Re: Where to put your code

2010-11-18 Thread denstar

On Thu, Nov 18, 2010 at 12:16 AM, Dave Watts wrote:

 Adobe is a big company, with a bunch of products. Adobe's web site
 predates the Macromedia merger. Should they rewrite their site with CF
 to make it more prominent, or should they focus on building and
 selling their tools?

 Are the two mutually exclusive?  =)p

 Yes, in the very real sense that there is a finite amount of
 resources. I'd much rather have Adobe hire more CF product developers
 and testers, etc, than pay developers to rewrite their site.

I was mostly just poking fun, as I'm a two birds... kind of guy (to
a fault).  =)

I do feel that there is a lot more to a successful product than coders
and testers though.

And I really think CFML is a bang'n web language.

Maybe if the site is done, never to be modified or maintained,
there's little direct benefit to a rewrite, partial or otherwise...
*shrug*

Resources being finite doesn't really change the ratio of bang:buck.  =)

ColdFusion isn't just a product.  It's useful, too!

I wonder (pure speculation), if seeing more CFML powered apps would
somehow help sell more CFML engines, which would in turn pay for more
CFML engine development?  =)p

There's a lot of ways to skin a cat, they say, and far be it for me to
be telling anyone what to do.  I just don't see it as an either/or
type of deal, limited resources or no.

I'm pretty good at rationalizing though.  =)

:Denny

-- 
Music is a moral law. It gives soul to the universe, wings to the
mind, flight to the imagination, and charm and gaiety to life and to
everything.
Plat

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339347
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Where to put your code

2010-11-18 Thread Gerald Guido

I'm pretty good at rationalizing though.  =)

+1
One of the best. =)

G



!--

 Music is a moral law. It gives soul to the universe, wings to the
 mind, flight to the imagination, and charm and gaiety to life and to
 everything.
 Plat

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339348
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


(ot) AWS / EC2 and SpamLists

2010-11-18 Thread Brook Davies

This a bit OT. I just wanted to share what I'd found, in case anyone else is
considering moving to the cloud. Its certainly attractive, and being able to
spin up a new server from an image configured with webserver, CF, OS and
your website files in under 5 minutes is pretty cool. 

 

Just keep one thing in mind. Sending email from the cloud (at least from
Amazons) is problematic at best. The IP's (Elastic IP's), that we were
assigned we're already in the SpamHaus database and other RBLs. And we NSI
wouldn't let us set up a cname record with those IPs. 

 

There *are* procedures to get your IP's removed/whitelisted but I don't
think you can count on this since there are so many blacklists and your
sharing an IP range, so your neighbour could get you in trouble again in the
future. 

 

For me, I can't risk emails not getting delivered (new user account
registrations, password reminders, notifications, campaigns - all of em), so
the solution is to maintain an SMTP server at a co-lo or dedicated server
location that you can trust to do your mail sending. Or use an outsourced
email (smtpauth.com,jangosmtp.com) service. You can also set up a VPC with
your existing hardware from  the cloud and 'talk' to it like it was on your
local network. 

 

Anyhow, I just wanted to put this out there. I was stoked to move to the
cloud, and this threw a bit of a wrench in the idea, since having to
maintain a server somewhere for sending email is kinda of a pain in the
butt.




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339349
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


What was that security again?

2010-11-18 Thread Brian Polackoff

I admit this question is a touch off topic, but the SQL list is not nearly
as active. Can anyone tell me what the minimum MS SQL server 2005 security
settings to run SELECT and Execute Existing Stored Procedures?

My googling has failed me. (it was bound to happen eventually)

Thanks!
Brian


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339350
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: What was that security again?

2010-11-18 Thread Mike Chabot

GRANT SELECT
GRANT EXECUTE

Is that what you are looking for?

-Mike Chabot

On Thu, Nov 18, 2010 at 11:32 AM, Brian Polackoff bpolack...@gmx.com wrote:

 I admit this question is a touch off topic, but the SQL list is not nearly
 as active. Can anyone tell me what the minimum MS SQL server 2005 security
 settings to run SELECT and Execute Existing Stored Procedures?

 My googling has failed me. (it was bound to happen eventually)

 Thanks!
 Brian

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339351
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: What was that security again?

2010-11-18 Thread Brian Polackoff

Kinda.. Are there any particular SERVER ROLES or Database Role Membership?

Thanks!

-Original Message-
From: Mike Chabot [mailto:mcha...@gmail.com] 
Sent: Thursday, November 18, 2010 11:42 AM
To: cf-talk
Subject: Re: What was that security again?


GRANT SELECT
GRANT EXECUTE

Is that what you are looking for?

-Mike Chabot

On Thu, Nov 18, 2010 at 11:32 AM, Brian Polackoff bpolack...@gmx.com
wrote:

 I admit this question is a touch off topic, but the SQL list is not 
 nearly as active. Can anyone tell me what the minimum MS SQL server 
 2005 security settings to run SELECT and Execute Existing Stored
Procedures?

 My googling has failed me. (it was bound to happen eventually)

 Thanks!
 Brian



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339352
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: What was that security again?

2010-11-18 Thread Russ Michaels

DDLADMIN should suffice, this is what role we give to all our customers.


--
Russ Michaels

http://www.bluethunderinternet.com : B2B hosting, VPS's, Exchange, CF, Railo
www.cfmldeveloper.com  : CFML community, FREE ColdFusion/Railo
hosting
http://www.michaels.me.uk  :   My Blog  
skype me   :  russmichaels




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339353
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: What was that security again?

2010-11-18 Thread Carl Von Stetten

I don't think any Server roles are needed, but db_datareader Database role 
should provide the SELECT permissions.  I'm not sure about the permissions for 
stored procedures.

Carl

Kinda.. Are there any particular SERVER ROLES or Database Role Membership?

Thanks!

GRANT SELECT
GRANT EXECUTE

Is that what you are looking for?

-Mike Chabot

On Thu, Nov 18, 2010 at 11:32 AM, Brian Polackoff bpolack...@gmx.com
wrote:

 I admit this question is a touch off topic, but the SQL list is not 
 nearly as active. Can anyone tell me what the minimum MS SQL server 
 2005 security settings to run SELECT and Execute Existing Stored
Procedures?

 My googling has failed me. (it was bound to happen eventually)

 Thanks!
 Brian 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339354
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Where to put your code

2010-11-18 Thread Judah McAuley

On Wed, Nov 17, 2010 at 11:16 PM, Dave Watts dwa...@figleaf.com wrote:

 Yes, in the very real sense that there is a finite amount of
 resources. I'd much rather have Adobe hire more CF product developers
 and testers, etc, than pay developers to rewrite their site.

Adobe, presumably, has developers who work on their site. The question
isn't about taking away CF product developers, it is about what
language to use to do that which is already being done...ie, building
the Adobe website. There is no good reason, that I'm aware of, to not
implement a gradual change plan, redoing one section of an app at a
time as you update and refresh things and using a new language (CF in
this case) to do so.

It isn't something I would expect to happen overnight, nor should it.
Rather a healthy policy of eating your own dog food should be put in
place to utilize their own products (CF, Flex, etc) for new projects
and ongoing development .

Judah

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339355
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Hosted VPS recommendations

2010-11-18 Thread Dan Crouch

I am looking for a VPS to replace an in house development server. We already 
have licenses for SQL and CF. Most places seem to want to charge extra for a 
package that has enough ram and processing power to handle both of those and 
they then provide them as well. So I dont want to have to pay for a built in 
cost for licensing something we already have. Bandwidth needs are very low 
since it is just for internal work, nothing will be externally hosted on it.

Can anyone recommend a decent VPS host with a basic windows server setup that 
would allow several developers to login and develop remotely?

Dan 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339356
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


cfhttp connection timeout - best way to loop or re-try?

2010-11-18 Thread Casey Dougall

Hi,

I have a cfhttp call in a cfc that from time to time receives a connection
timeout. I'd like to just retry the call again, but not sure of best way to
start the call over. I actually don't want to start the whole thing over,
just re-try the cfhttp call if it receives a connection timeout.

Maybe a cfloop 2 or 3 times? But I don't want it to loop right away, only if
it received a timeout.

Thoughts?


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339357
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: cfhttp connection timeout - best way to loop or re-try?

2010-11-18 Thread Che Vilnonis

Maybe you could do something like this:

cfhttp url=somURL method=GET result=results

cfif findNoCase(200, results.StatusCode)
continue to process
cfelse
re-process
/cfif

If you get a timeout, I believe the status code will not be 200 and
therefore you could try again.

HTH... Che

-Original Message-
From: Casey Dougall [mailto:ca...@uberwebsitesolutions.com] 
Sent: Thursday, November 18, 2010 1:39 PM
To: cf-talk
Subject: cfhttp connection timeout - best way to loop or re-try?


Hi,

I have a cfhttp call in a cfc that from time to time receives a connection
timeout. I'd like to just retry the call again, but not sure of best way to
start the call over. I actually don't want to start the whole thing over,
just re-try the cfhttp call if it receives a connection timeout.

Maybe a cfloop 2 or 3 times? But I don't want it to loop right away, only if
it received a timeout.

Thoughts?




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339358
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: cfhttp connection timeout - best way to loop or re-try?

2010-11-18 Thread John M Bliss

Something like...

cfset success = 
cfset attempts = 0
cfloop condition=success is not 1 and attempts lt 4
   cfset attempts = attempts + 1
   cftry
  cfhttp ... timeout=60 ... 
  cfset success = 1
  cfcatch
 cfset success = 0
  /cfcatch
   /cftry
/cfloop

On Thu, Nov 18, 2010 at 12:38 PM, Casey Dougall 
ca...@uberwebsitesolutions.com wrote:


 Hi,

 I have a cfhttp call in a cfc that from time to time receives a connection
 timeout. I'd like to just retry the call again, but not sure of best way to
 start the call over. I actually don't want to start the whole thing over,
 just re-try the cfhttp call if it receives a connection timeout.

 Maybe a cfloop 2 or 3 times? But I don't want it to loop right away, only
 if
 it received a timeout.

 Thoughts?


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339359
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: cfhttp connection timeout - best way to loop or re-try?

2010-11-18 Thread Casey Dougall

On Thu, Nov 18, 2010 at 1:47 PM, John M Bliss bliss.j...@gmail.com wrote:

 fset success = 
 cfset attempts = 0
 cfloop condition=success is not 1 and attempts lt 4
   cfset attempts = attempts + 1
   cftry
  cfhttp ... timeout=60 ... 
  cfset success = 1
  cfcatch
 cfset success = 0
  /cfcatch
   /cftry



Thanks guys, just wanted to be sure I was thinking along the same lines
here. John, like your example, I'll play around with that.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339360
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Hosted VPS recommendations

2010-11-18 Thread Gerald Guido

I can, and without hesitation, recommend both Viviotech.net and
kickassvps.com.

Both have excellent support, quality products and good prices. The folks at
viviotech have repeatedly gone above and beyond (and then some) what I would
expect from a hosting company when it comes to support. I cannot say enough
good things about them.

Kick ass VPS's support is excellent as well. I am setting up a 2k3 vps right
now and simple support requests were fielded and resolved in a matter of
5-10 minutes. Others issues took longer but were perfectly acceptable given
the nature of the problem(s).

BTW I got kickassvps's entry level Win 2k3 machine for $35 W/ 1 gig ram, 10
gig hd space and I have CF9 and MSSQL, Mysql, IIS 6, mail servers, dns, (the
works) and it has a solid 600+ megs of ram free with a couple domains
running.


The third option I would recommend exploring is Amazon EC2. you can get a
Small Instance -- 1.7 GB of memory, 1 EC2 Compute Unit (1 virtual core with
1 EC2 Compute Unit), 160 GB of local instance storage, 32-bit platform --
For about $55 a month with a year lease or you *might* be able to squeeze it
CF and MSSQL on a micro instance which is about $10/month.

HTH
G!


On Thu, Nov 18, 2010 at 1:08 PM, Dan Crouch stario...@yahoo.com wrote:


 I am looking for a VPS to replace an in house development server. We
 already have licenses for SQL and CF. Most places seem to want to charge
 extra for a package that has enough ram and processing power to handle both
 of those and they then provide them as well. So I dont want to have to pay
 for a built in cost for licensing something we already have. Bandwidth needs
 are very low since it is just for internal work, nothing will be externally
 hosted on it.

 Can anyone recommend a decent VPS host with a basic windows server setup
 that would allow several developers to login and develop remotely?

 Dan

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339361
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: What was that security again?

2010-11-18 Thread Dave Watts

 Kinda.. Are there any particular SERVER ROLES or Database Role Membership?

Nope. Although db_datareader is basically a shortcut to granting
SELECT and EXECUTE.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339362
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: What was that security again?

2010-11-18 Thread Dave Watts

 DDLADMIN should suffice, this is what role we give to all our customers.

That's way more than needed for reading data.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339363
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Where to put your code

2010-11-18 Thread Dave Watts

 Adobe, presumably, has developers who work on their site. The question
 isn't about taking away CF product developers, it is about what
 language to use to do that which is already being done...ie, building
 the Adobe website. There is no good reason, that I'm aware of, to not
 implement a gradual change plan, redoing one section of an app at a
 time as you update and refresh things and using a new language (CF in
 this case) to do so.

 It isn't something I would expect to happen overnight, nor should it.
 Rather a healthy policy of eating your own dog food should be put in
 place to utilize their own products (CF, Flex, etc) for new projects
 and ongoing development .

Adobe has plenty of dog food, though - they have two CMS products that
I'm aware of, both in J2EE. They have other products, like Contribute,
which are arguably better suited to product information pages. They
use CF and Flex in places (like the Adobe Exchange), and use other
things in other places.

And Adobe isn't adding new functionality to their site constantly -
it's primarily an informational site, rather than an application.

So, to me, saying Adobe should use CF for their entire site doesn't
make a lot of sense. If I were an Adobe stockholder, I wouldn't want
them to spend their money that way. I'm not, so I don't care much one
way or the other.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339364
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: What was that security again?

2010-11-18 Thread Russ Michaels

Yes but it is a safe role, you can;t do anything dodgy

-Original Message-
From: Dave Watts [mailto:dwa...@figleaf.com] 
Sent: 18 November 2010 19:20
To: cf-talk
Subject: Re: What was that security again?


 DDLADMIN should suffice, this is what role we give to all our customers.

That's way more than needed for reading data.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339365
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Choosing between ColdFusion Builder and IntelliJ

2010-11-18 Thread Dave Burns

I'm considering moving on from Dreamweaver and finally using a better IDE for 
CF work. I know of CFBuilder and have downloaded the trial to eval. I used 
IntelliJ for some Java projects 2 years ago and it was outstanding.

My current take is that price is equal and functionality is *roughly* equal 
with each having its own strengths. The one big issue for me is that CFBuilder 
already has a (small but growing) community of extensions. I like the idea of 
Apptacular, varscoper, etc. all built-in. My concern over IntelliJ (or more 
accurately, the CFML plug-in for it) is the lack of a large enough user base to 
support the demand for these CF-specific extensions.

I'm curious to hear thoughts and get feedback re the choice. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339366
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Choosing between ColdFusion Builder and IntelliJ

2010-11-18 Thread Eric Roberts

There is also CFEclipse...

-Original Message-
From: Dave Burns [mailto:cft...@burnsorama.com] 
Sent: Thursday, November 18, 2010 1:20 PM
To: cf-talk
Subject: Choosing between ColdFusion Builder and IntelliJ


I'm considering moving on from Dreamweaver and finally using a better IDE
for CF work. I know of CFBuilder and have downloaded the trial to eval. I
used IntelliJ for some Java projects 2 years ago and it was outstanding.

My current take is that price is equal and functionality is *roughly* equal
with each having its own strengths. The one big issue for me is that
CFBuilder already has a (small but growing) community of extensions. I like
the idea of Apptacular, varscoper, etc. all built-in. My concern over
IntelliJ (or more accurately, the CFML plug-in for it) is the lack of a
large enough user base to support the demand for these CF-specific
extensions.

I'm curious to hear thoughts and get feedback re the choice. 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339367
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Choosing between ColdFusion Builder and IntelliJ

2010-11-18 Thread Russ Michaels

Cfbuilder is built on eclipse, so you can also use most eclipse plugins as
well.
I do still like Dreamweaver though, it has its good points.

-Original Message-
From: Dave Burns [mailto:cft...@burnsorama.com] 
Sent: 18 November 2010 19:20
To: cf-talk
Subject: Choosing between ColdFusion Builder and IntelliJ


I'm considering moving on from Dreamweaver and finally using a better IDE
for CF work. I know of CFBuilder and have downloaded the trial to eval. I
used IntelliJ for some Java projects 2 years ago and it was outstanding.

My current take is that price is equal and functionality is *roughly* equal
with each having its own strengths. The one big issue for me is that
CFBuilder already has a (small but growing) community of extensions. I like
the idea of Apptacular, varscoper, etc. all built-in. My concern over
IntelliJ (or more accurately, the CFML plug-in for it) is the lack of a
large enough user base to support the demand for these CF-specific
extensions.

I'm curious to hear thoughts and get feedback re the choice. 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339368
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Choosing between ColdFusion Builder and IntelliJ

2010-11-18 Thread Dave Watts

 I'm considering moving on from Dreamweaver and finally using a better IDE for 
 CF work. I know of CFBuilder and have downloaded the trial to
 eval. I used IntelliJ for some Java projects 2 years ago and it was 
 outstanding.

 My current take is that price is equal and functionality is *roughly* equal 
 with each having its own strengths. The one big issue for me is that
 CFBuilder already has a (small but growing) community of extensions. I like 
 the idea of Apptacular, varscoper, etc. all built-in. My concern over
 IntelliJ (or more accurately, the CFML plug-in for it) is the lack of a large 
 enough user base to support the demand for these CF-specific
 extensions.

 I'm curious to hear thoughts and get feedback re the choice.

I think IntelliJ is probably a better choice for pure Java
development, although I still use Eclipse for that. Otherwise, though,
I think Eclipse/CFBuilder is a much better fit for CF development, if
only because of Aptana.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339369
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Choosing between ColdFusion Builder and IntelliJ

2010-11-18 Thread DURETTE, STEVEN J (ATTASIAIT)

Aptana? Really?  I tried adding the Aptana plugin with cfeclipse once.
It slowed Eclipse down massively and in general just got in my way.

Maybe I'm using it wrong though. Anyone have quick tips for using Aptana
for CF development? I may try it again if I can get some value out of
it.

Steve


-Original Message-
From: Dave Watts [mailto:dwa...@figleaf.com] 
Sent: Thursday, November 18, 2010 2:49 PM
To: cf-talk
Subject: Re: Choosing between ColdFusion Builder and IntelliJ

I think IntelliJ is probably a better choice for pure Java
development, although I still use Eclipse for that. Otherwise, though,
I think Eclipse/CFBuilder is a much better fit for CF development, if
only because of Aptana.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339370
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Choosing between ColdFusion Builder and IntelliJ

2010-11-18 Thread Sean Corfield

On Thu, Nov 18, 2010 at 11:19 AM, Dave Burns cft...@burnsorama.com wrote:
 I'm considering moving on from Dreamweaver and finally using a better IDE for 
 CF work. I know of CFBuilder and have downloaded the trial to eval. I used 
 IntelliJ for some Java projects 2 years ago and it was outstanding.

For Java (and other J-languages) work, IntelliJ is hard to beat but I
don't think the CFML plugin gets much love. Eclipse is solid for Java
/ J-language work and CFBuilder as a plugin to Eclipse is unbeatable
for CFML development.

I have CFBuilder (standalone) open pretty much 24x7x365 for CFML work
and I fire up a separate instance of Eclipse (with all my J-language
stuff) when I'm working on a J-language project. I like to keep the
two environments separate right now (to keep my main IDE - CFB - lean
and clean).

Whilst IntelliJ is really impressive for Java work, I can't get used
to the 'feel' of it so I keep trying it but I keep coming back to
Eclipse.
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

If you're not annoying somebody, you're not really alive.
-- Margaret Atwood

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339371
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Variable before query, rereplace or javascript to change title

2010-11-18 Thread Joel Black

I created a custom tag I can reuse, which runs a news manager.  I would like to 
optimize it for search engines, but here is my issue:

1. The query and output are in the custom tag, which goes in the main content 
of the page
2. I want the news title to be in the page title, but I cant put an output 
before a query that I know of
3. Not sure if an ReReplace will work in this situation either
4. I know I can do it with javascript, but javascript is client side and will 
not change the title in time for a search engine to catch it will it?

Any input would be greatly appreciated.  Example: 
http://desconsultants.com/news.cfm?newsId=84 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339372
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


coldfusion standard edition version switched to developer edition?!

2010-11-18 Thread Tim Do

We just restarted the coldfusion server and now it's suddenly a developer 
edition on our live web server!  I tried entering the coldfusion9 standard 
license in (in cfadmin) to update but it's asking for the old version's serial 
which I entered but it says the numbers don't match.  Also, whats the update 
file box for?  I left it blank and hit submit.  PLEASE help!

Thanks,
Tim


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339373
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: What was that security again?

2010-11-18 Thread Mike Chabot

None of the server or database roles would classify as minimum
settings. You achieve minimum settings with GRANT and DENY
statements. Is your goal to restrict a user to only reading data? If
one of your stored procs allows for the deletion of data, and you
grant execute permissions to the user, the user will be able to
execute that stored proc and delete the data, even if they are not
granted specific delete permission on the table.

You might explore the deny roles and deny granular permissions if you
really don't want someone to do anything other than read data.

It is reasonable to combine the db_datareader role along with granular
stored procedure permissions to meet your goal. Also restrict the
permissions for the data source in ColdFusion Admin as another layer
of protection.

ddladmin allows a user to truncate a database table, so avoid that
role if you want read-only. It helps if users need to truncate though.

-Mike Chabot
http://www.linkedin.com/in/chabot

On Thu, Nov 18, 2010 at 2:27 PM, Russ Michaels r...@michaels.me.uk wrote:

 Yes but it is a safe role, you can;t do anything dodgy

 -Original Message-
 From: Dave Watts [mailto:dwa...@figleaf.com]
 Sent: 18 November 2010 19:20
 To: cf-talk
 Subject: Re: What was that security again?


 DDLADMIN should suffice, this is what role we give to all our customers.

 That's way more than needed for reading data.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsite.



 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339374
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Variable before query, rereplace or javascript to change title

2010-11-18 Thread Claude Schnéegans

 2. I want the news title to be in the page title, but I cant put an output 
 before a query that I know of

No, but you can run the query before any HTML, ie :
CFQUERY NAME=myQuery
--- get the tithe in son=me column ---
 SELECT title, ...
/CFQUERY
html
head
titleCFOUTPUT#myQuery.title#/CFOUTPUT/title
/head



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339375
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Variable before query, rereplace or javascript to change title

2010-11-18 Thread Brook Davies

Wrap the custom tag in a cfsavecontent tag at the top of the page:

cfsavecontent variable=myoutput
cf_customtag /
/cfsavecontent

Then output your page:
cfoutput
html
head
title#myquery.somevalue#/title
/head
body
   #myoutput#
/body
/html
/cfoutput

Brook
-Original Message-
From: Joel Black [mailto:j...@blackbeardesign.com] 
Sent: November-18-10 12:27 PM
To: cf-talk
Subject: Variable before query, rereplace or javascript to change title


I created a custom tag I can reuse, which runs a news manager.  I would like
to optimize it for search engines, but here is my issue:

1. The query and output are in the custom tag, which goes in the main
content of the page
2. I want the news title to be in the page title, but I cant put an output
before a query that I know of
3. Not sure if an ReReplace will work in this situation either
4. I know I can do it with javascript, but javascript is client side and
will not change the title in time for a search engine to catch it will it?

Any input would be greatly appreciated.  Example:
http://desconsultants.com/news.cfm?newsId=84 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339376
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: coldfusion standard edition version switched to developer edition?!

2010-11-18 Thread Mike Chabot

The easiest thing to do would be to enter the CF8 standard serial
number. That is what I would do in your situation.

I wonder what caused it to happen. Maybe the config file got messed
up. If you keep server backups you could restore your CF config files
from backup.

-Mike Chabot

On Thu, Nov 18, 2010 at 3:36 PM, Tim Do t...@wng.com wrote:

 We just restarted the coldfusion server and now it's suddenly a developer 
 edition on our live web server!  I tried entering the coldfusion9 standard 
 license in (in cfadmin) to update but it's asking for the old version's 
 serial which I entered but it says the numbers don't match.  Also, whats the 
 update file box for?  I left it blank and hit submit.  PLEASE help!

 Thanks,
 Tim


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339377
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: coldfusion standard edition version switched to developer edition?!

2010-11-18 Thread Tim Do

I was able to find a key that matched.  Server is back up now.  Question is, 
how/why did the config file get set to developer edition... it was never 
installed as a developer edition to begin with.

-Original Message-
From: Mike Chabot [mailto:mcha...@gmail.com] 
Sent: Thursday, November 18, 2010 12:52 PM
To: cf-talk
Subject: Re: coldfusion standard edition version switched to developer edition?!


The easiest thing to do would be to enter the CF8 standard serial
number. That is what I would do in your situation.

I wonder what caused it to happen. Maybe the config file got messed
up. If you keep server backups you could restore your CF config files
from backup.

-Mike Chabot

On Thu, Nov 18, 2010 at 3:36 PM, Tim Do t...@wng.com wrote:

 We just restarted the coldfusion server and now it's suddenly a developer 
 edition on our live web server!  I tried entering the coldfusion9 standard 
 license in (in cfadmin) to update but it's asking for the old version's 
 serial which I entered but it says the numbers don't match.  Also, whats the 
 update file box for?  I left it blank and hit submit.  PLEASE help!

 Thanks,
 Tim


 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339378
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: coldfusion standard edition version switched to developer edition?!

2010-11-18 Thread Dave Watts

 We just restarted the coldfusion server and now it's suddenly a developer 
 edition on our live web server!  I tried entering the coldfusion9 standard
 license in (in cfadmin) to update but it's asking for the old version's 
 serial which I entered but it says the numbers don't match.  Also, whats the
 update file box for?  I left it blank and hit submit.  PLEASE help!

Can you restore the license.properties file from backup?

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or ons

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339379
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


decrypt coldfusion admin password

2010-11-18 Thread Rusty Owens

The company I work for has a coldfusion application that is being migrated to 
our servers.  We need to log in to the admin but no one who wrote it is here 
any longer.  I used to have code to decrypt and display the admin password. Can 
anyone get me that? 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339380
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: decrypt coldfusion admin password

2010-11-18 Thread Russ Michaels

You just need to disable the admin login in the neo-security.xml

Russ

-Original Message-
From: Rusty Owens [mailto:rusty_ow...@hotmail.com] 
Sent: 18 November 2010 21:01
To: cf-talk
Subject: decrypt coldfusion admin password


The company I work for has a coldfusion application that is being migrated
to our servers.  We need to log in to the admin but no one who wrote it is
here any longer.  I used to have code to decrypt and display the admin
password. Can anyone get me that? 




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339382
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Variable before query, rereplace or javascript to change title

2010-11-18 Thread Joel Black

Wrap the custom tag in a cfsavecontent tag at the top of the page:

I gave this a try, but when I wrap it in the savecontent, its not reading the 
query when I put it in the title 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339381
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: decrypt coldfusion admin password

2010-11-18 Thread Rob Parkhill

Rusty,

You don't need to decryt it, you can reset it.

Depending on which version of course!

Here is the link that I have used for other customers that works.

http://www.tek-tips.com/faqs.cfm?fid=3731

http://www.tek-tips.com/faqs.cfm?fid=3731Cheers,

Rob

On Thu, Nov 18, 2010 at 4:01 PM, Rusty Owens rusty_ow...@hotmail.comwrote:


 The company I work for has a coldfusion application that is being migrated
 to our servers.  We need to log in to the admin but no one who wrote it is
 here any longer.  I used to have code to decrypt and display the admin
 password. Can anyone get me that?

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339383
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: coldfusion standard edition version switched to developer edition?!

2010-11-18 Thread Ian Skinner

  On 11/18/2010 12:58 PM, Tim Do wrote:
 I was able to find a key that matched.  Server is back up now.  Question is, 
 how/why did the config file get set to developer edition... it was never 
 installed as a developer edition to begin with.

How long was the server running?  If it was something around 1 month, 
could it have unintentionally been configured as a 'trial'.  Those run 
for 30 days as a full server with only a few differences and then revert 
to a developer edition at the end of the trial.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339384
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Variable before query, rereplace or javascript to change title

2010-11-18 Thread Joel Black

Wrap the custom tag in a cfsavecontent tag at the top of the page:


I tried to do this, but the query.title doesnt read the query within the save 
content.  I also tried to set a variable within the custom tag and pull that 
out...but no success there either.  What if i set an application variable?  Im 
gonna try it. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339385
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Variable before query, rereplace or javascript to change title

2010-11-18 Thread Gerald Guido

cfsavecontent variable=pageTitletitleYour title cfoutput -
#Yourvaraible#/cfoutput/title/cfsavecontent
 cfhtmlhead text=#pageTitle#

This will put  #pageTitle# in the head of the document.



On Thu, Nov 18, 2010 at 4:05 PM, Joel Black j...@blackbeardesign.comwrote:


 Wrap the custom tag in a cfsavecontent tag at the top of the page:


 I tried to do this, but the query.title doesnt read the query within the
 save content.  I also tried to set a variable within the custom tag and pull
 that out...but no success there either.  What if i set an application
 variable?  Im gonna try it.

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339386
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: What was that security again?

2010-11-18 Thread Brian Polackoff

Thanks everyone! My goal was actually very simple.  Some facts I knew
about SQL Server permissions were overturned today.  Didn't know you can
simply grant individual permissions. I was under the impression server and
database roles were all I had to play with.

I have clients that need our web server to Read and execute existing
stored procedures. (Some of those stored procedures may delete/update like
Mike said) however this is fine, as long as we can run them.

Again thanks!
Brian

-Original Message-
From: Mike Chabot [mailto:mcha...@gmail.com] 
Sent: Thursday, November 18, 2010 3:42 PM
To: cf-talk
Subject: Re: What was that security again?


None of the server or database roles would classify as minimum settings.
You achieve minimum settings with GRANT and DENY statements. Is your goal to
restrict a user to only reading data? If one of your stored procs allows for
the deletion of data, and you grant execute permissions to the user, the
user will be able to execute that stored proc and delete the data, even if
they are not granted specific delete permission on the table.

You might explore the deny roles and deny granular permissions if you really
don't want someone to do anything other than read data.

It is reasonable to combine the db_datareader role along with granular
stored procedure permissions to meet your goal. Also restrict the
permissions for the data source in ColdFusion Admin as another layer of
protection.

ddladmin allows a user to truncate a database table, so avoid that role if
you want read-only. It helps if users need to truncate though.

-Mike Chabot
http://www.linkedin.com/in/chabot

On Thu, Nov 18, 2010 at 2:27 PM, Russ Michaels r...@michaels.me.uk wrote:

 Yes but it is a safe role, you can;t do anything dodgy

 -Original Message-
 From: Dave Watts [mailto:dwa...@figleaf.com]
 Sent: 18 November 2010 19:20
 To: cf-talk
 Subject: Re: What was that security again?


 DDLADMIN should suffice, this is what role we give to all our customers.

 That's way more than needed for reading data.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA 
 Schedule, and provides the highest caliber vendor-authorized 
 instruction at our training centers, online, or onsite.



 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339387
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Variable before query, rereplace or javascript to change title

2010-11-18 Thread Brook Davies

I believe in your custom tag, you need to set the variables in the 'caller'
scope  (e.g. caller.mytitle) to be accessed in the calling template scope.
If I recall correctly...

Brook

-Original Message-
From: Joel Black [mailto:j...@blackbeardesign.com] 
Sent: November-18-10 1:05 PM
To: cf-talk
Subject: Re: Variable before query, rereplace or javascript to change title


Wrap the custom tag in a cfsavecontent tag at the top of the page:


I tried to do this, but the query.title doesnt read the query within the
save content.  I also tried to set a variable within the custom tag and pull
that out...but no success there either.  What if i set an application
variable?  Im gonna try it. 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339388
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: coldfusion standard edition version switched to developer edition?!

2010-11-18 Thread Tim Do

It's been up for a while (around 6-8months?), and has been rebooted quite often 
I'd have to say...

-Original Message-
From: Ian Skinner [mailto:h...@ilsweb.com] 
Sent: Thursday, November 18, 2010 1:11 PM
To: cf-talk
Subject: Re: coldfusion standard edition version switched to developer edition?!


  On 11/18/2010 12:58 PM, Tim Do wrote:
 I was able to find a key that matched.  Server is back up now.  Question is, 
 how/why did the config file get set to developer edition... it was never 
 installed as a developer edition to begin with.

How long was the server running?  If it was something around 1 month, 
could it have unintentionally been configured as a 'trial'.  Those run 
for 30 days as a full server with only a few differences and then revert 
to a developer edition at the end of the trial.




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339389
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: index.cfm being hacked

2010-11-18 Thread Mike Little

hi al, i would be interested to know how you went about having your computer 
check the index pages for changes? sounds kinda useful.

mike 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339390
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: index.cfm being hacked

2010-11-18 Thread Mike Little

nick, i have forwarded your post to the host (hostek) who will hopefully be 
able to identify the offending file!

very frustrating so far.

mike 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339391
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Choosing between ColdFusion Builder and IntelliJ

2010-11-18 Thread Dave Merrill

On Thu, Nov 18, 2010 at 2:19 PM, Dave Burns cft...@burnsorama.com wrote:

 I'm considering moving on from Dreamweaver and finally using a better IDE for 
 CF work. I know of CFBuilder and have downloaded the trial to eval. I used 
 IntelliJ for some Java projects 2 years ago and it was outstanding.

FWIW, I'm a relatively recent IDEA (IntelliJ) convert, and I love it.
They have a 30 day trial too; you might as well give it a shot.

It's just really smart, in a million productivity enhancing and code
quality inducing ways. Really extensive customizable keyboard
shortcuts, variable and function completion, tons of languages, great
snippet support, works with projects and also freeform File  Open or
dbl-click in explorer, file structure view that bogs down quite a bit
less than CFB (at least the version I tried when it was released),
shortcut to go to the definition of the function under the cursor,
even in an unrelated file up the dir tree over and down, indexes
everything for fast searching, nice favorites functionality, syntax
error highlighting, camelcase-aware spellchecker (a bit buggy but
great anyway), just a lot of things that make using it a pleasure.

It's not all lollipops and rainbows though. While the program itself
is really outstanding, the CFML plugin is somewhat immature. To begin
with, you may find it a bit awkward starting your first project,
because it doesn't make it clear how you do that for CFML, or have
CFML-oriented tools for it (just choose java for now). It also doesn't
fully understand CFML variable and function visibility, so for
instance things declared in a cfinclude are flagged as unresolved
references and completion doesn't work on them. During my 30 day
trial, they fixed 15 bugs I reported (!!!), plus others, but the pace
of development seems uneven, and slow these days. A number of pretty
obvious flaws and enhancements have been filed by various folks, with
not a lot of movement on them lately. Also, I'm on windows, but I've
heard several times that on a mac, out of the box it's u-g-l-y; if
that's you, go for the GTK+ theme immediately, before you hate it.

The really big downside is no debugger. Both the FusionDebug and
FusionReactor teams have said their products were designed for
multiple host environments, and expressed eagerness to collaborate
with IntelliJ, but so far nothing's come of that, beyond a statement
that it's under discussion. I personally think that the investment
required to make that happen would make IDEA so much more visible and
attractive in the marketplace that it would pay for itself many times
over, and have said so, but so far all I can say is I hope it happens,
but we'll see.

I think to some extent Sean is right that the plugin doesn't get the
resources it could use, and their reluctance to pony up for a debugger
is a symptom. Far as I know, there's one dev working on it, and she's
great, but also have other commitments.

So it appears that I wrote more about downsides than its awesomeness,
but that's totally not how I actually feel. I'm happier with IDEA than
I've ever been with a development environment. If it never got any
better than it is now, I'd still be using it. Try it, I think you'll
like it. You probably know this, but the CFML plugin works only with
the paid version not the free Community edition. There's a google
group here if you have questions:
http://groups.google.com/group/cfml-plugin-for-intellij-idea

Dave

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339392
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: index.cfm being hacked

2010-11-18 Thread rex

You store the hash (i.e. hash(index.cfm)) of the cfm file somewhere: 
in another file, or in a table, etc. and check intermittently, like once 
a day or hour.  So, a job that checks for the MD5SUM of the files, and 
maybe a database table that stores the files and the hashes.

Awesome thing would be an ant script that during deployment 
populates/updates a database table with all your files (or changed 
files) and their MD5 hash, and then deploys the files.  Or maybe just a 
couple of important files to watch, like Application.cfc, index.cfm, com 
directory, etc.

Or do you guys think that's overboard? 

Mike Little wrote:
 hi al, i would be interested to know how you went about having your computer 
 check the index pages for changes? sounds kinda useful.

 mike 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339393
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: (ot) AWS / EC2 and SpamLists

2010-11-18 Thread Dave Merrill

Check out http://postmarkapp.com. Depending on the volume of mail you
need to send, it's either pretty cheap, or worth it for their tracking
tools.

Dave

On Thu, Nov 18, 2010 at 10:47 AM, Brook Davies cft...@logiforms.com wrote:

 This a bit OT. I just wanted to share what I'd found, in case anyone else is
 considering moving to the cloud. Its certainly attractive, and being able to
 spin up a new server from an image configured with webserver, CF, OS and
 your website files in under 5 minutes is pretty cool.



 Just keep one thing in mind. Sending email from the cloud (at least from
 Amazons) is problematic at best. The IP's (Elastic IP's), that we were
 assigned we're already in the SpamHaus database and other RBLs. And we NSI
 wouldn't let us set up a cname record with those IPs.



 There *are* procedures to get your IP's removed/whitelisted but I don't
 think you can count on this since there are so many blacklists and your
 sharing an IP range, so your neighbour could get you in trouble again in the
 future.



 For me, I can't risk emails not getting delivered (new user account
 registrations, password reminders, notifications, campaigns - all of em), so
 the solution is to maintain an SMTP server at a co-lo or dedicated server
 location that you can trust to do your mail sending. Or use an outsourced
 email (smtpauth.com,jangosmtp.com) service. You can also set up a VPC with
 your existing hardware from  the cloud and 'talk' to it like it was on your
 local network.



 Anyhow, I just wanted to put this out there. I was stoked to move to the
 cloud, and this threw a bit of a wrench in the idea, since having to
 maintain a server somewhere for sending email is kinda of a pain in the
 butt.




 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339394
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: index.cfm being hacked

2010-11-18 Thread Jordan Michaels

Not overboard. Some folks have built a solid business model out of doing 
just that in a very organized way (Tripwire, among others).

Warm regards,
Jordan Michaels
Vivio Technologies
http://www.viviotech.net/
Open BlueDragon Steering Committee
Railo Community Distributions

On 11/18/2010 06:04 PM, rex wrote:

 You store the hash (i.e. hash(index.cfm)) of the cfm file somewhere:
 in another file, or in a table, etc. and check intermittently, like once
 a day or hour.  So, a job that checks for the MD5SUM of the files, and
 maybe a database table that stores the files and the hashes.

 Awesome thing would be an ant script that during deployment
 populates/updates a database table with all your files (or changed
 files) and their MD5 hash, and then deploys the files.  Or maybe just a
 couple of important files to watch, like Application.cfc, index.cfm, com
 directory, etc.

 Or do you guys think that's overboard?

 Mike Little wrote:
 hi al, i would be interested to know how you went about having your computer 
 check the index pages for changes? sounds kinda useful.

 mike



 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339395
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm