Re: New CF8 vulnerability
Thats the trouble with bundling things. I used to think it was nice but really it creates these types of things. Have you seen the video of the guy hacking sites with this? It's not a CF-only issue. However, CF comes bundled with FCKEditor and other scripting languages don't. If you don't allow uploads to web accessible directories, you don't have anything to worry about. However, the default install of CF 8.0.1 on Windows does allow uploads to web accessible directories. Dave Watts, CTO, Fig Leaf Software -Original Message- From: Dave l cfl...@jamwerx.com Sent: Sunday, 05 July, 2009 13:37 To: cf-talk cf-talk@houseoffusion.com Subject: Re: New CF8 vulnerability If there's a default web accessible URL path for uploaded files Well that's why you don't do it. I have done it but I don't anymore. That's true with any server, any platform, any scripting language, I don't know why they are making this out to be a cf only issue. I have 3 hd's, #1 is the os and apps, #2 is partitioned with 99.9% of it beingbu stuff and the rest is just few folders that the uploads go into and run thru doing what needs to be done with them. #3 is web server. So cfm files an only be run out of the #3 hd. So if I upload the files to an isolated partition with min permissions how who they run that cf file? That drive isn't accessible from the web I have no ftps or any incoming connections to that drive. They could of course hack into the server itself and then move the file manually to the web server drive then go get it ;) If there's a default web accessible URL path for uploaded files, , and that directory is configured to execute CF files, an attacker can simply upload a .cfm file, and run it to do anything CF can do: CFEXECUTE, access databases, connect to outbound FTP servers, etc. You may not allow the first of those, but it's far less likely you're blocking the others. Dave Watts, CTO, Fig Leaf Software -Original Message- From: Dave l cfl...@jamwerx.com Sent: Sunday, 05 July, 2009 09:46 To: cf-talk cf-talk@houseoffusion.com Subject: Re: New CF8 vulnerability There's nothing OS-specific about the vulnerability, as far as I can see. I'm sure it more about a location that is easy to guess.. maybe the default fk one. Although them exe's are gunna have a bitch of a time running on a lt 1gb sectioned partition with no rights on my xserver. To many people probably upload to /uploads (i'm guilty) so it shouldn't be to difficult. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324234 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: ssot: Ext window management question
From the Docs on Ext.Window
(http://extjs.com/deploy/ext-3.0-rc3/docs/?class=Ext.Window), in the
'methods' section:
*load
*( |Object/String/Function config| )
: Ext.Panel
Loads this content panel immediately with content returned from an XHR
call.
*Parameters:*
* |config| : Object/String/Function
A config object containing any of the following options:
|panel.load({
url: /your-url.php/,
params: {param1: /foo/, param2: /bar/}, /// or a URL encoded
string/
callback: yourFunction,
scope: yourObject, /// optional scope *for* the callback/
discardUrl: false,
nocache: false,
text: /Loading.../,
timeout: 30,
scripts: false
});|
The only required property is url. The optional properties
nocache, text and scripts are shorthand for disableCaching,
indicatorText and loadScripts and are used to set their associated
property on this panel Updater instance.
*Returns:*
* |Ext.Panel|
this
Don L wrote:
Good input, but load() method seems for panel only, it made me think of
render and renderto...
Have you tried the load() method?
mxAjax / CFAjax docs and other useful articles:
http://www.bifrost.com.au/blog/
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324235
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
aggregate query problems
Hi I have a query that I can't solve. I have a table with these columns (all text apart from contact_id): contact_id language_group town region state country There are 4 language_groups and each town has varying numbers each language_group (inc some with zero) I have to be able to show a table (or spreadsheet) with headers as follows town| region| state| country| count of language_1|count of language_2|count of language_3|count of language_4| I use this query to get the records cfquery name=get_demographics_town_lang_group_data datasource=#Application.DSN# SELECT Count(tbl_demographics.contact_id) AS CountOfcontact_id, tbl_demographics.language_group, tbl_demographics.town, tbl_demographics.region FROM tbl_demographics GROUP BY tbl_demographics.town, tbl_demographics.region, tbl_demographics.language_group ORDER BY tbl_demographics.town, tbl_demographics.language_group /cfquery And this code: table cfoutput query=get_demographics_town_lang_group_data group=town tr td#town# /td td#region#/td cfoutput group=language_group td#language_group# :: #CountOfcontact_id#/td /cfoutput /tr /cfoutput /table This works BUT does not get each language-group count into it's own column. If there are zero records for count of language_1 then count of language_2 moves into count of language_1's column etc. I've been stuck on this for some time and am really desperate now. Any help gratefully appreciated. Hope it all makes sense Seamus ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324236 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Restricted access to non cf files using cf
I have a question that its answer may be interesting and usefull for many CF developers. Here it is. I have a site, and I have a folder where access is restricted and I have a login page asking for user name and password. As usually I chech these access data in my database and I give or give not access to the content of this folder. Nothing special until now. Let's suppose The root folder of my site isC:\MySite The restricted access folder isC:\MySite\MembersFolder In the root folder I have the login page C:\MySite\login.cfm In the restricted access folder and its subfolders I have various CF pages e.g. -- C:\MySite\MembersFolder\page1.cfm , -- C:\MySite\MembersFolder\folder2\page2.cfm etc Whenever someone logs in successfully I keep a session variable with his name, userid etc blah blah. So whenever someone tries to access a restricted access page e.g C:\MySite\MembersFolder\page1.cfm I check if there is or there is not the session variable of his access. If the session variable exists I give access, otherwise I send him to the login page. Again nothing special. Just typical proccess. My question is. All the above can restrict access to any CF page in the folder C:\MySite\MembersFolder BUT what about any other content in this folder e.g PDF, jpg, doc files etc ? Because someone not logged in can just write in his browser: http://www.MySite.com/MembersFolder/MyBook.pdf and can get the PDF file without loggin!!! Any idea how can I restrict access to any kind of content (htm, cfm, pdf, jpg, doc xls etc) using coldfusion ? (Well I know I can store these kind of files in binary fields of the database instead of storing them as files, but I don't think it's realistic. These files pdf, doc, tiff, xls can be many Mb and it's not realistic to read these huge files from the database in middle or high traffic site.) So any other idea? Thanks in advance for your response. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324237 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: aggregate query problems
I think you need an outside table that has just your 4 language_groups in it, and then LEFT OUTER JOIN to ensure you get at least one record for each language, with the COUNT()s that can be zero. SELECT tbl_langs.language_group, Count(tbl_demographics.contact_id) AS CountOfcontact_id, tbl_demographics.town, tbl_demographics.region FROM tbl_langs LEFT OUTER JOIN tbl_demographics ON tbl_langs.language_group ON tbl_demographics.language_group GROUP BY tbl_demographics.town, tbl_demographics.region, tbl_langs.language_group ORDER BY tbl_demographics.town, tbl_langs.language_group That should do it ... ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324238 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Restricted access to non cf files using cf
Store them outside of the webroot and use cfcontent to serve them to the browse when necessary. -Ryan Anastassios Hadjicrystallis wrote: I have a question that its answer may be interesting and usefull for many CF developers. Here it is. I have a site, and I have a folder where access is restricted and I have a login page asking for user name and password. As usually I chech these access data in my database and I give or give not access to the content of this folder. Nothing special until now. Let's suppose The root folder of my site isC:\MySite The restricted access folder isC:\MySite\MembersFolder In the root folder I have the login page C:\MySite\login.cfm In the restricted access folder and its subfolders I have various CF pages e.g. -- C:\MySite\MembersFolder\page1.cfm , -- C:\MySite\MembersFolder\folder2\page2.cfm etc Whenever someone logs in successfully I keep a session variable with his name, userid etc blah blah. So whenever someone tries to access a restricted access page e.g C:\MySite\MembersFolder\page1.cfm I check if there is or there is not the session variable of his access. If the session variable exists I give access, otherwise I send him to the login page. Again nothing special. Just typical proccess. My question is. All the above can restrict access to any CF page in the folder C:\MySite\MembersFolder BUT what about any other content in this folder e.g PDF, jpg, doc files etc ? Because someone not logged in can just write in his browser: http://www.MySite.com/MembersFolder/MyBook.pdf and can get the PDF file without loggin!!! Any idea how can I restrict access to any kind of content (htm, cfm, pdf, jpg, doc xls etc) using coldfusion ? (Well I know I can store these kind of files in binary fields of the database instead of storing them as files, but I don't think it's realistic. These files pdf, doc, tiff, xls can be many Mb and it's not realistic to read these huge files from the database in middle or high traffic site.) So any other idea? Thanks in advance for your response. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324239 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Place your non-CF files into a non-web folder (say, C:\SecureFiles\MySite\ or whatever) and then serve those files through a CF script. For example, perhaps the file request link looks like this: href=index.cfm?event=file.downloadid=xyz Then the file.download event checks the session; if successful, query the database to get the file name and path and then use CFCONTENT to serve the actual file back to the request: cfset variables.thisFile = application.fileroot fileQuery.thisFileName / cfheader name=content-disposition value=attachment; filename=#fileQuery.thisFileName# / cfcontent deletefile=Yes file=#variables.thisFile# type=#fileQuery.thisFileMIMEType# ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324240 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: New CF8 vulnerability
I have always installed FCK instead of using the bundled version...it allows me to make sure that i have the latest version without effecting CF. I am not a fan of bundled/integrated anything...I think Office being the exception...why would you want all of your eggs in one basket? Eric On Mon, Jul 6, 2009 at 9:13 AM, Dave l cfl...@jamwerx.com wrote: Thats the trouble with bundling things. I used to think it was nice but really it creates these types of things. Have you seen the video of the guy hacking sites with this? It's not a CF-only issue. However, CF comes bundled with FCKEditor and other scripting languages don't. If you don't allow uploads to web accessible directories, you don't have anything to worry about. However, the default install of CF 8.0.1 on Windows does allow uploads to web accessible directories. Dave Watts, CTO, Fig Leaf Software -Original Message- From: Dave l cfl...@jamwerx.com Sent: Sunday, 05 July, 2009 13:37 To: cf-talk cf-talk@houseoffusion.com Subject: Re: New CF8 vulnerability If there's a default web accessible URL path for uploaded files Well that's why you don't do it. I have done it but I don't anymore. That's true with any server, any platform, any scripting language, I don't know why they are making this out to be a cf only issue. I have 3 hd's, #1 is the os and apps, #2 is partitioned with 99.9% of it beingbu stuff and the rest is just few folders that the uploads go into and run thru doing what needs to be done with them. #3 is web server. So cfm files an only be run out of the #3 hd. So if I upload the files to an isolated partition with min permissions how who they run that cf file? That drive isn't accessible from the web I have no ftps or any incoming connections to that drive. They could of course hack into the server itself and then move the file manually to the web server drive then go get it ;) If there's a default web accessible URL path for uploaded files, , and that directory is configured to execute CF files, an attacker can simply upload a .cfm file, and run it to do anything CF can do: CFEXECUTE, access databases, connect to outbound FTP servers, etc. You may not allow the first of those, but it's far less likely you're blocking the others. Dave Watts, CTO, Fig Leaf Software -Original Message- From: Dave l cfl...@jamwerx.com Sent: Sunday, 05 July, 2009 09:46 To: cf-talk cf-talk@houseoffusion.com Subject: Re: New CF8 vulnerability There's nothing OS-specific about the vulnerability, as far as I can see. I'm sure it more about a location that is easy to guess.. maybe the default fk one. Although them exe's are gunna have a bitch of a time running on a lt 1gb sectioned partition with no rights on my xserver. To many people probably upload to /uploads (i'm guilty) so it shouldn't be to difficult. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324241 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: ssot: Ext window management question
You're aware that a window is a type of panel, right?
mxAjax / CFAjax docs and other useful articles:
http://www.bifrost.com.au/blog/
2009/7/6 Don L do...@yahoo.com:
Good input, but load() method seems for panel only, it made me think
of render and renderto...
Have you tried the load() method?
No, I didn't know that but I figured it out. The docs are helpful to some
extent.
Quick question on ext's autosuggest feature, how do you renderTo a form
element? a sample one of renderTo:document.body works while
renderTo:document.myElementID won't
nor renderTo:document.getElementByID('myElementID'). Thanks.
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324242
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Store them outside of the webroot and use cfcontent to serve them to the browse when necessary. Some people have no access to folders outside the webroot. In that case, one solution is to : 1. register all files in your database with their original name and type (pdf, doc, etc.) 2. store any non cfm file in a special directory; 3. rename anyFile.xxx to anyFile.cfm 4. store in the directory an Application.cfm file containing any measure to restrict access, like a simple CFABORT 5. provide a template for file request that will CFCONTENT it, restituing the original name and type, ie: CFQUERY DATASOURCE=#application.applicationName# NAME=getDoc SELECT fileName, localName FROM docs WHERE docId = #Id# /CFQUERY CFIF getDoc.recordcount EQ 0 CFABORT SHOWERROR=Document not found /CFIF CFSET PathDoc=GetDirectoryFromPath(expandPath(*.*)) contentDocuments\ cfheader name=Content-Disposition value=attachment; filename=#getDoc.filename# CFCONTENT TYPE=application/octet-stream FILE=#pathDoc##getDoc.localName# ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324243 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Nice solution for those in hosted environments, Claude! Simple and effective! ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324244 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: aggregate query problems
Thanks Jason, but that doesn't seem to help. I've put a copy up here http://www.working-traveller.com/g/demographicsold.cfm to show you what I mean. Any more clues? and thanks again Seamus ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324245 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: ssot: Ext window management question
I just use the applyTo property when setting up the ComboBox.
mxAjax / CFAjax docs and other useful articles:
http://www.bifrost.com.au/blog/
2009/7/6 Don L do...@yahoo.com:
You're aware that a window is a type of panel, right?
mxAjax / CFAjax docs and other useful articles:
http://www.bifrost.com.au/blog/
2009/7/6 Don L do...@yahoo.com:
Good input, but load() method seems for panel only, it made me think
of render and renderto...
Have you tried the load() method?
No, I didn't know that but I figured it out. The docs are helpful to some
extent.
Quick question on ext's autosuggest feature, how do you renderTo a form
element? a sample one of renderTo:document.body works while
renderTo:document.myElementID won't
nor renderTo:document.getElementByID('myElementID'). Thanks.
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324246
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Well, all these solutions fit in case that we want to restrict access to pdf or doc etc files which after login we serve them as a page. What could be done when the files, we want to restrict access to, are PART of a web (cfm) page ? I mean, in the restricted folder after login I display cfm pages which include jpg pictutes. I mean my cfm pages include simple img src=... tags. Placing the jpg files outside the webroot ok none not logged in can http them, but then I can't use them in img src=... either. I think cfcontent can't help in this case. Am I wrong? If I am not any other idea without cfcontent ? ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324247 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
any other idea without cfcontent ? Nope. Any solution to give access or not must be based on some CF code to abort the request if the user has no access, or send the document if he has. And the proper tag for CF to send the document is CFCONTENT. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324248 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Anastassios Hadjicrystallis wrote: Am I wrong? If I am not any other idea without cfcontent ? cfcontent can server up any type of web content including image files. You would just put the name of the cfm template that contains the cfontent tag into the img href=... property. Then the cfcontent... tag would server up the image file from the secure location with the proper image mine type. There is some overhead to this, but it does work. But as I mentioned on the Adobe forum. If you are so concerned about all HTTP traffic, securing it with the HTTP web server (i.e. Apache or IIS) may be the better solution rather then the Application server (i.e. ColdFusion). Assuming you have control of your web server so that you can make the necessary configuration. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324249 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: ssot: Ext window management question
I just use the applyTo property when setting up the ComboBox. mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ Beautiful, thank you. One more question, what are required attributes for a URL for data store? some scattered sample as a question seems very messy. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324250 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: ssot: Ext window management question
http://www.extjs.com/deploy/dev/docs/?class=Ext.data.Store mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ 2009/7/6 Don L do...@yahoo.com: I just use the applyTo property when setting up the ComboBox. Beautiful, thank you. One more question, what are required attributes for a URL for data store? some scattered sample as a question seems very messy ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324251 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: aggregate query problems
Seamus, Can you post your updated query? ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324252 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
OT DNS cname vs dname question
Not a ColdFusion question, but there are just so many smart people here. We have an old server named jolie [jolie.cdpr.ca.gov] . This server is being replaced by our new apps server [apps.cdpr.ca.gov]. What do I want to tell our DNS host to do with the old jolie.cdpr.ca.gov entry to have it point to the news apps domain? Is it better to use a cname or a dname or something completely different? jolie.cdpr.ca.gov CNAME apps.cdpr.ca.gov OR jolie.cdpr.ca.gov DNAME apps.cdpr.ca.gov OR something completely different TIA Ian ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324253 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Restricted access to non cf files using cf
cfcontent can server up any type of web content including image
files. You would just put the name of the cfm template that contains
the cfontent tag into the img href=... property. Then the
cfcontent... tag would server up the image file from the secure
location with the proper image mine type.
Thank you all for your replies.
Well I can't do anything in web server level because it's a hosted site.
So I have to solve the problem in CF code level.
About Ian's idea on using img href=... I did the simple test below.
I did simple cfm page in web site root folder e.g. C:\MySiteRoot\test.cfm.
In Test.cfm among text etc I put img href=image.cfm
In the same folder I made an image.cfm page and there I wrote only the
cfcontent tag below
cfcontent type = image/jpeg file = #ExpandPath('pic.jpg')# deleteFile =
No reset=no
In the same folder I placed the photo pic.jpg.
So totally I have
C:\MySiteRoot\test.cfm
C:\MySiteRoot\image.cfm
C:\MySiteRoot\pic.jpg
When I call the page http://www.MySite.com/test.cfm I see the test page but not
including the pic.jpg.
I think Ian's idea is correct because I saw something similar in Adobe's site
in the page below
http://kb2.adobe.com/cps/405/kb405330.html
I also did exactly what Adobe says but I don't see the image.
Is something missing in test.cfm or image.cfm ?
Thank you again for your help.
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324254
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Your example was not quite the same as the Adobe example. They had reset=yes in their cfcontent tag. Try that with yours. It is especially important with binary data like an image file, to not have any extraneous white space that may be hanging around in the cfm file. The reset=yes parameter is an easy way to throw any such white space away. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324255 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: OT DNS cname vs dname question
DNAME is for aliasing an entire domain, not a single resource, so you should use CNAME. You should also see if there is an MX record for your old app server. If so it will need to be updated as well. Judah On Mon, Jul 6, 2009 at 10:15 AM, Ian Skinnerh...@ilsweb.com wrote: Not a ColdFusion question, but there are just so many smart people here. We have an old server named jolie [jolie.cdpr.ca.gov] . This server is being replaced by our new apps server [apps.cdpr.ca.gov]. What do I want to tell our DNS host to do with the old jolie.cdpr.ca.gov entry to have it point to the news apps domain? Is it better to use a cname or a dname or something completely different? jolie.cdpr.ca.gov CNAME apps.cdpr.ca.gov OR jolie.cdpr.ca.gov DNAME apps.cdpr.ca.gov OR something completely different TIA Ian ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324256 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Your example was not quite the same as the Adobe example. They had reset=yes in their cfcontent tag. Try that with yours. It is especially important with binary data like an image file, to not have any extraneous white space that may be hanging around in the cfm file. The reset=yes parameter is an easy way to throw any such white space away. Ian, I used reset=yes but no luck. When I run test.cfm and view source I see there the img tag img href=image.cfm. It looks like it does not run the image.cfm page at all. It treats it as a simple HTML tag. Why it should run image.cfm? What force it to run this page image.cfm in a simple HTML tag? I didn't mention that I use CF 7 if it means something. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324257 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Anastassios Hadjicrystallis wrote: Ian, I used reset=yes but no luck. When I run test.cfm and view source I see there the img tag img href=image.cfm. It looks like it does not run the image.cfm page at all. It treats it as a simple HTML tag. Why it should run image.cfm? What force it to run this page image.cfm in a simple HTML tag? I didn't mention that I use CF 7 if it means something. That is what you should see when you look at the source. It works because that is the way the HTTP standard says it should work. When you write a common image tag like this img src=myPic.gif. The browser sees that and it makes a request to the server for myPic.gif. When you write a version with img src=image.cfm. The browser see that and it makes a request to the server for image.cfm. If both of those requests result in the same response, an image. Then the browser shows that image. Put http://www.yoursite.org/image.cfm into your browser and make sure this file is not throwing any error. If the image.cfm file throws an error, there is no place for the browser to show that error, so it gets ignored. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324258 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: OT DNS cname vs dname question
Judah McAuley wrote: DNAME is for aliasing an entire domain, not a single resource, so you should use CNAME. You should also see if there is an MX record for your old app server. If so it will need to be updated as well. Judah Is that not what I am attempting to do, aliasing the entire 'jolie' domain? What is the difference between a single resource and an entire domain? We used to have a server accessed under the domain 'joile.cdpr.ca.gov'. We now have a new server accessed under the domain 'apps.cdpr.ca.gov'. We want any and all traffic to the old domain to end up on the new. Is that a 'single resource' or an 'entire domain' and why? TIA Ian ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324259 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
How to Reset MS SQL Server '05 Connections
I'm working with our DBA on a permissions issue. We wonder if he makes a change... like putting the service account user into a role... will it be reflected on the next CF page attempt. My timeout appears to be 20 min in CF Admin for that DSN. Is there a way to reset the connections to make sure any changes he's made are reflected? I remember something years ago about running a query against a table that didn't exist, but that was so long ago that I wonder if that still works. Thanks folks. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324260 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: OT DNS cname vs dname question
The servers jolie and apps are hosts, not domains. If the server is registered in DNS with an A or CNAME record, it's not a domain. Dave Watts, CTO, Fig Leaf Software -Original Message- From: Ian Skinner h...@ilsweb.com Sent: Monday, 06 July, 2009 14:22 To: cf-talk cf-talk@houseoffusion.com Subject: Re: OT DNS cname vs dname question Judah McAuley wrote: DNAME is for aliasing an entire domain, not a single resource, so you should use CNAME. You should also see if there is an MX record for your old app server. If so it will need to be updated as well. Judah Is that not what I am attempting to do, aliasing the entire 'jolie' domain? What is the difference between a single resource and an entire domain? We used to have a server accessed under the domain 'joile.cdpr.ca.gov'. We now have a new server accessed under the domain 'apps.cdpr.ca.gov'. We want any and all traffic to the old domain to end up on the new. Is that a 'single resource' or an 'entire domain' and why? TIA Ian ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324261 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: OT DNS cname vs dname question
Dave Watts wrote: The servers jolie and apps are hosts, not domains. If the server is registered in DNS with an A or CNAME record, it's not a domain. Dave Watts, CTO, Fig Leaf Software That clarifies some of it. I really need to get my head around the entire DNS way fores and whatnots someday. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324262 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: New CF8 vulnerability
On Fri, Jul 3, 2009 at 7:32 PM, Eric Roberts ow...@threeravensconsulting.com wrote: I know the vulnerability was in older versions of FCKEditor...if one were to install and use the current version, does it still have the vulnerability or has that been fixed? I just got an emergency gig to fix a site that was hacked because of this and we need to know if it is safe to do this or just keep FCKEditor disabled inthe meantime. I would keep FCKeditor file upload manager disabled for now: http://www.petefreitag.com/item/705.cfm -- Pete Freitag http://foundeo.com/security/ - ColdFusion Consulting Products http://petefreitag.com/ - My Blog ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324263 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
DSN is Saving CF Query Ops to Wrong Database?
I'm dealing with some real oddness today and I was wondering if anybody else has seen something similar. We have a development environment and a test environment. Each environment has its own database on the same instance of SQL Server (9.04.3042). So the database that dev hits is named DEV and test runs their code against a database named TEST. There are also separate ColdFusion server instances, again one for dev and another for test. The DSN used for queries used throughout the application are the same, MYDB but on the dev instance the application DSN is pointed to the DEV table. Likewise, the test instance has a DSN of MYDB but its pointed at the Test table. Today a number of tests on the test instance were failing. Examining the test table showed that no actions had taken place. Upon examination, it appears that the Test instance had been writing and reading data to the Dev database, despite the settings in the ColdFusion administrator. Subsequent server restarts did not result in different behavior. Has anyone seen anything like this? Is it possible for SQL Server to cache some user information? How can I find more information about what might be going on? Matthew Reinbold Creative Principal, Vox Pop Design, http://voxpopdesign.com Manager, Salt Lake ColdFusion User's Group, http://slcfug.org ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324264 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: New CF8 vulnerability
Thats the trouble with bundling things. I used to think it was nice but really it creates these types of things. Well, CF contains TONS of bundled items; any of these items could conceivably have some unknown vulnerability. Database drivers, COM and .NET interfaces, all sorts of third-party libraries, etc, etc. Have you seen the video of the guy hacking sites with this? No. But it's a pretty easy thing, once you know how the vulnerability works, I think. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324265 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Any idea how can I restrict access to any kind of content (htm, cfm, pdf, jpg, doc xls etc) using coldfusion ? As many have mentioned, you can store them in a directory that isn't web-accessible, and serve them with CFCONTENT. Another alternative is to store them as mentioned above, but use CF to create a symbolic link that is web-accessible. You can do this using CFEXECUTE. On Windows, you can only create symlinks to directories, but on Unix you can create symlinks for any files. The advantage of this approach over CFCONTENT is that it requires less overhead at runtime. The disadvantage is that you're responsible for cleaning up afterwards - you'd probably want the symlink to last for a few minutes at least, so you'd probably want a scheduled task to clean them up afterwards. The third and final alternative that I can think of is the one that Claude mentioned. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324266 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Restricted access to non cf files using cf
Placing the jpg files outside the webroot ok none not logged in can http them, but then I can't use them in img src=... either. I think cfcontent can't help in this case. Sure it can. CFCONTENT can be used to serve any sort of file you want. All an IMG tag does is tell the browser to make another HTTP request. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324267 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: DSN is Saving CF Query Ops to Wrong Database?
Maybe. Make sure each of your applications has its own namespace by using this.name in Application.cfc, otherwise they'll share ( and overwrite eachother ) anything you put into the application scope across the entire JVM if I remember correctly. In this case the pointer to a datasource or the reference if the datasource name is identical. -- Sent from my Palm Pre Matthew Reinbold wrote: I'm dealing with some real oddness today and I was wondering if anybody else has seen something similar. We have a development environment and a test environment. Each environment has its own database on the same instance of SQL Server (9.04.3042). So the database that dev hits is named DEV and test runs their code against a database named TEST. There are also separate ColdFusion server instances, again one for dev and another for test. The DSN used for queries used throughout the application are the same, MYDB but on the dev instance the application DSN is pointed to the DEV table. Likewise, the test instance has a DSN of MYDB but its pointed at the Test table. Today a number of tests on the test instance were failing. Examining the test table showed that no actions had taken place. Upon examination, it appears that the Test instance had been writing and reading data to the Dev database, despite the settings in the ColdFusion administrator. Subsequent server restarts did not result in different behavior. Has anyone seen anything like this? Is it possible for SQL Server to cache some user information? How can I find more information about what might be going on? Matthew Reinbold Creative Principal, Vox Pop Design, http://voxpopdesign.com Manager, Salt Lake ColdFusion User's Group, http://slcfug.org ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324268 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: OT DNS cname vs dname question
There are some potential complications when you start getting into delegation of subdomains, but that is a pretty rare setup. Generally speaking you are going be dealing with two levels of DNS. There is the domain itself which you would go to a registrar for, like foo.com or foo.co.uk That registrar tells the DNS root servers (the people that act as the directory for .com, .org, .co.uk, etc) who is authoritative for your domain foo.com, where the DNS server for that domain is. Then you manage your dns zone file yourself on your DNS server. That is where the A records, CNAME, MX records etc go. Then what happens when a web browser wants a page from a.foo.com is that the client computer asks its local DNS server who has the address for that, the local DNS server figures out who is authoritative (hosts the dns zone file) for foo.com and then it goes and asks the dns server for foo.com what the address of a.foo.com is. The DNS server that hosts the zone file will respond with either an A record (which lists an actual ip address) or a CNAME which says, what you really want is this A record over here. So except for when you are registering a domain name, you are pretty much dealing with a zone file that has individual records, almost all of which are either A, CNAME, MX (for mail servers) or PTR (for reverse lookup of a host from an IP address). Hope that helps, Judah On Mon, Jul 6, 2009 at 12:35 PM, Ian Skinnerh...@ilsweb.com wrote: Dave Watts wrote: The servers jolie and apps are hosts, not domains. If the server is registered in DNS with an A or CNAME record, it's not a domain. Dave Watts, CTO, Fig Leaf Software That clarifies some of it. I really need to get my head around the entire DNS way fores and whatnots someday ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324269 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: DSN is Saving CF Query Ops to Wrong Database?
Maybe. Make sure each of your applications has its own namespace by using this.name in Application.cfc, otherwise they'll share ( and overwrite eachother ) anything you put into the application scope Interesting. Looking through the inherited code I'm seeing that in the application.cfc OnApplicationStart method the DSN is set like: cfset application.ds = mydb / Would that be any different than using: cfset this.ds = mydb / ? Also, to clarify, the separate Coldfusion servers for Dev and Test are separate instances upon the same JRun, so some kind of variable scope leakage might make sense. -Matthew ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324270 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: aggregate query problems
Hi Jason updated query here (I'm using access at the moment) SELECT tbl_member_language_group.language_group_name, Count(*) AS CountOfcontact_id, tbl_demographics.town, tbl_demographics.region FROM tbl_member_language_group LEFT JOIN tbl_demographics ON tbl_member_language_group.language_group_name = tbl_demographics.language_group GROUP BY tbl_demographics.town, tbl_demographics.region, tbl_member_language_group.language_group_name ORDER BY tbl_demographics.town, tbl_member_language_group.language_group_name ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324271 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: DSN is Saving CF Query Ops to Wrong Database?
cfset application.ds = mydb / Would that be any different than using: cfset this.ds = mydb / Yes, those are two different things. The first creates a variable in the Application scope. The second creates a property of the application.cfc instance. Also, to clarify, the separate Coldfusion servers for Dev and Test are separate instances upon the same JRun, so some kind of variable scope leakage might make sense. What exactly do you mean by separate instances upon the same JRun? If you mean that you have separate JRun instances, they should not share memory at all - each should be represented by a separate Windows service (assuming you're running Windows). If, on the other hand, you've deployed multiple CF WARs to the same JRun server - and I'm not sure that's even possible - they would share memory. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324272 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: DSN is Saving CF Query Ops to Wrong Database?
So do your Application.cfc files have a cfset this.name = etc / in their pseudo constructors? On Mon, Jul 6, 2009 at 3:43 PM, Matthew Reinbold matthew.reinb...@voxpopdesign.com wrote: Maybe. Make sure each of your applications has its own namespace by using this.name in Application.cfc, otherwise they'll share ( and overwrite eachother ) anything you put into the application scope Interesting. Looking through the inherited code I'm seeing that in the application.cfc OnApplicationStart method the DSN is set like: cfset application.ds = mydb / Would that be any different than using: cfset this.ds = mydb / ? Also, to clarify, the separate Coldfusion servers for Dev and Test are separate instances upon the same JRun, so some kind of variable scope leakage might make sense. -Matthew ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324273 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: ssot: Ext window management question
Thanks.
ok, gettting closer... the following code still missed some required attributes
or value not set correctly for some existing ones, and I don't know which one...
var autos = new Ext.form.ComboBox({
xtype: 'combo',
id: 'type',
store : new Ext.data.Store({
proxy:new Ext.data.ScriptTagProxy({
url:'ext_qry.cfm'
}),
reader:new Ext.data.JsonReader({
root:'data',
id:'project'
})
}),
mode : 'remote',
displayField: 'display', // don't understand what exactly the doc says about it
editable: true,
applyTo:'project'
Output from firebug for the target is:
And I don't understand why it set autocomplete to off, what triggered that?
div id=ext-gen6 class=x-form-field-wrap x-trigger-wrap-focus style=width:
319px;
input id=project class= x-form-text x-form-field x-form-focus type=text
onkeyup=document.getElementById('tagline').style.display='block' size=50
autocomplete=off/
img id=ext-gen7 class=x-form-trigger x-form-arrow-trigger
src=http://extjs.com/s.gif/
/div
http://www.extjs.com/deploy/dev/docs/?class=Ext.data.Store
mxAjax / CFAjax docs and other useful articles:
http://www.bifrost.com.au/blog/
2009/7/6 Don L do...@yahoo.com:
I just use the applyTo property when setting up the ComboBox.
Beautiful, thank you. One more question, what are required
attributes for a URL for data store? some scattered sample as a
question seems very
messy
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324274
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: aggregate query problems
OK, I wonder if it's the * in COUNT(*) ... try this: SELECT tbl_member_language_group.language_group_name, COUNT(tbl_demographics.contact_id) AS CountOfcontact_id, tbl_demographics.town, tbl_demographics.region FROM tbl_member_language_group LEFT JOIN tbl_demographics ON tbl_member_language_group.language_group_name = tbl_demographics.language_group GROUP BY tbl_demographics.town, tbl_demographics.region, tbl_member_language_group.language_group_name ORDER BY tbl_demographics.town, tbl_member_language_group.language_group_name ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324275 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: ssot: Ext window management question
Don, Adobe's JSON implementation is a little non-standard (and better, IMHO). You'll need a custom data reader when feeding your data store with a cf query return. The CFQueryReader is available at http://cfqueryreader.riaforge.org, with some more information available on this post: http://blog.cutterscrossing.com/index.cfm/2009/5/13/CFQueryReader-v11 -- Steve 'Cutter' Blades Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://blog.cutterscrossing.com The best way to predict the future is to help create it ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324276 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: aggregate query problems
Hi, thanks - I did try both ways - neither way worked. Seamus OK, I wonder if it's the * in COUNT(*) ... try this: ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:324277 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
