Re: is there a safe way to save an object/cfc loaded into the app scope into the session scope?

2010-02-19 Thread crippe crippe

Ah right, ok. So a follow up question:

If I load CFC's into my application scope using create object, should they only 
contain methods and not properties, as any properties altered by one user would 
affect all other users accessing the cfc?

Additionally, once you've instantiated a copy into the application scope, is 
their any way to instantiate a new copy from that copy, as CreateObject 
function seems to want the name of the CFC as oppossed to the actual cfc and 
what is loaded into application scope is the entire cfc object (without any 
kind of name string)?

Sorry for all the n00b questions but I am still trying to wrap my head around 
OOP. I used to just access everything via application[property_name] now it 
seems I am creating new copies of it for every user request. Seems like a lot 
of extra memory being hogged, but encapsulation is a good thing, right???


~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330934
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: is there a safe way to save an object/cfc loaded into the app scope into the session scope?

2010-02-19 Thread James Holmes

You are right, any properties you alter in an application scoped object will
be set for all users. If you need a copy for every user, the application
scope is the wrong place. The session scope is a per-user scope.

Try the Duplicate() function to get a copy from an instantiated object.
YMMV.

mxAjax / CFAjax docs and other useful articles:
http://www.bifrost.com.au/blog/


On 19 February 2010 16:25, crippe crippe crippe...@hotmail.com wrote:


 Ah right, ok. So a follow up question:

 If I load CFC's into my application scope using create object, should they
 only contain methods and not properties, as any properties altered by one
 user would affect all other users accessing the cfc?

 Additionally, once you've instantiated a copy into the application scope,
 is their any way to instantiate a new copy from that copy, as CreateObject
 function seems to want the name of the CFC as oppossed to the actual cfc and
 what is loaded into application scope is the entire cfc object (without any
 kind of name string)?




~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330935
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: is there a safe way to save an object/cfc loaded into the app scope into the session scope?

2010-02-19 Thread Dominic Watson

 If I load CFC's into my application scope using create object, should they
only contain methods and not properties, as any properties altered by one
user would affect all
other users accessing the cfc?

Not neccessarily, no. There are plenty of objects that might belong in the
application scope that have properties as well as methods. For example,
there is a last.fm API that requires an application key and secret key to
access it. If you were to create a CFC to wrap that API,
'lastFmApiService.cfc' for example, you would want to pass your application
key and secret credentials when you create an instance of the object. The
app and secret keys would be properties and these would remain constant
throughout the life of the application.

These kind of objects are known as 'Singletons' (its a slight misuse of the
term, but close enough). A Singleton would be a cfc that has a single
instance per application, i.e. sit in the application scope. A non-singleton
would have disposable instances that are created ad-hoc, perhaps per request
or per session.

Identifying your singletons and non-singletons may be a useful excersize and
once done, would be a good primer to start looking at ColdSpring (for
managing your singletons). Using onApplicationStart however, is a sound way
to go.

HTH

Dominic

On 19 February 2010 08:25, crippe crippe crippe...@hotmail.com wrote:


 Ah right, ok. So a follow up question:

 If I load CFC's into my application scope using create object, should they
 only contain methods and not properties, as any properties altered by one
 user would affect all other users accessing the cfc?

 Additionally, once you've instantiated a copy into the application scope,
 is their any way to instantiate a new copy from that copy, as CreateObject
 function seems to want the name of the CFC as oppossed to the actual cfc and
 what is loaded into application scope is the entire cfc object (without any
 kind of name string)?

 Sorry for all the n00b questions but I am still trying to wrap my head
 around OOP. I used to just access everything via application[property_name]
 now it seems I am creating new copies of it for every user request. Seems
 like a lot of extra memory being hogged, but encapsulation is a good
 thing, right???


 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330936
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Where to encrypt - cf or db or both?

2010-02-19 Thread Cameron Childress

On Thu, Feb 18, 2010 at 7:26 PM, Eric Nicholas Sweeney
n...@bigfatdesigns.com wrote:
 To me, recommending a service is like answering the question How do you
 hammer a nail? with the answer being Hire a contractor.

It's more like saying I plan on building an entire house, and then I
plan to store a million dollars inside that house. Now, what I need to
know to get started is - 'How do I hammer a nail?'

-Cameron

...

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330937
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Where to encrypt - cf or db or both?

2010-02-19 Thread Casey Dougall

On Thu, Feb 18, 2010 at 5:44 PM, Matthew Smith chedders...@gmail.comwrote:


 I want to encrypt billing information an ecommerce app.  I know the
 argument
 against storing it, and we are considering not storing it.  But I just want
 to explore options.

 So I can encrypt in cf with aes, or in sql server with a certificate and
 triple des symmetric key, or both cf AND sql server.

 What is the best choice?

 What is required for PCI compliance?

 Also, if I encrypt in sql server with a certificate and key, if I back up
 the live server and restore locally, will the data be accessible?  Are the
 certificates and keys movable?



The ONLY reason you would need to store the credit card, is if you are going
to move to a new merchant / payment gateway in the future and you run a
subscription service requiring members to make regularly scheduled payments,
and even then The main issue with storing the credit card data is, you
can't store the CAV2 / CVC2 / CVV2 / CID Codes...

If you want to thwart fraudulent transactions, you are most likely going to
validate against the card holders address and the CVV2 code.

What else would you need to do with the card? Without the CVV2 code, you
could have issues creating additional transactions against the card unless
you tell your gateway not to require it BUT that's an all or nothing setting
at the gateway level so if you say no, all transactions will go through.

This is why I love Authorize.Net's CIM processing.
http://www.authorize.net/solutions/merchantsolutions/merchantservices/cim/

Each customer is setup at authorize.net with a profile and that includes
their payment information. In the future if we need to charge the card, we
just send a transaction against that customers payment profile at
authorize.net

I don't need to store the credit card and the website is in PCI compliance
off the get go. Well of course this includes your standard ssl and all that
stuff cfqueryparams and things to keep your application safe as a whole.


~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330938
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


more debugging info needed

2010-02-19 Thread Don

I am utilising XML parse ( when CF encounters a bum XML file it throws CF error 
). But I've found the information returned is very limited. For example - 'The 
entity name must immediately follow the '' in the entity reference.' - 
Obviously it would be nice to have more specific information such as line 
number that caused the error.

exploring the Factory debugging service, I am trying to retrieve more 
information ( than standard Coldfusion Debugger ) whilst parsing an XML using 
XMLParse. 

Any idea which direction I should be going in? 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330939
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


more debugging info needed

2010-02-19 Thread Don

I am utilising XML parse ( when CF encounters a bum XML file it throws CF error 
). But I've found the information returned is very limited. For example - 'The 
entity name must immediately follow the '' in the entity reference.' - 
Obviously it would be nice to have more specific information such as line 
number that caused the error.

exploring the Factory debugging service, I am trying to retrieve more 
information ( than standard Coldfusion Debugger ) whilst parsing an XML using 
XMLParse. 

Any idea which direction I should be going in? 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330940
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: more debugging info needed

2010-02-19 Thread Gerald Guido

You probably have a stray  in the xml. The XmlFormat() function should
clean that up.
Like so:
#XmlFormat(YourXMLString)#



On Fri, Feb 19, 2010 at 11:48 AM, Don danfar...@hotmail.com wrote:


 I am utilising XML parse ( when CF encounters a bum XML file it throws CF
 error ). But I've found the information returned is very limited. For
 example - 'The entity name must immediately follow the '' in the entity
 reference.' - Obviously it would be nice to have more specific information
 such as line number that caused the error.

 exploring the Factory debugging service, I am trying to retrieve more
 information ( than standard Coldfusion Debugger ) whilst parsing an XML
 using XMLParse.

 Any idea which direction I should be going in?

 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330941
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: more debugging info needed

2010-02-19 Thread Gerald Guido

I don't know if that was the answer you were looking for. When the debugging
info does not give me useful information I generally when trying to tease
out offending items I used divide and conquer method. Take 1/2 of the of the
offending code/data/string etc. in iterations until you isolate the
offending item.

HTH
G!

On Fri, Feb 19, 2010 at 12:16 PM, Gerald Guido gerald.gu...@gmail.comwrote:

 You probably have a stray  in the xml. The XmlFormat() function should
 clean that up.
 Like so:
 #XmlFormat(YourXMLString)#



 On Fri, Feb 19, 2010 at 11:48 AM, Don danfar...@hotmail.com wrote:


 I am utilising XML parse ( when CF encounters a bum XML file it throws CF
 error ). But I've found the information returned is very limited. For
 example - 'The entity name must immediately follow the '' in the entity
 reference.' - Obviously it would be nice to have more specific information
 such as line number that caused the error.

 exploring the Factory debugging service, I am trying to retrieve more
 information ( than standard Coldfusion Debugger ) whilst parsing an XML
 using XMLParse.

 Any idea which direction I should be going in?

 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330942
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: more debugging info needed

2010-02-19 Thread Bobby

You could always save an xml file and open it in IE... one of the few things
it is good for.

-Original Message-
From: Gerald Guido [mailto:gerald.gu...@gmail.com] 
Sent: Friday, February 19, 2010 12:32 PM
To: cf-talk
Subject: Re: more debugging info needed


I don't know if that was the answer you were looking for. When the debugging
info does not give me useful information I generally when trying to tease
out offending items I used divide and conquer method. Take 1/2 of the of the
offending code/data/string etc. in iterations until you isolate the
offending item.

HTH
G!

On Fri, Feb 19, 2010 at 12:16 PM, Gerald Guido
gerald.gu...@gmail.comwrote:

 You probably have a stray  in the xml. The XmlFormat() function should
 clean that up.
 Like so:
 #XmlFormat(YourXMLString)#



 On Fri, Feb 19, 2010 at 11:48 AM, Don danfar...@hotmail.com wrote:


 I am utilising XML parse ( when CF encounters a bum XML file it throws CF
 error ). But I've found the information returned is very limited. For
 example - 'The entity name must immediately follow the '' in the entity
 reference.' - Obviously it would be nice to have more specific
information
 such as line number that caused the error.

 exploring the Factory debugging service, I am trying to retrieve more
 information ( than standard Coldfusion Debugger ) whilst parsing an XML
 using XMLParse.

 Any idea which direction I should be going in?

 



~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330943
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Where to encrypt - cf or db or both?

2010-02-19 Thread Judah McAuley

On Thu, Feb 18, 2010 at 9:58 PM, Eric Nicholas Sweeney
n...@bigfatdesigns.com wrote:

 Someone mentions CC's or SSN's and everyone freaks out and tells you to call
 their lawyer. Well - ok - that's all fine and dandy - point taken - let's
 move on - that kind of talk doesn't really address the honest question of  -
 - How could you Actually do it responsibly?

I gave you an answer to this that was quite detailed. And it is still
a stupid idea.


 And Maureen - calling my clients idiots is unfair. Only I get to call them
 that.

No, actually, all of us are calling your clients idiots because it is
obviously true. This isn't a grey area. There are a handful of things
that have been pretty well sorted out in web development and that are
simple yes/no questions at this point.

How should I store passwords in plain text: you don't.
How should I store credit card numbers: you don't unless you are going
to run your own CC Gateway company the size of Authorize.net
How should I store information covered by HIPAA in plain text: just
shoot yourself now and save yourself the pain

Simply put, no one is going to spend the time to help you try and get
around PCI Compliance, HIPAA or Sarbane-Oxley. It is just a dumb, dumb
idea and I'm sorry I event took the time I did to explain how you
might go about doing it.

Juda

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330944
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: is there a safe way to save an object/cfc loaded into the app scope into the session scope?

2010-02-19 Thread Kevan Stannard

Take a look at this to give you some ideas on working with application and
session data:

http://learn.objectorientedcoldfusion.org/wiki/Accessing_a_Users_Session_Data

http://learn.objectorientedcoldfusion.org/wiki/Accessing_a_Users_Session_Data
Kevan


On 19 February 2010 17:22, crippe crippe crippe...@hotmail.com wrote:


 I am building an application that loads all my cfc objects into the
 application scope  in the onApplicationStart function like so:
 cfset Application.components[variables.thisComponentVarName] =
 CreateObject(component,variables.thisComponentRelativeLoc) /

 (notice i am not calling the init method, but let me know if I should. The
 init method simply returns this cfreturn this /)

 One of the components that gets loaded is the sessionHandler, an object
 that deals with getting/setting session vars. I load it into the session
 scope like this:
 cfset session.sessionHandler =
 Application.components.controller_sessionHandler.init() /
 My expectation in doing that is that I would get a new instance of the
 sessionHandler object loaded into the session, however, it seems that CF
 continues to simply point to the shared application scoped object b/c all
 sessions seem to be sharing the same set of vars. If I alter one in one
 session I can see the change in a different browser session.

 Can anyone explain why this is happening and if I need to change the way I
 am loading the objects into App memory or instantiating them. I am worried
 that if this is happening in the session scope it is also happening with
 other cfc's in the application scope, such as when I call their init
 functions within a request - is it possible that it will alter the data for
 other requests if they are accessing the cfc at the same time?

 Worried, please help!

 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330945
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Where to encrypt - cf or db or both?

2010-02-19 Thread Eric Nicholas Sweeney

Actually Juda - I was very appreciative of your time and have been examining
and researching some of the methods you discuss. I'm sorry you feel
otherwise. Your was the first answer that actually got into some of the nuts
and bolts... That is why I specifically asked about how the public/private
key system works. I was hoping for more insight into that. (Your comments
actually helped me find a great post on this here:
http://www.experts-exchange.com/Database/PostgreSQL/Q_21934798.html) 

Either way - I'm also sorry I seem to be misrepresenting myself and my ideas
here. 

I'm not trying to get around HIPAA, PCI or Sarbane-Oxley - or anything else.
I am trying to explore how I may use their standards to develop something to
fit within their guidelines. I was wondering what it would actually take to
do that. Preferably without a 3rd party... 

I thought perhaps this group may have some insight or instruction as to how
to approach it. (How to approach the pitfalls, what hardware would need to
be in place, etc.) 

I did not expect It's too hard Too complicated cost prohibitive legal
nightmare to be the canned answer - from everyone. That seems so short
sighted. Defeatist. Unimaginative. But, I guess I am just too optimistic.  I
was hoping to find some creative thinking and practical applications to a
common question.

So - sorry I seem to have pissed everyone off with my stupid question and
idiot clients. Heaven forbid someone ever actually ask a tough question.

However - you should never resort to name calling just to illustrate your
point. That's just plain disrespectful and I know the group is better than
that.

Again - Sorry I asked.



~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330946
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Mac II or ColdSpring

2010-02-19 Thread denstar

If you're going to be doing a lot of report type stuff, I'd recommend
looking at JasperServer.  It's the bee's knees.  Exports in PDF,
Excel, RTF, blah, blah, blah.

You can run the reports from ColdFusion too, either using the
JasperServer webservice or just running the reports by hand using a
custom tag.

:den

-- 
Humanity may endure the loss of everything; all its possessions may be
turned away without infringing its true dignity - all but the
possibility of improvement.
Johann Gottlieb Fichte

On Thu, Feb 18, 2010 at 9:48 AM, sandeep saini wrote:

 Guys,

 We are creating a new website and i have to lay down the architecture for 
 that. Its basically a reporting tool which will fetch data from DB and 
 display. The data can be few records to Thousands of records depending on 
 search criteria. we have to create about 15 reports. The client wants a 
 strong archetecture.

 So which one of these would be a better choice. More basic requirements are-
 1. Once the data is fetched, i would like to reuse that instead of going to 
 DB again and again.
 2. AJAX capability.
 3. Exporting data to PDF, EXCEL.
 4. Creating Mailing Lists/Labels and Sending emails thru the application
 5. Use stored procedures
 6. Easy to scale in case client wants new repots to be created.

 Experienced users, Your urgent reply is highly appreciated with a reason. I 
 need to make a decision very soon. also which one is simpler to implement of 
 these two as we also dont have much time just to create the architecture?

 Thanks



 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330947
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: more debugging info needed

2010-02-19 Thread denstar

Any decent XML editor will tell you where the error is.

There's a couple kick'n ones for Eclipse that let you run XPath
expressions against the live file, and highlights what would be
selected, etc.. (besides the simple parsing).

I think one is done by the dude who does QuickREx, and the other is
maybe part of WTP now?

:den

-- 
To those who do not love God, all things must work together
immediately for pain and torment, until, by means of the tribulation,
they are led to salvation at last.
Johann Gottlieb Fichte

On Fri, Feb 19, 2010 at 10:54 AM, Bobby wrote:

 You could always save an xml file and open it in IE... one of the few things
 it is good for.

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330948
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Where to encrypt - cf or db or both?

2010-02-19 Thread Dave Watts

 I'm not trying to get around HIPAA, PCI or Sarbane-Oxley - or anything else.
 I am trying to explore how I may use their standards to develop something to
 fit within their guidelines. I was wondering what it would actually take to
 do that. Preferably without a 3rd party...

 I thought perhaps this group may have some insight or instruction as to how
 to approach it. (How to approach the pitfalls, what hardware would need to
 be in place, etc.)

 I did not expect It's too hard Too complicated cost prohibitive legal
 nightmare to be the canned answer - from everyone. That seems so short
 sighted. Defeatist. Unimaginative. But, I guess I am just too optimistic.  I
 was hoping to find some creative thinking and practical applications to a
 common question.

If everyone gives you the same answer to your question, you should
probably take that as a signal of some sort.

Again, though, the primary issues with meeting standards like PCI-DSS
aren't technical ones. That is, it's not a matter of choosing one
algorithm over another. It's about policies, procedures, standards,
threat profiles, etc. It's not a matter of being defeatist or
unimaginative; if someone came to me and said I want to start a
service like Authorize.net and I have a big pile of money I could
probably figure out a way to help them. But that's not what you're
doing. You're asking for technical answers to non-technical questions
on a mailing list where people don't get paid to respond in depth.

And, for what it's worth, there were some technical answers in the
thread. But the underlying question is too broad for someone to answer
it in a single email. That's just not how mailing lists work.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330949
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: jquery find/replace on an entire body DOM

2010-02-19 Thread Will Tomlinson

Anything you could do to make jQuery have to do less work will be
beneficial.


Andy,

This works great for form actions. I've played around with doing the exact same 
thing for any inputs with onclick attributes. But JQ doesn't seem to select up 
the value of the onclick. Do you have any ideas? 

Here's the form one that works. 

$(document).ready(function() {
  var regexp = /action=([a-zA-Z]+\.[a-zA-Z]+)/;  
  var value = $(form).attr('action');  
  var replaced = value.replace(regexp,'action=$1cte=thompson');
  $(form).attr('action',replaced);  
});

Thanks!

Will 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330950
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: is there a safe way to save an object/cfc loaded into the app scope into the session scope?

2010-02-19 Thread crippe crippe

Thank you all very very much. This was extremely helpful info! 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330951
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: RE: Where to encrypt - cf or db or both?

2010-02-19 Thread Dave Watts

 However, I do not feel walk away from the client is necessarily the right
 answer here or very constructive. I mean - cripes - can't we just explore it
 from an academic perspective?? What if I want to store something else as
 securely as credit card data. Like a cookie recipe.

Then you should ask about how to store data securely, and clearly
itemize the threat profile that describes the security concerns you
have. How do I store data securely by itself isn't a very useful
question unless you can also clearly describe who should and shouldn't
be able to access this data, how they should be able to access it, the
order of likelihood of different security problems occurring (internal
vs external unauthorized users, for example), etc, etc, etc.

 Someone mentions CC's or SSN's and everyone freaks out and tells you to call
 their lawyer. Well - ok - that's all fine and dandy - point taken - let's
 move on - that kind of talk doesn't really address the honest question of  -
 - How could you Actually do it responsibly?

You can't do it responsibly, without expending a huge amount of
resources. That's the point. The costs are too high, and the risk of
exposure is too high, for SMBs to be in the business of payment
processing. In the same vein, imagine that you'd asked how to do
internet search like Google does, and that someone could tell you the
exact algorithm used by Google for search. Well, that would be
interesting, but it wouldn't get you where you need to go - you'd need
massive infrastructure, bandwith, parallelization capability, etc.

 From what I gather so far, the steps may be:
 1) Make sure the connection is SSL (Obviously)

The connection between whom? The user and the public-facing website
taking payment information? Sure. What about between that website and
the database, and between that website and the bank?

  A) Is there a way to verify the connection is secure (or that the SSL
 hasn't expired?)

You can configure a web server to require SSL connectivity. It's the
server administrator's job to make sure that server certificates
haven't expired, so I'm not sure what you're getting at there, but if
a certificate has expired end-users will typically get a message
telling them that the certificate isn't valid.

 2) Save the Cookie Recipe in a DB (at the Final Step of Processing)
  A) Encrypted with above industry standards  (TBD?)

There are plenty of industry-standard PKI algorithms. CF supports
them. Again, the problem is key management. If the public-facing
website has the ability to encrypt the data, it'll need one key.
Who'll decrypt the data? Are you going to put that key on the same
website? If so, then if the website has a vulnerability that someone
can attack, they can get both keys, and you're done - it doesn't
matter how strong the encryption is.

 B) Data possibly broken into two parts (maybe separate tables as well?)
 C) Encryption Key is stored separately - Not on web server - or DB Server
 (Other comp on same Network? Other DB on the same server??)

 So the question is Where? How? How does a public/private key system work?
 (User has to type in a key each time they view data? Could the key be a
 static thing only the Company Admin knows? Like an additional password the
 need to see the recipe??)

 What if the key lived on a separate web server at a different location -
 could you call the key in real time with an SSL http call for encryption???

Again, this goes back to the threat profiles you've documented (you've
done that, right?)

The underlying problem is key management. Who can encrypt? Who can
decrypt? Typically, you wouldn't want both operations to be possible
from the same place, so the key used to encrypt (which pretty much has
to be on the public-facing website) can't be on the same server as the
key used to decrypt. Also, it shouldn't be possible for you to fetch
one key to the other server, as if that's possible the keys are
effectively both accessible from a single place again.

Also, within an organization, you'd want to strictly control who can
see what data. Organizations complying with PCI-DSS typically don't
have a company admin who can get access to everything, because,
well, that person could get access to everything. So even within the
organization, key management can be an issue. Should database
administrators have access to private data? Network administrators?
Perhaps, you want an environment where accessing specific pieces of
data requires multiple people working in concert - each might have
half of a key, for example.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or o

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion 

RE: jquery find/replace on an entire body DOM

2010-02-19 Thread Andy Matthews

It sounds like you're talking about jQuery manipulating jQuery code?

Onclicks created by jQuery are assigned after the DOM is loaded, and
wouldn't be found in the rendered HTML code. If the action attribute of the
form is abc.xyz in HTML, and then you run your code to make it
abc.xyz?something=else, you'd have to reassign your click handlers.

What I'd do is to create a function which encapsulates the form click
handler assignments, and call that after your below jQuery code like so:

$(document).ready(function() {
  var regexp = /action=([a-zA-Z]+\.[a-zA-Z]+)/;
  var value = $(form).attr('action');
  var replaced = value.replace(regexp,'action=$1cte=thompson');
  $(form).attr('action',replaced);
  assignClickHandlers();
});





-Original Message-
From: Will Tomlinson [mailto:w...@wtomlinson.com] 
Sent: Friday, February 19, 2010 2:14 PM
To: cf-talk
Subject: Re: jquery find/replace on an entire body DOM


Anything you could do to make jQuery have to do less work will be 
beneficial.


Andy,

This works great for form actions. I've played around with doing the exact
same thing for any inputs with onclick attributes. But JQ doesn't seem to
select up the value of the onclick. Do you have any ideas? 

Here's the form one that works. 

$(document).ready(function() {
  var regexp = /action=([a-zA-Z]+\.[a-zA-Z]+)/;
  var value = $(form).attr('action');
  var replaced = value.replace(regexp,'action=$1cte=thompson');
  $(form).attr('action',replaced);
});

Thanks!

Will 



~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330953
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Using CFHTTP to access a website

2010-02-19 Thread Ben Conner

Hi,

I have a list of names from a database I want to bounce off of a search 
function on a website.  I threw together a test of one name/initial 
combination in a CFHTTP call and it threw an error. 

The page is located at 
http://www.azcorrections.gov/inmate_datasearch/Index_Minh.aspx.  If you 
do a View Source, is there anything in the inmate search area that might 
keep a CFHTTP from accessing it?

Thanks!

--Ben

-- 
Ben Connerb...@webworldinc.com
Web World, Inc.   888-206-6486
PO Box 1122   480-704-2000
Queen Creek, AZ 85242 



~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330954
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Dave Watts

 I have a list of names from a database I want to bounce off of a search
 function on a website.  I threw together a test of one name/initial
 combination in a CFHTTP call and it threw an error.

 The page is located at
 http://www.azcorrections.gov/inmate_datasearch/Index_Minh.aspx.  If you
 do a View Source, is there anything in the inmate search area that might
 keep a CFHTTP from accessing it?

CFHTTP can access anything a browser on the same machine can access,
but it's up to you to send any data that the remote server is looking
for. Now, in the case of this specific page, it's an ASP.NET page that
uses VIEWSTATE, so you'll probably have to fetch the page twice, and
send cookies received from the first request to the second.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsit

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330955
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Ben Conner

Thanks, Dave!  How does CFHTTP manage cookies?

--Ben

Dave Watts wrote:
 I have a list of names from a database I want to bounce off of a search
 function on a website.  I threw together a test of one name/initial
 combination in a CFHTTP call and it threw an error.

 The page is located at
 http://www.azcorrections.gov/inmate_datasearch/Index_Minh.aspx.  If you
 do a View Source, is there anything in the inmate search area that might
 keep a CFHTTP from accessing it?
 

 CFHTTP can access anything a browser on the same machine can access,
 but it's up to you to send any data that the remote server is looking
 for. Now, in the case of this specific page, it's an ASP.NET page that
 uses VIEWSTATE, so you'll probably have to fetch the page twice, and
 send cookies received from the first request to the second.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsit

 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330956
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Ben Conner

Ah.  Never mind the cookie response.  Found a previous post explaining 
it.  My apologies.

--Ben

Ben Conner wrote:
 Hi,

 I have a list of names from a database I want to bounce off of a search 
 function on a website.  I threw together a test of one name/initial 
 combination in a CFHTTP call and it threw an error. 

 The page is located at 
 http://www.azcorrections.gov/inmate_datasearch/Index_Minh.aspx.  If you 
 do a View Source, is there anything in the inmate search area that might 
 keep a CFHTTP from accessing it?

 Thanks!

 --Ben

   

-- 
Ben Connerb...@webworldinc.com
Web World, Inc.   888-206-6486
PO Box 1122   480-704-2000
Queen Creek, AZ 85242 



~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330957
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Dave Watts

 Thanks, Dave!  How does CFHTTP manage cookies?

It doesn't. You have to do that yourself. You can read cookies set in
an HTTP request using CFHTTP.responseHeader, then write them for
subsequent responses using CFHTTPPARAM.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330958
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: CF8/Vista 64 debug output not showing up

2010-02-19 Thread Mary Jo Sminkey

Not sure where my earlier reply to this went, but the list (online at least) 
was being a little wonky yesterday so I'll try again...

I wonder if you have the right check boxes checked (They are different between
the 2). In CF7 it's enable debugging but in CF 8 It says enable request
debugging output - and I would also choose the classic template because
the dockable one can be blocked by a popup blocker (I think).

Hi Mark, yeah those are the settings I use (although I did try various other 
options to try and get it working). I finally just decided to try rolling back 
my system a couple weeks and that seems to have cleared up whatever was 
blocking it! Weird, huh? I guess I should be running my development environment 
on a separate partition, just to prevent that kind of issue. Well, a job for 
another day

--- Mary Jo




~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330959
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Problems with JQUERY in IE 8

2010-02-19 Thread Chad McCue

http://www.datatables.net/

I am currently using the above URL that will handle my data results set. Works 
fine in  Firefox but will return no data in IE. Here is my implementation.

Calling page

$(document).ready(function() {
  resultTable = $('##example').dataTable ( {
sPaginationType: full_numbers,
bProcessing: true,
sAjaxSource: 
'/cfcomponents/practice/user/user.cfc?method=GetUsersByTypepracticeID=213' 
  
} );
  
} );

Cfc

cffunction name=GetUsersByType access=remote output=true 
returnFormat=JSON
  cfargument name=practiceID default=0 /

  cfquery name=”users”
  //query to get the users.
  /cfquery

cfsetting showdebugoutput=false 
  cfcontent reset=yes 
  cfoutput
{ aaData: [cfloop query=userscfif Type 
isPatientcfset RoleID = 1 /cfelseif Type IS Staffcfset RoleID = 
2/cfelseif Type IS Physiciancfset RoleID = 3 /cfelseif Type IS 
Referring Physiciancfset RoleID = 4 //cfif 
[#trim(name)#,#trim(type)#,cfif #locked# EQ 1Lcfelseif #frozen# EQ 
1FcfelseO/cfif,a 
href='userDetails.cfm?id=#id#RoleID=#RoleID#'View/a]cfif 
#users..currentRow# NEQ #users.Recordcount#,/cfif/cfloop] }
  /cfoutput 

/cffunction


Again returns the exact result set in firefox but nothing in IE 8


~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330960
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: Problems with JQUERY in IE 8

2010-02-19 Thread Steve Keator

Are there any types of J/S errors making themselves known in IE8?

I've seen this type of behavior in the past, and usually it comes down to being 
something such as a comma being out of place or other little syntax error that 
FF knows how to handle but IE doesn't.

-S.



-Original Message-
From: Chad McCue [mailto:ch...@icsciences.com] 
Sent: Friday, February 19, 2010 4:26 PM
To: cf-talk
Subject: Problems with JQUERY in IE 8


http://www.datatables.net/

I am currently using the above URL that will handle my data results set. Works 
fine in  Firefox but will return no data in IE. Here is my implementation.

Calling page

$(document).ready(function() {
  resultTable = $('##example').dataTable ( {
sPaginationType: full_numbers,
bProcessing: true,
sAjaxSource: 
'/cfcomponents/practice/user/user.cfc?method=GetUsersByTypepracticeID=213' 
  
} );
  
} );

Cfc

cffunction name=GetUsersByType access=remote output=true 
returnFormat=JSON
  cfargument name=practiceID default=0 /

  cfquery name=”users”
  //query to get the users.
  /cfquery

cfsetting showdebugoutput=false 
  cfcontent reset=yes 
  cfoutput
{ aaData: [cfloop query=userscfif Type 
isPatientcfset RoleID = 1 /cfelseif Type IS Staffcfset RoleID = 
2/cfelseif Type IS Physiciancfset RoleID = 3 /cfelseif Type IS 
Referring Physiciancfset RoleID = 4 //cfif 
[#trim(name)#,#trim(type)#,cfif #locked# EQ 1Lcfelseif #frozen# EQ 
1FcfelseO/cfif,a 
href='userDetails.cfm?id=#id#RoleID=#RoleID#'View/a]cfif 
#users..currentRow# NEQ #users.Recordcount#,/cfif/cfloop] }
  /cfoutput 

/cffunction


Again returns the exact result set in firefox but nothing in IE 8




~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330961
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Ben Conner

Hi Dave,

I see this site doesn't appear to use cookies (at least on this page) as 
reported by the Web Developer Firefox add-on.  I put together a test 
page but it's throwing an error from their site.  I faked a name for the 
lastname/first initial combinations.  I looked through the url  string 
but don't see anything obvious.  ??

--Ben

cfset 
target=http://www.azcorrections.gov/inmate_datasearch/index_minh.aspx;
cfhttp url=#target#
method=GET
port=80
/cfhttp

cfset initlength=len(#cfhttp.filecontent#)
cfset start=Find(__VIEWSTATE,#cfhttp.filecontent#)
cfset sstring=MID(#cfhttp.filecontent#,start,initlength-start)
cfset vs=GetToken(sstring,5,)
cfset event=GetToken(sstring,13,)
cfset stat=Active
cfset statvar=CTL00$CENTRALCONTENT$ACTIVESTATUS
cfset genvar=CTL00$CENTRALCONTENT$GENDER
cfset gen=Male
cfset eventvar=__EVENTVALIDATION
cfset inmatevar=CTL00$CENTRALCONTENT$INMATENUMBER
cfset lnamevar=CTL00$CENTRALCONTENT$LASTNAME
cfset finitvar=CTL00$CENTRALCONTENT$FIRSTINITIAL
cfset vsvar=__VIEWSTATE
cfset subvar=INMATENAMESUBMIT

cfset 
urlstring=#target#?#vsvar#=#vs##eventvar#=#event##statvar#=#stat##inmatevar#=#lnamevar#=Smith#finitvar#=C#genvar#=#gen##eventvar#=#event##subvar#=GO#genvar#=#gen##statvar#=#stat#

cfoutput#urlstring#/cfoutput


cfhttp url=#urlstring#
method=GET
port=80/cfhttp
cfoutput
#cfhttp.filecontent#
/cfoutput


Dave Watts wrote:
 Thanks, Dave!  How does CFHTTP manage cookies?
 

 It doesn't. You have to do that yourself. You can read cookies set in
 an HTTP request using CFHTTP.responseHeader, then write them for
 subsequent responses using CFHTTPPARAM.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsite

 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330962
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Dorioo

I've had good results using the project below. Maybe it can help you.

http://www.bennadel.com/projects/cfhttp-session.htm

- Gabriel

On Fri, Feb 19, 2010 at 5:49 PM, Ben Conner b...@webworldinc.com wrote:

 Hi Dave,

 I see this site doesn't appear to use cookies (at least on this page) as
 reported by the Web Developer Firefox add-on.  I put together a test
 page but it's throwing an error from their site.  I faked a name for the
 lastname/first initial combinations.  I looked through the url  string
 but don't see anything obvious.  ??

 --Ben

 cfset
 target=http://www.azcorrections.gov/inmate_datasearch/index_minh.aspx;
 cfhttp url=#target#
        method=GET
        port=80
 /cfhttp

 cfset initlength=len(#cfhttp.filecontent#)
 cfset start=Find(__VIEWSTATE,#cfhttp.filecontent#)
 cfset sstring=MID(#cfhttp.filecontent#,start,initlength-start)
 cfset vs=GetToken(sstring,5,)
 cfset event=GetToken(sstring,13,)
 cfset stat=Active
 cfset statvar=CTL00$CENTRALCONTENT$ACTIVESTATUS
 cfset genvar=CTL00$CENTRALCONTENT$GENDER
 cfset gen=Male
 cfset eventvar=__EVENTVALIDATION
 cfset inmatevar=CTL00$CENTRALCONTENT$INMATENUMBER
 cfset lnamevar=CTL00$CENTRALCONTENT$LASTNAME
 cfset finitvar=CTL00$CENTRALCONTENT$FIRSTINITIAL
 cfset vsvar=__VIEWSTATE
 cfset subvar=INMATENAMESUBMIT

 cfset
 urlstring=#target#?#vsvar#=#vs##eventvar#=#event##statvar#=#stat##inmatevar#=#lnamevar#=Smith#finitvar#=C#genvar#=#gen##eventvar#=#event##subvar#=GO#genvar#=#gen##statvar#=#stat#

 cfoutput#urlstring#/cfoutput


 cfhttp url=#urlstring#
        method=GET
        port=80/cfhttp
 cfoutput
 #cfhttp.filecontent#
 /cfoutput


 Dave Watts wrote:
 Thanks, Dave!  How does CFHTTP manage cookies?


 It doesn't. You have to do that yourself. You can read cookies set in
 an HTTP request using CFHTTP.responseHeader, then write them for
 subsequent responses using CFHTTPPARAM.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsite



 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330963
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Ben Conner

Hi Dorioo,

Interesting code.  The big difference I see is that in this instance I 
don't need to log on.  Will take a look at it and see if I can use it.

Thanks!

--Ben

Dorioo wrote:
 I've had good results using the project below. Maybe it can help you.

 http://www.bennadel.com/projects/cfhttp-session.htm

 - Gabriel

 On Fri, Feb 19, 2010 at 5:49 PM, Ben Conner b...@webworldinc.com wrote:
   
 Hi Dave,

 I see this site doesn't appear to use cookies (at least on this page) as
 reported by the Web Developer Firefox add-on.  I put together a test
 page but it's throwing an error from their site.  I faked a name for the
 lastname/first initial combinations.  I looked through the url  string
 but don't see anything obvious.  ??

 --Ben

 cfset
 target=http://www.azcorrections.gov/inmate_datasearch/index_minh.aspx;
 cfhttp url=#target#
method=GET
port=80
 /cfhttp

 cfset initlength=len(#cfhttp.filecontent#)
 cfset start=Find(__VIEWSTATE,#cfhttp.filecontent#)
 cfset sstring=MID(#cfhttp.filecontent#,start,initlength-start)
 cfset vs=GetToken(sstring,5,)
 cfset event=GetToken(sstring,13,)
 cfset stat=Active
 cfset statvar=CTL00$CENTRALCONTENT$ACTIVESTATUS
 cfset genvar=CTL00$CENTRALCONTENT$GENDER
 cfset gen=Male
 cfset eventvar=__EVENTVALIDATION
 cfset inmatevar=CTL00$CENTRALCONTENT$INMATENUMBER
 cfset lnamevar=CTL00$CENTRALCONTENT$LASTNAME
 cfset finitvar=CTL00$CENTRALCONTENT$FIRSTINITIAL
 cfset vsvar=__VIEWSTATE
 cfset subvar=INMATENAMESUBMIT

 cfset
 urlstring=#target#?#vsvar#=#vs##eventvar#=#event##statvar#=#stat##inmatevar#=#lnamevar#=Smith#finitvar#=C#genvar#=#gen##eventvar#=#event##subvar#=GO#genvar#=#gen##statvar#=#stat#

 cfoutput#urlstring#/cfoutput


 cfhttp url=#urlstring#
method=GET
port=80/cfhttp
 cfoutput
 #cfhttp.filecontent#
 /cfoutput


 Dave Watts wrote:
 
 Thanks, Dave!  How does CFHTTP manage cookies?

 
 It doesn't. You have to do that yourself. You can read cookies set in
 an HTTP request using CFHTTP.responseHeader, then write them for
 subsequent responses using CFHTTPPARAM.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsite


   
 

 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330964
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: jquery find/replace on an entire body DOM

2010-02-19 Thread Will Tomlinson

It sounds like you're talking about jQuery manipulating jQuery code?


Not in these cases. This is some legacy JS in our onclicks.They must remain, 
but they contain mappings that I need to do the exact same thing we did realier 
in the form action. The code to be manipulated looks somethin like this:

input...onclick=switchActionSubmit('someController.someMapping')

I need to grab that someController.someMapping part, just like the form action. 

I've tried different things, but JQ isn't grabbing it up so I can maniuplate 
it. 

Thanks for your help! 

Will 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330965
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Claude Schnéegans

 CFHTTP can access anything a browser on the same machine can access,

... except if the site checks if the IP address requested the form 
before it receives the action request.
In this case, one should at least request the form page first.

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330966
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Dave Watts

 I see this site doesn't appear to use cookies (at least on this page) as
 reported by the Web Developer Firefox add-on.  I put together a test
 page but it's throwing an error from their site.  I faked a name for the
 lastname/first initial combinations.  I looked through the url  string
 but don't see anything obvious.  ??

I don't have time to test this myself, unfortunately, so I'll just
give you the advice that I'd use to solve the problem myself.

Visit the site in a browser, and use a sniffer to see exactly what
gets sent and received. I use Wireshark for this sort of thing, but
there are many (easier-to-use) alternatives.

Then, within your CF code, emulate everything the browser is doing.
Use your sniffer again to see exactly what's being sent, then change
your code accordingly.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or on

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330967
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Using CFHTTP to access a website

2010-02-19 Thread Dave Watts

  CFHTTP can access anything a browser on the same machine can access,

 ... except if the site checks if the IP address requested the form
 before it receives the action request.
 In this case, one should at least request the form page first.

As mentioned previously, the form will have to be fetched anyway
because it's an ASP.NET application that uses VIEWSTATE. So, the
action page is going to need to read whatever value was set in the
script that generated the form.

But in any case, this would work the same way whether you're using a
browser or not, so again, CFHTTP can access anything a browser on the
same machine can access.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330968
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


CF 6 mx and ActivePDF

2010-02-19 Thread Peter Cronin

Anybody running templates with ColdFusion and ActivePDF. I am testing out 
ActivePDF for a project and have run the basic tests ok. But I am haveing 
trouble using METHODS, specifically this one: 

WG.FontHeading1('Script', 1,0, 0, 0, 0)

I can't figure out how to invoke it. I know for the properties you use the 
CFSET command, but for methods I try this and nothing happens: 

cfset varReturn = WG.FontHeading1('Script', 1,0, 0, 0, 0)

Any help would be appreciated with the syntax. 

PSC 


~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330969
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Webservice and TCPMonitor

2010-02-19 Thread denstar

On Thu, Feb 18, 2010 at 3:55 PM, John M Bliss wrote:

 Hm.  That doesn't come with CFBuilder standalone.  Anyone know how to add it
 in?

That monitor *I think* comes with WTP (webtools) as part of the Server
Tools stuff.

There's this other standalone deal:

http://www.membrane-soa.org/soap-monitor/

That looked cool too...

:den

-- 
Is it honest for me to go and sit there on communion day and drink the
wine and eat the bread while feeling it all to be mummery?
John Fis

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330970
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Serious, intermittent problem with CF Web Service

2010-02-19 Thread Leon Miller-Out

Howdy, CFers! We've got an incredibly frustrating situation with a CF Web 
Services-based API that we wrote and maintain. We had an API in place for years 
that was stable and working happily with Ruby, PHP, and ColdFusion clients. 
Then this year a .NET client came along, and we found that our web service was 
not interoperable with statically-typed languages due to our extensive use of 
structs.

We eventually realized we had to re-write the API without structs, and we've 
done so. It now uses scaler values, arrays, and CFCs (which get translated to 
SOAP complexTypes). The .NET client is happy, and we wrote proof-of-concept 
clients in about 6 different languages to ensure that we'd be interoperable 
this time around.

To our great dismay, it appears that our ColdFusion 7 servers can't serve the 
new API reliably. It works for about a day or so after restarting, then the 
clients start getting errors like:
 
Error: coldfusion.xml.rpc.CFCInvocationException 
[java.lang.ClassNotFoundException : 
tafkan.remote_api.pfapi.v.trunk.rsp_pf_survey_status_array]

and

java.lang.NoClassDefFoundError: tafkan/remote_api/pfapi/v/trunk/pf_unit


Restarting the CF instances is the only way to make the problem go away. A lot 
of time and money was put into rebuilding the API, so everyone is really at 
wit's end about this.

We've noticed that the WEB-INF/cfc-skeletons directories of our CF instances 
eventually seem to have two copies of the classes for each of the CFCs used by 
the API. For example: 

-rw-r--r--  Feb 17 09:15 remote_api.pfapi.v.trunk.pf_datum.class
-rw-r--r--  Feb  3 12:20 tafkan.remote_api.pfapi.v.trunk.pf_datum.class

It seems like the errors are coming from a namespace or class search path 
problem, so we tried switching all CFC references to be fully-qualified (dot 
notation starting with a mapping) instead of just simple references to CFCs in 
the current directory. This seemed promising, but the problem came back within 
24 hours.

Environment:
ColdFusion 7,0,2,142559 with hf702-70523, 2-instance cluster
Sun Java 1.4.2_13 
Apache 2.0.52
Centos 4.5 32-bit

Maybe upgrading one of these venerable pieces of software would help? Maybe 
upgrading just AXIS?

We need help! I'm sure that there is someone out there with more CF/AXIS/SOAP 
experience than us that can help us get this problem resolved. Adobe support 
doesn't seem to be an option, as CF7 is EOL'ed and in extended-extended support 
(and that just for a few more days). We will pay the right person good money to 
help us figure this out. If you're that person, or think you might know who 
they are, please contact me ASAP!

Thanks for reading this mega-post!
Leon 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330971
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: jquery find/replace on an entire body DOM

2010-02-19 Thread Will Tomlinson

It sounds like you're talking about jQuery manipulating jQuery code?


Andy, this seems to do the trick with grabbing my input code string. 

  var htmlStr =  $(':input').append($(':input').clone()).remove().html(); 

Thanks,
Will 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330972
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


(ot) Google Analytics

2010-02-19 Thread Rick Root

Hey all,

I'm helping run a large web site that hosts many sites using virtual
domains.  Each site is different though built on the same file
structure.  Users can choose templates, they build their own content,
etc.  Users often put google analytics code on their own sites, but we
don't do any overall analytics beyond what Alexa.com knows about us,
and knowing that we average about 830,000 coldfusion requests per day
(and god only knows how many requests for images, css, js files, etc)

I couldn't find this answer easily on the google web site, but I'm
wondering if I can put google analytics for us on every page and have
google analyze the site as one - without messing up the end-users who
are also monitoring their own individual sites?  Ie, some pages would
have two sets of google analytics code.

Thanks.

Rick

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330973
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: (ot) Google Analytics

2010-02-19 Thread Jerry Johnson

http://seojeff.com/2008/04/03/tracking-data-for-multiple-google-analytics-accounts-on-one-page/


On Fri, Feb 19, 2010 at 10:48 PM, Rick Root rick.r...@gmail.com wrote:


 Hey all,

 I'm helping run a large web site that hosts many sites using virtual
 domains.  Each site is different though built on the same file
 structure.  Users can choose templates, they build their own content,
 etc.  Users often put google analytics code on their own sites, but we
 don't do any overall analytics beyond what Alexa.com knows about us,
 and knowing that we average about 830,000 coldfusion requests per day
 (and god only knows how many requests for images, css, js files, etc)

 I couldn't find this answer easily on the google web site, but I'm
 wondering if I can put google analytics for us on every page and have
 google analyze the site as one - without messing up the end-users who
 are also monitoring their own individual sites?  Ie, some pages would
 have two sets of google analytics code.

 Thanks.

 Rick

 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330974
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Problems with JQUERY in IE 8

2010-02-19 Thread James Holmes

Can I ask why you'd set returnType to JSON and then go to the trouble of
building a string instead of letting the CFC do the work and actually return
the JSON from your data?

mxAjax / CFAjax docs and other useful articles:
http://www.bifrost.com.au/blog/


On 20 February 2010 05:26, Chad McCue ch...@icsciences.com wrote:


 http://www.datatables.net/

 I am currently using the above URL that will handle my data results set.
 Works fine in  Firefox but will return no data in IE. Here is my
 implementation.

 Calling page

 $(document).ready(function() {
  resultTable = $('##example').dataTable ( {
sPaginationType: full_numbers,
bProcessing: true,
sAjaxSource:
 '/cfcomponents/practice/user/user.cfc?method=GetUsersByTypepracticeID=213'
 } );

 } );

 Cfc

 cffunction name=GetUsersByType access=remote output=true
 returnFormat=JSON
  cfargument name=practiceID default=0 /

  cfquery name=”users”
  //query to get the users.
  /cfquery

 cfsetting showdebugoutput=false 
  cfcontent reset=yes 
  cfoutput
{ aaData: [cfloop query=userscfif Type
 isPatientcfset RoleID = 1 /cfelseif Type IS Staffcfset RoleID =
 2/cfelseif Type IS Physiciancfset RoleID = 3 /cfelseif Type IS
 Referring Physiciancfset RoleID = 4 //cfif
 [#trim(name)#,#trim(type)#,cfif #locked# EQ 1Lcfelseif #frozen# EQ
 1FcfelseO/cfif,a
 href='userDetails.cfm?id=#id#RoleID=#RoleID#'View/a]cfif
 #users..currentRow# NEQ #users.Recordcount#,/cfif/cfloop] }
  /cfoutput

 /cffunction


 Again returns the exact result set in firefox but nothing in IE 8

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330975
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Validating that only .5 decimal gets through?

2010-02-19 Thread Marie Taylore

I have an app that I need to validate that they enter either whole numbers 
(1,2,3, etc.) or if they DO enter a decimal, it can only be in half increments, 
so 2.5 is okay, but not 2.1, 2.2, 2.25, etc.  Of course, 2.0 would be okay too, 
so .0 after the number is fine.

Is there a good way to check that with Regex rather than parsing the string and 
checking that the value after the period is a 5 or a 0?

Thanks,

MarieT


  

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330976
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Validating that only .5 decimal gets through?

2010-02-19 Thread Jerry Johnson

multiple by 2, and check if it is a whole number?

On Sat, Feb 20, 2010 at 1:41 AM, Marie Taylore mt4yl...@yahoo.com wrote:


 I have an app that I need to validate that they enter either whole numbers
 (1,2,3, etc.) or if they DO enter a decimal, it can only be in half
 increments, so 2.5 is okay, but not 2.1, 2.2, 2.25, etc.  Of course, 2.0
 would be okay too, so .0 after the number is fine.

 Is there a good way to check that with Regex rather than parsing the string
 and checking that the value after the period is a 5 or a 0?

 Thanks,

 MarieT




 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330977
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Validating that only .5 decimal gets through?

2010-02-19 Thread Greg Morphis

I like Jerry's answer but this works too

cfset numbers = 1, 2, 3, 4, 1.5, 1.2, 1.6, 2.5, 7.0, 6.50, 6.32, 2.25 /
cfloop list=#numbers# index=i
cfoutput#i# /cfoutput
cfif (i - int(i) eq 0) or (i - int(i) eq .5)
works
cfelse
no workie
/cfif
br /
/cfloop

so basically you're subtracting the integer value from the value and
if the remainder equals 0 or .5 then it succeeds.. if not then fails



On Sat, Feb 20, 2010 at 12:46 AM, Jerry Johnson jmi...@gmail.com wrote:

 multiple by 2, and check if it is a whole number?

 On Sat, Feb 20, 2010 at 1:41 AM, Marie Taylore mt4yl...@yahoo.com wrote:


 I have an app that I need to validate that they enter either whole numbers
 (1,2,3, etc.) or if they DO enter a decimal, it can only be in half
 increments, so 2.5 is okay, but not 2.1, 2.2, 2.25, etc.  Of course, 2.0
 would be okay too, so .0 after the number is fine.

 Is there a good way to check that with Regex rather than parsing the string
 and checking that the value after the period is a 5 or a 0?

 Thanks,

 MarieT






 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330978
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Validating that only .5 decimal gets through?

2010-02-19 Thread Kevan Stannard

This might do:

cfset isValid = (n * 10) mod 5 eq 0


On 20 February 2010 17:41, Marie Taylore mt4yl...@yahoo.com wrote:


 I have an app that I need to validate that they enter either whole numbers
 (1,2,3, etc.) or if they DO enter a decimal, it can only be in half
 increments, so 2.5 is okay, but not 2.1, 2.2, 2.25, etc.  Of course, 2.0
 would be okay too, so .0 after the number is fine.

 Is there a good way to check that with Regex rather than parsing the string
 and checking that the value after the period is a 5 or a 0?

 Thanks,

 MarieT




 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330979
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Validating that only .5 decimal gets through?

2010-02-19 Thread Greg Morphis

cfset isValid = (n * 10) mod 5 eq 0

That works unless you try something like 2.05
cfset isValid = (2.05 * 10) mod 5 eq 0
cfoutputisValid : #isValid#/cfoutput
isValid : YES
but should fail



On Sat, Feb 20, 2010 at 1:28 AM, Kevan Stannard ke...@stannard.net.au wrote:

 This might do:

 cfset isValid = (n * 10) mod 5 eq 0


 On 20 February 2010 17:41, Marie Taylore mt4yl...@yahoo.com wrote:


 I have an app that I need to validate that they enter either whole numbers
 (1,2,3, etc.) or if they DO enter a decimal, it can only be in half
 increments, so 2.5 is okay, but not 2.1, 2.2, 2.25, etc.  Of course, 2.0
 would be okay too, so .0 after the number is fine.

 Is there a good way to check that with Regex rather than parsing the string
 and checking that the value after the period is a 5 or a 0?

 Thanks,

 MarieT






 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330980
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4