Re: SOT: Best CF development laptop

2010-08-04 Thread Mark Mandel

Some thoughts to add to the mix.

I consistently buy Dell laptops, for a variety of reasons, but primarily for
their 3 year, on site support. As a contractor, even a single day downtime
is no good.

No idea which part of the world you are in, but here in australia, I've
called tech support at 3pm and had a tech at my house 9am the next morning
to fix my computer.

If you can find a brand of laptops that provide multi-year on site support,
it's invaluable.

On another note - if you want the best performance out of your vms, put them
on an external hd, the faster the better, with the fastest connection as
well.

Anyway, just my experience, thought I would share.

Sent from my mobile device

On 3 Aug 2010 17:39, Victor Moore victor.mo...@gmail.com wrote:

 I did look around and some time you can get 100 off.

 The advantage at the sony store is that it can be somewhat customized
 (including engraving) and the previous model F11 has a 200$ discount

 Thanks

 On Tue, Aug 3, 2010 at 11:14 PM, Eric Roberts
 ow...@threeravensconsulting.com wrote:

 You might want to check out some of the deals they have at Tiger Direct
and
 New Egg...you can save a lot of money that way.

 -Original Message-
 From: Dave Watts [mailto:dwa...@figleaf.com]
 Sent: Tuesday, August 03, 2010 11:10 PM
 To: cf-talk
 Subject: Re: SOT: Best CF development laptop


 Price wise they are very similar. Asus has Blu-Ray, bigger screen and
 hard drive but battery life sucks.
 Sony smaller screen and hard and no Blu-Ray drive (I can add one for
 100 I think) but better CPU and much better battery.

 A lot of these things really depend on how you plan to use it. If
 you're getting a desktop replacement, you probably don't care about
 battery life. If you're not going to watch movies, you don't care
 about Blu-Ray, etc, etc.

 When I got my laptop (Dell Studio XPS 13) I had a very specific set of
 requirements, and that's what guided my purchase. I wanted something
 no larger than 13 (I have to schlep it around a lot), with at least 8
 GB RAM, a SSD drive (fast, doesn't run as hot or use as much battery),
 and a webcam. There were only about 3 laptops around at the time that
 met those requirements, and this was the cheapest.

 In the end I want one that's good quality and doesn't die after one
year.

 Overall I've been very happy with Sony hardware, but their quality all
 seems to be on the high end - if you buy a really expensive Sony,
 it'll generally have a noticeably better build quality than their
 lower-end stuff.

 That said, I have some Sonys that have been all around the world, had
 the crap kicked out of them, and still work just fine.

 I don't really have any experience with Acer hardware.

 @Dave u know the saying u can't be too slim or have too much memory :)

 Well, sure, if you're going to run a 64-bit OS. Otherwise, there's no
 need for more than 4GB.

 When I bought my laptop, about 18 months ago I guess, I specifically
 wanted one with 8GB RAM, and they were fairly rare at the time. But I
 wanted that primarily for running multiple VMs. I didn't really need
 that for CF development alone, where you might run CF, a database
 instance, an IDE and a browser.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsite.





 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335964
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Best CF development laptop

2010-08-04 Thread Paul Stewart

And don't settle for less than 8gbs of RAM. 64 bit software has
a tendency to eat up RAM

news to me :0) is it not that just that 64bit tech has the ability to fully 
access 4gb of ram at the one time (If the os needs access to it) rather than 
eats it up.

Anyone care to explain this one to me? i'm about to buy a new laptop and 
would appreciate some advice

--
From: Alan Rother alan.rot...@gmail.com
Sent: 03 August 2010 22:05
To: cf-talk cf-talk@houseoffusion.com
Subject: Re: SOT: Best CF development laptop


 I'd lean towards the Sony if the price is comparable... but I would wipe 
 the
 hard drive and re-install Windows7 clean from an original media disk, not
 from the Sony disks... Too much bloat ware.

 As a 3rd alternate I'd look at Lenovo (Formally IBM) I've been really 
 happy
 with my ThinkPad, but it wasn't cheap...

 And don't settle for less than 8gbs of RAM. 64 bit software has
 a tendency to eat up RAM

 =]

 On Tue, Aug 3, 2010 at 1:42 PM, Dave Watts dwa...@figleaf.com wrote:


  I'm looking to buy a new laptop mostly CF 9 development with CF
  builder and Flash builder,
  MS-SQL, Oracle a few local web sites, SVN .I guess just the usual
  development stuff.
 
  I kind of narrowed my search to Sony Vaio F1290:
 * Intel® CoreT Quad i7-840QM processor (1.86GHz)
 * Microsoft Windows® 7 Professional
 * 8GB (4GBx2) DDR3-SDRAM-1333
 * 500 GB SATA Hard Disk Drive [7200 rpm]
 * DVD +/- R DL / DVD +/- RW / DVD-RAM Drive
 *16.4 VAIO Premium Display (1920x1080) Full HD
 * NVIDIA® GeForce® 330M GPU (1GB VRAM)
 * Keyboard Backlight
 * Large Capacity Battery
  or
 
  ASUS G73JH-A1  -
  Intel Core i7-720QM 1.6GHz Quad Core,
  17.3 FHD 1920x1080 LED,
  8GB DDR3,
  1TB (2x500GB) HDD,
  ATI RADEON HD 5870 1GB GDDR5,
  Blu-ray Combo,
  802.11bgn,
  Gb LAN, Bluetooth, HDMI, Webcam, Card Reader,
  Windows 7 Home Premium 64-bit

 Both of those are more than adequate. Anything with 8 GB RAM is
 adequate (in fact, most developers don't even need that much).

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training cen



 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335965
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Best CF development laptop

2010-08-04 Thread Andrew Clarke

I bought a high-end Vaio once.  Within two years it was literally falling 
apart.  Keys missing, screen shorting out, etc.  The Apple Powerbook I bought 
to replace it still looks like new almost seven years later.  IMHO nobody makes 
a better laptop than Apple, even if you just put Windows on it.  It may be more 
expensive up front but you get what you pay for and you make most of it back on 
resale anyway.

I know it's a cliché answer, but there it is.  Maybe Sony's hardware quality 
has improved since 2001.

Andrew.

On 2010-08-03, at 23:33, Victor Moore victor.mo...@gmail.com wrote:

 
 Yes, it's a replacement for a desktop but will see some travel too.
 I will have a couple of VM' too  and that's the reason I went with 8gb.
 and it' Asus not Acer :)
 
 @Alan I had before a ThinkPad and they are very reliable. Expensive,
 kind of spartan looking but they never die.
 
 Probably I will go with Sony. Still debating if I should go with Quad
 i7-740QM processor or Quad i7-840QM processor. Not sure if 200
 difference is worth it.
 
 Thanks
 
 On Tue, Aug 3, 2010 at 11:10 PM, Dave Watts dwa...@figleaf.com wrote:
 
 Price wise they are very similar. Asus has Blu-Ray, bigger screen and
 hard drive but battery life sucks.
 Sony smaller screen and hard and no Blu-Ray drive (I can add one for
 100 I think) but better CPU and much better battery.
 
 A lot of these things really depend on how you plan to use it. If
 you're getting a desktop replacement, you probably don't care about
 battery life. If you're not going to watch movies, you don't care
 about Blu-Ray, etc, etc.
 
 When I got my laptop (Dell Studio XPS 13) I had a very specific set of
 requirements, and that's what guided my purchase. I wanted something
 no larger than 13 (I have to schlep it around a lot), with at least 8
 GB RAM, a SSD drive (fast, doesn't run as hot or use as much battery),
 and a webcam. There were only about 3 laptops around at the time that
 met those requirements, and this was the cheapest.
 
 In the end I want one that's good quality and doesn't die after one year.
 
 Overall I've been very happy with Sony hardware, but their quality all
 seems to be on the high end - if you buy a really expensive Sony,
 it'll generally have a noticeably better build quality than their
 lower-end stuff.
 
 That said, I have some Sonys that have been all around the world, had
 the crap kicked out of them, and still work just fine.
 
 I don't really have any experience with Acer hardware.
 
 @Dave u know the saying u can't be too slim or have too much memory :)
 
 Well, sure, if you're going to run a 64-bit OS. Otherwise, there's no
 need for more than 4GB.
 
 When I bought my laptop, about 18 months ago I guess, I specifically
 wanted one with 8GB RAM, and they were fairly rare at the time. But I
 wanted that primarily for running multiple VMs. I didn't really need
 that for CF development alone, where you might run CF, a database
 instance, an IDE and a browser.
 
 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/
 
 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsite.
 
 
 
 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335966
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Best CF development laptop

2010-08-04 Thread Andrew Clarke

This is the opposite of my experience.  A VM running on the 7200 rpm drive in 
my almost 3 year old Macbook Pro is faster than one running on a FW800 Drobo 
off my Mac Pro.

At least that's how it feels.  Maybe I just expect less from my laptop!

Andrew.

On 2010-08-04, at 2:17, Mark Mandel mark.man...@gmail.com wrote:

 On another note - if you want the best performance out of your vms, put them
 on an external hd, the faster the better, with the fastest connection as
 well.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335967
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


OOP Principles question

2010-08-04 Thread Scott Stewart

I understand the black box principle of CFC's, make sure that your cfc's
can stand on their own as black boxes. When doing OOP based development,
does this paradigm

extend to  non-cfc ColdFusion files, IE: display and action pages.

 

Thanks

 

sas

 

--

Scott Stewart

CTT+ Technical Trainer

Adobe Community Expert - ColdFusion

http://www.sstwebworks.com http://www.sstwebworks.com/  (blog)

http://training.figleaf.com http://training.figleaf.com/ 

 

 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335968
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: OOP Principles question

2010-08-04 Thread David McGraw

At some point your going to have to develop some uniqueness into your 
application that is project specific.  You can spend a lot of time on form 
generators, and generic and configurable work flow engines, but is the time 
worth it?

I even have some CFC's that are project specific.  What I try to focus on is a 
rock solid set of CFCs that stand on their own in any environment, for any 
project, then I have project specific cfc that inherit the core CFCs.

When it comes to display pages and actions pages, etc...

David R. McGraw
Oyova Software, LLC
http://www.oyova.com


I understand the black box principle of CFC's, make sure that your cfc's
can stand on their own as black boxes. When doing OOP based development,
does this paradigm

extend to  non-cfc ColdFusion files, IE: display and action pages.

 

Thanks

 

sas

 

--

Scott Stewart

CTT+ Technical Trainer

Adobe Community Expert - ColdFusion

http://www.sstwebworks.com http://www.sstwebworks.com/  (blog)

http://training.figleaf.com http://training.figleaf.com/ 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335969
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Best CF development laptop

2010-08-04 Thread Sawyer, Edward

I'd have to put in a plug for Apple too. I just got the latest Macbook pro 15 
with the core i7, 7200rpm 500gb drive,  high-res screen. It's screaming fast 
and the build quality is among the best I have ever seen on *any* product, not 
just computers. It's certainly the king of laptops, no question in my mind. No, 
not the cheapest. But the cheapest is usually not the best, and total cost of 
ownership of Apple stuff tends to be better than just about anyone. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335970
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


SESSION variables and cflock

2010-08-04 Thread Stephens, Larry V

From time to time I go back and read my CF books to see if I can glean 
something new. I was reading the section again on locking and I'm (rather 
belatedly) confused.

The book says you should act on SESSION variables within a cflock because of 
potential collisions. But are my SESSION variables not mine and inaccessible to 
anyone else? How could there be a collision?

Larry Stephens

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335971
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Best CF development laptop

2010-08-04 Thread Tony Weeg

+1 just got same one same specs 2 weeks ago, hands down the best/fastest/most 
intuitive machine I've ever used!

Sent from my iPhone... Don't hate.

On Aug 4, 2010, at 8:40 AM, Sawyer, Edward ed.saw...@unh.edu wrote:

 
 I'd have to put in a plug for Apple too. I just got the latest Macbook pro 
 15 with the core i7, 7200rpm 500gb drive,  high-res screen. It's screaming 
 fast and the build quality is among the best I have ever seen on *any* 
 product, not just computers. It's certainly the king of laptops, no question 
 in my mind. No, not the cheapest. But the cheapest is usually not the best, 
 and total cost of ownership of Apple stuff tends to be better than just about 
 anyone. 
 
 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335972
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


oracle database link

2010-08-04 Thread Dave P

Hello all,

Has anyone actually gotten a database link working from a CF server to a second 
oracle server?

I'm trying a connection string:
create database link prodlink connect to myusername identified by mypass 
using 'PROD';

and getting:

 Error Executing Database Query.
Executing the SQL statement is not allowed. 

The problem is that I am not the admin and have little oracle experience.  The 
DBA has little CF (or even web) experience.

It sounds like to me there is a permissions error in either the oracle DB, or 
in CF.

I'm not sure which.  Of course i'm crunched for time.

Any ideas?  

Thank you,
Dave Powell


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335973
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Has anyone ever successfully changed an AD password through CFLDAP?!

2010-08-04 Thread Ivan Lazovic


There's a discrepancy that may be the issue in the way that CFLDAP's
handling the final UTF-16LE encoded double-quote - that java's showing a
22 00 byte pair, but the CFLDAP's dropping the 2nd byte of the character:

Java (works):
0050: 0A 01 02 30 2E 04 0A 75   6E 69 63 6F 64 65 50 77  ...0...unicodePw
0060: 64 31 20 04 1E 22 00 6E   00 65 00 77 00 50 00 61  d1 ...n.e.w.P.a
0070: 00 73 00 73 00 77 00 6F   00 72 00 64 00 31 00 21  .s.s.w.o.r.d.1.!
0080: 00 22 00 A0 1B 30 19 04   17 32 2E 31 36 2E 38 34  0...2.16.84
 ^

CFLDAP (fails):
0050: 0A 01 02 30 2B 04 0A 75   6E 69 63 6F 64 65 50 77  ...0+..unicodePw
0060: 64 31 1D 04 1B 22 00 6E   00 65 00 77 00 50 00 61  d1n.e.w.P.a
0070: 00 73 00 73 00 77 00 6F   00 72 00 64 00 31 00 22  .s.s.w.o.r.d.1.
 ^^
0080: A0 1B 30 19 04 17 32 2E   31 36 2E 38 34 30 2E 31  ..0...2.16.840.1
  ^^

So I'm suspecting AD's not liking the password.  Nothing I do gets that
double-quote right - seems to be deep inside the CFLDAP tag.


Dear Ed,

You are absolutely right and your post is the only one I was able to find on 
the internet that explains this bug or simply unsupported feature of CFLDAP.

I experimented with it too and tried to add trailing 0's to the end of properly 
formatted unicodePwd, but noticed that CFLDAP cuts off all bytes at the end of 
attribute value whose ASCII code is less than or equal 32 (interestingly, when 
I tried to add characters above ASCII code 127, 0 was not removed but some 
bytes were added so this could not help with password reset either). I guess 
that the idea was to remove all special characters, such as tabs, CR, LF, etc, 
before submitting modify command to LDAP, therefore disabling us to reset AD 
passwords.

As a reference to your code, I used a little bit different conversion 
functions, since I worked on Coldfusion 6.1 and it does not support 
charsetEncode/charsetDecode functions:

cfset new_password = 'newPassword1' /
cfset a = ToString(new_password.getBytes(UnicodeLittleUnmarked)) /

Everything seemed fine, except CFLDAP and I couldn't make it work.

That's why I decided to try to inject java code in ColdFusion, as I could not 
add java custom tags. After some experimenting with the code I could find on 
the internet, I was able to make it work with the following lines:

cfset new_password = 'newPassword1' /
cfset unicodePwd = new_password.getBytes(UnicodeLittleUnmarked) /

cfset javaEnv = CreateObject(java, java.util.Hashtable).Init() /

cfset ldapsURL = ldaps://someLDAPServer.somedomain.com:636 /
cfset javaEnv.put(java.naming.provider.url, ldapsURL) /
cfset javaEnv.put(java.naming.security.principal, CN=Administrator, 
CN=Users, dc=ad2003-dev, dc=com) /
cfset javaEnv.put(java.naming.security.credentials, 
Administrator'sPassword) /
cfset javaEnv.put(java.naming.security.authentication, simple) /
cfset javaEnv.put(java.naming.security.protocol, ssl) /
cfset javaEnv.put(java.naming.factory.initial, 
com.sun.jndi.ldap.LdapCtxFactory) /

cfset javaCtx = CreateObject(java, 
javax.naming.directory.InitialDirContext).Init(javaEnv) /
cfset javaAttr = CreateObject(java, 
javax.naming.directory.BasicAttributes).Init(unicodePwd, unicodePwd) /

cfset javaCtx.modifyAttributes(CN=Ed Test, OU=Users, OU=Development, OU=IB, 
dc=ad2003-dev, dc=com, javaCtx.REPLACE_ATTRIBUTE, javaAttr) /

cfset javaCtx.close() /


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335974
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: oracle database link

2010-08-04 Thread Mark A. Kruger

Dave,

The error suggests something coming back from the first Oracle server. I
would start by searching the oracle docs for that message.

-Mark


Mark A. Kruger, MCSE, CFG
(402) 408-3733 ext 105
Skype: markakruger
www.cfwebtools.com
www.coldfusionmuse.com
www.necfug.com



-Original Message-
From: Dave P [mailto:jda...@gmail.com] 
Sent: Wednesday, August 04, 2010 8:12 AM
To: cf-talk
Subject: oracle database link


Hello all,

Has anyone actually gotten a database link working from a CF server to a
second oracle server?

I'm trying a connection string:
create database link prodlink connect to myusername identified by mypass
using 'PROD';

and getting:

 Error Executing Database Query.
Executing the SQL statement is not allowed. 

The problem is that I am not the admin and have little oracle experience.
The DBA has little CF (or even web) experience.

It sounds like to me there is a permissions error in either the oracle DB,
or in CF.

I'm not sure which.  Of course i'm crunched for time.

Any ideas?  

Thank you,
Dave Powell




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335975
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: oracle database link

2010-08-04 Thread Won Lee

I assume you mean a link from one oracle schema to another schema by
executing the CREATE DATABASE LINK sql command through a CFML page.

Is this correct?  If it is check your permissions.  This most likely has
nothing to do with CF.  As I side note, I don't think CFML pages should be
running this sort of code.  You should just login to your Oracle DB and run
that command to create a link.

Curious?  Is there a reason why you just don't create a new CF datasource in
the CF ADMIN?



On Wed, Aug 4, 2010 at 9:11 AM, Dave P jda...@gmail.com wrote:


 Hello all,

 Has anyone actually gotten a database link working from a CF server to a
 second oracle server?

 I'm trying a connection string:
 create database link prodlink connect to myusername identified by
 mypass using 'PROD';

 and getting:

  Error Executing Database Query.
 Executing the SQL statement is not allowed.

 The problem is that I am not the admin and have little oracle experience.
  The DBA has little CF (or even web) experience.

 It sounds like to me there is a permissions error in either the oracle DB,
 or in CF.

 I'm not sure which.  Of course i'm crunched for time.

 Any ideas?

 Thank you,
 Dave Powell


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335976
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Best CF development laptop

2010-08-04 Thread Gerald Guido

I will take this as a segway to mention my favorite digital crack house:
cedarpc.com
http://www.cedarpc.com/index.php?open=onlinestore

If you like a bargain and don't mind doing a little leg work you can find
new and used machines here at a deep discount. They usually have some new
sealed box machines with full warranty for $100-$200 below retail. I picked
up a Dell MiniTower with an Intel duel core Core 2.66Ghz, 4 gig ram and
640GB HD for $218. It is not a hot rod like you are spec-ing out but it is a
very capable dev box/media center on the cheap.

My $0.02 and worth every penny.

G!


On Wed, Aug 4, 2010 at 2:17 AM, Mark Mandel mark.man...@gmail.com wrote:


 Some thoughts to add to the mix.

 I consistently buy Dell laptops, for a variety of reasons, but primarily
 for
 their 3 year, on site support. As a contractor, even a single day downtime
 is no good.

 No idea which part of the world you are in, but here in australia, I've
 called tech support at 3pm and had a tech at my house 9am the next morning
 to fix my computer.

 If you can find a brand of laptops that provide multi-year on site support,
 it's invaluable.

 On another note - if you want the best performance out of your vms, put
 them
 on an external hd, the faster the better, with the fastest connection as
 well.

 Anyway, just my experience, thought I would share.


-- 
Gerald Guido
http://www.myinternetisbroken.com

Wait. We can't stop here. This is bat country.
-- HST


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335977
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: OOP Principles question

2010-08-04 Thread Charlie Griefer

On Wed, Aug 4, 2010 at 3:22 AM, Scott Stewart sstwebwo...@bellsouth.netwrote:


 I understand the black box principle of CFC's, make sure that your cfc's
 can stand on their own as black boxes. When doing OOP based development,
 does this paradigm

 extend to  non-cfc ColdFusion files, IE: display and action pages.


I think the concept of modularity and code reuse extends beyond OO.  In
views, when you find yourself reusing code, you throw it into an include.
 If it needs attributes passed in, you throw it into a custom tag.

There's nothing that I think is particularly OO about it... it's just about
working smarter and not harder :)

-- 
Charlie Griefer
http://charlie.griefer.com/

I have failed as much as I have succeeded. But I love my life. I love my
wife. And I wish you my kind of success.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335978
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: cftextarea setValue() and jquery dialog

2010-08-04 Thread Scott Brady

Any ideas on this?  Or, should I look at getting rid of the built-in CK
editor and implementing the CK editor myself?

Scott

On Sat, Jul 31, 2010 at 12:16 PM, Scott Brady dsbr...@gmail.com wrote:

 Actually, I made a little progress.  I realied #f1 should be my form ID, so
 I changed that, and now ta.attr('id') does return the right ID.  But, now
 I'm getting this error:
 this.EditingArea is undefined

 caused by this line:


 ColdFusion.RichText.setValue(ta.attr('id'),responseData.socialEventDescription);

 Scott

 --
-
Scott Brady
http://www.scottbrady.net/


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335979
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SESSION variables and cflock

2010-08-04 Thread Dave Watts

 The book says you should act on SESSION variables within a cflock because of 
 potential collisions. But are my SESSION
 variables not mine and inaccessible to anyone else? How could there be a 
 collision?

The same browser can make multiple concurrent requests; they will all
be in the same session.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335980
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Best CF development laptop

2010-08-04 Thread Dave Watts

 On another note - if you want the best performance out of your vms, put them
 on an external hd, the faster the better, with the fastest connection as
 well.

Yikes! I'm sorry, but this is overall terrible advice unless you
happen to have external eSATA or something along those lines. Most
people have external drives using USB 2, and running VMs from that
will be exponentially slower. I haven't tried USB 3 yet, but no matter
what it's not going to match the performance from running them
onboard.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335981
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Best CF development laptop

2010-08-04 Thread Dave Watts

 And don't settle for less than 8gbs of RAM. 64 bit software has
 a tendency to eat up RAM

 news to me :0) is it not that just that 64bit tech has the ability to fully
 access 4gb of ram at the one time (If the os needs access to it) rather than
 eats it up.

 Anyone care to explain this one to me? i'm about to buy a new laptop and
 would appreciate some advice

A 64-bit OS can address more than 4 GB RAM. 32-bit OSs generally can't.

To oversimplify things a bit, numeric data types in a 64-bit OS are
larger (64-bit vs 32-bit) to take advantage of the increase in
register size. So, storing the same information in a 64-bit OS takes
more memory than it does in a 32-bit OS. But, this is outweighed by
the ability to address more memory in the first place. So, for
example, on a 32-bit OS a JVM can't really address more than 1.5 GB
RAM (if even that), but on a 64-bit OS a JVM can address significantly
more RAM so it doesn't really matter that it needs more memory in the
first place.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335982
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: OOP Principles question

2010-08-04 Thread Dave Watts

 I understand the black box principle of CFC's, make sure that your cfc's
 can stand on their own as black boxes. When doing OOP based development,
 does this paradigm extend to non-cfc ColdFusion files, IE: display and action 
 pages.

In general, any program should have a defined set of inputs and
outputs, and CFML pages are no different.

However, dependencies are much more acceptable in CFML pages than in
CFCs. For example, includes, references to external scopes, etc -
that's all fine in CFML pages.

So, my overall advice here would be not to overthink display logic -
it's the least formal layer in an HTML-based MVC application.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335983
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SESSION variables and cflock

2010-08-04 Thread Jason Fisher

Think iframes or Ajax calls or other types of situations where A User may 
be session-linked to more than one current thread / process.  In those 
cases, if there is potential for simultaneous writes to a session var, then 
you could theoretically have a clash.  If your app uses no Ajax and has no 
other embedded code blocks that might trigger concurrency within a session, 
then locking would not be needed, in theory.





~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335984
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: UBBCode img tag exploit

2010-08-04 Thread Pete Freitag

Hi Dennis,

Take a look at AntiSamy for Java, it will sanitize HTML based on rules
you specify. Also take a look at OWASP ESAPI for Java, which has
encoder methods you can use when you output variables on your page to
prevent XSS (ESAPI has support for using AntiSamy as well). I covered
this at my cfunited presentation Writing Secure CFML, I will be
posting slides for that on my blog hopefully later today.


--
Pete Freitag
http://foundeo.com/ - ColdFusion Consulting  Products
http://petefreitag.com/ - My Blog
http://hackmycf.com - Is your ColdFusion Server Secure?



On Wed, Jul 28, 2010 at 12:09 AM, UXB Internet denn...@uxbinternet.com wrote:

 I am wondering if anyone has a UBBCode to Html conversion for the [IMG} tag
 that will sanitize the input to prevent XSS vulnerabilities such as adding
 script to the img tag. I am trying to prevent XSS like below and worse.  I
 have a CF based forum I inherited and the UBB  HTML conversion for the
 [img] tag is simplistic and needs replacing.  I would rather not reinvent
 the wheel if I don't have to especially since this is a favor for someone.
 Any help is appreciated.

 [img]http://www.uxb.net/images/small-logo.gif 
 onLoad=alert(String.fromCharCode(88,83,83))[/img]

 [img]fake.png onerror=alert(String.fromCharCode(88,83,83))[/img]




 Dennis Powers
 UXB Internet - A Website Design  Hosting Company
 P.O. Box 6028
 Wolcott, CT 06716
 203-879-2844
 http://www.uxbinternet.com










 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335985
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: OOP Principles question

2010-08-04 Thread Sean Corfield

On Wed, Aug 4, 2010 at 7:50 AM, Dave Watts dwa...@figleaf.com wrote:
 So, my overall advice here would be not to overthink display logic -
 it's the least formal layer in an HTML-based MVC application.

I might go further and suggest not to overthink any aspect of your
design. The biggest obstacle I see for CFers learning OOP is a
tendency toward 'analysis paralysis' where the search for the perfect
OO design prevents them from getting any useful work done, for fear of
'getting it wrong'. The reality is there is no 'One True Way' in OO
and your design is likely to evolve anyway over time.

The Agile folks actually expect this to be the norm and their approach
is to do the simplest possible thing that works initially and then
refactor ruthlessly, making ongoing change part of your normal
process. That approach - as well as KISS and YAGNI - leads to simpler
designs that don't focus on obsessive reusability (until you need it).
Of course, the Agile folks tend to do everything under a TDD umbrella
so they write their specs in small, evolving chunks as executable
tests and code to those which helps solidify the concepts of what
you're trying to build without focusing on the implementation details
and tends to create more modular software anyway...
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

If you're not annoying somebody, you're not really alive.
-- Margaret Atwood

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335986
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: OOP Principles question

2010-08-04 Thread Scott Stewart

So what your saying is, design patterns, like music theory, exist so
you know when you're breaking them :)

On Wed, Aug 4, 2010 at 11:56 AM, Sean Corfield seancorfi...@gmail.com wrote:

 On Wed, Aug 4, 2010 at 7:50 AM, Dave Watts dwa...@figleaf.com wrote:
 So, my overall advice here would be not to overthink display logic -
 it's the least formal layer in an HTML-based MVC application.

 I might go further and suggest not to overthink any aspect of your
 design. The biggest obstacle I see for CFers learning OOP is a
 tendency toward 'analysis paralysis' where the search for the perfect
 OO design prevents them from getting any useful work done, for fear of
 'getting it wrong'. The reality is there is no 'One True Way' in OO
 and your design is likely to evolve anyway over time.

 The Agile folks actually expect this to be the norm and their approach
 is to do the simplest possible thing that works initially and then
 refactor ruthlessly, making ongoing change part of your normal
 process. That approach - as well as KISS and YAGNI - leads to simpler
 designs that don't focus on obsessive reusability (until you need it).
 Of course, the Agile folks tend to do everything under a TDD umbrella
 so they write their specs in small, evolving chunks as executable
 tests and code to those which helps solidify the concepts of what
 you're trying to build without focusing on the implementation details
 and tends to create more modular software anyway...
 --
 Sean A Corfield -- (904) 302-SEAN
 Railo Technologies, Inc. -- http://getrailo.com/
 An Architect's View -- http://corfield.org/

 If you're not annoying somebody, you're not really alive.
 -- Margaret Atwood

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335987
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: UBBCode img tag exploit

2010-08-04 Thread Brook Davies

Hi Pete,

Do you have any examples of how to integrate AntiSamy for Java with CF? Is
that in your presentation?

Brook

-Original Message-
From: Pete Freitag [mailto:p...@foundeo.com] 
Sent: August-04-10 8:37 AM
To: cf-talk
Subject: Re: UBBCode img tag exploit


Hi Dennis,

Take a look at AntiSamy for Java, it will sanitize HTML based on rules
you specify. Also take a look at OWASP ESAPI for Java, which has
encoder methods you can use when you output variables on your page to
prevent XSS (ESAPI has support for using AntiSamy as well). I covered
this at my cfunited presentation Writing Secure CFML, I will be
posting slides for that on my blog hopefully later today.


--
Pete Freitag
http://foundeo.com/ - ColdFusion Consulting  Products
http://petefreitag.com/ - My Blog
http://hackmycf.com - Is your ColdFusion Server Secure?



On Wed, Jul 28, 2010 at 12:09 AM, UXB Internet denn...@uxbinternet.com
wrote:

 I am wondering if anyone has a UBBCode to Html conversion for the [IMG}
tag
 that will sanitize the input to prevent XSS vulnerabilities such as adding
 script to the img tag. I am trying to prevent XSS like below and worse.
 I
 have a CF based forum I inherited and the UBB  HTML conversion for the
 [img] tag is simplistic and needs replacing.  I would rather not reinvent
 the wheel if I don't have to especially since this is a favor for someone.
 Any help is appreciated.

 [img]http://www.uxb.net/images/small-logo.gif 
 onLoad=alert(String.fromCharCode(88,83,83))[/img]

 [img]fake.png onerror=alert(String.fromCharCode(88,83,83))[/img]




 Dennis Powers
 UXB Internet - A Website Design  Hosting Company
 P.O. Box 6028
 Wolcott, CT 06716
 203-879-2844
 http://www.uxbinternet.com










 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335988
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: UBBCode img tag exploit

2010-08-04 Thread Rick Root

Interesting thread.

The parseBBML() UDF that I wrote for CFMBB (based on Jim Davis'
DP_ParseBBML) has this flaw, I just tested it.

Basically, I think the fix is to modify this line:


Input = ReReplaceNoCase(Input,
\[(img|image)\]([^[#Chr(171)#]*)\[/(img|image)\], #Chr(171)#img
src=#Chr(167)#\2#Chr(167)##Chr(187)#, All);

(the funky chr() values are temporary replacement characters for the
conversion process).

Basically, I think if you prevent conversion of images with quotes,
this  goes away.  Ie...


Input = ReReplaceNoCase(Input,
\[(img|image)\]([^[#Chr(34)##Chr(171)#]*)\[/(img|image)\],
#Chr(171)#img src=#Chr(167)#\2#Chr(167)##Chr(187)#, All);

But I haven't tested this yet.

(btw, Ray's Galleon uses DP_ParseBBML so Galleon may have this issue
as well, along with a similar solution)

Rick

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335989
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Best CF development laptop

2010-08-04 Thread Mark Mandel

Maybe I am off base with this one, but the research I did a while back
stated that the biggest bottleneck to vm performance was disk io conflicts.

I.e. if your vm lives on the same hd as your os and your programs they are
all competing to read and write at the same time.

Having a separate hd, internal or external solves that problem. (i have an
external 7200 rpm firewire drive).

I'll have to look up the articles that discussed this.

Mark.

Sent from my mobile device

On 4 Aug 2010 04:39, Dave Watts dwa...@figleaf.com wrote:

 On another note - if you want the best performance out of your vms, put
them
 on an external hd, the faster the better, with the fastest connection as
 well.

 Yikes! I'm sorry, but this is overall terrible advice unless you
 happen to have external eSATA or something along those lines. Most
 people have external drives using USB 2, and running VMs from that
 will be exponentially slower. I haven't tried USB 3 yet, but no matter
 what it's not going to match the performance from running them
 onboard.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsite.

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335990
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Best CF development laptop

2010-08-04 Thread Dave Watts

 Maybe I am off base with this one, but the research I did a while back
 stated that the biggest bottleneck to vm performance was disk io conflicts.

That is definitely a big issue in a production environment, where
you're more likely to be running multiple VMs. But in a developer's
typical environment, that is going to be massively outweighed by the
terribly slow access via USB 2 or Firewire.

 I.e. if your vm lives on the same hd as your os and your programs they are
 all competing to read and write at the same time.

 Having a separate hd, internal or external solves that problem. (i have an
 external 7200 rpm firewire drive).

A separate internal HDD definitely makes a big difference, but I can
say from experience that the transfer speed of Firewire just isn't
enough. I got an external eSATA drive, and that's sufficient, but I
can't tell any significant difference (for me) from the internal SSD
in my primary laptop (other than not having to store these giant files
on my limited internal space).

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335991
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: UBBCode img tag exploit

2010-08-04 Thread Rick Root

This does seem to work if you're using DP_ParseBBML or my parseBBML udf.

rick


On Wed, Aug 4, 2010 at 2:02 PM, Rick Root rick.r...@gmail.com wrote:
 Interesting thread.

 The parseBBML() UDF that I wrote for CFMBB (based on Jim Davis'
 DP_ParseBBML) has this flaw, I just tested it.

 Basically, I think the fix is to modify this line:


                                Input = ReReplaceNoCase(Input,
 \[(img|image)\]([^[#Chr(171)#]*)\[/(img|image)\], #Chr(171)#img
 src=#Chr(167)#\2#Chr(167)##Chr(187)#, All);

 (the funky chr() values are temporary replacement characters for the
 conversion process).

 Basically, I think if you prevent conversion of images with quotes,
 this  goes away.  Ie...


                                Input = ReReplaceNoCase(Input,
 \[(img|image)\]([^[#Chr(34)##Chr(171)#]*)\[/(img|image)\],
 #Chr(171)#img src=#Chr(167)#\2#Chr(167)##Chr(187)#, All);

 But I haven't tested this yet.

 (btw, Ray's Galleon uses DP_ParseBBML so Galleon may have this issue
 as well, along with

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335992
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF9 Developer on Windows 7 Home Premium?

2010-08-04 Thread Michael Grant

Sadly my Win 7 64 machine almost never gets turned on. I seem to spend more
time on the couch with my Vista laptop than in my office with my kick ass
machine. Plus now every time I turn it on I get a blue screen after I log
in. Then it restarts and works normally. Tis an odd thing. When I am using
it I love it though. When it's not crashing for no apparent reason that is.

On Wed, Aug 4, 2010 at 1:58 AM, Judah McAuley ju...@wiredotter.com wrote:


 And full disk encryption is available for free via TrueCrypt as I
 write this from my laptop with a full disk encryption setup with Win 7
 Home 64-bit.

 On Tue, Aug 3, 2010 at 8:11 PM, Dave Watts dwa...@figleaf.com wrote:
 
  As I understand it, when you upgrade from one version of Windows 7 to
  another, all it's really doing is unlocking features already on your
  machine.
 
  Yes, I think so. There really isn't that much difference: Professional
  can join Windows domains, Ultimate has a full-disk encryption option.
 
  Dave Watts, CTO, Fig Leaf Software
  http://www.figleaf.com/
  http://training.figleaf.com/
 
  Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
  GSA Schedule, and provides the highest caliber vendor-authorized
  instruction at our training centers, online, or onsite.
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335993
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: onApplicationStart

2010-08-04 Thread Matt Coldfusion

This doesnt work for me and I cannot work out why?
I run onApplicationStart in application.cfc and all my old application 
variables still exist, i have to restart the service all the time but i can't 
do this on my shared server. 








What is another way besides creating a temp file to explicitly reset
those variables?
Is there a way to make the Application expire and restart (sort of
speak)?

Here's what I use:

cffunction name=onRequestStart returntype=void output=false
  cfif structKeyExists(url,reinitApp)
cflock scope=application type=exclusive timeout=5 
 throwontimeout=true
  cfset onApplicationStart()
/cflock
  /cfif
/cffunction

Then add ?reinitApp=1 in any url to restart the app

Will 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335994
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Cfform / cfformgroup question

2010-08-04 Thread Stephens, Larry V

cfform action=ClaimsTop.cfm method=post scriptsrc=../../CFIDE/scripts/ 
name=ClaimsTop height=285 width=480 format=Flash skin=HaloBlue
cfformgroup type=tabnavigator height=240 style=marginTop: 0
cfformgroup type=page label=Contact Information
cfinput type=text name=filenum width=200 
label=Full number 
cfinput type=text name=pfilenum width=200 
label=Partial number 
cfinput type=submit name=Go2 value=Look 
width=100 /
/cfformgroup
/cfformgroup
/cfform

(Why we're specifying an alternate CFIDE relates to how we implement security 
measures here.)

The code above works.

If I insert a javascript call into a cfinput, e.g., 
cfinput type=text name=filenum width=200 label=Full number 
onChange=this.value=removeSpaces(this.value);

Then it doesn't.

?  The docs on cfinput indicate I can do this.

Any clues? Works okay is a standard form, BTW.


Larry Stephens

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335995
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: onApplicationStart

2010-08-04 Thread Raymond Camden

That's by design. CF knows when an application starts. You can 'force'
it a few ways.

1) In CF9, within onRequestStart, add a check for url.init (or some
such), and run applicationStop(), you then need to reload the current
request.
2) Or even simpler, within onRequestStart, add a check for a url var
and simply do

onApplicationStart();

This will NOT single thread the call, but if you are just setting up a
bunch of variables, you most likely do not need to be concerned.

3) I don't really recommend this, but you can also just rename the application.


On Wed, Aug 4, 2010 at 2:56 PM, Matt Coldfusion i...@fusionserve.net wrote:

 This doesnt work for me and I cannot work out why?
 I run onApplicationStart in application.cfc and all my old application 
 variables still exist, i have to restart the service all the time but i can't 
 do this on my shared server.








What is another way besides creating a temp file to explicitly reset
those variables?
Is there a way to make the Application expire and restart (sort of
speak)?

Here's what I use:

cffunction name=onRequestStart returntype=void output=false
  cfif structKeyExists(url,reinitApp)
    cflock scope=application type=exclusive timeout=5 
 throwontimeout=true
      cfset onApplicationStart()
    /cflock
  /cfif
/cffunction

Then add ?reinitApp=1 in any url to restart the app

Will

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335996
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: onApplicationStart

2010-08-04 Thread Eric Cobb

Here's the poor mans answer to applicationStop(), it works on CF7  CF8.

|||cfset| |application.setIsInited(false) /
|
See Mister Dai for a more detailed explanation:
http://misterdai.wordpress.com/2010/06/11/cf-flag-application-to-run-onapplicationstart/
|
|

Thanks,

Eric Cobb
ECAR Technologies, LLC
http://www.ecartech.com
http://www.cfgears.com



Raymond Camden wrote:
 That's by design. CF knows when an application starts. You can 'force'
 it a few ways.

 1) In CF9, within onRequestStart, add a check for url.init (or some
 such), and run applicationStop(), you then need to reload the current
 request.
 2) Or even simpler, within onRequestStart, add a check for a url var
 and simply do

 onApplicationStart();

 This will NOT single thread the call, but if you are just setting up a
 bunch of variables, you most likely do not need to be concerned.

 3) I don't really recommend this, but you can also just rename the 
 application.


 On Wed, Aug 4, 2010 at 2:56 PM, Matt Coldfusion i...@fusionserve.net wrote:
   
 This doesnt work for me and I cannot work out why?
 I run onApplicationStart in application.cfc and all my old application 
 variables still exist, i have to restart the service all the time but i 
 can't do this on my shared server.








 
 What is another way besides creating a temp file to explicitly reset
 those variables?
 Is there a way to make the Application expire and restart (sort of
 speak)?
 
 Here's what I use:

 cffunction name=onRequestStart returntype=void output=false
  cfif structKeyExists(url,reinitApp)
cflock scope=application type=exclusive timeout=5 
 throwontimeout=true
  cfset onApplicationStart()
/cflock
  /cfif
 /cffunction

 Then add ?reinitApp=1 in any url to restart the app

 Will
   
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335997
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


cflayout question

2010-08-04 Thread Victor Moore

I have the following layout and I can't make it work.

All I want is the header and footer to be fixed size and the center to
expand to fill the size of the screen.

Thanks

cflayout name=outerlayout type=vbox style=width:939; height:100%
cflayoutarea style=height:100%;background-color:##0080c0;  
cflayout name=alayout  type=border
style=background-color:##ccc;border:3px solid ##ccc;
 cflayoutarea position=top size=150 align=center
splitter=false style=background-color:##00;; 
header
/cflayoutarea
cflayoutarea   title= position=left closable=false
collapsible=false name=left splitter=false size=230
style=background-color:##ccc;
cflayout name=left type=accordion fillHeight=true
style=width:200;
cflayoutarea title=hey 
h6Some stuff/h6
/cflayoutarea
/cflayout
/cflayoutarea
cflayoutarea position=center name=center
style=background-color:##FFF;
 main stuff
/cflayoutarea
cflayoutarea position=bottom splitter=false
size=70 overflow=hidden style=background-color:##FFF; border:3px
solid ##ccc; height:100%
footer
/cflayoutarea
/cflayout
/cflayoutarea
 /cflayout

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335998
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: onApplicationStart

2010-08-04 Thread Eric Cobb

Huh, not sure what happened with the formatting on that.  Here you go:

cfset application.setIsInited(false) /

Thanks,

Eric Cobb
ECAR Technologies, LLC
http://www.ecartech.com
http://www.cfgears.com



Eric Cobb wrote:
 Here's the poor mans answer to applicationStop(), it works on CF7  CF8.

 |||cfset| |application.setIsInited(false) /
 |
 See Mister Dai for a more detailed explanation:
 http://misterdai.wordpress.com/2010/06/11/cf-flag-application-to-run-onapplicationstart/
 |
 |

 Thanks,

 Eric Cobb
 ECAR Technologies, LLC
 http://www.ecartech.com
 http://www.cfgears.com



 Raymond Camden wrote:
   
 That's by design. CF knows when an application starts. You can 'force'
 it a few ways.

 1) In CF9, within onRequestStart, add a check for url.init (or some
 such), and run applicationStop(), you then need to reload the current
 request.
 2) Or even simpler, within onRequestStart, add a check for a url var
 and simply do

 onApplicationStart();

 This will NOT single thread the call, but if you are just setting up a
 bunch of variables, you most likely do not need to be concerned.

 3) I don't really recommend this, but you can also just rename the 
 application.


 On Wed, Aug 4, 2010 at 2:56 PM, Matt Coldfusion i...@fusionserve.net wrote:
   
 
 This doesnt work for me and I cannot work out why?
 I run onApplicationStart in application.cfc and all my old application 
 variables still exist, i have to restart the service all the time but i 
 can't do this on my shared server.








 
   
 What is another way besides creating a temp file to explicitly reset
 those variables?
 Is there a way to make the Application expire and restart (sort of
 speak)?
 
   
 Here's what I use:

 cffunction name=onRequestStart returntype=void output=false
  cfif structKeyExists(url,reinitApp)
cflock scope=application type=exclusive timeout=5 
 throwontimeout=true
  cfset onApplicationStart()
/cflock
  /cfif
 /cffunction

 Then add ?reinitApp=1 in any url to restart the app

 Will
   
 
 
   
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335999
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Cybersource - Coldfusion 8

2010-08-04 Thread heath stein

 I'm hoping someone has dealt with CF8 and Cybersource (Simple Order 
 API).
 
 We've gotten it to run on CF6.1 but can't seem to get past this on CF8.
 
 
 Here is the sniplet of error code:
 
 ROOT CAUSE:
 
 ROOT CAUSE:
 
 java.lang.NoClassDefFoundError: Could not initialize class com.
 cybersource.ws.client.Signature
 

 at com.cybersource.ws.client.XMLClient.soapWrapAndSign(XMLClient.
 java:396)
 

 at com.cybersource.ws.client.XMLClient.runTransaction(XMLClient.
 java:176)
 

 at com.cybersource.ws.client.XMLClient.runTransaction(XMLClient.
 java:113)
 

 at CyberSource.runTransaction(CyberSource.java:49)
 

 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 

 at sun.reflect.NativeMethodAccessorImpl.
 invoke(NativeMethodAccessorImpl.java:39)
 

 at sun.reflect.DelegatingMethodAccessorImpl.
 invoke(DelegatingMethodAccessorImpl.java:25)
 

 at java.lang.reflect.Method.invoke(Method.java:597)
 

 at coldfusion.runtime.java.JavaProxy.invoke(JavaProxy.java:87)
 

 at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2272)

 
 
 Has anyone seen this before and dealt with it?  We've been going back 
 and forth with Cybersource support and really getting no where.
 
 We've verified our class paths and the Jar files are all in place.
 
 Any suggestions?
 
 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336000
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Cybersource - Coldfusion 8

2010-08-04 Thread heath stein

Paul, were you ever able to find the issue with this, I am running into the 
same problem.


 I'm hoping someone has dealt with CF8 and Cybersource (Simple Order 
 API).
 
 We've gotten it to run on CF6.1 but can't seem to get past this on CF8.
 
 
 Here is the sniplet of error code:
 
 ROOT CAUSE:
 
 ROOT CAUSE:
 
 java.lang.NoClassDefFoundError: Could not initialize class com.
 cybersource.ws.client.Signature
 

 at com.cybersource.ws.client.XMLClient.soapWrapAndSign(XMLClient.
 java:396)
 

 at com.cybersource.ws.client.XMLClient.runTransaction(XMLClient.
 java:176)
 

 at com.cybersource.ws.client.XMLClient.runTransaction(XMLClient.
 java:113)
 

 at CyberSource.runTransaction(CyberSource.java:49)
 

 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 

 at sun.reflect.NativeMethodAccessorImpl.
 invoke(NativeMethodAccessorImpl.java:39)
 

 at sun.reflect.DelegatingMethodAccessorImpl.
 invoke(DelegatingMethodAccessorImpl.java:25)
 

 at java.lang.reflect.Method.invoke(Method.java:597)
 

 at coldfusion.runtime.java.JavaProxy.invoke(JavaProxy.java:87)
 

 at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2272)

 
 
 Has anyone seen this before and dealt with it?  We've been going back 
 and forth with Cybersource support and really getting no where.
 
 We've verified our class paths and the Jar files are all in place.
 
 Any suggestions?
 
 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336001
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Read only text datasource?

2010-08-04 Thread Claude Schnéegans

Hi, I want to read records from a tab delimited log file, so I have 
defined an ODBC datasource on the directory, and a DSN on the ODBC 
socket in the CF administrator (CF 9).

All I want to do is read the records:
CFQUERY DATASOURCE=logSMTP NAME=getLogs
  SELECT * FROM [#file#.log]
/CFQUERY

I get this error:
[Macromedia][SequeLink JDBC Driver][ODBC Socket][Microsoft][ODBC Text 
Driver] Cannot update. Database or object is read-only.
But I don't to update, just read the file, and the file is not even read 
only.

Is there any way I can define a read only datasource?
I don't see any parameter for this, either in the ODBC, either in the CF 
Administrator.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336002
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: OOP Principles question

2010-08-04 Thread Sean Corfield

On Wed, Aug 4, 2010 at 9:27 AM, Scott Stewart webmas...@sstwebworks.com wrote:
 So what your saying is, design patterns, like music theory, exist so
 you know when you're breaking them :)

That's a good way of phrasing it :)

The key thing to remember about design patterns is they include a set
of 'forces' that indicate a particular pattern *may* be applicable in
your case as well as a set of 'trade offs' that show what the
downsides are and what problems you may introduce by using that
pattern. A lot of people forget about the 'cons' and see design
patterns as all fluffy and covered in unicorn dust...
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

If you're not annoying somebody, you're not really alive.
-- Margaret Atwood

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336003
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Handling errors under CF 9

2010-08-04 Thread Claude Schnéegans

Hi,

I have this code in Application.cfm
CFERROR TYPE = Exception template = /commun/requestError.cfm

Under CF 5 and untill CF 8, the application scope was not changed when 
running requestError.cfm
even if it is in the virtual directory \commun
But now in CF 9, the Application.cfm in the commun directory is executed 
first, and the application scope is reset.

Should I consider this as a old bug corrected in CF 9, or a brand new bug?
This is a change in the way it used to work, anyway.



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336004
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Need a west coast (US) based CF host [spamtrap heur]

2010-08-04 Thread Michael Grant


 Well i do something similar in a way.


As do I. I've got a setLocalTZ() function and all my times are based on UTC.
Once you go UTC you'll never go back. ;)


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336005
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Bind to a CFINPUT from a CFGRID

2010-08-04 Thread Michael Grant

As an aside:

I see this time and time again and just don't get it. If you're going to
bother to test that url.Parkname exists and isn't a zero length string then
why aren't you trimming it when you check?



On Fri, Jul 30, 2010 at 12:57 AM, Ria Ragam ragam0...@gmail.com wrote:


 gridExample.cfm
 cfquery
name=GetParks datasource=cfdocexamples
cachedwithin=#CreateTimeSpan(0, 6, 0, 0)#
SELECT PARKNAME, REGION, STATE
FROM Parks
Where REGION = 'Southeast Region'
ORDER BY ParkName, State
 /cfquery
 cfform name=GridForm action=
 cfgrid name=Brand_Grid selectmode=row selectonLoad=no
 BindOnLoad=no query=GetParks format='html' appendKey =yes 
 cfgridcolumn name=PARKNAME
 header=PARKNAME
 headeralign=center
 headerbold=Yes
 cfgridcolumn name=REGION
 header=REGION
 headeralign=center
 headerbold=Yes
 /cfgrid
 /cfform
 cfdiv id=id_DivEditeSiteDetail
 bind=url:gridOutput.cfm?PARKNAME={GridForm:Brand_Grid.PARKNAME}/cfdiv

 gridOutput.cfm
 h3Echoing main page input:/h3
 cfoutput
cfif isdefined(url.PARKNAME) AND url.PARKNAME NEQ 
cfoutput
table
  tr
  tdPark Name:/td
  tdinput value=#url.PARKNAME# name=ParkName
 type=Text/td/tr
/table
/cfoutput
cfelse
No input
/cfif
 /cfoutput


  I can't seem to figure out how to bind a selected column value in a
  CFGRID to a text box later on the page. Any ideas?  Thanks


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336006
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: query add row at top of query

2010-08-04 Thread Michael Grant

I know I'm a little late to the game here, but wouldn't the easier way be
just to union an explicitly set row?
It's a LOT less code and lets the db take the load.

cfquery name=GetParks datasource=cfdocexamples
 SELECT PARKNAME, REGION, STATE, cORDER = 2
FROM Parks
 Where REGION = 'Southeast Region'

UNION

SELECT TOP 1
PARKNAME = 'myName',
 REGION = 'myRegion',
STATE = 'myState',
 cORDER = 1
FROM Parks
 ORDER BY cORDER, ParkName, State
/cfquery



On Mon, Aug 2, 2010 at 3:00 PM, Richard White rich...@j7is.co.uk wrote:


 thanks to all posts, and thanks Ria, i like this method :)

  You can refer to this link to appendQuery
  http://www.bennadel.com/blog/114-ColdFusion-QueryAppend-qOne-qTwo-.
  htm
  I guess you should go with method one as of my understanding. Posting
  example here.
 
  appendQuery.cfm
  cfquery

  name=GetParks datasource=cfdocexamples

  cachedwithin=#CreateTimeSpan(0, 6, 0, 0)#
SELECT PARKNAME, REGION, STATE

FROM Parks
Where REGION = 'Southeast Region'

ORDER BY ParkName, State
/cfquery
  cfset testQuery = queryNew(PARKNAME,REGION,STATE,varchar,varchar,
  varchar)
  cfset queryAddrow(testQuery,1)
 
  cfset test1 = createObject('component','appendQuery')
  cfset resultQuery = test1.QueryAppend(testQuery,GetParks)
  cfdump var=#resultQuery#
  cfabort
 
  cfset test1 = createObject('component','appendQuery')
  cfset resultQuery = test1.QueryAppend2(testQuery,GetParks)
  cfdump var=#resultQuery#
 
  appendQuery.cfc
  cffunction name=QueryAppend access=public returntype=query
  output=false
  hint=This takes two queries and appends the second one to the first
  one. Returns the resultant third query.
 
  !--- Define arguments. ---
  cfargument name=QueryOne type=query required=true /
  cfargument name=QueryTwo type=query required=true /
  cfargument name=UnionAll type=boolean required=false
  default=true /
 
  !--- Define the local scope. ---
  cfset var LOCAL = StructNew() /
 
  !--- Append the second to the first. Do this by unioning the two
  queries. ---
  cfquery name=LOCAL.NewQuery dbtype=query
  !--- Select all from the first query. ---
  (
  SELECT
  *
  FROM
  ARGUMENTS.QueryOne
 
  )
 
  !--- Union the two queries together. ---
  UNION
 
  !---
  Check to see if we are going to care about duplicates. If we don't
  expect duplicates then just union all.
  ---
  cfif ARGUMENTS.UnionAll
  ALL
  /cfif
 
  !--- Select all from the second query. ---
  (
  SELECT
  *
  FROM
  ARGUMENTS.QueryTwo
  )
  /cfquery
 
  !--- Return the new query. ---
  cfreturn LOCAL.NewQuery /
  /cffunction
 
   i have a query which has sort criteria applied at mysql level.
  
   i want to add a row at the top of the query after mysql has
  finished with it.
  
   If i use the queryaddrow method it adds the row to the bottom of
  the query
  
   is there anyway to get it to add it as the first item?
  
  You could add the new row in the SQL itself using a UNION statement,
  couldn't you?
  
  Otherwise, you could add it using queryAddRow, querySetCell, etc,
  but
  you'd have to figure out how to get things in the order that you
  want
  them. You could create a new query, add the row to the new query,
  then
  loop through the old query and add each row to the new query. Or you
  could use queryAddRow and querySetCell with the existing query, but
  have a sortable field for all rows including the new row, then use
  query of query to sort the query again.
  
  But I'd go with doing this in your SQL if I were you.
  
  Dave Watts, CTO, Fig Leaf Software
  http://www.figleaf.com/
  http://training.figleaf.com/
  
  Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
  GSA Schedule, and provides the highest caliber vendor-authorized
  instruction at our training centers, online, or onsite.


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336007
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Need a west coast (US) based CF host [spamtrap heur]

2010-08-04 Thread Sean Corfield

Just noticed this thread and I thought it was worth pointing out that
Railo allows you to set the server to any timezone on a per web
application context basis (so you can have different sites on the same
server all running in different timezones).

On Thu, Jul 29, 2010 at 7:57 PM, Paul Hastings p...@sustainablegis.com wrote:
 On 7/30/2010 2:09 AM, Charlie Griefer wrote:
 funds for VPS, unfortunately) on a server with the clock set to PST.

 ah just think how simpler our world would be w/a setTimezone() function ;-)

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336008
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: oracle database link

2010-08-04 Thread Qasim Rasheed

As someone already indicated, why do you want to run db link command from
CF. It should be just a one time thing that your DBA can run. Later you can
run query against a table in linked database like this

SELECT *
FROM

On Wed, Aug 4, 2010 at 9:58 AM, Won Lee won...@gmail.com wrote:


 I assume you mean a link from one oracle schema to another schema by
 executing the CREATE DATABASE LINK sql command through a CFML page.

 Is this correct?  If it is check your permissions.  This most likely has
 nothing to do with CF.  As I side note, I don't think CFML pages should be
 running this sort of code.  You should just login to your Oracle DB and run
 that command to create a link.

 Curious?  Is there a reason why you just don't create a new CF datasource
 in
 the CF ADMIN?



 On Wed, Aug 4, 2010 at 9:11 AM, Dave P jda...@gmail.com wrote:

 
  Hello all,
 
  Has anyone actually gotten a database link working from a CF server to a
  second oracle server?
 
  I'm trying a connection string:
  create database link prodlink connect to myusername identified by
  mypass using 'PROD';
 
  and getting:
 
   Error Executing Database Query.
  Executing the SQL statement is not allowed.
 
  The problem is that I am not the admin and have little oracle experience.
   The DBA has little CF (or even web) experience.
 
  It sounds like to me there is a permissions error in either the oracle
 DB,
  or in CF.
 
  I'm not sure which.  Of course i'm crunched for time.
 
  Any ideas?
 
  Thank you,
  Dave Powell
 
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336009
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: oracle database link

2010-08-04 Thread Qasim Rasheed

My last email was incomplete

SELECT *
FROMyourtableinlinke...@nameofdblink

On Wed, Aug 4, 2010 at 8:25 PM, Qasim Rasheed qasim.li...@gmail.com wrote:

 As someone already indicated, why do you want to run db link command from
 CF. It should be just a one time thing that your DBA can run. Later you can
 run query against a table in linked database like this

 SELECT *
 FROM


 On Wed, Aug 4, 2010 at 9:58 AM, Won Lee won...@gmail.com wrote:


 I assume you mean a link from one oracle schema to another schema by
 executing the CREATE DATABASE LINK sql command through a CFML page.

 Is this correct?  If it is check your permissions.  This most likely has
 nothing to do with CF.  As I side note, I don't think CFML pages should be
 running this sort of code.  You should just login to your Oracle DB and
 run
 that command to create a link.

 Curious?  Is there a reason why you just don't create a new CF datasource
 in
 the CF ADMIN?



 On Wed, Aug 4, 2010 at 9:11 AM, Dave P jda...@gmail.com wrote:

 
  Hello all,
 
  Has anyone actually gotten a database link working from a CF server to a
  second oracle server?
 
  I'm trying a connection string:
  create database link prodlink connect to myusername identified by
  mypass using 'PROD';
 
  and getting:
 
   Error Executing Database Query.
  Executing the SQL statement is not allowed.
 
  The problem is that I am not the admin and have little oracle
 experience.
   The DBA has little CF (or even web) experience.
 
  It sounds like to me there is a permissions error in either the oracle
 DB,
  or in CF.
 
  I'm not sure which.  Of course i'm crunched for time.
 
  Any ideas?
 
  Thank you,
  Dave Powell
 
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336010
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: cflayout question

2010-08-04 Thread Victor Moore

There is definitely a difference between CF8 and CF9. I understand
that the ext was changed to 3.x and I was wondering if anybody played
with the css  to make it work the same as CF8.

The following code works fine in CF8 but not CF9. I mean it works, but
the layout is different and I cannot make it to use the whole screen
real estate.

Hopefully somebody has a solution because  I hit a wall.


cflayout type=border
cflayoutarea position=top title=Top Layout Area
   This is the top layout area.
/cflayoutarea

cflayoutarea position=center name=center overflow = hidden 
cflayout type=tab tabheight=100% name=mytabs
   cflayoutarea title=Tab 1 name=t1
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
pThis is the first tab./p
   /cflayoutarea

   cfloop index=x from=2 to=5
cflayoutarea title=Tab #x# name=t#x#
cfoutputpThis is tab number 
#x#./p/cfoutput
/cflayoutarea
/cfloop

cflayoutarea title=D Tab name=hiddentab 
inithide=true
This is the hidden tab. Can't touch this.
/cflayoutarea

/cflayout
   /cflayoutarea

   cflayoutarea position=bottom title=Bottom Layout Area
This is the bottom layout area.
   /cflayoutarea

  cflayoutarea position=left title=Menu splitter=true
collapsible=true size=200 maxsize=200
   p
   a href=javaScript:ColdFusion.navigate('center2.cfm','center')Link
One/abr /
   a href=Link Two/abr /
   a href=Link Three/abr /
   /p
   /cflayoutarea


   cflayoutarea position=right title=Right Layout Area
splitter=true collapsible=true
   This is the right layout area.
   /cflayoutarea

/cflayout



Thanks


On Wed, Aug 4, 2010 at 4:35 PM, Victor Moore victor.mo...@gmail.com wrote:
 I have the following layout and I can't make it work.

 All I want is the header and footer to be fixed size and the center to
 expand to fill the size of the screen.

 Thanks

 cflayout name=outerlayout type=vbox style=width:939; height:100%
    cflayoutarea style=height:100%;background-color:##0080c0;  
        cflayout name=alayout  type=border
 style=background-color:##ccc;border:3px solid ##ccc;
                     cflayoutarea position=top size=150 align=center
 splitter=false style=background-color:##00;; 
                        header
            /cflayoutarea
            cflayoutarea       title= position=left closable=false
 collapsible=false name=left splitter=false size=230
                                style=background-color:##ccc;
                cflayout name=left type=accordion fillHeight=true
 style=width:200;
                                        cflayoutarea title=hey 
                                        h6Some stuff/h6
                                                /cflayoutarea
                                /cflayout
            /cflayoutarea
            cflayoutarea position=center name=center
 style=background-color:##FFF;
                 main stuff
            /cflayoutarea
            cflayoutarea position=bottom splitter=false
 size=70 overflow=hidden

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336011
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: onApplicationStart

2010-08-04 Thread Larry Lyons

Something a bit simpler may be to use the ApplicationStop function. From 
QuickDocs:
http://cfquickdocs.com/cf9/?getDoc=applicationstopDescription

Stops or resets the current application. The application is restarted on the 
next request to the application. 

As a caveat, its CF9 only so far.

hth,
larry


You can have a cfif looking for a url variable such as reset. Inside the
CFIF you can recall the onapplicationstart method
cfif structkeyexists(url, 'reset')
   cfset onapplicationstart()
/cfif

Personally, I'd go for a separate reset page. Why have a CFIF if it will
rarely, if ever used.

On Jan 3, 2008 3:01 PM, Adkins, Randy randy_adk...@sra.com wrote:

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336012
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: UBBCode img tag exploit

2010-08-04 Thread UXB Internet

 DP_ParseBBML) has this flaw, I just tested it.

I looked at all the open source CF based forums I could find and they all
had the same flaw. Many used the DP_ParseBBML module or some variation on
it.  

 Basically, I think if you prevent conversion of images with quotes,
 this  goes away.

That was my thinking as well. Or more precisely what I knew would stop the
existing attack.  What I did was modify the [IMG] conversion routine to
disallow both standard and single quotes either base or encoded.  I also
disallowed semi-colon ; because that can be used to chain script commands.
But I am sure this is not a proper sanitization of the input.

src = replaceNoCase(src, #chr(34)#, , ALL);
src = replaceNoCase(src, #chr(39)#, , ALL);
src = replaceNoCase(src, %22, , ALL);
src = replaceNoCase(src, ;, , ALL);
src = replaceNoCase(src, %3B, , ALL);

I still feel this is a stop-gap or just a response based approach and does
not fully sanitize the input.  I was hoping someone had existing code that
did, because as I said it was a freebie.  There is nothing like the panic of
13-16 year olds who get to see gay porn because a redirect was imbedded in
the [IMG} tag of their favorite video game web forum.


If anyone has better ideas to prevent this type of abuse please share them.
Teenagers intent on doing mischief can be very clever and I am starting to
slow down a bit.



Dennis Powers
UXB Internet - A Website Design  Hosting Company
P.O. Box 6028
Wolcott, CT 06716
203-879-2844
http://www.uxbinternet.com







~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:336013
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm