Re: Coldfusion as Windows Service Throwing 500 Errors
> Yeah, I forgot to state that it was configured using a domain account for > ColdFusion servers, that is supposed to be in the local Administrators group > on > the machine. I just checked into the server's local Administrators group and > discovered that this domain account is not in that group anymore. I'll have > to get with our IT department to troubleshoot why this is happening. > > Thanks for the reminder about the user accounts, as I probably would have > banged my head on this for hours before thinking to check that. Well, you don't really need to use an administrator account to run CF, maybe you can take this opportunity to configure CF to run with fewer privileges. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsit ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348063 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion as Windows Service Throwing 500 Errors
Yeah, I forgot to state that it was configured using a domain account for ColdFusion servers, that is supposed to be in the local Administrators group on the machine. I just checked into the server's local Administrators group and discovered that this domain account is not in that group anymore. I'll have to get with our IT department to troubleshoot why this is happening. Thanks for the reminder about the user accounts, as I probably would have banged my head on this for hours before thinking to check that. Carl > > If it runs fine as an application started using your Windows account, > but doesn't start as a service using a generic security context > (Local > System, Network System, etc) or a specific user account, maybe the > problem is with the user account. Try running the service using your > account to see if that works. If it does, create a user account just > for CF, make sure it works as an application, and use that to run the > service. > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > http://training.figleaf.com/ > > Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on > GSA Schedule, and provides the highest caliber vendor-authorized > instruction at our trainin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348062 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion as Windows Service Throwing 500 Errors
> My backup ColdFusion Standard server, which runs on 32-bit Windows 2003, just > started throwing 500 errors with the following stacktrace displayed: > > java.lang.NullPointerException > at > jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:285) > at > jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) > at > jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) > at > jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) > at > jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) > at > jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) > at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) > > Not only does this show on all of my websites hosted on this box, but it also > shows in CF Administrator. ColdFusion runs as a Windows service. > This box ran fine until a reboot today (accumulated Windows updates > necessitated a reboot, as well as installation of .Net framework 3.5). > > The weird thing is that if I start ColdFusion from the command prompt (using > the cfstart.bat file), everything works fine and I get no 500 errors. If it runs fine as an application started using your Windows account, but doesn't start as a service using a generic security context (Local System, Network System, etc) or a specific user account, maybe the problem is with the user account. Try running the service using your account to see if that works. If it does, create a user account just for CF, make sure it works as an application, and use that to run the service. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our trainin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348061 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Coldfusion as Windows Service Throwing 500 Errors
My backup ColdFusion Standard server, which runs on 32-bit Windows 2003, just started throwing 500 errors with the following stacktrace displayed: java.lang.NullPointerException at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:285) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) Not only does this show on all of my websites hosted on this box, but it also shows in CF Administrator. ColdFusion runs as a Windows service. This box ran fine until a reboot today (accumulated Windows updates necessitated a reboot, as well as installation of .Net framework 3.5). The weird thing is that if I start ColdFusion from the command prompt (using the cfstart.bat file), everything works fine and I get no 500 errors. I don't even know where to begin trying to figure this one out. If it helps, I'm using IIS for the webserver. I tried running the Web Server Connector Tool to disconnect and reconnect the CF connector. Any ideas? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348060 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Count rows in Excel file
Ad hoc SQL datasources may be an option if you have sufficient privleges on a sql server and the account running sql has permissions to access the file. On Tue, Oct 11, 2011 at 2:26 PM, Brook Davies wrote: > > Hey Everyone, > > > > Anyone know a way to count the rows in an excel file without using > cfspreadsheet to read the entire file in first? That's what I am trying to > avoid.. > > > > Brook > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348059 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Error handler or database bringing down server?
> Install a full JDK and use jstack to generate a thread dump when this > happens again. Then you can see what is going on and fix it. Thanks for your help on this issue. It was able to assist in finding the issue. The problem was due to the timeout setting in CF Administrator and the number of threads available vs the number of hits for the page. Lowering the timeout resolved the issue when we duplicated it in a test environment. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348058 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Check for list of words in string
>Wouldn't this also catch words like 'myselection'? Yes. \b is your friend. :) Or possibly even stuff like "(?<=^|;)\s*(?:SELECT|DECLARE|EXEC|etc)\b" to ensure this is stuff at a beginning of a string/statement. But I don't really agree with the general approach here. With cfqueryparam + thorough code reviews + security testing both before and after code goes live, you don't need to worry about this. (And if you want to block frequent blatant attacks from wasting server resources, do it at the firewall level, not the application server level.) ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348057 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Count rows in Excel file
Off the top of my head. If you set it up as a DSN you could (in theory) query it using COUNT(SomeColumn) AS myRowCount. That assumes that a DSN using Excel supports the COUNT() function. HTH, G On Tue, Oct 11, 2011 at 4:26 PM, Brook Davies wrote: > > Hey Everyone, > > > > Anyone know a way to count the rows in an excel file without using > cfspreadsheet to read the entire file in first? That's what I am trying to > avoid.. > > > > Brook > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348056 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Count rows in Excel file
Hey Everyone, Anyone know a way to count the rows in an excel file without using cfspreadsheet to read the entire file in first? That's what I am trying to avoid.. Brook ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348055 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Check for list of words in string
For my specific implementation, I decided to use a combination approach.
Remembering this is an attempt to mitigate SQL injection exploits, I check
for select or declare in the query string. I realized forms posed a
slightly different problem, as I have many user posting long text data the
often contains some form of those words. For the forms I check for an
instance of both select and declare and send an email alert to myself with
the pertinent data. I can control this at the granular level as the values
are assigned to an attributes structure I use for processing, letting me
replace the values or further analyze possible exploit attempts.
I did end up using the regex for the query strings, but as always, no one
solution is the perfect fit.
Thanks,
Brian Cain
On Tue, Oct 11, 2011 at 12:52 PM, Brook Davies wrote:
>
> Wouldn't this also catch words like 'myselection'?
>
> Brook
>
> -Original Message-
> From: Matt Quackenbush [mailto:quackfu...@gmail.com]
> Sent: October-11-11 7:16 AM
> To: cf-talk
> Subject: Re: Check for list of words in string
>
>
> Regular expressions.
>
> if ( reFindNoCase("(select|declare)",myString) > 0 ) {
> // at least one of the words is present }
>
> HTH
>
>
> On Tue, Oct 11, 2011 at 9:11 AM, Brian Cain wrote:
>
> >
> > Hello all,
> >
> > I would like to check a string against a list of keywords and either
> > null the string or replace the keywords if found.
> >
> > Over the past couple of weeks someone has been probing my sites for
> > SQL injection vulnerabilities. I have used queryparams and other
> > types of validation. but I fear I may have missed something. I am
> > using an old version of formurl2attributes that has been modified over
> > the years. My thought is to check the attributes list at the end of
> > the custom tag, and look for some of the common SQL injection keywords
> > there and mitigate their effectiveness.
> >
> > So in short, how do I search for keywords like "select,declare" in a
> > string without looping over the keywords?
> >
> > Thanks,
> > Brian Cain
> >
> >
>
>
>
>
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348054
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Check for list of words in string
Wouldn't this also catch words like 'myselection'?
Brook
-Original Message-
From: Matt Quackenbush [mailto:quackfu...@gmail.com]
Sent: October-11-11 7:16 AM
To: cf-talk
Subject: Re: Check for list of words in string
Regular expressions.
if ( reFindNoCase("(select|declare)",myString) > 0 ) {
// at least one of the words is present }
HTH
On Tue, Oct 11, 2011 at 9:11 AM, Brian Cain wrote:
>
> Hello all,
>
> I would like to check a string against a list of keywords and either
> null the string or replace the keywords if found.
>
> Over the past couple of weeks someone has been probing my sites for
> SQL injection vulnerabilities. I have used queryparams and other
> types of validation. but I fear I may have missed something. I am
> using an old version of formurl2attributes that has been modified over
> the years. My thought is to check the attributes list at the end of
> the custom tag, and look for some of the common SQL injection keywords
> there and mitigate their effectiveness.
>
> So in short, how do I search for keywords like "select,declare" in a
> string without looping over the keywords?
>
> Thanks,
> Brian Cain
>
>
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348053
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: JVM Heap Size
On Fri, Oct 7, 2011 at 3:35 AM, John M Bliss wrote: > In CFAdmin > Server Settings > Java and JVM, I have minimum and maximum JVM > heap size form fields set to 1024 MB. > > However, I do not have -Xms1g -Xmx1g in the JVM args. > > Do I need both? I'll defer to others since I never used to change settings via the admin... -- Sean A Corfield -- (904) 302-SEAN An Architect's View -- http://corfield.org/ World Singles, LLC. -- http://worldsingles.com/ Railo Technologies, Inc. -- http://www.getrailo.com/ "Perfection is the enemy of the good." -- Gustave Flaubert, French realist novelist (1821-1880) ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348052 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Hiding email address from spiders
>I had the same problem.. what I did is store the email addresses in >a database and then replace the email link with a link to a feedback >form on your website. When people want to email someone, they click >the link, fill out and submit the form. They never get to see the >actual email address. This is my preferred approach as well, just don't show the emails but integrate them into a contact form and link to that. It's far better IMO than using an image which is a real pain for a user of the site to have to copy an email out of. I do find cfformprotect works great for preventing form spam and is FAR more user friendly than nasty captchas. Mary Jo ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348051 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: 301 Redirects - showing as 302's
I am having the same issue, has anyone figured out a solution for this? > I'm doing the following: > > > > > It produces a 302 status code > > So I tried > > > > > Finally I tried > > > > ALL produced 302 status codes .. has anyone figured this out - did > some searching without luck. > > Thanks in advance > Paul Giesenhagen > Quill Design > http://www.quilldesign.com > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348050 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Check for list of words in string
Just don't forget that any special characters in your keywords would
have to be escaped. So for example, if your keyword is Cat.Dog, then
the dot means something special. It isn't as quick, but a simple loop
over the list and making use of findNoCase may work well.
On Tue, Oct 11, 2011 at 9:16 AM, Matt Quackenbush wrote:
>
> Regular expressions.
>
> if ( reFindNoCase("(select|declare)",myString) > 0 )
> {
> // at least one of the words is present
> }
>
> HTH
>
>
> On Tue, Oct 11, 2011 at 9:11 AM, Brian Cain wrote:
>
>>
>> Hello all,
>>
>> I would like to check a string against a list of keywords and either null
>> the string or replace the keywords if found.
>>
>> Over the past couple of weeks someone has been probing my sites for SQL
>> injection vulnerabilities. I have used queryparams and other types of
>> validation. but I fear I may have missed something. I am using an old
>> version of formurl2attributes that has been modified over the years. My
>> thought is to check the attributes list at the end of the custom tag, and
>> look for some of the common SQL injection keywords there and mitigate their
>> effectiveness.
>>
>> So in short, how do I search for keywords like "select,declare" in a string
>> without looping over the keywords?
>>
>> Thanks,
>> Brian Cain
>>
>>
>
>
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348049
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Check for list of words in string
Regular expressions.
if ( reFindNoCase("(select|declare)",myString) > 0 )
{
// at least one of the words is present
}
HTH
On Tue, Oct 11, 2011 at 9:11 AM, Brian Cain wrote:
>
> Hello all,
>
> I would like to check a string against a list of keywords and either null
> the string or replace the keywords if found.
>
> Over the past couple of weeks someone has been probing my sites for SQL
> injection vulnerabilities. I have used queryparams and other types of
> validation. but I fear I may have missed something. I am using an old
> version of formurl2attributes that has been modified over the years. My
> thought is to check the attributes list at the end of the custom tag, and
> look for some of the common SQL injection keywords there and mitigate their
> effectiveness.
>
> So in short, how do I search for keywords like "select,declare" in a string
> without looping over the keywords?
>
> Thanks,
> Brian Cain
>
>
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348048
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Check for list of words in string
Hello all, I would like to check a string against a list of keywords and either null the string or replace the keywords if found. Over the past couple of weeks someone has been probing my sites for SQL injection vulnerabilities. I have used queryparams and other types of validation. but I fear I may have missed something. I am using an old version of formurl2attributes that has been modified over the years. My thought is to check the attributes list at the end of the custom tag, and look for some of the common SQL injection keywords there and mitigate their effectiveness. So in short, how do I search for keywords like "select,declare" in a string without looping over the keywords? Thanks, Brian Cain ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348047 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Hiding email address from spiders
Huge +1 here. I've had a LOT of success with cfformprotect. I hate to call it a magic bullet, but it's had a significant impact on my spam issues. On Tue, Oct 11, 2011 at 5:58 AM, Sebastiaan GMC van Dijk wrote: > > Or just use CFFormProtect @ http://cfformprotect.riaforge.com/ > > Has worked for me for years ;-) > > Sebastiaan Naafs - van Dijk > = > So long and thanx 4 all the fish > > ==> Onlinebase.nl > >> To: cf-talk@houseoffusion.com >> Subject: Re: Hiding email address from spiders >> Date: Mon, 10 Oct 2011 06:51:50 -0700 >> From: robvo...@voyle.com >> >> >> Hi Al >> >> I replaced all email addresses with a coldfusion email form and then started >> getting a bunch of automated spam. Putting in an image based challenge that >> the sender must manually replicate stopped all the spam dead. >> The form is at >> http://www.clergyleadership.com/email.cfm >> ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348046 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Hiding email address from spiders
Or just use CFFormProtect @ http://cfformprotect.riaforge.com/ Has worked for me for years ;-) Sebastiaan Naafs - van Dijk = So long and thanx 4 all the fish ==> Onlinebase.nl > To: cf-talk@houseoffusion.com > Subject: Re: Hiding email address from spiders > Date: Mon, 10 Oct 2011 06:51:50 -0700 > From: robvo...@voyle.com > > > Hi Al > > I replaced all email addresses with a coldfusion email form and then started > getting a bunch of automated spam. Putting in an image based challenge that > the sender must manually replicate stopped all the spam dead. > The form is at > http://www.clergyleadership.com/email.cfm > > Rob > > > > > I had the same problem.. what I did is store the email addresses > > in > > a database and then replace the email link with a link to a feedback > > form on your website. When people want to email someone, they click > > the link, fill out and submit the form. They never get to see the > > actual email address. > > In my case, I needed to stop the recipients from getting spam, > > so > > I have the emails going into a queue where I have to approve them > > before they are sent. I check it every few hours - just a page of > > all > > of the emails. Usually easy to spot bad ones.. and I have a radio > > button for send / delete next to each one. Takes a few minutes a > > day. > > and got rid of 100% of spam to the recipients. > > I just use an autonumber to link them, but you can use a UUID so > > people can't easily guess the sequence. ( I use a form field to make > > it a little harder.) > > > > > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348045 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion 9 Session Replication
I have tested this method as well, and I have found that using files causes less overhead. On Tue, Oct 11, 2011 at 6:10 AM, Justin Scott wrote: > >> One option is to use client vars, but they cannot store complex >> vars and changing from session to client scope is a PITA in any >> sizeable app. ... here is one trick I have used. > > Interesting discussion so far. I'm surprised nobody has brought up > what seems to be the obvious solution, at least in my opinion: persist > to the database. My personal opinion is that if something is > important enough to store as part of a session, it's probably > important enough to throw back to the database and store with the > user's profile/account in perpetuity. My approach has usually been to > store any settings or session data to the database at the point it's > set/created and reload it with each page request as part of normal > operations. The applications I generally work on are very > data-intensive so one additional query to grab user preferences and > other session-like data is trivial in the grand scheme of things. > This won't work if you're trying to persist complex objects in the > session scope, of course, but it's a limitation I can live in my > applications. It's a small price to pay knowing that an app can > seamlessly scale from one to two to 300 servers without code changes > around session management or dealing with special cache servers or > clustering systems. In any case, find a solution that works for your > needs and run with it. > > > -Justin > > ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348044 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
