Re: MariaDB limitation on memo fields -- caps out at 255 (SOLVED)
On 2019-02-18 15:50, mbsoftwaresoluti...@mbsoftwaresolutions.com wrote: My VFP9SP2 app connects to my web database with no issue. My client wanted to host the database on his network there so I installed MariaDB there and everything seemed to fire up just fine. HOWEVER, there's a problem with the memo fields capping at length=255. Given that it works with a different (my web) MariaDB database, I'm sure this is a configuration issue. Question is: where do I find/set that? His network OS is Windows 2016 Server. My web database is using a Linux OS iirc. tia, --Mike Here's the weird fix: instead of using a MEDIUMTEXT field, it worked just fine when I changed it to TEXT fields. Now MEDIUMTEXT is supposed to handle LARGER #s of characters, but in this case, just TEXT should suffice. Still...wonder why the ODBC (originally 3.51, then I upgraded to the latest 64-bit MariaDB driver) has a problem with MEDIUMTEXT on this Windows 2016 Server? My other database (where no issues at all) operates on a Debian Linux OS. Thoughts? ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/8526cee0d3a1d55f364dbe029a95e...@mbsoftwaresolutions.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Re: RE: [NF] Migrating Skills From Foxpro to Xojo
It might sound off-topic, but seeing the Xojo style, gives me the impression it is a total rewrite in a VB style language. I would suggest you rather look at an XBase language like XSharp which you might be surprised have a very similar coding style to FoxPro. Might have your code converted a lot quicker than any other way. Open source, actively developed, .NET based on the MicroSoft C# compiler's open source project Roslyn. Johan Nel On 2019/02/22 23:56, Kevin J Cully wrote: There's a lot there. I'm out of time for the day unfortunately. Let me give you a full response on my thoughts on migrating to Xojo on Monday sometime. -Kevin -Original Message- From: ProFox [mailto:profox-boun...@leafe.com] On Behalf Of Paul H. Tarver Sent: Friday, February 22, 2019 12:04 PM To: profox@leafe.com Subject: [NF] Migrating Skills From Foxpro to Xojo I hijacked the original thread with a reply changing the subject and adding an [NF] flag to the subject because a small comment Kevin made caused me chase a different rabbit for a little bit. I have reviewed Xojo on a couple of different occasions over the past few years and I have tried to work my way through the book that was written to teach people how to program it and I find myself drifting by the 3rd or 4th chapter every time. Not a fault of the author; just rather a fault of me wanting something a little more advanced. Anyway, I've run into a couple of hurdles with trying to learn Xojo and perhaps someone here has some suggestions to help me out. Try not to laugh at what may be very dumb questions! :) 1) I build a lot of similar but customized apps using a shared library of tools I've developed over the past 25 years. Every app I build contains a LOT of forms, reports and programs shared by all my applications as well as a lot of forms, reports and programs which are copied from previous projects and then customized for the current client. While I have seen multiple Xojo advocates confirm a similar process is possible, but I cannot find clear explanations of how to make that happen. 2) Every Foxpro application I build starts with a .PRG which reads a configuration .INI file and then setups up the environment, displays a splash screen, checks my version numbers, calls a database update process if a version change is detected and if all is good, it displays the main screen for the user. Once the user chooses to exit my application, a shutdown process is initiated and everything is closed in an orderly way. That having been said, I have been unable to find source code to a simple, complete Xojo application or instruction book that can walk me through the start to finish logic and firing order of all the start-up and shut-down events and allow me to compare that to the process I'm so familiar with in Foxpro. 3) Are there any good white-papers or books by Foxpro programmers that can provide insights into translating my Foxpro knowledge and skill directly into Xojo. I use Foxpro on a daily basis for my business because I cannot find a language that satisfies my clients' needs the way Foxpro does. I would love to be able to say I have a backup language like Xojo, but I get only so far before I give up and go back to what I know and love. So let's assume Kevin is correct when he states Xojo is " a viable language for VFP developers" because I do not want to go down the rabbit hole of considering all the other alternatives for this sake of this discussion and share with me any tips that can help me understand Xojo on a higher level beyond just creating a simple form. I want to understand Xojo at a Complete Deliverable Application level and talk about mimicking the features I depend upon in Foxpro to share a library of tools, forms and code across hundreds of similar custom applications. Paul H. Tarver -Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Kevin J Cully Sent: Friday, February 22, 2019 8:11 AM To: profoxt...@leafe.com Subject: RE: false news Well, a lot of that article is correct, even though I don't want it to be. VFP as a *language* is as secure as the programmer programmed it to be. VFP as a *database* isn't secure itself. You can encrypt fields. You can encrypt the directory that the data is stored in. But DBF data isn't secure. You wouldn't store social security numbers or credit card numbers in Excel spreadsheets, right? I've haven't recommended DBFs for storage for over a decade now. There are better storage mechanisms such as Postgres, MariaDB, and even SQLite which can be set up as an encrypted database. VFP as a language is still valid, although it will never be able to create 64bit applications but that is a different subject. [Insert Xojo plug here as a viable language for VFP developers.] I had a potential client where they based their primary keys based on employee Social Security Numbers. They didn't like it
Re: [NF] Migrating Skills From Foxpro to Xojo
Why do you need to open up so much and at the end close it down? Shouldn’t every ui do that as needed? Doesn’t the data get stale if you pull it at onset? The work I do lately is all processing via a variety of message ques and no ui. You read the message and then identify what if anything you need to do or pass it off to the erp for the work to be done. Guess I live in a workflow hell. I get the attributes from the message and deal with it on its own terms. On Fri, Feb 22, 2019 at 11:05 AM Paul H. Tarver wrote: > I hijacked the original thread with a reply changing the subject and > adding an [NF] flag to the subject because a small comment Kevin made > caused me chase a different rabbit for a little bit. > > I have reviewed Xojo on a couple of different occasions over the past few > years and I have tried to work my way through the book that was written to > teach people how to program it and I find myself drifting by the 3rd or 4th > chapter every time. Not a fault of the author; just rather a fault of me > wanting something a little more advanced. Anyway, I've run into a couple > of hurdles with trying to learn Xojo and perhaps someone here has some > suggestions to help me out. > > Try not to laugh at what may be very dumb questions! :) > > 1) I build a lot of similar but customized apps using a shared library of > tools I've developed over the past 25 years. Every app I build contains a > LOT of forms, reports and programs shared by all my applications as well as > a lot of forms, reports and programs which are copied from previous > projects and then customized for the current client. While I have seen > multiple Xojo advocates confirm a similar process is possible, but I cannot > find clear explanations of how to make that happen. > > 2) Every Foxpro application I build starts with a .PRG which reads a > configuration .INI file and then setups up the environment, displays a > splash screen, checks my version numbers, calls a database update process > if a version change is detected and if all is good, it displays the main > screen for the user. Once the user chooses to exit my application, a > shutdown process is initiated and everything is closed in an orderly way. > That having been said, I have been unable to find source code to a simple, > complete Xojo application or instruction book that can walk me through the > start to finish logic and firing order of all the start-up and shut-down > events and allow me to compare that to the process I'm so familiar with in > Foxpro. > > 3) Are there any good white-papers or books by Foxpro programmers that can > provide insights into translating my Foxpro knowledge and skill directly > into Xojo. > > I use Foxpro on a daily basis for my business because I cannot find a > language that satisfies my clients' needs the way Foxpro does. I would love > to be able to say I have a backup language like Xojo, but I get only so far > before I give up and go back to what I know and love. So let's assume Kevin > is correct when he states Xojo is " a viable language for VFP developers" > because I do not want to go down the rabbit hole of considering all the > other alternatives for this sake of this discussion and share with me any > tips that can help me understand Xojo on a higher level beyond just > creating a simple form. I want to understand Xojo at a Complete Deliverable > Application level and talk about mimicking the features I depend upon in > Foxpro to share a library of tools, forms and code across hundreds of > similar custom applications. > > Paul H. Tarver > > > > -Original Message- > From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Kevin > J Cully > Sent: Friday, February 22, 2019 8:11 AM > To: profoxt...@leafe.com > Subject: RE: false news > > Well, a lot of that article is correct, even though I don't want it to > be. VFP as a *language* is as secure as the programmer programmed it to > be. VFP as a *database* isn't secure itself. You can encrypt fields. You > can encrypt the directory that the data is stored in. But DBF data isn't > secure. You wouldn't store social security numbers or credit card numbers > in Excel spreadsheets, right? > > I've haven't recommended DBFs for storage for over a decade now. There > are better storage mechanisms such as Postgres, MariaDB, and even SQLite > which can be set up as an encrypted database. VFP as a language is still > valid, although it will never be able to create 64bit applications but that > is a different subject. [Insert Xojo plug here as a viable language for > VFP developers.] I had a potential client where they based their primary > keys based on employee Social Security Numbers. They didn't like it when I > told them that they'd need a complete rewrite. Notice this would have been > the case no matter what language/technology they were using. It was just > piss poor design. > > It appears from the article, that when the vendor was notified of the >
RE: [NF] Migrating Skills From Foxpro to Xojo
There's a lot there. I'm out of time for the day unfortunately. Let me give you a full response on my thoughts on migrating to Xojo on Monday sometime. -Kevin -Original Message- From: ProFox [mailto:profox-boun...@leafe.com] On Behalf Of Paul H. Tarver Sent: Friday, February 22, 2019 12:04 PM To: profox@leafe.com Subject: [NF] Migrating Skills From Foxpro to Xojo I hijacked the original thread with a reply changing the subject and adding an [NF] flag to the subject because a small comment Kevin made caused me chase a different rabbit for a little bit. I have reviewed Xojo on a couple of different occasions over the past few years and I have tried to work my way through the book that was written to teach people how to program it and I find myself drifting by the 3rd or 4th chapter every time. Not a fault of the author; just rather a fault of me wanting something a little more advanced. Anyway, I've run into a couple of hurdles with trying to learn Xojo and perhaps someone here has some suggestions to help me out. Try not to laugh at what may be very dumb questions! :) 1) I build a lot of similar but customized apps using a shared library of tools I've developed over the past 25 years. Every app I build contains a LOT of forms, reports and programs shared by all my applications as well as a lot of forms, reports and programs which are copied from previous projects and then customized for the current client. While I have seen multiple Xojo advocates confirm a similar process is possible, but I cannot find clear explanations of how to make that happen. 2) Every Foxpro application I build starts with a .PRG which reads a configuration .INI file and then setups up the environment, displays a splash screen, checks my version numbers, calls a database update process if a version change is detected and if all is good, it displays the main screen for the user. Once the user chooses to exit my application, a shutdown process is initiated and everything is closed in an orderly way. That having been said, I have been unable to find source code to a simple, complete Xojo application or instruction book that can walk me through the start to finish logic and firing order of all the start-up and shut-down events and allow me to compare that to the process I'm so familiar with in Foxpro. 3) Are there any good white-papers or books by Foxpro programmers that can provide insights into translating my Foxpro knowledge and skill directly into Xojo. I use Foxpro on a daily basis for my business because I cannot find a language that satisfies my clients' needs the way Foxpro does. I would love to be able to say I have a backup language like Xojo, but I get only so far before I give up and go back to what I know and love. So let's assume Kevin is correct when he states Xojo is " a viable language for VFP developers" because I do not want to go down the rabbit hole of considering all the other alternatives for this sake of this discussion and share with me any tips that can help me understand Xojo on a higher level beyond just creating a simple form. I want to understand Xojo at a Complete Deliverable Application level and talk about mimicking the features I depend upon in Foxpro to share a library of tools, forms and code across hundreds of similar custom applications. Paul H. Tarver -Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Kevin J Cully Sent: Friday, February 22, 2019 8:11 AM To: profoxt...@leafe.com Subject: RE: false news Well, a lot of that article is correct, even though I don't want it to be. VFP as a *language* is as secure as the programmer programmed it to be. VFP as a *database* isn't secure itself. You can encrypt fields. You can encrypt the directory that the data is stored in. But DBF data isn't secure. You wouldn't store social security numbers or credit card numbers in Excel spreadsheets, right? I've haven't recommended DBFs for storage for over a decade now. There are better storage mechanisms such as Postgres, MariaDB, and even SQLite which can be set up as an encrypted database. VFP as a language is still valid, although it will never be able to create 64bit applications but that is a different subject. [Insert Xojo plug here as a viable language for VFP developers.] I had a potential client where they based their primary keys based on employee Social Security Numbers. They didn't like it when I told them that they'd need a complete rewrite. Notice this would have been the case no matter what language/technology they were using. It was just piss poor design. It appears from the article, that when the vendor was notified of the situation, that they were able to quickly address it although the article didn't say what that solution was. Probably encrypted the field? Hash the field with an external secured table containing the sensitive data? Who knows. To me,
Re: Webfaction question
Hi Ken, I may have been one of those cheerleaders that steered you to Webfaction. Webfaction was great back in the day, but over the past few years they seemed to coast on their success. I'm no fan of GoDaddy - if they're the new owner, then Webfaction is doomed. Like Tracy, I've heard good things about Digital Ocean. Amazon AWS also offers a competitively priced Webfaction equivalent called Lightsail. Let us know who you finally end up with. Malcolm ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/55c2cdd8-9c5c-43b0-aeb5-7bba9d7a2...@www.fastmail.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
RE: Webfaction question
I don't personally use it, yet. But it comes highly recommended from a co-worker. https://www.digitalocean.com/products/droplets/ It looks like you can add additional space to a $5/mo vps to get the size you need for about $15/mo. Or you can consider the Spaces if all you are doing is sharing files 250 GB is $5/mo. https://www.digitalocean.com/products/spaces/ -Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Ken McGinnis Sent: Friday, February 22, 2019 2:41 PM To: profoxt...@leafe.com Subject: Webfaction question I started using webfaction many years ago because someone on this list mentioned it. I have been very happy. However, now Webfaction has been taken over by Godaddy and none of my old procedures work for some reason. Also, they are not very responsive to questions. For example: I have several web sites on Webfaction and have my DNS server (name.com) pointed to them and it works fine. However, I used to be able to 'hide' things in a sub folder of one of those web sites and allow anyone to see what was there (sometimes with a password). Now I can't do that using FileZilla client. I set the permissions to 777 and there is no access at all. The subfolder can't even be seen in a directory list. Anyone have the same experience? What I really want to know is if anyone has had good experience with a cheap (Linux?) server where I can put my web sites. I don't need email or any else other than storage, about 150gb or more. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus [excessive quoting removed by server] ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/000a01d4caee$04a18b30$0de4a190$@powerchurch.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Webfaction question
I started using webfaction many years ago because someone on this list mentioned it. I have been very happy. However, now Webfaction has been taken over by Godaddy and none of my old procedures work for some reason. Also, they are not very responsive to questions. For example: I have several web sites on Webfaction and have my DNS server (name.com) pointed to them and it works fine. However, I used to be able to 'hide' things in a sub folder of one of those web sites and allow anyone to see what was there (sometimes with a password). Now I can't do that using FileZilla client. I set the permissions to 777 and there is no access at all. The subfolder can't even be seen in a directory list. Anyone have the same experience? What I really want to know is if anyone has had good experience with a cheap (Linux?) server where I can put my web sites. I don't need email or any else other than storage, about 150gb or more. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/8d4e5c61-f35f-400c-4d49-4e46ee29d...@gmail.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Re: false news....
On Fri, Feb 22, 2019 at 6:11 AM Kevin J Cully wrote: > I had a potential client where they based their primary keys based on > employee Social Security Numbers. They didn't like it when I told them > that they'd need a complete rewrite. Notice this would have been the case > no matter what language/technology they were using. It was just piss poor > design. > > I must confess I did this once and used SSN's as a primary key. It is my shame I was told I had a year and a half to write a enterprise wide application and out of the blue the reality was I had about 3 weeks, and failure would have cost millions and millions... oh - and my job... I was panicked and the first thing I thought to use was the SSN thinking that certainly they wouldn't be changing so as a PK would be handy to use. I went for it w/o thinking it through... Granted, this was back in the day when the internet wasn't what we think of today, but still - it was a really dumb dumb idea I always regretted... -- Matt Jarvis Eugene, Oregon USA --- StripMime Report -- processed MIME parts --- multipart/alternative text/plain (text body -- kept) text/html --- ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/capt54rbqwf9jjmt480dinx8alsa9jzaucsupdex_5juwcqv...@mail.gmail.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Re: Foxite?
That reminds me - and makes me chuckle. Did you know that FaceBook has a
special dev lab as part of the co. - and that its actually named Area
404?!? Well - its true! I've been there - was visiting with a buddy of
mine who is a manager there - and he does hi-tech research & dev. as he
has a background in robotics & electronics - and actually has not One
but Two PhD's!
-K-
On 2/21/2019 4:32 AM, Richard Kaye wrote:
Seems to be down. Last few times I tried to get to the site it 404ed.
--
rk
-Original Message-
From: ProfoxTech On Behalf Of Dave Crozier
Sent: Thursday, February 21, 2019 7:29 AM
To: profoxt...@leafe.com
Subject: Foxite?
Is Foxite still up and running or has it been retired?
Can’t seem to get access to a couple of articles I bookmarked some time ago.
Dave Crozier
Software Development Manager
Flexipol Packaging Ltd.
﴾⚆ᨎ⚆﴿
Flexipol® Packaging Ltd
T 01706 222 792
E dcroz...@flexipol.co.uk
W https://www.flexipol.co.uk/
Follow us:
Unit 14 Bentwood Road, Carrs Industrial Estate, Haslingden, Lancashire, BB4 5HH
This communication and the information it contains is intended for the person
or organisation to whom it is addressed. Its contents are confidential and may
be protected in law. If you have received this e-mail in error you must not
copy, distribute or take any action in reliance on it. Unauthorised use,
copying or disclosure of any of it may be unlawful. If you have received this
message in error, please notify us immediately by telephone or email.
Flexipol Packaging Ltd. has taken every reasonable precaution to minimise the risk of virus transmission through email and therefore any files sent via e-mail will have been checked for known viruses. However, you are advised to run your own virus check before opening any attachments received as Flexipol Packaging Ltd will not in any event accept any liability whatsoever once an e-mail and/or any attachment is received.
It is the responsibility of the recipient to ensure that they have adequate virus protection.
-
Terms & Conditions:
Notwithstanding delivery and the passing of risk in the goods, the property in the
goods shall not pass to the buyer until the seller Flexipol Packaging Ltd. ("The
Company") has received in cash or cleared funds payment in full of the price of the
goods and all other goods agreed to be sold by the seller to the buyer for which payment
is then due. Until such time as the property in the goods passes to the buyer, the buyer
shall hold the goods as the seller's fiduciary agent and bailee and keep the goods
separate from those of the buyer and third parties and properly stored protected and
insured and identified as the seller's property but shall be entitled to resell or use
the goods in the ordinary course of its business. Until such time as the property in the
goods passes to the buyer the seller shall be entitled at any time
--- StripMime Report -- processed MIME parts --- multipart/related
multipart/alternative
text/plain (text body -- kept)
text/html
image/jpeg
image/jpeg
image/png
image/png
image/png
image/png
---
[excessive quoting removed by server]
___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message:
http://leafe.com/archives/byMID/profox/c6ec6c2b-db0c-53c0-f39b-cf0beaf1b...@gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the
author, and do not constitute legal or medical advice. This statement is added
to the messages for those lawyers who are too stupid to see the obvious.
[NF] Migrating Skills From Foxpro to Xojo
I hijacked the original thread with a reply changing the subject and adding an [NF] flag to the subject because a small comment Kevin made caused me chase a different rabbit for a little bit. I have reviewed Xojo on a couple of different occasions over the past few years and I have tried to work my way through the book that was written to teach people how to program it and I find myself drifting by the 3rd or 4th chapter every time. Not a fault of the author; just rather a fault of me wanting something a little more advanced. Anyway, I've run into a couple of hurdles with trying to learn Xojo and perhaps someone here has some suggestions to help me out. Try not to laugh at what may be very dumb questions! :) 1) I build a lot of similar but customized apps using a shared library of tools I've developed over the past 25 years. Every app I build contains a LOT of forms, reports and programs shared by all my applications as well as a lot of forms, reports and programs which are copied from previous projects and then customized for the current client. While I have seen multiple Xojo advocates confirm a similar process is possible, but I cannot find clear explanations of how to make that happen. 2) Every Foxpro application I build starts with a .PRG which reads a configuration .INI file and then setups up the environment, displays a splash screen, checks my version numbers, calls a database update process if a version change is detected and if all is good, it displays the main screen for the user. Once the user chooses to exit my application, a shutdown process is initiated and everything is closed in an orderly way. That having been said, I have been unable to find source code to a simple, complete Xojo application or instruction book that can walk me through the start to finish logic and firing order of all the start-up and shut-down events and allow me to compare that to the process I'm so familiar with in Foxpro. 3) Are there any good white-papers or books by Foxpro programmers that can provide insights into translating my Foxpro knowledge and skill directly into Xojo. I use Foxpro on a daily basis for my business because I cannot find a language that satisfies my clients' needs the way Foxpro does. I would love to be able to say I have a backup language like Xojo, but I get only so far before I give up and go back to what I know and love. So let's assume Kevin is correct when he states Xojo is " a viable language for VFP developers" because I do not want to go down the rabbit hole of considering all the other alternatives for this sake of this discussion and share with me any tips that can help me understand Xojo on a higher level beyond just creating a simple form. I want to understand Xojo at a Complete Deliverable Application level and talk about mimicking the features I depend upon in Foxpro to share a library of tools, forms and code across hundreds of similar custom applications. Paul H. Tarver -Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Kevin J Cully Sent: Friday, February 22, 2019 8:11 AM To: profoxt...@leafe.com Subject: RE: false news Well, a lot of that article is correct, even though I don't want it to be. VFP as a *language* is as secure as the programmer programmed it to be. VFP as a *database* isn't secure itself. You can encrypt fields. You can encrypt the directory that the data is stored in. But DBF data isn't secure. You wouldn't store social security numbers or credit card numbers in Excel spreadsheets, right? I've haven't recommended DBFs for storage for over a decade now. There are better storage mechanisms such as Postgres, MariaDB, and even SQLite which can be set up as an encrypted database. VFP as a language is still valid, although it will never be able to create 64bit applications but that is a different subject. [Insert Xojo plug here as a viable language for VFP developers.] I had a potential client where they based their primary keys based on employee Social Security Numbers. They didn't like it when I told them that they'd need a complete rewrite. Notice this would have been the case no matter what language/technology they were using. It was just piss poor design. It appears from the article, that when the vendor was notified of the situation, that they were able to quickly address it although the article didn't say what that solution was. Probably encrypted the field? Hash the field with an external secured table containing the sensitive data? Who knows. To me, that's a win. Hopefully the vendor contacts all customers notifying them that there is a vulnerability and that there is a solution available. As Ted Roche always says "Security is a process". -Kevin -Original Message- From: ProFox [mailto:profox-boun...@leafe.com] On Behalf Of Dave Crozier Sent: Friday, February 22, 2019 6:07 AM To: 'ProFox Email List' Subject:
Re: Cryptovirus hit one of my clients
On 2/22/2019 11:44 AM, mbsoftwaresoluti...@mbsoftwaresolutions.com wrote: Got a call from a client today who was having some sort of error with the program/website (WestWind WebConnection). I remoted in to see that EVERY file had been renamed to something like filename.ext.decrypt12...@qq.com. Told them their IT vendor would have to restore from their last backup (which they said was just hours prior, thankfully). Ouch. Especially when you're website is used all over the nation and Canada. If they had been using MySQL/MariaDB/SQL-Server/PostgreSQL/etc instead of a file-server database, this wouldn't have been possible, right? Well, if you mean only .dbf, .cdx, .dbc files had been renamed, then maybe Server DBs would have been safe. But if all kinds of files were renamed, then no, I doubt they would have been safe. Remember, even "server" database systems store their data in ... files. It sounds like some very insidious code has infected their server. I'd recommend a complete wipe before a restore (or at least verify boot sectors or any other root/bootup software, etc). -Charlie ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/b3561258-370f-7c6b-7b4c-304488f7f...@gmail.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Re: VFP application issues on new server
On 2019-02-05 05:50, Chris Davis wrote: It's all server 2016 -Original Message- From: ProfoxTech On Behalf Of Alan Bourke Sent: Tuesday, 05 February 2019 10:29 To: profoxt...@leafe.com Subject: Re: VFP application issues on new server What are the operating systems in question ? There was an issue recently with an update to Windows 10 1803 causing weird DBF problems due to SMB caching, which I believe are fixed in Windows 10 1809. Another thing it could be is the Windows Server indexing service which may be on and indexing everything depending on what flavour of Windows Server it is. It could also be online backup software that monitors locations for cloud backup. Hi Chris, What became of this? My client has an old 2003 VFP app (using VFP backend) and was having weird problems too. Never could figure it out. I'd be interested in how you fixed this. Thanks, --Mike ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/229a67c6aefb9cb965b6892936550...@mbsoftwaresolutions.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Cryptovirus hit one of my clients
Got a call from a client today who was having some sort of error with the program/website (WestWind WebConnection). I remoted in to see that EVERY file had been renamed to something like filename.ext.decrypt12...@qq.com. Told them their IT vendor would have to restore from their last backup (which they said was just hours prior, thankfully). Ouch. Especially when you're website is used all over the nation and Canada. If they had been using MySQL/MariaDB/SQL-Server/PostgreSQL/etc instead of a file-server database, this wouldn't have been possible, right? ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/8378ad2d2d936f54c1b2c51964e57...@mbsoftwaresolutions.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
RE: false news....
Well, a lot of that article is correct, even though I don't want it to be. VFP
as a *language* is as secure as the programmer programmed it to be. VFP as a
*database* isn't secure itself. You can encrypt fields. You can encrypt the
directory that the data is stored in. But DBF data isn't secure. You wouldn't
store social security numbers or credit card numbers in Excel spreadsheets,
right?
I've haven't recommended DBFs for storage for over a decade now. There are
better storage mechanisms such as Postgres, MariaDB, and even SQLite which can
be set up as an encrypted database. VFP as a language is still valid, although
it will never be able to create 64bit applications but that is a different
subject. [Insert Xojo plug here as a viable language for VFP developers.] I
had a potential client where they based their primary keys based on employee
Social Security Numbers. They didn't like it when I told them that they'd need
a complete rewrite. Notice this would have been the case no matter what
language/technology they were using. It was just piss poor design.
It appears from the article, that when the vendor was notified of the
situation, that they were able to quickly address it although the article
didn't say what that solution was. Probably encrypted the field? Hash the
field with an external secured table containing the sensitive data? Who knows.
To me, that's a win. Hopefully the vendor contacts all customers notifying
them that there is a vulnerability and that there is a solution available.
As Ted Roche always says "Security is a process".
-Kevin
-Original Message-
From: ProFox [mailto:profox-boun...@leafe.com] On Behalf Of Dave Crozier
Sent: Friday, February 22, 2019 6:07 AM
To: 'ProFox Email List'
Subject: VFP: false news
Ignorance and stupidity still runs in the so-called “expert consultant”
fraternity.
“An outdated software that is used by about 200 Vermont municipalities and the
Vermont Tax Department has long contained flaws that exposed sensitive
information including Social Security numbers, according to an IT consultant
and the software company’s founder.”
“You could make a strong case that Visual FoxPro shouldn’t be used on a
government level,” Johnson said.
https://vtdigger.org/2019/02/05/consultant-outdated-software-left-worker-information-exposed-200-towns/
Thankfully the software owners realise that it isn’t a fault in VFP, it is a
fault in the designing of the infrastructure.
Expert:
Ex - Out of date
Spurt – a drip under pressure!!
Dave Crozier
Software Development Manager
Flexipol Packaging Ltd.
﴾⚆ᨎ⚆﴿
Flexipol® Packaging Ltd
T 01706 222 792
E dcroz...@flexipol.co.uk
W https://www.flexipol.co.uk/
Follow us:
Unit 14 Bentwood Road, Carrs Industrial Estate, Haslingden, Lancashire, BB4 5HH
This communication and the information it contains is intended for the person
or organisation to whom it is addressed. Its contents are confidential and may
be protected in law. If you have received this e-mail in error you must not
copy, distribute or take any action in reliance on it. Unauthorised use,
copying or disclosure of any of it may be unlawful. If you have received this
message in error, please notify us immediately by telephone or email.
Flexipol Packaging Ltd. has taken every reasonable precaution to minimise the
risk of virus transmission through email and therefore any files sent via
e-mail will have been checked for known viruses. However, you are advised to
run your own virus check before opening any attachments received as Flexipol
Packaging Ltd will not in any event accept any liability whatsoever once an
e-mail and/or any attachment is received.
It is the responsibility of the recipient to ensure that they have adequate
virus protection.
-
Terms & Conditions:
Notwithstanding delivery and the passing of risk in the goods, the property in
the goods shall not pass to the buyer until the seller Flexipol Packaging Ltd.
("The Company") has received in cash or cleared funds payment in full of the
price of the goods and all other goods agreed to be sold by the seller to the
buyer for which payment is then due. Until such time as the property in the
goods passes to the buyer, the buyer shall hold the goods as the seller's
fiduciary agent and bailee and keep the goods separate from those of the buyer
and third parties and properly stored protected and insured and identified as
the seller's property but shall be entitled to resell or use the goods in the
ordinary course of its business. Until such time as the property in the goods
passes to the buyer the seller shall be entitled at any time
---
VFP: false news....
Ignorance and stupidity still runs in the so-called “expert consultant”
fraternity.
“An outdated software that is used by about 200 Vermont municipalities and the
Vermont Tax Department has long contained flaws that exposed sensitive
information including Social Security numbers, according to an IT consultant
and the software company’s founder.”
“You could make a strong case that Visual FoxPro shouldn’t be used on a
government level,” Johnson said.
https://vtdigger.org/2019/02/05/consultant-outdated-software-left-worker-information-exposed-200-towns/
Thankfully the software owners realise that it isn’t a fault in VFP, it is a
fault in the designing of the infrastructure.
Expert:
Ex - Out of date
Spurt – a drip under pressure!!
Dave Crozier
Software Development Manager
Flexipol Packaging Ltd.
﴾⚆ᨎ⚆﴿
Flexipol® Packaging Ltd
T 01706 222 792
E dcroz...@flexipol.co.uk
W https://www.flexipol.co.uk/
Follow us:
Unit 14 Bentwood Road, Carrs Industrial Estate, Haslingden, Lancashire, BB4 5HH
This communication and the information it contains is intended for the person
or organisation to whom it is addressed. Its contents are confidential and may
be protected in law. If you have received this e-mail in error you must not
copy, distribute or take any action in reliance on it. Unauthorised use,
copying or disclosure of any of it may be unlawful. If you have received this
message in error, please notify us immediately by telephone or email.
Flexipol Packaging Ltd. has taken every reasonable precaution to minimise the
risk of virus transmission through email and therefore any files sent via
e-mail will have been checked for known viruses. However, you are advised to
run your own virus check before opening any attachments received as Flexipol
Packaging Ltd will not in any event accept any liability whatsoever once an
e-mail and/or any attachment is received.
It is the responsibility of the recipient to ensure that they have adequate
virus protection.
-
Terms & Conditions:
Notwithstanding delivery and the passing of risk in the goods, the property in
the goods shall not pass to the buyer until the seller Flexipol Packaging Ltd.
("The Company") has received in cash or cleared funds payment in full of the
price of the goods and all other goods agreed to be sold by the seller to the
buyer for which payment is then due. Until such time as the property in the
goods passes to the buyer, the buyer shall hold the goods as the seller's
fiduciary agent and bailee and keep the goods separate from those of the buyer
and third parties and properly stored protected and insured and identified as
the seller's property but shall be entitled to resell or use the goods in the
ordinary course of its business. Until such time as the property in the goods
passes to the buyer the seller shall be entitled at any time
--- StripMime Report -- processed MIME parts ---
multipart/related
multipart/alternative
text/plain (text body -- kept)
text/html
image/jpeg
image/jpeg
image/png
image/png
image/png
image/png
---
___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message:
http://leafe.com/archives/byMID/profox/cwlp265mb0852bbc5d439dbb2e4e97026fb...@cwlp265mb0852.gbrp265.prod.outlook.com
** All postings, unless explicitly stated otherwise, are the opinions of the
author, and do not constitute legal or medical advice. This statement is added
to the messages for those lawyers who are too stupid to see the obvious.
RE: Error building sort key (Error 2186)
Hi Ted Well if I were writing it from scratch I would probably do that. However this was legacy code from 15 years ago and the powers that be insist on the lightest touch approach to fixing bugs because of the risk of destabilization/unforeseen consequences. Anyway Richard's suggestion worked just fine. Funny, in 35 years of working with Fox etc I have never come across this one. Paul Newton -Original Message- From: ProfoxTech On Behalf Of Ted Roche Sent: 21 February 2019 16:12 To: profoxt...@leafe.com Subject: Re: Error building sort key (Error 2186) Sent by an external sender -- Try: GROUP BY Nh_Year,Nh_Period,NH_YEAR,NH_NACNT,NH_PERIOD And any existing indexes using those columns will be used for a much faster result. On Thu, Feb 21, 2019 at 10:56 AM Richard Kaye wrote: > Not often I get to an answer before wOOdy. You're welcome, Paul. > BTW which was it; nulls or forcing the length to be the same? > > -- > > rk > > -Original Message- > From: ProfoxTech On Behalf Of Paul > Newton > Sent: Thursday, February 21, 2019 10:49 AM > To: profoxt...@leafe.com > Subject: RE: Error building sort key (Error 2186) > > That wasn't the problem - but Richard's suggestion was spot on - > Thanks Richard > > -Original Message- > From: ProfoxTech On Behalf Of > juer...@wondzinski.de > Sent: 21 February 2019 15:09 > To: profoxt...@leafe.com > Subject: AW: Error building sort key (Error 2186) > > Sent by an external sender > -- > > Maybe the result length of the GROUP BY is longer than 120 char? > That's the maximum key length in an index, which VFP uses to sort the > intermediate results. > > wOOdy > > -Ursprüngliche Nachricht- > Von: ProFox Im Auftrag von Paul Newton > Gesendet: Donnerstag, 21. Februar 2019 15:51 > An: 'profox@leafe.com' > Betreff: Error building sort key (Error 2186) > > Hi all > > According to the help: > This error is generated when sort key truncation is about to occur, > typically during GROUP BY, ORDER BY or other sorting operations. This > can happen with use of a sort key that contains an expression, such as > a Memo field, whose length is not fixed. > > The problem manifests itself when executing the following SQL (sorry > about the length of the statement): > > Select Str(Nh_Year,4,0) + Str(Nh_Period,2,0)+ Transform(NH_YEAR) + > Transform(NH_NACNT) + Transform(NH_PERIOD) As Key, ; Nh_Year, > Nh_Period,Str(Nh_Year,4,0) + '/' + Str(Nh_Period,2,0) As > YearPeriod,Nh_NType, Nh_NSubt, Nh_Nacnt, Nh_NCntr, ; Nh_Job, > Nh_Project, > Sum(Nh_PtdDr) As Nh_PtdDr, -1 * Sum(Nh_PtdCr) As Nh_PtdCr, Sum(Nh_Bal) > As > Nh_Bal,Sum(NH_BUDG) As Nh_Budg, ; > .99 As Variance, .99 As YTDBal, > .99 As YTDBudg, .99 As YTDVar ; > >From NHist Where NH_YEAR >= 2019 And NH_YEAR <= 2019 And NH_PERIOD >= > >1 And NH_PERIOD <= 3 And NH_YEAR = 2019 ; > And NH_NACNT = 'A110' And NH_PERIOD = 1 And Nh_RecType = 1 ; > Group By Key Union Select Str(Nh_Year,4,0) + Str(Nh_Period,2,0)+ > Transform(NH_YEAR) + Transform(NH_NACNT) + Transform(NH_PERIOD) As > Key, ; Nh_Year, Nh_Period,Str(Nh_Year,4,0) + '/' + Str(Nh_Period,2,0) > As YearPeriod,; Nh_NType, Nh_NSubt, Nh_Nacnt, Nh_NCntr, Nh_Job, > Nh_Project, > Sum(Nh_PtdDr) As Nh_PtdDr, -1 * Sum(Nh_PtdCr) As Nh_PtdCr, ; > Sum(Nh_Bal) As Nh_Bal,Sum(NH_BUDG) As Nh_Budg, .99 As > Variance, > .99 As YTDBal, ; > .99 As YTDBudg, .99 As YTDVar From NHist Where > NH_YEAR >= 2019 And NH_YEAR <= 2019 ; > And NH_PERIOD >= 1 And NH_PERIOD <= 3 And NH_NACNT = 'A110' And > Empty(NH_JOB) And Empty(NH_PROJECT) ; And Empty(NH_NCNTR) And > Inlist(Nh_RecType,2,3) Group By Key InTo Cursor _5F50SKUYV > > Now I know this is a fairly complex query but it does not contain any > columns whose length is not fixed. I wonder if anybody has come > across this error before. I have had to resort to completely > rewriting the code that generates the SQL statement. > > Many thanks > > Paul Newton > [excessive quoting removed by server] ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/CACW6n4uEFNw0=e2nmxuxd786spvvshrqq-9mxdsykszqq11...@mail.gmail.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious. Report [OT] Abuse: http://leafe.com/reportAbuse/CACW6n4uEFNw0=e2nmxuxd786spvvshrqq-9mxdsykszqq11...@mail.gmail.com ___ Post Messages to: ProFox@leafe.com Subscription
RE: Error building sort key (Error 2186)
It was forcing the length to be the same (which is what was hinted at in the help) - Thanks again Paul -Original Message- From: ProfoxTech On Behalf Of Richard Kaye Sent: 21 February 2019 15:56 To: profoxt...@leafe.com Subject: RE: Error building sort key (Error 2186) Sent by an external sender -- Not often I get to an answer before wOOdy. You're welcome, Paul. BTW which was it; nulls or forcing the length to be the same? -- rk -Original Message- From: ProfoxTech On Behalf Of Paul Newton Sent: Thursday, February 21, 2019 10:49 AM To: profoxt...@leafe.com Subject: RE: Error building sort key (Error 2186) That wasn't the problem - but Richard's suggestion was spot on - Thanks Richard -Original Message- From: ProfoxTech On Behalf Of juer...@wondzinski.de Sent: 21 February 2019 15:09 To: profoxt...@leafe.com Subject: AW: Error building sort key (Error 2186) Sent by an external sender -- Maybe the result length of the GROUP BY is longer than 120 char? That's the maximum key length in an index, which VFP uses to sort the intermediate results. wOOdy -Ursprüngliche Nachricht- Von: ProFox Im Auftrag von Paul Newton Gesendet: Donnerstag, 21. Februar 2019 15:51 An: 'profox@leafe.com' Betreff: Error building sort key (Error 2186) Hi all According to the help: This error is generated when sort key truncation is about to occur, typically during GROUP BY, ORDER BY or other sorting operations. This can happen with use of a sort key that contains an expression, such as a Memo field, whose length is not fixed. The problem manifests itself when executing the following SQL (sorry about the length of the statement): Select Str(Nh_Year,4,0) + Str(Nh_Period,2,0)+ Transform(NH_YEAR) + Transform(NH_NACNT) + Transform(NH_PERIOD) As Key, ; Nh_Year, Nh_Period,Str(Nh_Year,4,0) + '/' + Str(Nh_Period,2,0) As YearPeriod,Nh_NType, Nh_NSubt, Nh_Nacnt, Nh_NCntr, ; Nh_Job, Nh_Project, Sum(Nh_PtdDr) As Nh_PtdDr, -1 * Sum(Nh_PtdCr) As Nh_PtdCr, Sum(Nh_Bal) As Nh_Bal,Sum(NH_BUDG) As Nh_Budg, ; .99 As Variance, .99 As YTDBal, .99 As YTDBudg, .99 As YTDVar ; >From NHist Where NH_YEAR >= 2019 And NH_YEAR <= 2019 And NH_PERIOD >= 1 >And NH_PERIOD <= 3 And NH_YEAR = 2019 ; And NH_NACNT = 'A110' And NH_PERIOD = 1 And Nh_RecType = 1 ; Group By Key Union Select Str(Nh_Year,4,0) + Str(Nh_Period,2,0)+ Transform(NH_YEAR) + Transform(NH_NACNT) + Transform(NH_PERIOD) As Key, ; Nh_Year, Nh_Period,Str(Nh_Year,4,0) + '/' + Str(Nh_Period,2,0) As YearPeriod,; Nh_NType, Nh_NSubt, Nh_Nacnt, Nh_NCntr, Nh_Job, Nh_Project, Sum(Nh_PtdDr) As Nh_PtdDr, -1 * Sum(Nh_PtdCr) As Nh_PtdCr, ; Sum(Nh_Bal) As Nh_Bal,Sum(NH_BUDG) As Nh_Budg, .99 As Variance, .99 As YTDBal, ; .99 As YTDBudg, .99 As YTDVar From NHist Where NH_YEAR >= 2019 And NH_YEAR <= 2019 ; And NH_PERIOD >= 1 And NH_PERIOD <= 3 And NH_NACNT = 'A110' And Empty(NH_JOB) And Empty(NH_PROJECT) ; And Empty(NH_NCNTR) And Inlist(Nh_RecType,2,3) Group By Key InTo Cursor _5F50SKUYV Now I know this is a fairly complex query but it does not contain any columns whose length is not fixed. I wonder if anybody has come across this error before. I have had to resort to completely rewriting the code that generates the SQL statement. Many thanks Paul Newton [excessive quoting removed by server] ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/mn2pr02mb5920538268c74cee2df2dab3a1...@mn2pr02mb5920.namprd02.prod.outlook.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious. Report [OT] Abuse: http://leafe.com/reportAbuse/mn2pr02mb5920538268c74cee2df2dab3a1...@mn2pr02mb5920.namprd02.prod.outlook.com ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/bn6pr10mb145809f360f26520252526c7d2...@bn6pr10mb1458.namprd10.prod.outlook.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious. Report [OT] Abuse:
