Re: cfcontent and save as

2011-02-25 Thread Wil Genovese

Also, read this blog post of mine for more details on serving files up for 
download.  

http://www.trunkful.com/index.cfm/2010/8/4/Serving-File-Downloads-with-ColdFusion



Wil Genovese
Sr. Web Application Developer/
Systems Administrator
CF Webtools
www.cfwebtools.com

wilg...@trunkful.com
www.trunkful.com

On Feb 25, 2011, at 4:09 PM, UXB wrote:

> 
> To force a download no matter the type:
> 
>  
>  />
> 
> 
> 
> Dennis Powers
> UXB Internet - A website Design and Hosting Company
> P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844
> W: http://www.uxbinternet.com
> W: http://www.ctbusinesslist.com
> 
> -Original Message-
> From: Richard White [mailto:rich...@j7is.co.uk] 
> Sent: Thursday, February 24, 2011 1:22 PM
> To: cf-talk
> Subject: cfcontent and save as
> 
> 
> Hi,
> 
> for security we store xls documents in a non-web root folder. We then use a
> cfcontent tag to serve the file to the user. 
> 
> the problem is when the user clicks the link they are displayed a download
> dialogue and all is fine if they click 'open with ms excel', but if they
> click 'save as' it saves the .cfm file and not the xls file
> 
> is there a way to save the xls file if the user clicks 'save as'
> 
> thanks 
> 
> 
> 
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342596
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: cfcontent and save as

2011-02-25 Thread UXB

To force a download no matter the type:

 




Dennis Powers
UXB Internet - A website Design and Hosting Company
P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844
W: http://www.uxbinternet.com
W: http://www.ctbusinesslist.com

-Original Message-
From: Richard White [mailto:rich...@j7is.co.uk] 
Sent: Thursday, February 24, 2011 1:22 PM
To: cf-talk
Subject: cfcontent and save as


Hi,

for security we store xls documents in a non-web root folder. We then use a
cfcontent tag to serve the file to the user. 

the problem is when the user clicks the link they are displayed a download
dialogue and all is fine if they click 'open with ms excel', but if they
click 'save as' it saves the .cfm file and not the xls file

is there a way to save the xls file if the user clicks 'save as'

thanks 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342595
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread Brian Cain

This may or may not help you, but we do not process new transactions from
"strangers."  We run a SaaS site, and when a new customer signs up for our
site, we store the information encrypted in the database, but do not process
the transaction.  Our sales staff is immediately alerted via email that a
new account needs to be verified.  We contact the customer directly, or in
some cases approve the transaction based on previous contact history.  We
have a very strong customer service aspect in our sales business model, and
using the system of verification have reduced our fraud rate to near zero.

Brian Cain


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342594
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread .jonah

Do you think they're manually entering cards into your forms or using a 
script?

If it's some sort of automated process possibly checking the time 
between steps in the checkout as well as protecting against CSRF might help.

http://cfformprotect.riaforge.org/
http://www.google.com/search?q=csrf


On 2/25/11 9:21 AM, Casey Dougall wrote:
> Hi,
>
> This comes up from time to time and it's truly been a pain to
> stop completely. I'm wondering what some of you are doing that could help me
> fight this type of fraudulent activity.
>
> I've got checks in place for ipAddress, use of similar names on or addresses
> on multiple decline attempts, blocking when I can but still people continue
> to prob card numbers to see if they are valid. I had one guy today try from
> 4 separate ip addresses. All different names and addresses and credit card
> numbers but similar enough to know it was same person.
>
> What else can be done here?
>
> This is a services related website so nothing shipped which I'm assuming
> makes it a better target.
>

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342593
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread Casey Dougall

On Fri, Feb 25, 2011 at 2:37 PM, Robert Harrison  wrote:

>
> >  All different names and addresses and credit card numbers but similar
> enough to know it was same person.
>
> The part where you say " and credit card numbers " is a bit scary. How do
> you know that unless you're keeping the unencrypted card numbers somewhere?
>
>
Don't worry about encryption, that's covered, last 4 and card type does good
enough job to locate cards.

Yes AVS and Fraud Protection Suite at Authorize.net in use on all orders, we
also block all international BIN numbers..


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342592
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread Robert Harrison

>  All different names and addresses and credit card numbers but similar enough 
> to know it was same person.

The part where you say " and credit card numbers " is a bit scary. How do you 
know that unless you're keeping the unencrypted card numbers somewhere?  



Robert B. Harrison
Director of Interactive Services
Austin & Williams
125 Kennedy Drive, Suite 100 
Hauppauge NY 11788
P : 631.231.6600 Ext. 119 
F : 631.434.7022
http://www.austin-williams.com 

Great advertising can't be either/or.  It must be &.

Plug in to our blog: A&W Unplugged
http://www.austin-williams.com/unplugged



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342591
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread Brook Davies

Are you using AVS (address verification system)?

Brook

-Original Message-
From: Casey Dougall [mailto:ca...@uberwebsitesolutions.com] 
Sent: February-25-11 9:22 AM
To: cf-talk
Subject: (ot) People using your shop cart to test credit cards.


Hi,

This comes up from time to time and it's truly been a pain to stop
completely. I'm wondering what some of you are doing that could help me
fight this type of fraudulent activity.

I've got checks in place for ipAddress, use of similar names on or addresses
on multiple decline attempts, blocking when I can but still people continue
to prob card numbers to see if they are valid. I had one guy today try from
4 separate ip addresses. All different names and addresses and credit card
numbers but similar enough to know it was same person.

What else can be done here?

This is a services related website so nothing shipped which I'm assuming
makes it a better target.




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342590
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


(ot) People using your shop cart to test credit cards.

2011-02-25 Thread Casey Dougall

Hi,

This comes up from time to time and it's truly been a pain to
stop completely. I'm wondering what some of you are doing that could help me
fight this type of fraudulent activity.

I've got checks in place for ipAddress, use of similar names on or addresses
on multiple decline attempts, blocking when I can but still people continue
to prob card numbers to see if they are valid. I had one guy today try from
4 separate ip addresses. All different names and addresses and credit card
numbers but similar enough to know it was same person.

What else can be done here?

This is a services related website so nothing shipped which I'm assuming
makes it a better target.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342589
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: cfcontent and save as

2011-02-25 Thread Richard White

thanks for all the help, now works perfect!

> Hi,
> 
> for security we store xls documents in a non-web root folder. We then 
> use a cfcontent tag to serve the file to the user. 
> 
> the problem is when the user clicks the link they are displayed a 
> download dialogue and all is fine if they click 'open with ms excel', 
> but if they click 'save as' it saves the .cfm file and not the xls 
> file
> 
> is there a way to save the xls file if the user clicks 'save as'
> 
> thanks 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342588
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm