Re: Hack - Further Information
I have to say I have never once had that in my 12 years of installing cf servers, if the cfide dir or vdir doesn't exist , then cfide or the administrator doesn't work, period. So there must be some.very special.circumstances for that to happen, it certainly doesn't happen on a standard windows install. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Feb 5, 2013 12:21 AM, Dave Watts dwa...@figleaf.com wrote: OK, now that you've done that: CF serves all sorts of pages that don't exist. You may read up in this very thread about CFCHART, which relies on a URL pattern that doesn't exist. CF relies on servlet mappings, which may or may not correspond with actual URLs. Typically, they do, but there are some specific URL mappings that are created by default when you install CF, and one of them is /CFIDE/Administrator/index.cfm. Another is /CFIDE/Main/ide.cfm - this is another file that doesn't even exist by default. I understand that under special circumstances like CFChart it serves pages that don't exist. But in the scenario I outlined where CFIDE mappings have been re-pointed to a folder that does not carry the administrator folders and the web server provides a Virtual directory to the very same duplicated CFIDE folder, I fail to see how it would ever serve the content from the administrator and adminapi folders... In a nutshell: - client requests /CFIDE/Administrator/index.cfm - request is immediately passed to CF by the web server - this happens before the web server tests for the existence of a file at that URL - CF looks at its list of servlet mappings, and finds one for /CFIDE/Administrator/index.cfm - CF looks on the filesystem for where it expects to find this file, based on where these files were placed during the initial install - if the file is there, it's executed So, let's say you install CF without hooking it up to a web server, then later hook it up to IIS. In that case, CF will initially use the built-in web server, and create the file c:\coldfusion9\wwwroot\CFIDE\Administrator\index.cfm. When you hook up the web server, the web root might be c:\inetpub\wwwroot, and you may have created your own CFIDE directory there without the Administrator subdirectory, so that the directory c:\inetpub\wwwroot\CFIDE exists but the file c:\inetpub\wwwroot\CFIDE\Administrator\index.cfm does not. Nevertheless, CF will execute the file c:\coldfusion9\wwwroot\CFIDE\Administrator\index.cfm when you ask it for http://your_IIS_web_server/CFIDE/Administrator/index.cfm even though a request for http://your_IIS_web_server/CFIDE/Administrator/ returns a 404 - the second URL doesn't match an explicit servlet mapping. Alternatively, let's say you install CF and hook it up to your default IIS server. In that case, CF will create the file c:\inetpub\wwwroot\CFIDE\Administrator\index.cfm. Then, you might create a new IIS virtual server, and set its web root to c:\inetpub\otherserver\. You'd still have the same problem, as CF would still be able to resolve to the original location of the file. We actually go through this in our Administering ColdFusion 9 course as it's a fairly common configuration mistake. http://training.figleaf.com/courses/administering_coldfusion.cfm Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354297 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Coldfusion app response slow
All - Since couple of months, every couple of days one of the coldfusion app has slow response times. It gets fine once we recycle the coldfusion server. What are the possible ways to troubleshoot or identify the cause? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354298 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion app response slow
Running Low on memory, tools like the ColdFusion monitor or better still seeFusion will help you. -- Regards, Andrew Scott WebSite: http://www.andyscott.id.au/ Google+: http://plus.google.com/113032480415921517411 On Wed, Feb 6, 2013 at 1:19 AM, fun and learning funandlrnn...@gmail.comwrote: All - Since couple of months, every couple of days one of the coldfusion app has slow response times. It gets fine once we recycle the coldfusion server. What are the possible ways to troubleshoot or identify the cause? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354299 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion app response slow
You may simply be running out of memory, too many requests are hung, problems with database connections. Have you looked at your coldfusion serve rmonitor ? Or try FusionReactor. On Tue, Feb 5, 2013 at 2:19 PM, fun and learning funandlrnn...@gmail.comwrote: All - Since couple of months, every couple of days one of the coldfusion app has slow response times. It gets fine once we recycle the coldfusion server. What are the possible ways to troubleshoot or identify the cause? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354300 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion app response slow
Thanks for your reply. As of now, I do not see any useful information from Coldfusion server monitor (accessed via coldfusion admin). The only information I see on overview page is *JVM Memory(used/total) MB - 107/177.* Do I need to turn on Start Monitoring/Start profiling/Start Memory tracking? In log files I see this warning for some of the scheduled jobs Thread: jrpp-2, processing template:**.cfm, completed in 490 seconds, exceeding the 30 second warning limit On Tue, Feb 5, 2013 at 8:25 AM, Russ Michaels r...@michaels.me.uk wrote: You may simply be running out of memory, too many requests are hung, problems with database connections. Have you looked at your coldfusion serve rmonitor ? Or try FusionReactor. On Tue, Feb 5, 2013 at 2:19 PM, fun and learning funandlrnn...@gmail.com wrote: All - Since couple of months, every couple of days one of the coldfusion app has slow response times. It gets fine once we recycle the coldfusion server. What are the possible ways to troubleshoot or identify the cause? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354301 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion app response slow
If you have not started any of the monitoring and tracking, then they are not running, so you need to start them, if you have never used this before them you will need to read the docs to undetstand how to use it. If you google the topic then you can find some articles, www.carehart.org would also be a good place to look too. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Feb 5, 2013 3:20 PM, funand learning funandlrnn...@gmail.com wrote: Thanks for your reply. As of now, I do not see any useful information from Coldfusion server monitor (accessed via coldfusion admin). The only information I see on overview page is *JVM Memory(used/total) MB - 107/177.* Do I need to turn on Start Monitoring/Start profiling/Start Memory tracking? In log files I see this warning for some of the scheduled jobs Thread: jrpp-2, processing template:**.cfm, completed in 490 seconds, exceeding the 30 second warning limit On Tue, Feb 5, 2013 at 8:25 AM, Russ Michaels r...@michaels.me.uk wrote: You may simply be running out of memory, too many requests are hung, problems with database connections. Have you looked at your coldfusion serve rmonitor ? Or try FusionReactor. On Tue, Feb 5, 2013 at 2:19 PM, fun and learning funandlrnn...@gmail.com wrote: All - Since couple of months, every couple of days one of the coldfusion app has slow response times. It gets fine once we recycle the coldfusion server. What are the possible ways to troubleshoot or identify the cause? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354302 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
SOT: IP Geolocation APIs
Good morning/afternoon, one of the companies I work with is interested in integrating some IP geolocation information. I am seeking recommendations for a service with a decent API that others have used. There are so many to choose from. This will be for commercial use so a paid service is fine, though a free one that allows commercial use can be considered as well. Specifically they're looking to take a group of IPs, get a location, and then put markers on a map via the Google maps API. Any recommendations would be appreciated. Thanks! -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354303 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
I'm confused - what kind of service are you looking for? The browser itself supports geolocation. Google Maps is its own API. What else are you looking for? On Tue, Feb 5, 2013 at 10:28 AM, Justin Scott leviat...@darktech.orgwrote: Good morning/afternoon, one of the companies I work with is interested in integrating some IP geolocation information. I am seeking recommendations for a service with a decent API that others have used. There are so many to choose from. This will be for commercial use so a paid service is fine, though a free one that allows commercial use can be considered as well. Specifically they're looking to take a group of IPs, get a location, and then put markers on a map via the Google maps API. Any recommendations would be appreciated. Thanks! -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354304 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: SOT: IP Geolocation APIs
I think he's looking to resolve the IP of the visitor with a location. That's possible, but not perfect. Often what you'll see is not the IP/Location of the end user-but that of the users gateway server... for example, many AOL customers look like they are in Virginia. Yes, you'll need some sort of service to do that, but it's not foolproof. I'd see if Google has anything like that. Their data base is probably the most reliable with all the analytics they run. Robert Harrison Director of Interactive Services Austin Williams Advertising I Branding I Digital I Direct 125 Kennedy Drive, Suite 100 I Hauppauge, NY 11788 T 631.231.6600 X 119 F 631.434.7022 http://www.austin-williams.com Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter.com/austin_williams -Original Message- From: Raymond Camden [mailto:raymondcam...@gmail.com] Sent: Tuesday, February 05, 2013 11:52 AM To: cf-talk Subject: Re: SOT: IP Geolocation APIs I'm confused - what kind of service are you looking for? The browser itself supports geolocation. Google Maps is its own API. What else are you looking for? On Tue, Feb 5, 2013 at 10:28 AM, Justin Scott leviat...@darktech.orgwrote: Good morning/afternoon, one of the companies I work with is interested in integrating some IP geolocation information. I am seeking recommendations for a service with a decent API that others have used. There are so many to choose from. This will be for commercial use so a paid service is fine, though a free one that allows commercial use can be considered as well. Specifically they're looking to take a group of IPs, get a location, and then put markers on a map via the Google maps API. Any recommendations would be appreciated. Thanks! -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354305 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
I'm confused - what kind of service are you looking for? The browser itself supports geolocation. Google Maps is its own API. What else are you looking for? A service where you take any IP address as input and it passes out location (and possibly other) information. For example, if we have a table of comments and we collect the IP addresses where those comments were posted from and later want to put them all up on a map. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354306 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: SOT: IP Geolocation APIs
If you're doing it later rather than real time you can probably get that information from Google Analytics. Robert Harrison Director of Interactive Services Austin Williams Advertising I Branding I Digital I Direct 125 Kennedy Drive, Suite 100 I Hauppauge, NY 11788 T 631.231.6600 X 119 F 631.434.7022 http://www.austin-williams.com Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter.com/austin_williams -Original Message- From: Justin Scott [mailto:leviat...@darktech.org] Sent: Tuesday, February 05, 2013 11:57 AM To: cf-talk Subject: Re: SOT: IP Geolocation APIs I'm confused - what kind of service are you looking for? The browser itself supports geolocation. Google Maps is its own API. What else are you looking for? A service where you take any IP address as input and it passes out location (and possibly other) information. For example, if we have a table of comments and we collect the IP addresses where those comments were posted from and later want to put them all up on a map. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354307 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
What about using geolocation on the client itself? Roughly 82% of your audience will support it. On Tue, Feb 5, 2013 at 10:56 AM, Justin Scott leviat...@darktech.orgwrote: I'm confused - what kind of service are you looking for? The browser itself supports geolocation. Google Maps is its own API. What else are you looking for? A service where you take any IP address as input and it passes out location (and possibly other) information. For example, if we have a table of comments and we collect the IP addresses where those comments were posted from and later want to put them all up on a map. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354308 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
If you're doing it later rather than real time you can probably get that information from Google Analytics. That isn't applicable to the situation we're working with. If anyone has experience with a IP-to-location services that I can pass an IP into and get location information back, I'd appreciate any feedback on experiences with those services. There are a number of them out there and I'm looking for specific recommendations on which ones are good, bad, etc. before I go out and try all of them. Hopefully that will clarify my request a bit. Thanks! -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354309 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
What about using geolocation on the client itself? Roughly 82% of your audience will support it. The situation I'm working with is dealing with historical data. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354310 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
Hi Justin, If you have a budget available I would recommend http://www.maxmind.com/en/geolocation_landing. We use the downloadable database. Best Regards, Donnie Bachan Nitendo Vinces - By Striving You Shall Conquer == The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. On Tue, Feb 5, 2013 at 5:02 PM, Justin Scott leviat...@darktech.org wrote: What about using geolocation on the client itself? Roughly 82% of your audience will support it. The situation I'm working with is dealing with historical data. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354311 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
ColdFusion MX 7 Updater 2
All: Any chance someone has a copy of the ColdFusion MX 7 Updater 2 for Win32 lying around? I have a client that is perfectly happy with their current version of CFMX 7, thank you very much, but we had to reinstall everything on a new server. I've installed 7.0.0 from CD but don't have access to the 7.0.2 updater. Anyone have it and willing to share? The filename should be coldfusion-70-updater2-win.exe and it should weigh in at about 46.1 MBs. MD5 Checksum of 8dde3d2e45541d2cf4e1db90d33668ab . Thanks in advance. -- Mosh Teitelbaum ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354312 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion MX 7 Updater 2
Amazingly those old bits on that NAS are still working. I do have that installer. It's a 295Mb file. How do you want it sent? Wil Genovese One man with courage makes a majority. -Andrew Jackson A fine is a tax for doing wrong. A tax is a fine for doing well. On Feb 5, 2013, at 11:22 AM, Mosh Teitelbaum mosh.teitelb...@evoch.com wrote: All: Any chance someone has a copy of the ColdFusion MX 7 Updater 2 for Win32 lying around? I have a client that is perfectly happy with their current version of CFMX 7, thank you very much, but we had to reinstall everything on a new server. I've installed 7.0.0 from CD but don't have access to the 7.0.2 updater. Anyone have it and willing to share? The filename should be coldfusion-70-updater2-win.exe and it should weigh in at about 46.1 MBs. MD5 Checksum of 8dde3d2e45541d2cf4e1db90d33668ab . Thanks in advance. -- Mosh Teitelbaum ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354313 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Looking for a CF drag drop tutorial
I'm working on the same thing. This is what I have so far. It works up to the
.JSON call, but I can't get that to work. Any suggestions?
!--draganddrop.cfm---
head
style type=text/css
#div1 {width:336px;height:70px;padding:10px;border:1px solid #aa;}
#div2 {width:336px;height:70px;padding:10px;border:1px solid #aa;}
#div3 {width:336px;height:70px;padding:10px;border:1px solid #aa;}
/style
CFAJAXPROXY cfc=cfc.myPreferences jsclassname=myPreferences
script type=text/javascript
src=http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js;/script
script type=text/javascript
function allowDrop(ev)
{
ev.preventDefault();
}
function drag(ev)
{
ev.dataTransfer.setData(Text,ev.target.id);
}
function drop(ev,empID,tab)
{
var data=ev.dataTransfer.getData(Text);
var placement = ev.target.id;
var widgetID = data;
ev.target.appendChild(document.getElementById(data));
alert(widgetID +','+ placement +','+ empID +','+ tab);
$.getJSON(/cfc/ myPreferences.cfc?method=updatePlacementreturnformat=json,
{tabname:tabname},
function(result)
{alert('Success!!! '+result.widget);}
);
ev.preventDefault();
}
/script
/head
body
cfset empID = 'XXX'
cfoutput
div id=div1 ondrop=drop(event,'#empID#','info')
ondragover=allowDrop(event)/div
div id=div2 ondrop=drop(event,'#empID#','info')
ondragover=allowDrop(event)/div
div id=div3 ondrop=drop(event,'#empID#','info')
ondragover=allowDrop(event)/div
/cfoutput
img id=mountain src=/images/001.jpg draggable=true
ondragstart=drag(event) width=336 height=69 /
img id=circle src=/images/delete.gif draggable=true
ondragstart=drag(event) /
img id=RoundedRectangle src=/images/check_off.gif draggable=true
ondragstart=drag(event) /
/body
!---myPreferences.cfc
CFCOMPONENT displayname=myPreferences
CFFUNCTION name=updatePlacement access=remote returntype=struct
output=yes
CFARGUMENT name=tabname required=yes
CFSET var showme = structNew()
cfset showme.tab = ARGUMENTS.tabname
CFRETURN showme
/CFFUNCTION
/CFCOMPONENT
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354314
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Hack - Further Information
Upon further review of my server I have discovered several files were compromised, dating back to January 2, 2013. They appear in various places in the /CFIDE folder. Here is a list of the ones I found this morning: C:\Inetpub\wwwroot\CFIDE\adminapi\customtags\fusebox.cfm C:\Inetpub\wwwroot\CFIDE\administrator\scheduler\scheduleedit.cfm C:\Inetpub\wwwroot\CFIDE\administrator\security\cfrdspassword.cfm C:\Inetpub\wwwroot\CFIDE\componentutils\Application.cfm C:\Inetpub\wwwroot\CFIDE\componentutils\cfcexplorer.cfc C:\Inetpub\wwwroot\CFIDE\scripts\ajax\ext\docs\resources\pkg.cfm If your server was compromised, I suggest you do a search for any files changed within the past 2 months and you will probably find them. James F On Tue, Feb 5, 2013 at 3:54 AM, Russ Michaels r...@michaels.me.uk wrote: I have to say I have never once had that in my 12 years of installing cf servers, if the cfide dir or vdir doesn't exist , then cfide or the administrator doesn't work, period. So there must be some.very special.circumstances for that to happen, it certainly doesn't happen on a standard windows install. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Feb 5, 2013 12:21 AM, Dave Watts dwa...@figleaf.com wrote: OK, now that you've done that: CF serves all sorts of pages that don't exist. You may read up in this very thread about CFCHART, which relies on a URL pattern that doesn't exist. CF relies on servlet mappings, which may or may not correspond with actual URLs. Typically, they do, but there are some specific URL mappings that are created by default when you install CF, and one of them is /CFIDE/Administrator/index.cfm. Another is /CFIDE/Main/ide.cfm - this is another file that doesn't even exist by default. I understand that under special circumstances like CFChart it serves pages that don't exist. But in the scenario I outlined where CFIDE mappings have been re-pointed to a folder that does not carry the administrator folders and the web server provides a Virtual directory to the very same duplicated CFIDE folder, I fail to see how it would ever serve the content from the administrator and adminapi folders... In a nutshell: - client requests /CFIDE/Administrator/index.cfm - request is immediately passed to CF by the web server - this happens before the web server tests for the existence of a file at that URL - CF looks at its list of servlet mappings, and finds one for /CFIDE/Administrator/index.cfm - CF looks on the filesystem for where it expects to find this file, based on where these files were placed during the initial install - if the file is there, it's executed So, let's say you install CF without hooking it up to a web server, then later hook it up to IIS. In that case, CF will initially use the built-in web server, and create the file c:\coldfusion9\wwwroot\CFIDE\Administrator\index.cfm. When you hook up the web server, the web root might be c:\inetpub\wwwroot, and you may have created your own CFIDE directory there without the Administrator subdirectory, so that the directory c:\inetpub\wwwroot\CFIDE exists but the file c:\inetpub\wwwroot\CFIDE\Administrator\index.cfm does not. Nevertheless, CF will execute the file c:\coldfusion9\wwwroot\CFIDE\Administrator\index.cfm when you ask it for http://your_IIS_web_server/CFIDE/Administrator/index.cfm even though a request for http://your_IIS_web_server/CFIDE/Administrator/ returns a 404 - the second URL doesn't match an explicit servlet mapping. Alternatively, let's say you install CF and hook it up to your default IIS server. In that case, CF will create the file c:\inetpub\wwwroot\CFIDE\Administrator\index.cfm. Then, you might create a new IIS virtual server, and set its web root to c:\inetpub\otherserver\. You'd still have the same problem, as CF would still be able to resolve to the original location of the file. We actually go through this in our Administering ColdFusion 9 course as it's a fairly common configuration mistake. http://training.figleaf.com/courses/administering_coldfusion.cfm Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354315 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Hack - Further Information
Upon further review of my server I have discovered several files were compromised, dating back to January 2, 2013. They appear in various places in the /CFIDE folder. Here is a list of the ones I found this morning: C:\Inetpub\wwwroot\CFIDE\ adminapi\customtags\fusebox.cfm C:\Inetpub\wwwroot\CFIDE\administrator\scheduler\scheduleedit.cfm C:\Inetpub\wwwroot\CFIDE\administrator\security\cfrdspassword.cfm C:\Inetpub\wwwroot\CFIDE\componentutils\Application.cfm C:\Inetpub\wwwroot\CFIDE\componentutils\cfcexplorer.cfc C:\Inetpub\wwwroot\CFIDE\scripts\ajax\ext\docs\resources\pkg.cfm If your server was compromised, I suggest you do a search for any files changed within the past 2 months and you will probably find them. James F ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354316 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
If you have a budget available I would recommend http://www.maxmind.com/en/geolocation_landing. We use the downloadable database. Thanks Donnie, that is exactly the kind of service I am looking for. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354317 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion MX 7 Updater 2
Just so you are aware, all security vulnerabilities that have come out will never be patched on cf7, sp you should take exyra precautions to lock down any server running old unsupported versions of cf. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Feb 5, 2013 5:23 PM, Mosh Teitelbaum mosh.teitelb...@evoch.com wrote: All: Any chance someone has a copy of the ColdFusion MX 7 Updater 2 for Win32 lying around? I have a client that is perfectly happy with their current version of CFMX 7, thank you very much, but we had to reinstall everything on a new server. I've installed 7.0.0 from CD but don't have access to the 7.0.2 updater. Anyone have it and willing to share? The filename should be coldfusion-70-updater2-win.exe and it should weigh in at about 46.1 MBs. MD5 Checksum of 8dde3d2e45541d2cf4e1db90d33668ab . Thanks in advance. -- Mosh Teitelbaum ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354318 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Hack - Further Information
I have to say I have never once had that in my 12 years of installing cf servers, if the cfide dir or vdir doesn't exist , then cfide or the administrator doesn't work, period. I have seen this many times. Again, as mentioned previously, it's not at all obvious - you request the URL /CFIDE/Administrator/ and you get a 404 from the web server, but /CFIDE/Administrator/index.cfm gives you a 200 for the CF Administrator. You can easily tell when this happens because the images (which are static files not served by CF) are not displayed. So there must be some.very special.circumstances for that to happen, it certainly doesn't happen on a standard windows install. The circumstances are not all that special, and happen under the exact situations I described. If you install CF with the CF Administrator and do not move or delete it, then you set up a web server without the CF Administrator, CF will be able to run /CFIDE/Administrator/index.cfm. Again, we typically demonstrate this in class, so it's fairly replicable. The key is simply to be aware of servlet mappings and how they work. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354319 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion app response slow
Could be any reason, DB, large number or requests, one user running a report with out of control parameters. FusionReactor would be a great tool that would tell you exactly what was going on during the slow down and see what the issue is. -J.J. On Tue, Feb 5, 2013 at 8:19 AM, fun and learning funandlrnn...@gmail.com wrote: All - Since couple of months, every couple of days one of the coldfusion app has slow response times. It gets fine once we recycle the coldfusion server. What are the possible ways to troubleshoot or identify the cause? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354320 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: ColdFusion MX 7 Updater 2
Russ: Thanks, I'm aware of that and have suggested to the client that they upgrade. They're not interested. But thanks for the warning. -- Mosh Teitelbaum From: Russ Michaels [mailto:r...@michaels.me.uk] Just so you are aware, all security vulnerabilities that have come out will never be patched on cf7, sp you should take exyra precautions to lock down any server running old unsupported versions of cf. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354321 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion MX 7 Updater 2
Just in case you're not already aware of it, you might take a look at Railo. On Tue, Feb 5, 2013 at 1:09 PM, Mosh Teitelbaum mosh.teitelb...@evoch.comwrote: Russ: Thanks, I'm aware of that and have suggested to the client that they upgrade. They're not interested. But thanks for the warning. -- Mosh Teitelbaum From: Russ Michaels [mailto:r...@michaels.me.uk] Just so you are aware, all security vulnerabilities that have come out will never be patched on cf7, sp you should take exyra precautions to lock down any server running old unsupported versions of cf. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354322 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Dealing with HIGH secuity on a W2008 server
Hi, I'm installing CF9 on a new W2008 dedicated server. This server has a level of security which is driving me crazy. I log as Administrator and I cannot modify any xml file even with bloc-notes : access denied, even when the CF service is stopped. When I try to set bloc-note to run as administrator, the check box is greyed. How do you guys deal with this situation? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354323 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dealing with HIGH secuity on a W2008 server
I'm installing CF9 on a new W2008 dedicated server. This server has a level of security which is driving me crazy. I log as Administrator and I cannot modify any xml file even with bloc-notes : access denied, even when the CF service is stopped. When I try to set bloc-note to run as administrator, the check box is greyed. How do you guys deal with this situation? Can you run a command prompt as Administrator? If so, you should be able to open any program from that prompt and have it use Administrator privileges. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354324 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Looking for a CF drag drop tutorial
Have you looked at adding jQueryUI, rather than rolling your own drag/drop?
I've used it in the past with success.
Billy Cravens
bdcrav...@gmail.com
On Feb 5, 2013, at 11:58 AM, Elizabeth Adkins eadk...@acisd.org wrote:
I'm working on the same thing. This is what I have so far. It works up to
the .JSON call, but I can't get that to work. Any suggestions?
!--draganddrop.cfm---
head
style type=text/css
#div1 {width:336px;height:70px;padding:10px;border:1px solid #aa;}
#div2 {width:336px;height:70px;padding:10px;border:1px solid #aa;}
#div3 {width:336px;height:70px;padding:10px;border:1px solid #aa;}
/style
CFAJAXPROXY cfc=cfc.myPreferences jsclassname=myPreferences
script type=text/javascript
src=http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js;/script
script type=text/javascript
function allowDrop(ev)
{
ev.preventDefault();
}
function drag(ev)
{
ev.dataTransfer.setData(Text,ev.target.id);
}
function drop(ev,empID,tab)
{
var data=ev.dataTransfer.getData(Text);
var placement = ev.target.id;
var widgetID = data;
ev.target.appendChild(document.getElementById(data));
alert(widgetID +','+ placement +','+ empID +','+ tab);
$.getJSON(/cfc/ myPreferences.cfc?method=updatePlacementreturnformat=json,
{tabname:tabname},
function(result)
{alert('Success!!! '+result.widget);}
);
ev.preventDefault();
}
/script
/head
body
cfset empID = 'XXX'
cfoutput
div id=div1 ondrop=drop(event,'#empID#','info')
ondragover=allowDrop(event)/div
div id=div2 ondrop=drop(event,'#empID#','info')
ondragover=allowDrop(event)/div
div id=div3 ondrop=drop(event,'#empID#','info')
ondragover=allowDrop(event)/div
/cfoutput
img id=mountain src=/images/001.jpg draggable=true
ondragstart=drag(event) width=336 height=69 /
img id=circle src=/images/delete.gif draggable=true
ondragstart=drag(event) /
img id=RoundedRectangle src=/images/check_off.gif draggable=true
ondragstart=drag(event) /
/body
!---myPreferences.cfc
CFCOMPONENT displayname=myPreferences
CFFUNCTION name=updatePlacement access=remote returntype=struct
output=yes
CFARGUMENT name=tabname required=yes
CFSET var showme = structNew()
cfset showme.tab = ARGUMENTS.tabname
CFRETURN showme
/CFFUNCTION
/CFCOMPONENT
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354325
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion app response slow
On Tue, Feb 5, 2013 at 2:06 PM, J.J. Merrick j...@panos.cc wrote: FusionReactor would be a great tool that would tell you exactly what was going on during the slow down and see what the issue is. +1 -Cameron ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354326 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dealing with HIGH secuity on a W2008 server
If so, you should be able to open any program from that prompt and have it use Administrator privileges. I can run any program as administrator if I right click on the progam exe file in Windows Explorer, But I cannot set its privilege level in its properties. This is annoying, because if I click Edit on a file, I can edit it, but not save it. There is no Edit as administrator in the options. How come I don't have all administrator privileges by default if I am administrator ? This is not security, this is paranoia :-( ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354327 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Dealing with HIGH secuity on a W2008 server
Right click the program used to edit, and choose run as administrator, then open the file from within the application. You can't get admin rights that I know of by right clicking a file and choosing edit. -Original Message- From: =?ISO-8859-1?Q?Claude_Schn=E9egans [mailto:schneegans@interneti=71?=.=?ISO-8859-1?Q?ue.com=3E?=] Sent: Tuesday, February 05, 2013 2:55 PM To: cf-talk Subject: Re: Dealing with HIGH secuity on a W2008 server If so, you should be able to open any program from that prompt and have it use Administrator privileges. I can run any program as administrator if I right click on the progam exe file in Windows Explorer, But I cannot set its privilege level in its properties. This is annoying, because if I click Edit on a file, I can edit it, but not save it. There is no Edit as administrator in the options. How come I don't have all administrator privileges by default if I am administrator ? This is not security, this is paranoia :-( ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354328 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion app response slow
Try to Check and fine tune your jvm settings. On Feb 5, 2013 11:06 PM, J.J. Merrick j...@panos.cc wrote: Could be any reason, DB, large number or requests, one user running a report with out of control parameters. FusionReactor would be a great tool that would tell you exactly what was going on during the slow down and see what the issue is. -J.J. On Tue, Feb 5, 2013 at 8:19 AM, fun and learning funandlrnn...@gmail.com wrote: All - Since couple of months, every couple of days one of the coldfusion app has slow response times. It gets fine once we recycle the coldfusion server. What are the possible ways to troubleshoot or identify the cause? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354329 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Coldfusion app response slow
Fusionreactor does not have all the info thar the server monitor does, the server monitor is better for drilling down into memory usage. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Feb 5, 2013 7:51 PM, Cameron Childress camer...@gmail.com wrote: On Tue, Feb 5, 2013 at 2:06 PM, J.J. Merrick j...@panos.cc wrote: FusionReactor would be a great tool that would tell you exactly what was going on during the slow down and see what the issue is. +1 -Cameron ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354330 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Looking for a CF drag drop tutorial
Have you looked at adding jQueryUI, rather than rolling your own
drag/drop? I've used it in the past with success.
Thanks, David. I've never used jQueryUI, I'll have to look into it.
I solved my problem: an overlooked spelling error! {tabname:tabname}, should
have been {tabname:tab}. The drag and drop works well, and now I can update
preferences when an user rearranges their page.
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354331
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dealing with HIGH secuity on a W2008 server
By default you can only edit files on your own desktop or in your own documents folder. For anything else you must run the program as administrator and then open the file from there. You cannot right click files and choose edit or open with unles it is in your documents folder or on your desktop. Yes it is very annoying. I think uac is the cause. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Feb 5, 2013 7:55 PM, wrote: If so, you should be able to open any program from that prompt and have it use Administrator privileges. I can run any program as administrator if I right click on the progam exe file in Windows Explorer, But I cannot set its privilege level in its properties. This is annoying, because if I click Edit on a file, I can edit it, but not save it. There is no Edit as administrator in the options. How come I don't have all administrator privileges by default if I am administrator ? This is not security, this is paranoia :-( ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354332 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dealing with HIGH secuity on a W2008 server
Right click the program used to edit, and choose run as administrator, then open the file from within the application. Thanks, I know I can do that, my question is how to bypass this hassle? You can't get admin rights that I know of by right clicking a file and choosing edit. But how come since I log as Administrator ? Now, if I remember well, I had the same problem on W7: the Administrator has not all administrators's rights and I found a way to log as SUPER administrator. I'll check to see if I can find this information again. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354333 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Dealing with HIGH secuity on a W2008 server
Go look here: http://www.wikihow.com/Add-an-%22Open-With-Notepad-As-Administrator%22-Shortcut-to-the-Context-Menu-in-Windows-7-and-Windows-Vista It tells you how to add Open With Notepad as Administrator, you should be able to modify that to do what you want. This way you don't have to disable UAC which is what you would have to do to get that Super Administrator you were talking about. Disabling UAC would probably violate all sorts of rules relating to the locked down server. Steve -Original Message- From: =?ISO-8859-1?Q?Claude_Schn=E9egans [mailto:schneegans@interneti=71?=.=?ISO-8859-1?Q?ue.com=3E?=] Sent: Tuesday, February 05, 2013 3:58 PM To: cf-talk Subject: Re: Dealing with HIGH secuity on a W2008 server Right click the program used to edit, and choose run as administrator, then open the file from within the application. Thanks, I know I can do that, my question is how to bypass this hassle? You can't get admin rights that I know of by right clicking a file and choosing edit. But how come since I log as Administrator ? Now, if I remember well, I had the same problem on W7: the Administrator has not all administrators's rights and I found a way to log as SUPER administrator. I'll check to see if I can find this information again. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354334 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dealing with HIGH secuity on a W2008 server
Thanks, I know I can do that, my question is how to bypass this hassle? You can disable UAC. This is probably not a good idea, though, especially if it's not your server. Like I mentioned earlier, it's very easy to just open a single command prompt as Administrator and use that to launch any specific actions that actually require administrative rights. This is what I generally do when I'm configuring a customer's server. You can't get admin rights that I know of by right clicking a file and choosing edit. But how come since I log as Administrator ? Now, if I remember well, I had the same problem on W7: the Administrator has not all administrators's rights and I found a way to log as SUPER administrator. The administrator does have those rights - but must explicitly choose to use them. This protects Windows against the historic, ongoing problem of administrators having their accounts compromised and being tricked into performing malicious tasks with administrative privileges. http://technet.microsoft.com/en-us/library/cc709691(v=ws.10).aspx Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354335 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dealing with HIGH secuity on a W2008 server
It tells you how to add Open With Notepad as Administrator Very good! It works! Thanks a lot, very clever solution. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354336 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dealing with HIGH secuity on a W2008 server
You can disable UAC. This is probably not a good idea, though, especially if it's not your server. It is a dedicated server, but it is certainly not a good idea indeed. it's very easy to just open a single command prompt as Administrator and use that to launch any specific actions that actually require administrative rights. It may be easy, but rather cumbersome to find and open the program first, then find and open the file. It looks like going back to DOS and CP/M ;-) I like the solution Open as administrator much better. Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354337 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
Because Ray, this doesn't give you the data. For example country, city and everything else that these services offer. @OP the best service is not the cheapest but it is also the most accurate data. ip2location.com -- Regards, Andrew Scott WebSite: http://www.andyscott.id.au/ Google+: http://plus.google.com/113032480415921517411 On Wed, Feb 6, 2013 at 3:59 AM, Raymond Camden raymondcam...@gmail.comwrote: What about using geolocation on the client itself? Roughly 82% of your audience will support it. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354338 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
Yeah, I got that Andrew many hours ago when he said it was historical data, not active data. ;) I'd argue that Google's Geocode API ( https://developers.google.com/maps/documentation/geocoding/) would provide it for a user along with geolocation if you wanted it for the current user. On Tue, Feb 5, 2013 at 4:38 PM, Andrew Scott andr...@andyscott.id.auwrote: Because Ray, this doesn't give you the data. For example country, city and everything else that these services offer. @OP the best service is not the cheapest but it is also the most accurate data. ip2location.com -- Regards, Andrew Scott WebSite: http://www.andyscott.id.au/ Google+: http://plus.google.com/113032480415921517411 On Wed, Feb 6, 2013 at 3:59 AM, Raymond Camden raymondcam...@gmail.com wrote: What about using geolocation on the client itself? Roughly 82% of your audience will support it. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354339 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
Yes and at 2500 per day that is quite generous too. -- Regards, Andrew Scott WebSite: http://www.andyscott.id.au/ Google+: http://plus.google.com/113032480415921517411 On Wed, Feb 6, 2013 at 9:56 AM, Raymond Camden raymondcam...@gmail.comwrote: Yeah, I got that Andrew many hours ago when he said it was historical data, not active data. ;) I'd argue that Google's Geocode API ( https://developers.google.com/maps/documentation/geocoding/) would provide it for a user along with geolocation if you wanted it for the current user. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354340 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: SOT: IP Geolocation APIs
I'd argue that Google's Geocode API (...) would provide it for a user along with geolocation if you wanted it for the current user. Indeed, we are actually using the Google Geocoder for getting lat/long info for street addresses so that they can be mixed in where available as well. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354341 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
