attribute it'll simply catch any exception
thrown by the CFTRY.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358862
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: sFTP using CFFTP and the AES-256 Cipher

[Dave Watts]

 The receiving box is using the AES-256 cipher, and it doesn't appear that
 CF9 supports it. I've already dumped the results of
 java.security.Security.getProviders(). and there's nothing in the providers
 array that specifically references AES-256..I'm also a noob when it comes
 to keyed encryption so I may not even know exactly what I'm looking at..

 I've also called removeProvider() and removed JsafeJCE and I still get the
 same Algorithmn Negotiation fail error.

 Has anyone gotten this to work?

I haven't tried to do this. CF 9 supports AES, but the key size is
limited to 128 bits by default by the JVM (not CF). You'll need to
install the Java Cryptography Extension (JCE) Unlimited Strength
Policy Files for your Java apps to use a larger key size.

CF docs - read the keysize section
http://help.adobe.com/en_US/ColdFusion/9.0/CFMLRef/WSc3ff6d0ea77859461172e0811cbec22c24-6e72.html

JCE policy files for Java 7
http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

JCE policy files for Java 6
http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html

Let me know if that works for you.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358836
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Locks on Access files in CF 9

[Dave Watts]

  there are potentially many connections,

 like in any database system.

Right. But other database systems can handle concurrency much better
than Access can. That's why people generally recommend not to use
Access in high-concurrency situations.

  so the fact that it's only one user is irrelevant -

 It is, because the principal argument of Access detractor is that it is not 
 good in a multiuser environment.

And that argument is fundamentally correct, because what most people
mean when they talk about multiuser database environments is the
ability to support multiple concurrent connections. The distinction
between users and connections is meaningless if your concern is
concurrency. And in these environments, the web application is
typically acting as a multiplexer of sorts - it uses its own
credentials to support multiple web users simultaneously. A web
application is by its very nature a multiuser environment.

  you still have concurrency issues.

 like with any database system.

No, not like with any database system. Most RDBMSs handle concurrency
better than Access does.

 Access is a very economical and efficient solution for small or medium 
 applications.

It's no more economical than MySQL, the free version of MS SQL Server,
or Postgres. It's not especially efficient for web applications due to
file locking, lack of ability to remove unused space for deleted
records, etc, etc.

 In large applications the problem is not with Access, the problem is with the 
 designer who chose the wrong solution.

If you're building a web application and you choose Access, you chose
the wrong solution. It may not be the end of the world, but it's not
the best choice for any web application.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358820
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Locks on Access files in CF 9

[Dave Watts]

 But transfer the data to an actual database

 I was expecting this clever answer! ;-)
 Access has a bad reputation in a LAN multiuser APPLICATION.
 But it is only when the application is also an Access application.
 All requests cause many accesses to the disk, both for code and for data, 
 which causes a bottleneck.
 In a coldFusion application, the application is NOT stored in the same file 
 as the database,
 and there is only ONE user: Coldfusion is the user.

While there is only one user account, there are potentially many
connections, so the fact that it's only one user is irrelevant - you
still have concurrency issues. You also have other problems, such as
the inability of Access to perform routine table maintenance while the
database is being used by CF. For example, the space originally
allocated for records isn't reclaimed properly when the records are
deleted.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358815
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF 11

[Dave Watts]

   Official list:
  
   http://www.adobe.com/products/coldfusion-enterprise/features._sl_id-contentfilter_sl_featuredisplaytypes_sl_new.html
  
   Your needs are almost surely different from ours...however...in case it's
   helpful, my boss asked me to order these from most important (for us)
   through least important (for us):
 
  One feature not on your list (and probably not important to you) is
  interesting to me. You can install CF as an application instead of a
  service. You could always run CF as an application once it's
  installed, but now you can just unzip CF into a directory - no admin
  rights needed - and run it as an application. You could do that before
  with a little bit of tinkering, but CF 11 makes it a lot easier.

 Interesting. Can you provide an example where that'd be useful?

Building ready-to-run zip files with sample apps, deploying on
developer workstations without admin rights.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358774
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF 11

[Dave Watts]

 Official list:
 http://www.adobe.com/products/coldfusion-enterprise/features._sl_id-contentfilter_sl_featuredisplaytypes_sl_new.html

 Your needs are almost surely different from ours...however...in case it's
 helpful, my boss asked me to order these from most important (for us)
 through least important (for us):

One feature not on your list (and probably not important to you) is
interesting to me. You can install CF as an application instead of a
service. You could always run CF as an application once it's
installed, but now you can just unzip CF into a directory - no admin
rights needed - and run it as an application. You could do that before
with a little bit of tinkering, but CF 11 makes it a lot easier.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358767
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: XML - no encoding

[Dave Watts]

 CDATA:  MyXMLObj.MyXMLChild[1].XMLCData=蘇ttp://myurl.com?x=ya=b';

 Most XML libraries for other languages will read CDATA just like they would a 
 non-escaped node.

I'm pretty sure that this will only work for element values, not
attribute values. I'm not sure whether John's using this in an element
or an attribute.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358747
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm