Re: [KCFusion] Link to article about CF tips
At 10:40 AM 8/4/2000 -0500, Keith Purtell wrote: In case you haven't already seen this article ... http://www.builder.com/Programming/ColdFusionTips/print.html Wow... unless you've /seriously/ locked down your database permissions, I wouldn't recommend many of those techniques at all! See the Allaire Security Bulletin ASB99-04, "Multiple SQL Statements in Dynamic Queries", at http://www.allaire.com/handlers/index.cfm?ID=8728Method=Full Remember to second-guess any article you read. In general, just because it was a neat idea, doesn't necessarily mean its a good idea. Also remember that all generalizations are false ;-) Daryl Banttari Sr. Consultant Allaire Consulting __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Fwd: RE: [KCFusion] Link to article about CF tips
Date: Sun, 06 Aug 2000 18:55:41 -0500 To: "Brian Kotek" [EMAIL PROTECTED] From: Daryl Banttari [EMAIL PROTECTED] Subject: RE: [KCFusion] Link to article about CF tips Brian, It's not "users" I'm worried about. A couple of weeks ago, I was reviewing code for a site where they passed the file name of a file to mail to a user in a hidden input field... They said that since the user doesn't see that, they're safe, right? I saved the HTML output to disk, made the action URL non-relative and specified a file /no user/ should be downloading, pulled up my local copy, and clicked submit. They were quite surprised at the results. A plague of the Web industry -- and ColdFusion code in particular -- is the lack of attention paid to security issues. If I had a nickel for every time I see someone passing unchecked vars into forms, I wouldn't have to work :-) I would have been much happier with your examples if they included the code to check the variables and ensure no form hacking has occurred. Honestly, I consider posting examples this (powerful | dangerous) without including the code to make it safe [/in/ the example] rather irresponsible. That way, when programmers not as clever as you copy and paste the code into their apps, it happens safely. 'If you are that concerned about someone posting malformed FORM values you could always check the variable's contents prior to executing the query.' ...All ColdFusion programmers should be 'that concerned'! Please don't consider this a flame-- if we were meeting in person, I would be using the same tone of voice. I'm /very/ concerned about the security problems left in ColdFusion code on a regular basis. (It's giving ColdFusion a bad name in the security industry-- I've actually heard objections to using ColdFusion because of the security weaknesses 'in ColdFusion' when it's bad site programming to blame.) Sincerely, Daryl Banttari At 06:20 PM 8/6/2000 -0400, Brian Kotek wrote: Can you be more specific...what do you disagree with? If you are referring to using FORM variables in your query, please note that the form value is not a text input but a checkbox, where the user has no power to change the form value. If you are that concerned about someone posting malformed FORM values you could always check the variable's contents prior to executing the query. You might also notice that I cover cross-site scripting and URL/FORM variable hacking on its own page. Other than that I can't see what you are concerned about. Thanks, Brian -Original Message- From: Daryl Banttari [mailto:[EMAIL PROTECTED]] Sent: Saturday, August 05, 2000 2:44 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [KCFusion] Link to article about CF tips At 10:40 AM 8/4/2000 -0500, Keith Purtell wrote: In case you haven't already seen this article ... http://www.builder.com/Programming/ColdFusionTips/print.html Wow... unless you've /seriously/ locked down your database permissions, I wouldn't recommend many of those techniques at all! See the Allaire Security Bulletin ASB99-04, "Multiple SQL Statements in Dynamic Queries", at http://www.allaire.com/handlers/index.cfm?ID=8728Method=Full Remember to second-guess any article you read. In general, just because it was a neat idea, doesn't necessarily mean its a good idea. Also remember that all generalizations are false ;-) Daryl Banttari Sr. Consultant Allaire Consulting __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
RE: [KCFusion] CPU Usage
Should we be also using CFLOCK around CFTRANSACTION
tags, I've never been quite clear on this?
No,
The database is much better at handling concurrency issues then CFLOCK,
which is basically just a ColdFusion-implemented semaphore with two modes:
read many/write none (aka ReadOnly), or write one/read none (aka Exclusive).
Although you could use CFLOCK to eliminate concurrency issues at a database
if you have only one CF server, the database is much better able to
intelligently figure out ways to allow simultaneous requests to occur
without problems (though deadlocks may sometimes still occur.)
In any case, CFTRANSACTION should only be used when really necessary. The
classic example of "necessary" is the bank account example. You want to
update checking with +$100, and savings with -$100. Both, or neither, must
succeed; having one update succeed without the other is not acceptable, so
you wrap the two updates in a database transaction, which ensures that
queries in a given transaction either all succeed, or all
fail. CFTRANSACTION is not handled on the CF side of things, it is really
just an interface into the database's own transactioning system.
Deadlocks can happen any time you have multiple people sharing resources at
the same time. If two people get into a taxi at the same time, but want to
go to different destinations, a deadlock occurs, and one passenger must be
chosen to be the deadlock victim (coin toss?) In ColdFusion terms, that
exception could be caught with cftry/cfcatch, and another taxi could be
attempted; or you could just let the exception pass to the error handler
page, the equivalent of the deadlock victim passenger giving up in
frustration and sitting on the curb.
How to write a probable deadlock using CFLOCK:
CFLOCK Type="ReadOnly" Scope="Application" Timeout=5
CFIF NOT isDefined("Application.SomeVar")
CFLOCK Type="Exclusive" Scope="Application" Timeout=5
CFSET Application.SomeVar = 5
/CFLOCK
/CFIF
/CFLOCK
If two threads hit the outer CFLOCK at the exact same time, and
Application.SomeVar is not defined, then both threads will wait for the
Exclusive lock to become available (which can't happen because both are in
a readonly lock) and the first request in the queue will timeout after 5
seconds (throwing an exception), which then allows the second thread to
enter the exclusive lock. (There is also a theoretical possibility that
both threads will time out if they are truly simultaneous.)
Written without probability of deadlock:
CFLOCK Type="ReadOnly" Scope="Application" Timeout=5
!--- yes, it's even necessary to use a readonly lock for isDefined() ---
CFSET isLockNeeded = NOT isDefined("Application.SomeVar")
/CFLOCK
CFIF isLockNeeded
CFLOCK Type="Exclusive" Scope="Application" Timeout=5
!--- check again; another thread may have just been here ---
CFIF NOT isDefined("Application.SomeVar")
CFSET Application.SomeVar = 5
/CFIF
/CFLOCK
/CFIF
HTH
Daryl
P.S. Had the trusty Metaphor Blender on "chop" for the taxi analogy. You
should see me puree..!
At 01:33 PM 10/3/2000 -0500, Ramphal, Ron wrote:
Daryl,
Should we be also using CFLOCK around CFTRANSACTION tags, I've never been
quite
clear on this?
Thanks,
Ron.
-Original Message-
From: Daryl Banttari [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 03, 2000 1:11 PM
To: Cold Fusion Users
Subject: Re: [KCFusion] CPU Usage
If you are using Server, Application, or Session variables, locking (using
CFLOCK) is REQUIRED. Failure to use CFLOCK around these variables can
cause all sorts of aberrant behavior, including CPU racing.
See:
http://www.allaire.com/handlers/index.cfm?id=17318method=full
http://www.allaire.com/handlers/index.cfm?ID=17196Method=Full
In particular, look at using the Request scope to replace constants such as
"Application.DSN".
The request scope is not well documented in the manuals. It is global to
the individual page request, so custom tags can use request scope variables
without going through the "caller" scope. At the end of the page request,
the variable goes away, but it does not require locking.
Also, make sure you have a recent MDAC (ODBC driver set) from
http://www.microsoft.com/data/
2.6 was just released, but 2.5sp1 should work well, too (and is well-tested.)
HTH
(BTW does the fact that I'm never able to make meetings now that I work for
Allaire count as "irony", or is it just "coincidence"?)
Daryl Banttari
Allaire Consulting
P.S. One of this month's Allaire DevCenter articles, "Query Caching in
ColdFusion", was written by yours truly:
http://www.allaire.com/handlers/index.cfm?ID=17552Method=Full
At 09:51 AM 10/3/2000 -0500, RE E wrote:
After our server has been running for a few hours
Re: [KCFusion] CPU Usage
If you are using Server, Application, or Session variables, locking (using CFLOCK) is REQUIRED. Failure to use CFLOCK around these variables can cause all sorts of aberrant behavior, including CPU racing. See: http://www.allaire.com/handlers/index.cfm?id=17318method=full http://www.allaire.com/handlers/index.cfm?ID=17196Method=Full In particular, look at using the Request scope to replace constants such as "Application.DSN". The request scope is not well documented in the manuals. It is global to the individual page request, so custom tags can use request scope variables without going through the "caller" scope. At the end of the page request, the variable goes away, but it does not require locking. Also, make sure you have a recent MDAC (ODBC driver set) from http://www.microsoft.com/data/ 2.6 was just released, but 2.5sp1 should work well, too (and is well-tested.) HTH (BTW does the fact that I'm never able to make meetings now that I work for Allaire count as "irony", or is it just "coincidence"?) Daryl Banttari Allaire Consulting P.S. One of this month's Allaire DevCenter articles, "Query Caching in ColdFusion", was written by yours truly: http://www.allaire.com/handlers/index.cfm?ID=17552Method=Full At 09:51 AM 10/3/2000 -0500, RE E wrote: After our server has been running for a few hours CF's CPU usage jumps to 95-100%. Forcing us to reboot. I sat down with CFSTAT and task manager and ran every website query we have and seen no problems. We have been recently hacked and had to remove some Wharez from the server. Our network is being hit constantly for holes by these hackers. Could it be possible that Someone is exploiting CF to hack our sites? I could use some direction for securing our sites. We are running Windows2000/SP6a Cold Fusion 4.5.1 Perl 5 IIS 5 With Frontpage Extensions Please any help would be greatly appreciated. Rick Eidson Get free email and a permanent address at http://www.netaddress.com/?N=1 __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Dynamic ORDER BY
Actually, the tick quotes there should be unnecessary. What does the query look like in the debug output? Daryl - Original Message - From: "Ryan Hartwich" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 04, 2000 3:54 PM Subject: RE: [KCFusion] Dynamic ORDER BY Keith, Check to make sure if you are passing column names via variable, the column names have a tick mark around them: Order By '#VarName#', Column2 Likewise, check that your cfif statement uses a tickmark if necessary around the variable values. Ryan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Keith Purtell Sent: Monday, December 04, 2000 3:37 PM To: [EMAIL PROTECTED] Subject: [KCFusion] Dynamic ORDER BY I have an odd SQL problem in CFQUERY. I'm trying to make an ORDER BY section dynamic. I don't get error messages, but the second ORDER BY parameter is ignored. Here's a chart of the results. Is there a workaround? (We're on CF4.0, NT4, SP5.) ORDER BY Column1, Column2- this works very well ORDER BY #VarName#, Column2 - ignores Column2 - CFIF statement here - ORDER BY Column1, Column2- ignores Column2 - /CFIF - Keith Purtell, Web Designer VantageMed Corporation __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] While were on the subject
Depends. Most DBMS'es will not allow you to roll back table manipulation commands. CFTransaction is typically used to ensure that a given set of individual updates leave the database in the state where either (all updates happened) or (none of the updates happened), and is not one of the top 10 most-used tags. Daryl - Original Message - From: "Bryan LaPlante" [EMAIL PROTECTED] To: "[KCFusion List] (E-mail)" [EMAIL PROTECTED] Sent: Monday, December 04, 2000 4:28 PM Subject: [KCFusion] While were on the subject Has anyone used CFTRANSACTION? is that goofy example in the doc's correct? I am trying to create alter and or delete database tables on the fly based on the needs of my current application, I know this sounds wacky but trust me there is a method to the madness. I am wondering if cftransaction will manage those types of queries. Anybody know? Bryan LaPlante 816-347-8220 [EMAIL PROTECTED] http://www.netwebapps.com Web Development __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Help I'm threading the noose
Bryan,
I'd recommend replacing this loop:
CFLOOP QUERY="MyDataSource"
CFSET MyList = #ListAppend(MyList,MyDataSource.entry,",")#
/CFLOOP
with:
CFSET myList = valueList(myDataSource.entry)
For the original code, if you set "myDataSource" to a null string (cfset
myDataSource="") before calling cfregistry, then you can just do this:
cfset isMyDataSource = myDataSource IS NOT ""
(Yes, you can do assignments of the results of boolean expressions.)
Later in the code you could just do this:
cfif isMyDataSource
blah blah blah
/cfif
Daryl
At 12:38 PM 12/27/2000 -0600, you wrote:
Silly me, I can put the code out side of the original loop and save a lot of
extra work on the server.
Do you ever get the feeling that your talking to your self.
- Original Message -
From: "Bryan LaPlante" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, December 27, 2000 12:16 PM
Subject: Re: [KCFusion] Help I'm threading the noose
Problem solved, but it sure does not speed up the code.
snippet
--
CFREGISTRY ACTION="GETALL"
BRANCH="HKEY_LOCAL_MACHINE\SOFTWARE\NetWebApps\#HOSTNAME#\DataSources"
NAME="MyDataSource"
TYPE="String"
CFSET MyList = ""
CFLOOP QUERY="MyDataSource"
CFSET MyList = #ListAppend(MyList,MyDataSource.entry,",")#
/CFLOOP
CFIF ListContains(MyList,GLOBALDS,",")
CFSET isMyDataSource = "YES"
CFELSE
CFSET isMyDataSource = "NO"
/CFIF
-
- Original Message -
From: "Bryan LaPlante" [EMAIL PROTECTED]
To: "[KCFusion List] (E-mail)" [EMAIL PROTECTED]
Sent: Wednesday, December 27, 2000 11:40 AM
Subject: [KCFusion] Help I'm threading the noose
Can someone look at the code below and make a suggestion.
The first query result comes from the data sources found in the ODBC
entries
in the registry.
The second call to CFREGISTRY is used to see if a matching entry has
been
made under the clients data sources in my program.
Here's the problem with the code snippet below. Once the second call to
cfregistry creates the MyDataSource variable, it persists to the end of
the
loop, in other words it will return every data source on the server
whether
it belongs to the client or not. I have tried to using an incrementing
variable to make the variable name unique every time with no better
results.
If I can get this step figured out I can do some other security checking
before displaying the table and still manage to keep the code fairly
simple.
Snippet
!--- Get ODBC Data Sources ---
CFREGISTRY ACTION=GETALL NAME="DS_List" TYPE="ANY"
BRANCH="HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ODBC.INI\ODBC Data
Sources"
!--- Loop through the ODBC data sources ---
CFOUTPUT Query="DS_List"
!-- Convert entry to a string varaible to feed the next cfregistry
call ---
CFSET GLOBALDS = "#DS_List.Entry#"
!-- Re initialize the isMyDataSource variable so it does not get
stuck
in the "yes" position ---
CFSET isMyDataSource = "NO"
!--- Verify this is one of my datasources ---
CFTRY
CFREGISTRY ACTION="GET"
BRANCH="HKEY_LOCAL_MACHINE\SOFTWARE\NetWebApps\#HOSTNAME#\DataSources"
ENTRY="#GLOBALDS#"
VARIABLE="MyDataSource"
TYPE="String"
CFIF IsDefined("MyDataSource")
CFSET isMyDataSource = "YES"
CFELSE
CFSET isMyDataSource = "NO"
/CFIF
!--- Any error would suggest no match was found ---
CFCATCH TYPE="Any"
CFSET isMyDataSource = "NO"
/CFCATCH
/CFTRY
!--- do more security checking and display table row ---
CFIF #isMyDataSource# IS "YES"
tr
tdName/td
tdDescription/td
/tr
/CFIF
/CFOUTPUT
-
Bryan LaPlante
816-347-8220
[EMAIL PROTECTED]
http://www.netwebapps.com
Web Development
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Credit Card Transaction Processing
I've used iTransact for several sites. Useful because you never handle the credit card number, so noone can hack your server and get stored credit card numbers :-) Also, you don't have to get an SSL cert, since it's all handled by the third party. Daryl - Original Message - From: "Chris" [EMAIL PROTECTED] To: "KCFusion-List" [EMAIL PROTECTED] Sent: Thursday, January 04, 2001 4:02 PM Subject: [KCFusion] Credit Card Transaction Processing We are wanting to start accepting Credit Card Transactions on our web site. We are looking at using VeriSign to handle this. We will be doing less than 1000 transactions a month. Has anyone had any experiences either good or bad about doing this with VeriSign or any other payment services like this? Thanks, Chris __ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/ __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Credit Card Transaction Processing
Ok, I have a couple of nickels to throw at this: 1. MD5 (implemented in CF as the hash() function) is a hashing algorithm, not an encryption algorithm. With MD5, you can only "one-way encrypt" data. In other words, you can determine if you have the content that was encrypted, but you can't decrypt it. Which is why it's so useful for storing passwords. The ColdFusion encrypt/decrypt algorithms are not suitable for real hardening because they use the same password for encryption and decryption. Therefore, anyone who can get the encryption password, can also decrypt the data. So, this would slow someone for a bit, but not stop them. 2. I've been thinking of putting together a method of storing CC data that is encrypted using FreePGP, so that the data can only be decrypted on a [different] machine that has the private key, by personnel that know the private key's passphrase. If anyone is interested, I'd like to co-develop a couple of custom tags to do this and release them under the Open Source license. That can make repeat billing a touch more difficult, but the vast improvement in security is worth it. Daryl - Original Message - From: "Greenhagen, Robin" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, January 04, 2001 8:31 PM Subject: RE: [KCFusion] Credit Card Transaction Processing Use Thawte (www.thawte.com) instead of Verisign for the SSL key. It is $125 vs $380 for the original cert file (key) and $100 per year for renewal vs $290/yr with Verisign. They are good enough that Verisign bought them last year! On the CC info, for your business, I would imagine that store forward is probably your best bet for processing, since you already have subscription services for traditional customers by credit card. For outsourced CC processing, Authorize.Net is a good/big player, Verisign is good but their support has been patchy. Your storage/encryption options are a bit staggered right now, depending on what technologies you have implemented. Some of the encryption options are: 1. Use the encryption/decryption from CF. Pros: You can implement this in a matter of minutes. The encryption level is MD5 based (Daryll will correct me if I am wrong), and is probably sufficient to scare off 99.9% of the hackers. There are too many unencrypted passwords and CC#s in the world to spend any time trying to decrypt some that were exposed by hacking into your system. Cons: MD5 is not 256 bit, TripleDES, SuperPGP, Kill a MainFrame [or Linux cluster] encryption, so it could be reversed with brute force. Also, if you have multiple apps drawing data from your DB, all the apps would have to be able to do the decryption via the CF routine. 2. Use your DB to do the encryption/decryption work before storing and retrieval. This can be a package in Oracle or an Extended Stored Procedure in MSSQL 7.0+. The to send CC#'s into the DB, just call the SPROC, the SPROC encrypts and stores. As you select out, select via the SPROC and it decrypts with whatever key you give it. There are some examples out there on the net for this. SQL 2000 makes this MUCH easier, because it includes UDFs (User Defined Functions) so you could call the ENC/DEC stuff directly in SQL statements. Pros: Harsher encryption, closer to the storage device, client independent (You can get the data from CF, Java, PBuilder, ASP, etc.. if you know the keys and the calls) Cons: More expensive (time and licensing on components) 3. Build a reusable object. Using Java or COM, build a bean that does this encryption/decryption. Then you call that object from everywhere that needs the data. Pros: Can be widely implemented in your organization for Passwords, CC#'s, salaries, etc... You can base it on any number of public/commercial libraries that are out there. Cons: Time/Money The number 1 way you MUST protect your customer data is with a strong network security policy and architecture. Your DB server should not even be able to see the Internet, EVERYONE should be behind 1 or more layers of firewalls, address translation, etc..., all the patches should be applied on a regular (weekly) basis to your hosting environment. Any code that calls these security routines should be compiled/encrypted so that keys and calls are not compromised. Ok, enough already... Cheers! Robin Greenhagen President GreenSoft Solutions, Inc. -Original Message- From: Chris [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 04, 2001 4:02 PM To: KCFusion-List Subject: [KCFusion] Credit Card Transaction Processing We are wanting to start accepting Credit Card Transactions on our web site. We are looking at using VeriSign to handle this. We will be doing less than 1000 transactions a month. Has anyone had any experiences either good or bad about doing this with VeriSign or any other payment services like this? Thanks, Chris
Re: [KCFusion] Email Validation
As far as I know, there is nothing in the pop3 spec to allow for that, so the odds of it being available via CFPOP are... really slim. Daryl - Original Message - From: "Todd A. Vandiver" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 05, 2001 11:51 AM Subject: [KCFusion] Email Validation Is there any tag or attributes to CFPOP that will alow me to just verify an email address without retrieving any messages or sending any passwords. Thanks, Todd Vandiver 3-D Corporation www.3dcorporation.com [EMAIL PROTECTED] 1.800.717.6080 Ext. 15 FAX: 816.776.3331 __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CF Studio
FYI: CF Studio 4.5.2 is available for download: http://allaire11.allaire.com/download/showfamily.cfm?DownloadType=UpdateFam ilyID=1953B558-7AC0-11D4-849E0010B547F60A (be sure to fix the wrapping Daryl - Original Message - From: "Bret Hedenkamp" [EMAIL PROTECTED] To: "Daryl Banttari" [EMAIL PROTECTED] Sent: Friday, January 05, 2001 3:13 PM Subject: [KCFusion] CF Studio I am running CF Studio 4.5a off of NT 4.0 Server software and IIS. I noticed that I do not have a Remote Files tab in the CF Studio resource area. All of the other tabs are there. I am running everything locally off of this box, but that will not always be the case. Is my Studio version corrupt or is there a way to add this tab. Bret __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Need some advice
Perhaps RegEdit needs a cr/lf after the last line? Daryl - Original Message - From: "Bryan LaPlante" [EMAIL PROTECTED] To: "[KCFusion List] (E-mail)" [EMAIL PROTECTED] Cc: "CF-Server" [EMAIL PROTECTED] Sent: Sunday, January 07, 2001 10:20 PM Subject: [KCFusion] Need some advice I am trying to write a simple registry file to send to buyers of my new product. It will serve as an unlock code. If I pull up notepad and type the following, REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\myCompany\userAccount\Security] "administrator"="adminPass" I can save it as .reg and it will write the key successfully when you double click it. If I try to create the file dynamically with the following code. The file produced will create the registry keys but will not make the string entry. Any idea's how I can make this second process work? CFSET fileString = "REGEDIT4" #CHR(13)# #CHR(10)# CFSET fileString = fileString "[HKEY_LOCAL_MACHINE\SOFTWARE\myCompany\userAccount\Security]" #CHR(13)# #CHR(10)# CFSET fileString = fileString '"administrator"="adminPass"' CFFILE ACTION="WRITE" FILE="c:\inetpub\wwwroot\Security\account.reg" OUTPUT="#fileString#" ADDNEWLINE="No" Bryan LaPlante 816-347-8220 [EMAIL PROTECTED] http://www.netwebapps.com Web Development __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] meeting
Sure! Can we move the meeting to Chicago? ;-) Daryl - Original Message - From: "Bryan LaPlante" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 08, 2001 1:12 PM Subject: Re: [KCFusion] meeting In the last couple of month I have been building applications that have caused me to have to dig into almost every area of CF. The most recent however is the Cold Fusion security model. I think I have some recommendations as to how to use it in an application effectively. Last month I talked about Verity collections and I have some code example on the matter of writing to and reading from the registry. I think the only subject I have not really approached is clustering and regular expression in CF. I would love to hear someone talk on those subjects. Anybody? - Original Message - From: "Jason Nokes" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 08, 2001 12:50 PM Subject: RE: [KCFusion] meeting What are the different topics you have? I'm not sure if I can make it, so I may not be the best person to choose. -Original Message- From: Bryan LaPlante [mailto:[EMAIL PROTECTED]] Sent: Monday, January 08, 2001 12:01 PM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] meeting I've got lot's of topics to present, what would you like to hear about? - Original Message - From: "Jason Nokes" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 08, 2001 11:44 AM Subject: [KCFusion] meeting Is there anything scheduled for the meeting tomorrow night? __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] KCFusion project
How about something we can all use? Like a project management intra/extranet where customers can track project and task status, as well as discuss tasks with the developers in a discussion forum style with automatic e-mail cc'ing I have some [working] starter code along these lines that I can donate, so long as the end result will be GPL'ed. Daryl - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 09, 2001 2:37 PM Subject: RE: [KCFusion] KCFusion project If we can get together on an application I will get allaire to send a mass mail about the project to the KC area so we can pull in some more folks. If we can come up with something with mass appeal that would be good. My vote for an application would be a killer groupware-type system for the kcfusion.org site itself... we could then share it with other cfugs. You know the type: calendar, polling, filesharing, Allaire news, jobs, discussion forum, chatroom. We could call it CFUG-Portal or something. The big impediment to this (from my perspective at least) is that most of us already have jobs that keep us busy, and finding time to work on an app for the fun of it is tough. Perhaps as incentive we could offer the open-source code to whomever chipped-in and helped. I'd vote to spec it to strict Fusebox methodology, so we could keep it modular and manage the inevitable multi-developer spaghettification. And we could design it fairly generic so it would be suitable for most any company's intranet solution. just a thought... Ron [EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
RE: [KCFusion] SQL help needed - Apples but not Oranges...
You might get slightly better performance by using 'AND NOT EXISTS' instead of 'AND Clients.id not in' Daryl At 02:14 PM 1/19/2001 -0600, [EMAIL PROTECTED] wrote: Oops, slight correction in the subquery... SELECT DISTINCT Clients.id, Clients.firstname, Clients.lastname FROM Clients,Orders,OrderItems,Products WHERE ( Clients.id = Orders.clientid AND Orders.id = OrderItems.orderid AND OrderItems.productid = Products.id AND Products.name LIKE '%Apples%' ) AND Clients.id not in ( SELECT Clients.id FROM Clients,Orders,OrderItems,Products WHERE Clients.id = Orders.clientid AND Orders.id = OrderItems.orderid AND OrderItems.productid = Products.id AND Products.name LIKE '%Oranges%' ) -- Jim Fraley Project Manager GreenSoft Solutions, Inc. Phone: 913.317.8083 ext 215 EMail: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, January 19, 2001 1:51 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [KCFusion] SQL help needed - Apples but not Oranges... I'm trying to select clients who have purchased "Apples", but NOT "Oranges". This query is returning clients who have bought either. SELECT DISTINCT Clients.id, Clients.firstname, Clients.lastname FROM Clients,Orders,OrderItems,Products WHERE ( Clients.id = Orders.clientid AND Orders.id = OrderItems.orderid AND OrderItems.productid = Products.id AND Products.name LIKE '%Apples%' ) AND ( Clients.id = Orders.clientid AND Orders.id = OrderItems.orderid AND OrderItems.productid = Products.id AND Products.name NOT LIKE '%Oranges%' ) Any help is most appreciated! -ron __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFLOCK usage
Dave, The more important question is, what are the concequences in stability of /not/ using cflock? The #1 stability problem in CF (by a wide margin) is the unlocked use of application, session, and server variables. For session variables, cflock scope=session will only single-thread a browser session, so there should be no noticable problems in performance at all, unless (a) you exclusive-lock large blocks of code, /and/ (b) you are using a frames-enabled site, where more than one frame uses code with locks. (In this case, it may appear that one frame loads before another frame, rather than them both loading simultaneously. On the other hand, it often looks like that even if both /are/ theoretically loading simultaneously.) For more info on locking, see Jim Schley's article in the Developer's Zone, "ColdFusion Locking Best Practices", at: http://www.allaire.com/handlers/index.cfm?id=17318method=full Daryl Banttari Sr. Consultant allaire consulting - Original Message - From: "Dave Gammage" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 30, 2001 12:13 AM Subject: [KCFusion] CFLOCK usage Hey all! We are designing a document builder application for our customers. Needless to say, there are a LOT of session variables (6 to 9 queries, 8 to 10 variables each). What are the potential problems with overhead using CFLOCK in this application? Thanks! Dave Gammage Web/Database developer Uhlig Communications __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFQUERY and single quotes
Not sure what you're asking...
select * from users where name = 'me'
is valid where the name column is a text type
select * from users where userID = 3
is valid where the userID column is a numeric type, and
select * from eventlog where logtimestamp #createODBCDate(now())#
will get today's eventlog entries if the logtimestamp column is a date/time
field.
If you have a form field called (e.g.) "Form.Comments" and the comments
include a single quote:
insert into CommentLog (comment) values ('#Form.Comments#')
then CF is smart enough to "escape" the tick quotes by doubling them before
sending the query to the DBMS. For example, the actual insert might look
like this to the SQL engine:
insert into CommentLog (comment) values ('This site''s cool, dude!')
...Is this what you're asking?
Daryl
- Original Message -
From: "Bryan LaPlante" [EMAIL PROTECTED]
To: "[KCFusion List] (E-mail)" [EMAIL PROTECTED]
Cc: "[CF-Server List][E-Mail]" [EMAIL PROTECTED]
Sent: Thursday, February 01, 2001 4:51 PM
Subject: [KCFusion] CFQUERY and single quotes
I am having a problem with a textarea that I use to send queries through
CF
via the CFQUERY tag.
If I write a query that references a string value like [ select * from
users
where name = 'me' ] the database says syntax error or access violation. If
on the other hand the query goes [ select * from users where userID = 3 ]
then the query runs fine.
Has anyone else found a work-a-round for this?
Bryan LaPlante
816-347-8220
[EMAIL PROTECTED]
http://www.netwebapps.com
Web Development
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFQUERY and single quotes
Oh, wait... I think I understand your question now. You may need to use the PreserveSingleQuotes() function around the form field to prevent CF from doubling the single quotes, i.e. passing your query as such: select * from users where name = ''me'' Daryl - Original Message - From: "Bryan LaPlante" [EMAIL PROTECTED] To: "[KCFusion List] (E-mail)" [EMAIL PROTECTED] Cc: "[CF-Server List][E-Mail]" [EMAIL PROTECTED] Sent: Thursday, February 01, 2001 4:51 PM Subject: [KCFusion] CFQUERY and single quotes I am having a problem with a textarea that I use to send queries through CF via the CFQUERY tag. If I write a query that references a string value like [ select * from users where name = 'me' ] the database says syntax error or access violation. If on the other hand the query goes [ select * from users where userID = 3 ] then the query runs fine. Has anyone else found a work-a-round for this? Bryan LaPlante 816-347-8220 [EMAIL PROTECTED] http://www.netwebapps.com Web Development __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Access yes/no fields vs. SQL Server's bitfields...
Heh.. an icky way is to add columns called "true" (bit, default 1) and "false" (bit, default 0) to every affected table. But I don't recommend that... Daryl At 11:31 AM 2/23/2001 -0600, [EMAIL PROTECTED] wrote: Hi Everyone, Ran into an issue this morning upon upsizing some Access code to SQL Server 7. We had been selecting on Access' yes/no columns like this: WHERE active = true ... which works fine. Upsizing to SQL7, yes/no columns are converted to bit fields, and the same SQL statement breaks against them. The cross-db solution seems to be to modify each query to use: WHERE active = 1 ... since that works in Access and SQL7. But I was just curious if anyone knows a way to configure SQL7 to allow searching bit columns with true and false. thx, Ron __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] License converting...
Talk to Sales, I believe they can do that for a nominal fee, possibly even free. But I don't work in sales, so don't quote me :-) Daryl P.S. It seems I can no longer post as [EMAIL PROTECTED] *sigh* At 04:11 PM 2/28/2001 -0600, Dave Gammage wrote: Hey everyone!! The company I'm doing some contract work for has a Solaris Enterprise Server license for 4.5. Is there a way that anyone knows of to convert it to an NT Enterprise license? Thanks! -- Dave Gammage Digital Prairie www.digital-prairie.com __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
RE: [KCFusion] License converting...
No, I think the list admins disallowed posting from non-members. Isubscribed to the list as [EMAIL PROTECTED], and tried to post as[EMAIL PROTECTED] . Not a biggie, it's just that when I want to"remind" people that I work for Allaire these days, I like to use theAllaire e-mail address. I'll just have to remember to keep my e-mailaddresses straight for posting. :-)Daryl BanttariSr. Consultantallaire consulting- Original Message -From: "Jeffrey J. Young" [EMAIL PROTECTED]To: [EMAIL PROTECTED]Sent: Wednesday, February 28, 2001 4:50 PMSubject: RE: [KCFusion] License converting... Why not Daryl? Bosses upset with the way that portrays you to the list?That would be the general corporate line...
Re: [KCFusion] Changing client variable storage
- Original Message - From: "Chris" [EMAIL PROTECTED] Sent: Tuesday, March 27, 2001 10:26 AM [Are] there any other tables I need to create besides cdata and cglobal? Nope, just those two. If you're using MS SQL Server, I'd recommend making the primary keys clustered. (through Manage Indexes.) Daryl __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] UltraDev
Remember, both products are made by the same company now ;-) Daryl Banttari Macromedia Consulting [EMAIL PROTECTED] - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 29, 2001 8:38 AM Subject: RE: [KCFusion] UltraDev Did you really mean to send this mail to a ColdFusion User Group and NOT the UltraDev User Group ? -Original Message-From: Rick Eidson [mailto:[EMAIL PROTECTED]]Sent: Thursday, March 29, 2001 8:40 AMTo: KCCFUG (E-mail)Subject: [KCFusion] UltraDev I am using Studio should I move to UltraDev? Rick**This email and any files transmitted with it are confidential andintended solely for the use of the individual or entity to whom theyare addressed. If you have received this email in error please notify[EMAIL PROTECTED]**
Re: [KCFusion] FYI
How about this (since Form and URL are implemented as structures in CF4.5):
cfloop collection="#form#" item="i"
cfset setvariable(i,form[i])
/cfloop
cfloop collection="#url#" item="i"
cfset setvariable(i,url[i])
/cfloop
Personally, I just use unscoped variables (but preface them with "ff".)
Call me a heretic :-)
BTW I registered "www.cfprimer.com" for Daryl's ColdFusion Primer. So both
of you who bookmarked it, change your bookmarks ;-)
Daryl Banttari
Sr. Consultant
Macromedia Consulting
- Original Message -
From: "Bryan LaPlante" [EMAIL PROTECTED]
To: "[KCFusion List] (E-mail)" [EMAIL PROTECTED]
Sent: Sunday, April 08, 2001 10:11 PM
Subject: [KCFusion] FYI
Hay all,
I kept threatening to build a loop that could be used to assign var's
dynamically but just never found a need to do it before.
For example if you have an action page that might get url var's in one
situation and form var's in another, it is a time consuming hassle to
write
the if/else structure for each scope of variable.
Any way I broke down and wrote one for my self, so I thought I would just
share it with you all.
CFLOOP INDEX="var" LIST="custemail,custurl,productID"
CFIF IsDefined("form." var)
CFSET Evaluate(var "=" "form." var)
CFELSEIF IsDefined("URL." var)
CFSET Evaluate(var "=" "URL." var)
/CFIF
/CFLOOP
Bryan LaPlante
816-347-8220
[EMAIL PROTECTED]
http://www.netwebapps.com
Web Development
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
[KCFusion] The Query Object: Floor Wax or Dessert Topping?
I just added a new (sub)section to Daryl's ColdFusion Primer. I broke the "Fundamentals" section into two parts, and rounded out the second part, now called "Queries and SQL", with a tongue-in-cheek look at the Query object and its uses. http://www.cfprimer.com/queries.cfm#Shimmer Daryl Banttari Data Plumber at Large __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
[KCFusion] CF 5.0-- test it while you can!
OK, Word from development is that the 5.0 Release Candidate (RC) is very stable and nearly bug-free (as far as we can tell). The quote I got is, we can't get it to crash [unless we use unlocked application and session vars]. Barring a few minor fixes and documentation changes, this looks to be the finished bits. Therefore, if you want to test 5.0 while it's still in its development cycle, you'd better do it now. What we'd /really/ like to see is for some of our braver partners to actually run the 5.0 RC in their production environments to check for any undiscovered issues before we go gold. There will not be another Release Candidate for 5.0. That being said, this is not an official announcement or request of anything, and all the usual disclaimers about liability apply. Reports are that 5.0 is as much as 3.5x faster on multiprocessor Win2K than 4.5 was. CF/Linux is as much as 4.5x faster on multiprocessor systems. Woohoo! If you haven't yet been part of the beta process, you can sign up at http://beta.allaire.com/bart/ Daryl Banttari Sr. Consultant Macromedia Consulting P.S. Some of you may remember me ranting about the beta and RC cycles for prior releases of CF (perhaps they hired me to shut me up? Heh.) I'm proud to say that they (or rather, we) got it right this time. The betas were quite solid, and the RC met my definition for RC, which is it has to have a double-digit chance of actually being the finished bits. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] SQL table listing
Look into the sp_tables and sp_columns stored procedures. - Original Message - From: Ryan Hartwich [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 17, 2001 12:57 PM Subject: RE: [KCFusion] SQL table listing Bryan Chris, You have given us great insight into finding table column names in Access. Do you have a way in SQL Server? I tried looking at some of the sysobjects type tables but they are pretty heavily populated with strange data. Ryan __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] SQL table listing - Access
http://www.google.com/search?q=sri+lanka+virus - Original Message - From: Nathan T Haley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 17, 2001 2:13 PM Subject: RE: [KCFusion] SQL table listing - Access Hey, Does anyone know about a virus having to do with Sri Lanka? -Original Message- From: Ryan Block [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 17, 2001 2:13 PM To: '[EMAIL PROTECTED]' Subject: RE: [KCFusion] SQL table listing - Access But I still need to be able to access those columns to input data, even though they are empty. Why don't you do a count on the number of records in the table first. If the recordcount = 0 don't run the CF ColumnList program. Ryan __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
[KCFusion] *groan*
I just spent half an hour trying to figure out why an UDPATE query wouldn't run, complaining about a misplaced = sign in the SET clause. Took a break, came back... Realized there is no UDPATE command in SQL, changed it to UPDATE, and all worked fine. Sheesh Daryl __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CF5 Eval
Hmm... are you sure the time from the first page load wasn't from p-coding the pages? What does Debug output have to say about the time spent in each custom tag (as opposed to the startup, parsing, and shutdown time)? Daryl - Original Message - From: Bryan LaPlante [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, June 06, 2001 12:13 PM Subject: Re: [KCFusion] CF5 Eval Ok loading 126 functions in 4 libraries with the custom tags in the application.cfm file. CF_STRLIB SCOPE=session CF_Datamanipulation SCOPE=session CF_MATHLIB SCOPE=session CF_SecurityLib SCOPE=session first page load acts like a cfinclude since the whole custom tag has to run: 1593 milliseconds Successive page loads do not run the whole custom tag since the functions exist in session var's. 40 milliseconds - Original Message - From: Ron Hornbaker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, June 06, 2001 11:51 AM Subject: RE: [KCFusion] CF5 Eval | The notion of loading a group of functions using cfinclude at the top of | ever template that requires access to said functions, well I am thinking | it's too heavy. go download http://www.netwebapps.com/projects/cflp.zip | this | zip file while I go get my coffee and I will explain what I have done to | allow you to drop these libraries into you custom tags folder and only | have | to load them once pre session,application,request or server occurrence, | which ever you choose. | | Bryan, | | Neat idea, but do you really think cfincluding them, perhaps in the | Application.cfm page, would be that heavy? If you turn on Template Caching | in the CF admin, all templates will be cached in RAM, and I would think | that would serve the same purpose and be a bit simpler to implement. I'd | be interested in seeing some performance stats on both methods. | | We use a boatload of functions in our ASP projects, and including them at | the top of the page has never seemed like much overhead. Heck, we've got | one ASP app running at http://support.answertrack.com/ that has about 100 | files included on the main processing page, probably 60-70k total weight | (written in Fusebox-style), and that dang thing has faster page views than | any of our CF stuff. If you mouseover the lower-right-hand corner of the | AnswerTrack display window on that site, you'll see the total processing | time in milliseconds of the page. | | -Ron | | | | | __ | The KCFusion.org list and website is hosted by Humankind Systems, Inc. | List Archives http://www.mail-archive.com/cf-list@kcfusion.org | Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] | To Subscribe mailto:[EMAIL PROTECTED] | To Unsubscribe mailto:[EMAIL PROTECTED] | | __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CF5 Eval
Custom tags have very little innate overhead; most of the experience I've had with custom tags running slowly involves the custom tag doing some sort of heavy lifting-- which should be minimized within CF. i.e. CF_BubbleSort isn't slow because it's a custom tag, it's slow because you're doing a bubble sort in an interpreted language like CF. Custom tags calls have very little additional overhead vs. cfincludes. Daryl - Original Message - From: Ron Hornbaker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, June 06, 2001 12:23 PM Subject: RE: [KCFusion] CF5 Eval Ok loading 126 functions in 4 libraries with the custom tags in the application.cfm file. CF_STRLIB SCOPE=session CF_Datamanipulation SCOPE=session CF_MATHLIB SCOPE=session CF_SecurityLib SCOPE=session first page load acts like a cfinclude since the whole custom tag has to run: 1593 milliseconds I wouldn't say custom tags perform like cfincludes. I believe that with template caching turned on, a cfincludes will be just as fast as if the code were local to that page... perhaps faster, since CF will cache the entire contents in server RAM. Custom tags and cfmodules are notoriously slow. I would definitely recommend not using the Session scope for those things, since they'll be duplicated in RAM for each user on the site, and each user will experience the 1.5 sec lag on first load. Application or Server scope would be much nicer to server RAM. Successive page loads do not run the whole custom tag since the functions exist in session var's. 40 milliseconds Let's see a stat where they're purely cfincluded; let me know when you've got the code done, and I'll turn on template caching on the server (assuming you're testing this on our server). The big benefit to doing it your way, imo, is that the libraries can be stored in one place on the server, and be available to all sites, vs. cfincludes which would need a mapping to have the same commonality. As long as using them is no more complicated because of their tag scope, it seems like a good way to go. -Ron __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Uploading CSV
Be VERY CAREFUL with this code, because CF "eats"
multiple contiguous delimiters.
ListLen("foo,bar,candy") is 3, but
ListLen("foo,,candy") is *2*, and
ListGetAt("foo,,candy",3) will return an error.
The last time I had to work with CSV files
containing null values I did this:
!--- For each row, parse the columns into an
array: ---
CFSET aThisRow = ArrayNew(1)CFLOOP
List="#TheFile#" Index="CurRow"
Delimiters="#crlf#"cfscript
while (len(CurRow)) {tabPos =
find(tab,CurRow);if (tabPos is 0)
{aThisRow[CurCol]=CurRow;CurRow="";}
else if (tabPos is 1)
{aThisRow[CurCol]="";CurRow=mid(CurRow,2,len(CurRow));}
else
{aThisRow[CurCol]=left(CurRow,tabPos-1);CurRow=mid(CurRow,tabPos+1,len(CurRow));}CurCol=CurCol+1;}
/cfscript
!--- here i did the import based on the
column number index into the array ---
/CFLOOP
HTH
Daryl
- Original Message -
From: Jones, Matt
To: '[EMAIL PROTECTED]'
Sent: Monday, June 11, 2001 2:55 PM
Subject: RE: [KCFusion] Uploading CSV
cfset EndLine = Chr(10)
Chr(13)
cfset listDelim = ","
cfloop list="#RawFile#" index="CurData"
delimiters="#EndLine#"
!--- Name could be accessed by
#listGetat(CurData,1,listDelim)# ---
!--- Faxnumber could be accessed
by #listGetat(CurData,2,listDelim)# ---
!--- Put your insert query here
---
/cfloop
-Original Message-From: Rick Eidson
[mailto:[EMAIL PROTECTED]]Sent: Monday, June 11, 2001 2:44
PMTo: KCCFUG ([EMAIL PROTECTED])Subject: [KCFusion]
Uploading CSV
I need to upload a CSV file and
enter its field values into a database.
I can read the file and output
it
cffile
destination="e:\WebSites\KCHost\Fax" action="UPLOAD"
nameconflict="overwrite" filefield="XFile"
cffile action="READ" file="e:\WebSites\KCHost\Fax\#FILE.ServerFile#" variable="RawFile"
cfquery datasource="enews" name="Update"
INSERT INTO
Fax
(Name)
VALUES('#RawFile#')
/cfquery
This puts into one field. But how
can Read each field
The fields would be Name, Faxnumber
Rick
Eidson
Re: [KCFusion] CF 5 Distribution
Re: CF5 Subscription Fulfillment Actually, the shipping version is available from the web site. Subscription holders *should have* received an email with (a) temporary serial number(s), however, in many cases, it appears that the process failed-- for instance, I didn't get a subscription email (although I can get NFR software from Macromedia as an employee, I still have a subscription open for my production web server.) I called Customer Service and they gave me a temporary serial number to use (after verifying my subscription). Here is a relevant e-mail from Phil Costa, posted to cf-talk: - Original Message - From: Phil Costa [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Sent: Tuesday, June 12, 2001 9:43 AM Subject: RE: MACROMEDIA COLDFUSION SERVER 5 NOW AVAILABLE Now that boxes and CDs have been manufactured, your subscription fulfillment should arrive in the next 2-3 weeks . If you are a subscription holder, you should have received an email from Macromedia with a temporary serial number and a link to a downloadable version. If you have not received this email, please contact Customer Service and they will look into it for you. Using this electronic form is the easiest and fastest way to get Customer Service: http://www.allaire.com/services/customerservice/index.cfm Phil Costa Sr. Product Marketing Manager / Macromedia [EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Meeting
Looks like I'll be in town tomorrow night. If anyone wants me to speak on any subject they think I might know something about, I'll be happy to give it a shot. Otherwise, I have written a couple of things lately that might be of interest: * A wrapper for GPG so that you can do PGP encryption from within CF without paying NAI's exorbidant server licensing fees. * A program that will seek out queries that can be parameterized, and automagically edit them to use cfqueryparam. * Use of cfflush to keep a browser's attention during a CF-based flat file import. Also, notes on how to accomplish that sort of thing (since list functions tend to behave badly in that context.) Daryl Banttari Sr. Consultant Macromedia Consulting - Original Message - From: Bryan LaPlante [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, July 09, 2001 1:25 PM Subject: Re: [KCFusion] Meeting Ok, there are two new links at http://www.kcfusion.org . The Common Function Library Project link points to the site created by Raymond Camden and Rob Brooks-Bilson. I down loaded all of the user defined functions that they have assembled on their site and created a custom tag that will load up user defined functions into the scope of your choice (application if you want to use them for the life of the application respectively). The other link in the download section called Packaging UDF's contains the vtm editors for each package and a tutorial.htm that shows how the tag was built. Down load the zip file and read the doc and then lets discuss it online. Bryan - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, July 09, 2001 12:45 PM Subject: RE: [KCFusion] Meeting | Please do share. | | -Original Message- | From: Bryan LaPlante [mailto:[EMAIL PROTECTED]] | Sent: Monday, July 09, 2001 12:47 PM | To: [EMAIL PROTECTED] | Subject: Re: [KCFusion] Meeting | | | I have to admit as soon as I installed CF 5 I started right in on the user | defined functions. I didn't much care for the approach of cfincluding | functions at the top of the page so I came up with a way to load all the | function for an application once per the life of the application. I would be | happy to share my techniques with any of you. | | Bryan | | - Original Message - | From: Bakken, Kory [EMAIL PROTECTED] | To: [EMAIL PROTECTED] | Sent: Monday, July 09, 2001 12:38 PM | Subject: RE: [KCFusion] Meeting | | | | I am interested in the new functionality for CF5. We have installed it, | but | | have not had time to put it to use yet. If anyone has had success using | the | | new cfgraph capability, archival, or cfflush, I would be interested in | | seeing demonstrations of all of those. | | | | -Original Message- | | From: Bryan LaPlante [mailto:[EMAIL PROTECTED]] | | Sent: Monday, July 09, 2001 12:28 PM | | To: [ KCFusion ] | | Subject: [KCFusion] Meeting | | | | | | I see that Ryan has been trying to get some response from the group about | | what your interests are. I have been involved with this group for about a | | year now and I have noticed that we are a very quiet group. I don't know | if | | that means that we are all CF guru's or if it means that the majority of | our | | day is spent dealing with other technologies that consume our time and | | interests. I remember when I first started in IT my first language was | Java. | | I was about to jump off the nearest cliff for the lack of resources that | | were available to me. After getting a handle on Internet technologies I | | wanted to help others get through the experience of learning a new | language. | | | | There are about 10 core people that are always ready to help others in | this | | group and I bet they had a similar experience to mine when they were | | starting out. It would be kind of nice if we could all respond to them | when | | they ask us if there is anything we would like to talk about. I am not | | complaining about meeting attendance or the lack of speakers but in the | | spirit of the way Ron Hornbaker started this group we should be free to | talk | | about any kind of technology that a CF developer is faced with. | | | | Any one that wants to give a presentation or suggest a focus for a meeting | | all you have to do is email one of the directors and we will give you any | | help you need to find answers to your issues. If any of us would do that | | then once a month there would be some idea of common issues that the | | community have been faced with and thus a subject for the meeting. I don't | | think that I can stand up once a month and entertain you, so the | alternative | | is to let the group know if there is anything that you need help with. | Some | | one mentioned that the group seems to be more responsive to the subject of | | Java (integration with CF, JRun, how to write a JavaBean) and so on, if | that | | is what everyone is interested in then lets do it. | | | | If I don't get at least 10 responses about
[KCFusion] Fw: Initial analysis of the .ida Code Red Worm
I personally know of someone who was infected by this. If you haven't removed all non-(CF or ASP) script mappings, DO DO NOW! An ounce of prevention Daryl - Original Message - From: Marc Maiffret [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 17, 2001 1:17 PM Subject: Initial analysis of the .ida Code Red Worm The following information was researched by Ryan Permeh ([EMAIL PROTECTED] and Marc Maiffret ([EMAIL PROTECTED] of eEye Digital Security. We would like to specially thank Matthew Asham of Left Coast Systems Corp and Ken Eichman of Chemical Abstracts Service for providing us with logs and needed data to make this analysis possible. Introduction On Friday July 13th we received packet logs and information from 2 network administrators that were experiencing large amounts of attacks targeting the recent .ida vulnerability that eEye Digital Security discovered (http://www.eeye.com/html/Research/Advisories/AD20010618.html) on June 18, 2001. From the first analysis of the logs that were sent to us we were able to deduce that in fact it looked as if someone had released a worm for the .ida vulnerability. Within the logs we could see connection attempts from over 5 thousand IIS 5 web servers targeting various other IIS web server and sending a .ida exploit to each of them. Evidence also showed that compromised hosts were being used to attack other hosts. We've designated this the .ida Code Red worm, because part of the worm is designed to deface webpages with the text Hacked by Chinese and also because code red mountain dew was the only thing that kept us awake all last night to be able to disassemble this exploit. Details --- Note: Details are going to be short for now. We plan on releasing a full analysis of the worm but felt that it was important to get this message out ASAP as this worm is starting to affect a lot of people. The standard injection vector is a exploit that uses the .ida buffer overflow to execute code (as SYSTEM) on vulnerable remote systems. The worm performs the following on infected systems: * Spawns 100 threads which are used to scan for new IIS web servers to infect * Checks for the existence of c:\notworm and if it is found then it does not try to propagate itself to other hosts. * Defaces web pages with the message: htmlheadmeta http-equiv=Content-Type content=text/html; charset=EnglishtitleHELLO!/title/headbadyhr size=5font color=redp align=centerWelcome to http://www.worm.com !brbrHacked By Chinese!/font/hr/bady/html Analysis Note: Again this is a quick brief analysis, more detail will follow. Upon infection the infected host will spawn 100 threads in a loop. This loop checks for the existence of c:\notworm and if the file does not exist then the worm will proceed to start scanning for vulnerable servers to infect. The worm does scan for random IP addresses. However, the worm uses the same seed for randomization of IP addresses. This means that each new infected host will start at the same IP and continue scanning further down the same track of IP's as every other infected host. The ramifications of this are severe because this means that hosts early in this randomized IP sequence will be hit over and over as new hosts are infected. This creates the potential for a denial of service against early IP addresses in the sequence. Also, evidence has proved that hosts can be infected multiple times therefore creating a drain on system resources. However, normal worm operation seems to have a cut off point as to how many times a host will be re-infected. Early analysis seems to suggest that the worm has a limit of 3 reinfections however that may have just been by chance in our test scenario. Other in house tests of the infections have shown that internal thread rate limiting seems to be broken in certain situations. Which means that some infected systems will continue to spawn new threads until system resources become so low that the entire web server computer crashes or becomes unusable. Summary --- We will be releasing a full detailed analysis, complete with disassembled worm code and comments within the code. We have had reports from a few network administrators that their IDS systems have seen this .ida attack originating from over 5 thousand unique source addresses within a 3 day time span. Hosts early in the IP sequence will be hit with a traffic based denial of service and those hosts vulnerable to this worm will most likely grind to a halt. How to secure your system from this .ida attack --- Microsof patch for this .ida vulnerability http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/ bulletin/MS01-033.asp eEye Digital Security Advisory http://www.eeye.com/html/Research/Advisories/AD20010618.html The following is part of the packet data that is sent for this .ida Code Red worm attack:
[KCFusion] Fw: (resend) Initial analysis of the .ida Code Red Worm
I personally know of someone who was infected by this. If you haven't removed all non-(CF or ASP) script mappings, DO SO NOW! An ounce of prevention Daryl (Nothing like typing in a hurry...) - Original Message - From: Marc Maiffret [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 17, 2001 1:17 PM Subject: Initial analysis of the .ida Code Red Worm The following information was researched by Ryan Permeh ([EMAIL PROTECTED] and Marc Maiffret ([EMAIL PROTECTED] of eEye Digital Security. We would like to specially thank Matthew Asham of Left Coast Systems Corp and Ken Eichman of Chemical Abstracts Service for providing us with logs and needed data to make this analysis possible. Introduction On Friday July 13th we received packet logs and information from 2 network administrators that were experiencing large amounts of attacks targeting the recent .ida vulnerability that eEye Digital Security discovered (http://www.eeye.com/html/Research/Advisories/AD20010618.html) on June 18, 2001. From the first analysis of the logs that were sent to us we were able to deduce that in fact it looked as if someone had released a worm for the .ida vulnerability. Within the logs we could see connection attempts from over 5 thousand IIS 5 web servers targeting various other IIS web server and sending a .ida exploit to each of them. Evidence also showed that compromised hosts were being used to attack other hosts. We've designated this the .ida Code Red worm, because part of the worm is designed to deface webpages with the text Hacked by Chinese and also because code red mountain dew was the only thing that kept us awake all last night to be able to disassemble this exploit. Details --- Note: Details are going to be short for now. We plan on releasing a full analysis of the worm but felt that it was important to get this message out ASAP as this worm is starting to affect a lot of people. The standard injection vector is a exploit that uses the .ida buffer overflow to execute code (as SYSTEM) on vulnerable remote systems. The worm performs the following on infected systems: * Spawns 100 threads which are used to scan for new IIS web servers to infect * Checks for the existence of c:\notworm and if it is found then it does not try to propagate itself to other hosts. * Defaces web pages with the message: htmlheadmeta http-equiv=Content-Type content=text/html; charset=EnglishtitleHELLO!/title/headbadyhr size=5font color=redp align=centerWelcome to http://www.worm.com !brbrHacked By Chinese!/font/hr/bady/html Analysis Note: Again this is a quick brief analysis, more detail will follow. Upon infection the infected host will spawn 100 threads in a loop. This loop checks for the existence of c:\notworm and if the file does not exist then the worm will proceed to start scanning for vulnerable servers to infect. The worm does scan for random IP addresses. However, the worm uses the same seed for randomization of IP addresses. This means that each new infected host will start at the same IP and continue scanning further down the same track of IP's as every other infected host. The ramifications of this are severe because this means that hosts early in this randomized IP sequence will be hit over and over as new hosts are infected. This creates the potential for a denial of service against early IP addresses in the sequence. Also, evidence has proved that hosts can be infected multiple times therefore creating a drain on system resources. However, normal worm operation seems to have a cut off point as to how many times a host will be re-infected. Early analysis seems to suggest that the worm has a limit of 3 reinfections however that may have just been by chance in our test scenario. Other in house tests of the infections have shown that internal thread rate limiting seems to be broken in certain situations. Which means that some infected systems will continue to spawn new threads until system resources become so low that the entire web server computer crashes or becomes unusable. Summary --- We will be releasing a full detailed analysis, complete with disassembled worm code and comments within the code. We have had reports from a few network administrators that their IDS systems have seen this .ida attack originating from over 5 thousand unique source addresses within a 3 day time span. Hosts early in the IP sequence will be hit with a traffic based denial of service and those hosts vulnerable to this worm will most likely grind to a halt. How to secure your system from this .ida attack --- Microsof patch for this .ida vulnerability http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/ bulletin/MS01-033.asp eEye Digital Security Advisory http://www.eeye.com/html/Research/Advisories/AD20010618.html The following is part of the packet data that is sent for this .ida Code Red worm attack:
Re: [KCFusion] working with local files
If you're using CFEXECUTE, then you're running the VB exe on the server. By "local machine" they mean the server that's running ColdFusion. Daryl - Original Message - From: JamieTieman To: KCFusion Sent: Friday, July 20, 2001 2:10 PM Subject: [KCFusion] working with local files I need some help. I have a template that when called, uses CFEXECUTE run a VB exe that I wrote to extract data from an old accounting database and create CSV files of the data I want to use. When its done, I thought I could use the CFFILE READ function, work with it in my template, then use CFQUERY to update the info on the server. I just looked at CFFILE (help section) and it says it is for working on files on the server, not the local machine. Is there another way? Jamie
Re: [KCFusion] working with local files
Hmm can you find some way to have the files built on the server? Because there's no easy way to get executables to run on a client (nor should there be.) You may just need to give them step-by-step instructions on howto build the files, and then create a form to post to CFFILE Action="Upload". Daryl - Original Message - From: JamieTieman To: [EMAIL PROTECTED] Sent: Friday, July 20, 2001 3:18 PM Subject: RE: [KCFusion] working with local files Oh, Daryl That is an even bigger shock LetÂ’s back up. How do I get that program to run on the client machine to build the files that, I assume now, I will have to upload before I can work on them Jamie If you're using CFEXECUTE, then you're running the VB exe on the server. By "local machine" they mean the server that's running ColdFusion. Daryl - Original Message - From: JamieTieman To: KCFusion Sent: Friday, July 20, 2001 2:10 PM Subject: [KCFusion] working with local files I need some help. I have a template that when called, uses CFEXECUTE run a VB exe that I wrote to extract data from an old accounting database and create CSV files of the data I want to use. When its done, I thought I could use the CFFILE READ function, work with it in my template, then use CFQUERY to update the info on the server. I just looked at CFFILE (help section) and it says it is for working on files on the server, not the local machine. Is there another way? Jamie
[KCFusion] Fw: Program and Source for Removal of IDA/IDQ Script Mappings (in response to Red Code Worm)
FYI - Original Message - From: Critical Watch Bugtraqqer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, July 20, 2001 3:35 PM Subject: Program and Source for Removal of IDA/IDQ Script Mappings (in response to Red Code Worm) Hello everyone This is in response to the sheer numbers of web server that got pummeled by this new worm. While many people and firms created exploit/checks/Advisories for this Dangerous exploit, we have yet to see a helping hand program...until now! Having previously worked at a site with a huge server farm I experienced how painful it can be to go to 175 machines to install a single hot fix. This program will allow you to sit at your desk and simply yank the script mappings from the web server altogether and eliminate some 6 or so vulnerabilities that are associated with Index Services. This is a very simple program that you can use to remove the .IDA and .IDQ script mappings from the root of a web server and from all its sub-web sites. We have included the source code as well as the setup packages. (the metautil.dll has to get installed) for your perusal. You may retrieve the 1.43 meg download from our web site at http://www.criticalwatch.com/downloads/IDA_ScriptRemoval_Util.zip Nelson Bunker, CISSP V.P. of Security Critical Watch __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] working with local files
Hmm... in that case, you may want to script the uploads in your batch file via the DOS FTP command: ftp -s uploadmyfiles.ftp ...where the file "uploadmyfiles.ftp" would contain the commands needed to upload the files, e.g.: open ftp.mydomain.com user someuser pass theirpassword cd /upload delete somefile.txt put c:\somedir\somefile.txt delete somefile2.txtput c:\somedir\somefile2.txt delete somefile3.txtput c:\somedir\somefile3.txtquit ...Daryl - Original Message - From: JamieTieman To: [EMAIL PROTECTED] Sent: Friday, July 20, 2001 3:57 PM Subject: RE: [KCFusion] working with local files OK, I’m good with the fact I can give them an icon on the desktop that says Prepare Files for Uploading, when finished (in the VB program) tell them to log on to xxx.com. After the sign in screen, a link says “Upload Files” they click that and were off to the races, right? Each property has 3 files to upload, how would I loop through a list of the file names (which i know because i created them in the VB program) to automatically upload them all without intervention, when done, give them a Upload Successful message. Hmm can you find some way to have the files built on the server? Because there's no easy way to get executables to run on a client (nor should there be.) You may just need to give them step-by-step instructions on howto build the files, and then create a form to post to CFFILE Action="Upload". Daryl - Original Message - From: JamieTieman To: [EMAIL PROTECTED] Sent: Friday, July 20, 2001 3:18 PM Subject: RE: [KCFusion] working with local files Oh, Daryl That is an even bigger shock Let’s back up. How do I get that program to run on the client machine to build the files that, I assume now, I will have to upload before I can work on them Jamie If you're using CFEXECUTE, then you're running the VB exe on the server. By "local machine" they mean the server that's running ColdFusion. Daryl - Original Message - From: JamieTieman To: KCFusion Sent: Friday, July 20, 2001 2:10 PM Subject: [KCFusion] working with local files I need some help. I have a template that when called, uses CFEXECUTE run a VB exe that I wrote to extract data from an old accounting database and create CSV files of the data I want to use. When its done, I thought I could use the CFFILE READ function, work with it in my template, then use CFQUERY to update the info on the server. I just looked at CFFILE (help section) and it says it is for working on files on the server, not the local machine. Is there another way? Jamie
Re: [KCFusion] Win2k IIS 5 SMTP - Please Help!
Make sure under relay options, you have 127.0.0.1 allowed relay access. Uh... (checking...) Under SMTP Properties, Access tab, Relay button, grant access to 127.0.0.1. Daryl - Original Message - From: Justin Hansen [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, July 26, 2001 2:51 PM Subject: [KCFusion] Win2k IIS 5 SMTP - Please Help! I just installed Win2k Advanced, CF5 Eval, Test Server to help convince my boss to go that direction (he is a slow adaptor, we are still on NT4 and CF4.0). My problem is, besides the fact that we don't have a sys.admin, I can't get the sucker to send out mail! I am not too worried about security, port 25 is closed on the outside. How do I setup Virtual SMTP to send out the mail! Please, oh please, tell me how to open the sucker up so it can send from [EMAIL PROTECTED] I think, I might explode. For days, I have researched this all over the net and can't find any article or tips on how to set it up. Thanks a million! Justin Hansen - [EMAIL PROTECTED] Web Application Developer Interactive Business Solutions, Inc 816-221-5200 ext. 1305 __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] getting form variables
Actually, the Form scope acts like a structure, so you can do things like structKeyList(Form) and CFLOOP Collection=#Form# Item=i The form variable #i# contains: #Form[i]# /CFLOOP etc... Daryl - Original Message - From: Don Buck [EMAIL PROTECTED] To: CF-List [EMAIL PROTECTED] Sent: Friday, July 27, 2001 12:17 PM Subject: [KCFusion] getting form variables I remember reading in one of the letters where there was a way to grab all of the form variables from the query string and put them into an array. Unfortunately I can't find that letter. If someone remembers who to do that, could you please elucidate me? Don Buck (816) 761-5430 Chief Information Officer ShareValue Inc. http://www.sharevalue.com __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Apache vs IIS
If you do a reasonable job of securing IIS, then there are few worries. My web server was never vulnerable to Code Red, because the first thing I did was remove all unused script mappings. The only script mapping I have left is .cfm. (This is done in WWW Master Properties, Home Directory, Configuration.) Daryl - Original Message - From: Mark Kirkbride [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, August 01, 2001 8:24 AM Subject: [KCFusion] Apache vs IIS Anyone have any opinions of Linux/Apache vs Windows/IIS? Considering that IIS seems to be a bigger target for Code Red and such, I'm wondering if Apache might be a more secure way to go. Mark Kirkbride IT Technician FBD Consulting, Inc. (913) 319-8836 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] FW: CFExecute -- more
Hmm... does it stop for input? A few things to try: 1. Write it as a batch file and then use cfexecute name=cmd.exe arguments=/c myfile.bat timeout=... ... 2. Allow cfserver to interact with desktop in the services control panel; 3. Change the user cfserver is running as to a real user, not localsystem. Daryl - Original Message - From: Don Buck [EMAIL PROTECTED] To: CF-List [EMAIL PROTECTED] Sent: Monday, August 06, 2001 9:54 AM Subject: [KCFusion] FW: CFExecute -- more This is another upsetting thing that I am finding. When I try to run my program from cfexecute, I can see that it has started as a process in my task manager, but it never does anything. Also I cannot even end the process, I am access denied. To end the process I have to re-boot the server. Don -Original Message- From: Don Buck [mailto:[EMAIL PROTECTED]] Sent: Monday, August 06, 2001 9:30 AM To: CF-List Subject: CFExecute Has anyone had any luck with CFEXECUTE? I have an app that I wrote that takes an Adobe FDF file, parses it to include new form data then creates a new fdf file with a new name. The app accepts a parameter argument to select for a new ID. The app works fine by itself. I can take a shortcut and add the parameter and it creates the needed file. When I try to call it from CfExecute: nothing happens when I don't include an outputfile name if I include a filename it creates an empty file of the outputfile's name if I include a timeout value it times out without anything happening. Any help? Don Buck (816) 761-5430 Chief Information Officer ShareValue Inc. http://www.sharevalue.com __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
[KCFusion] Macromedia Consulting is No More
Hi everyone-- Macromedia Consulting is being dissolved, and most of the people who remain in that org unit are being moved to Premier Support. Or rather, the org unit formerly known as Premier Support. Not everyone can make this transition-- some will be laid off. They are asking us for volunteers. Frankly, I'm horribly torn, vacillating rapidly from stay to go. With the layoffs that have already occurred, I've made it a point to /not/ look around at the job market, because I had committed to Grant Szabo (Dir/Consulting) that I would stay for the duration. However, the duration of my current job (whether or not I stay at Macromedia) has found its limit. My choices are: Stay on as a tech support person, or leave for other pastures. I want to make an informed decision, so my question is: how green are those pastures in Kansas City? If you're interested, my resume can still be found at http://www.windsorcs.com/resume.htm Thanks, Daryl Banttari Sr. Consultant [for now] Macromedia Consulting [while it lasts] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFFile to Upload
I believe you're looking for this: expandPath(../images/) Daryl - Original Message - From: Don Buck [EMAIL PROTECTED] To: CF-List [EMAIL PROTECTED] Sent: Friday, August 17, 2001 8:09 AM Subject: [KCFusion] CFFile to Upload I am using CFFile to upload files to my server: cfif isdefined(form.submitted) CFFILE ACTION=upload FILEFIELD=uploadfile DESTINATION=C:\Inetpub\wwwroot\Test\images ACCEPT=image/gif, image/jpg NAMECONFLICT=Overwrite /cfif My problem is that I want to be able to move this file where I want at a later date, without having to worry about changing the explicit path in the Destination. Is there a function that I can call to retreive the path of the calling file? Something like: cfset myDestination = #CFFilePath#\images which would create: myDestination=C:\Inetpub\wwwroot\Test\images This seems like a function that should be there, but I can't find it. Any Help? Don Buck (816) 761-5430 Chief Information Officer ShareValue Inc. http://www.sharevalue.com __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] variable scoping
Check out my little site: http://www.cfprimer.com/ Daryl - Original Message - From: Bakken, Kory [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 17, 2001 9:08 AM Subject: [KCFusion] variable scoping Does anybody know where I can find information regarding the different types of variable scoping? I've heard talk about #request.var#, #server.var#, etc. and I am having difficulty finding any documentation that covers this. Kory Bakken Accenture / Kansas City __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Macromedia Consulting is No More
Thanks for the support, everyone. After extensive discussion and soul searching, I've decided to remain at MM. I'm a big fan of CF (no pun intended), and I think I can do more for the community from within MM than from without. In any case, I should be able to speak at more meetings now. :-) Thanks again, Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 17, 2001 12:54 PM Subject: RE: [KCFusion] Macromedia Consulting is No More Daryl: As far as ColdFusion, I get the impression this town has ASP tunnel vision. However the rest of your skills might find a home at one of the small number of Internet-related shops here. You'd be a big fish in a small pond. If you want to work for Sprint again, they've built a huge new campus (headquarters) in south Overland Park. Most salaries here are lower than the coasts, but cost of living is also proportionally smaller. Personally I think KC is great and don't want to live anywhere else. Good luck! Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] http://www.vmdc.net/ CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daryl Banttari Sent: Thursday, August 16, 2001 5:24 PM To: KCFusion Subject: [KCFusion] Macromedia Consulting is No More Hi everyone-- Macromedia Consulting is being dissolved, and most of the people who remain in that org unit are being moved to Premier Support. Or rather, the org unit formerly known as Premier Support. Not everyone can make this transition-- some will be laid off. They are asking us for volunteers. Frankly, I'm horribly torn, vacillating rapidly from stay to go. With the layoffs that have already occurred, I've made it a point to /not/ look around at the job market, because I had committed to Grant Szabo (Dir/Consulting) that I would stay for the duration. However, the duration of my current job (whether or not I stay at Macromedia) has found its limit. My choices are: Stay on as a tech support person, or leave for other pastures. I want to make an informed decision, so my question is: how green are those pastures in Kansas City? If you're interested, my resume can still be found at http://www.windsorcs.com/resume.htm Thanks, Daryl Banttari Sr. Consultant [for now] Macromedia Consulting [while it lasts] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion]
From: [EMAIL PROTECTED] Would Allaire be willing to share the names of their Kansas City CF customer base with kcfusion.org? Hmm... I'm not the person to talk to about that, and frankly, as a customer, I wouldn't want MM giving my name out to anyone who asked for it. Even if they asked nicely. I think the best thing to do is to get together and code up a job posting board for kcfusion.org. Shouldn't be too hard. Does anyone know if we'd be violating one of Amazon.com's patents? ...heh Daryl __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Arrays
Hmm... Serialize to WDDX and stuff it in a hidden form field using htmlEditFormat()...? Daryl - Original Message - From: Don Buck [EMAIL PROTECTED] To: CF-List [EMAIL PROTECTED] Sent: Thursday, August 23, 2001 12:32 PM Subject: [KCFusion] Arrays I'm storing stuff in an array on one form. Is there any way to pass the whole array to another form intact? Without having to break it down into its individual elements Don Buck (816) 761-5430 Chief Information Officer ShareValue Inc. http://www.sharevalue.com __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] isDefined(dynamic)
Did you try it without the quotes? cfif isDefined(temp) ... /cfif Daryl - Original Message - From: LaPlante, Bryan [EMAIL PROTECTED] To: 'CF-List (E-mail) [EMAIL PROTECTED] Sent: Thursday, August 23, 2001 4:36 PM Subject: [KCFusion] isDefined(dynamic) While running a custom tag that takes scope and variable attributes I am trying to concatenate the two together and then see if a scope.variable has been created. If I try the following code I get an error. cfset temp = attributes.scope '.' attributes.variable I get an error message here about can't convert session.myvar to a simple value. cfif isDefined(#temp#) /cfif If I try and use: cfif isDefined(#Evaluate(attributes.scope '.' attributes.variable)#) I get an error message about session.myvar does not exist. /cfif Any idea's __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFtelnet
I think cfx_tcpclient might be just the thing for you: http://www.intrafoundation.com/freeware.html Daryl - Original Message - From: cfhelp To: [EMAIL PROTECTED] Sent: Thursday, August 23, 2001 6:57 PM Subject: [KCFusion] CFtelnet I need to launch a telnet session and pass it commands through a webserver. Like CFFTP I do not want the user to see the telnet window so it must run on the server. It will telnet into a Solaris server and send Printing commands. I can stor all the commands in a SQL database and have the user select what needs to run. Then I want them to click a button and be done with it. The server takes care of the connect, Login, Pass, and commands. Any help please Rick
Re: [KCFusion] Prepared statements
I believe the checkbox is use stored procedure for prepared statement or something along that line. If you check it, then the SQL Server ODBC driver will use sp_executeSQL whenever the use of CFQUERYPARAM would normally create a regular preparedStatement. From SQL2000 books online: --- sp_executesql Executes a Transact-SQL statement or batch that can be reused many times, or that has been built dynamically. The Transact-SQL statement or batch can contain embedded parameters. - Original Message - From: Bryan LaPlante [EMAIL PROTECTED] To: KCFusion [EMAIL PROTECTED] Sent: Thursday, August 30, 2001 9:21 PM Subject: [KCFusion] Prepared statements I have two questions. When you set up a dsn in the CF there is a check box that says Create stored procedures for prepared statements. Do I need to check that box to get cfquery's to work that include cfqueryparam's? Second question, if it does create a stored proc for my query would I just continue to run the query with the cfqueryparam or would I need to run it as a stored procedure? Bryan LaPlante President Network Web Applications Inc. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] ColdFusion Failover
CF Enterprise includes ClusterCats, which can be used with any version of NT/2000 (not just NTAS) for load-balancing and failover. Beware: session variables don't load-balance well, since they aren't actually shared across servers. ClusterCats uses some DNS trickery to stick a given session to one server or the other, for the life of the session. In sticky sessions mode, load balancing is only performed on the first hit, so it's not as smooth as it could be if session variables weren't used. HTH Daryl - Original Message - From: Mark Kirkbride [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 04, 2001 9:15 AM Subject: [KCFusion] ColdFusion Failover Hello all, If I need to have a failover situation, do I need two servers running Windows 2000 Advanced and ColdFusion Enterprise? Or can this be done with another combination? Mark Kirkbride Information System Specialist FBD Consulting, Inc. (913) 319-8836 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] OLE DB
According to the Administration (5.0) Manual, the value for Jet (Access) is: Microsoft.Jet.OLEDB.4.0 I'm told that OLEDB is much faster/stabler for Access databases than ODBC is, though SQL Server users will see little or no improvement. (Beware of date issues though; ODBC-formatted dates don't always work well through OLEDB datasources-- or native drivers, for that matter.) Daryl - Original Message - From: Bakken, Kory [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, September 05, 2001 10:11 AM Subject: [KCFusion] OLE DB Can anybody help me with setting up an OLE DB Datasource for an Access Database. The setup in the Coldfusion Administrator is requiring a Provider. I do not know what to put there, so the connection is failing. I read that the OLE DB connection improves performance over ODBC, is this accurate? Kory Bakken IT Enterprise Release Management - Tools Team work 816.559.4801 pcs 816.305.5890 fax816.559.4862 __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Progress Database
What platform? If Linux/Solaris, A required environment variable (or two) may be missing or incorrect. Usually, updating the start script with the environment that the command-line client uses, does the trick. Daryl - Original Message - From: Rick Eidson To: '[EMAIL PROTECTED]' Sent: Wednesday, September 26, 2001 9:28 AM Subject: RE: [KCFusion] Progress Database Specified driver could not load due to system error 126 (MERANT 3.70 ColdFusion OEM 32-BIT PROGRESS) Trying to create the ODBC connection I get this error. Rick -Original Message-From: Greenhagen, Robin [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 25, 2001 9:59 PMTo: '[EMAIL PROTECTED]'Subject: RE: [KCFusion] Progress Database Merant, Progress, and Openlink all have drivers for progress databases. We looked at this in the past, but didn't end up needing it. Cheers! -- Robin Greenhagen http://www.greensoft.com/ President GreenSoft Solutions, Inc. -- -Original Message-From: cfhelp [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 25, 2001 9:54 PMTo: KCFusionSubject: [KCFusion] Progress Database Anyone connected to Progress database using Cold Fusion 5? If so any problems? Rick
Re: [KCFusion] off topic - IMail javascript box
Not sure how they turned that off, but what I would do next is simply watch the page load over the wire. Ethereal is an open-source packet sniffer that works quite nicely for this purpose, and I recently added a section to Daryl's TCP/IP Primer on its use: http://www.ipprimer.com/packets.cfm --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: KCFusion (E-mail) [EMAIL PROTECTED] Sent: Thursday, November 15, 2001 11:17 AM Subject: [KCFusion] off topic - IMail javascript box Though off topic, I'm posting because several members here have worked with IMail server product. The recent version has a feature where, if you are reading a message and click Header, it will generate a box containing the full email header info. What caught my eye is that although this box sits on top of the existing page content (edges of box bisect characters in text below, so it's not inserting an HTML table), it is still within the browser window, and will scroll with the page contents. I tried to look at their JavaScript but View source was grayed out. How did they do that? Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Looping Over A Large Cached Query To Test Against Data
Caching 13,000 rows? Wow... are you sure that's more efficient than a query with an index on my_field_to_watch? (or whatever it's really called) Anyway... most string inequalities of this sort are due to spaces being at the end of the data from the query (e.g., if it's a CHAR, not VARCHAR, field), so try cfif trim(variable_to_watch) eq trim(my_query.my_field_to_watch) for extra credit, do the trim on variable_to_watch before entering the loop. One other thing: if the variable names in the /actual/ code match, then you must specify variable_to_watch as variables.variable_to_watch, or you will be comparing the value in the current row to the value in the current row, and will always wind up with the last value from the table. So: cfset variable_to_watch = trim(variable_to_watch) cfloop query=my_query cfoutput#my_query.my_field#BR /cfoutput cfif variables.variable_to_watch eq my_query.my_field_to_watch cfset another_variable = my_query.field_from_query cfbreak !--- leave the loop as soon as we find the value --- /cfif /cfloop In the future, if you can, please use real snippets. If someone learns something from your snippet, that's the price you pay to learn the answer from the group ;-) --Daryl - Original Message - From: Doug Teetzen [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 09, 2001 5:45 PM Subject: [KCFusion] Looping Over A Large Cached Query To Test Against Data Here is my issue, I am caching a 13000 row query to test data against as part of a cfloop My result never seems to get a hit and set the new variable, even though I have validated the data. I know I am missing something, seems so simple?!?!? (BrainLock=TRUE) Sample: cfquery name=my_query datasource=my_dsn dbtype=ODBC cachedwithin=#CreateTimeSpan(0, 3, 0, 0)# Select * From my_file /cfquery cfoutput cfloop query=my_query#my_query.my_field#BR THIS IS JUST MY OUTPUT TO WATCH THE LOOP.. cfif variable_to_watch eq #my_query.my_field_to_watch# cfset another_variable = #my_query.field_from_query# /cfif /cfloop /cfoutput cfoutput#another_variable# /cfoutput Any ideas on what I might be missing would be appreciated!! Thanks, Doug Teetzen Bushnell Performance Optics __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CustomTags
The parent's variable scope is caller. You can also use the 'request. scope, which is global to all templates in the page request, but is not shared across requests, so does not require CFLOCKing the way Application and Session vars do. --Daryl - Original Message - From: Nathan Haley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 10, 2001 1:59 PM Subject: [KCFusion] CustomTags Hello all Is there a way to make variables, like from a proc result, available to custom tags without defining them as session or Attributes of the tag? IE. have a custom tag reference a variable from the page that called it? __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] form variable lists
#Form.FieldNames# - Original Message - From: Laire Josh [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 16, 2001 10:50 AM Subject: [KCFusion] form variable lists Is there any way to retreive a list of variable names passed through a form? __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] string functions
You could start here: http://livedocs.allaire.com/cf50docs/CFML_Reference/Functions2.jsp#1099887 Knowing what all of the string functions are (and what they do) is the first step. I recommend reading the language reference cover-to-cover, twice. The point is not memorization, but the ability to later say, Wasn't there a built-in function that does that..? After that, the tricks are mostly around: - mastering regular expressions - using creative delimiters with list functions (such as cr/lf for looping around a file, line by line) - recognizing creative uses for list functions Are you looking for something in particular? If you'd like to see several string functions in action, check out the attached template, which will find opportunities for the use of CFQUERYPARAM and modify the code to use it (then save the altered template to a new file.) --Daryl - Original Message - From: Mark Kirkbride [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 04, 2001 3:47 PM Subject: [KCFusion] string functions Anyone know of a web page with some info on String Functions? Thanks, Mark Kirkbride Information System Specialist FBD Consulting, Inc. (913) 319-8836 [EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] _parameterizeQueries.cfm Description: Binary data
Re: [KCFusion] off topic - classpath, xml and java
Keith, I don't think you need to put the files in the classpath, just the directory. Don't forget to include \jre\lib in the classpath. The .exe's have no business there. I actually wrote a DevCenter article that may be helpful (though it's a but basic). It should be in the next issue, but you can preview it here: http://www.windsorcs.com/leveragingJava.htm --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 10, 2001 12:24 PM Subject: RE: [KCFusion] off topic - classpath, xml and java I took the jar files they provided and installed them in one recommended location, and added their names to the classpath. (I'm including classpath with line returns for readability.) Some of the online docs I found attribute my error message to an inability to find the java compiler. I don't know if that's the case, and if either of the last two items (which installed with ColdFusion) is the compiler. %SystemRoot%\Java\Classes\xalan.jar; %SystemRoot%\Java\Classes\xerces.jar; %SystemRoot%\Java\Classes\xalansamples.jar; %SystemRoot%\Java\Classes\bsf.jar; %SystemRoot%\Java\Classes\bsfengines.jar; %SystemRoot%\Java\Classes\java_cup.jar; %SystemRoot%\Java\Classes\JLex.jar; %SystemRoot%\Java\Classes\runtime.jar; %SystemRoot%\Java\Classes\BCEL.jar; %SystemRoot%\Java\Classes\xalanservlet.jar; %SystemRoot%\Java\Classes\xml-apis.jar; %SystemRoot%\Java\Classes\xsltc.jar; C:\CFUSION\jre\bin\java.exe; C:\CFUSION\jre\bin\javaw.exe Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] Voice: (816) 801-5200 Fax: (816) 880-4776 (800) 525-1101 CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Monday, December 10, 2001 12:11 PM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] off topic - classpath, xml and java Keith, Giving some snippet would help, but sounds like you need to specifically include the jar file (that has the class that you are invoking). For example, if the jar file is Servlet.jar then make sure that you not only specify the path to it but includes its name in the classpath variable (so locate the jar file that contains the class and associated methods and include the jar file name as part of class path). Hope this helps (depending on what exactly you are doing the problem could be also be related to location of jar file path relative to the root, if you are still having problem let me know and I will try to help you out). Girish Keith Purtell kpurtell@vantagTo: KCFusion (E-mail) [EMAIL PROTECTED] emed.com cc: Sent by:Subject: [KCFusion] off topic - classpath, xml and java CF-List-owner@kc fusion.org 12/10/01 11:57 AM Please respond to CF-List I'm trying to set up some xml tests on an NT4 server, using samples and supporting files from xml.apache.org. Even after adding all .jar files to the classpath, as and several other items like the java executable, I still get The name specified is not recognized as an internal or external command, operable program or batch file. Some online docs attribute this error to the system not finding the java compiler. So I added everything in classpath to the path system variable but got the same error message. Have any of you gone down this road before? Looks like a simple mistake. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by
Re: [KCFusion] off topic - classpath, xml and java
Oh! Hey, the article is posted. I don't remember seeing DevCenter News this month...hmmm... http://www.allaire.com/handlers/index.cfm?ID=22250 Actually, two of 'em are mine this month: http://www.allaire.com/handlers/index.cfm?ID=22249 --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 10, 2001 2:17 PM Subject: RE: [KCFusion] off topic - classpath, xml and java Two newbie questions: If just a directory in classpath does it need a trailing backslash? How do I identify a Java library? Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] Voice: (816) 801-5200 Fax: (816) 880-4776 (800) 525-1101 CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Monday, December 10, 2001 2:13 PM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] off topic - classpath, xml and java Keith, What you really need are Java libraries (and not the kit as such but installing one will get access to it - I am suggesting the JDK path for verification and locating source of your problem). I believe \jre\lib path is already in your classpath definition but appears the library files (that are being called by your jar files) are missing. You can save yourselves lot of time of installing JDK etc., if you can make sure the basic java library files are in place and then only install those library files (as your classpath already points correctly to them if I understand correctly). Daryl is right that typically all you need is just the path for the library files in your classpath environmental variable (however, in my experience depending on your setup and what you are doing you may need to explicitely include the jar file in your path). Girish Daryl Banttari [EMAIL PROTECTED]To: [EMAIL PROTECTED] t cc: Sent by:Subject: Re: [KCFusion] off topic - classpath, xml and java CF-List-owner@kc fusion.org 12/10/01 01:40 PM Please respond to CF-List Keith, I don't think you need to put the files in the classpath, just the directory. Don't forget to include \jre\lib in the classpath. The .exe's have no business there. I actually wrote a DevCenter article that may be helpful (though it's a but basic). It should be in the next issue, but you can preview it here: http://www.windsorcs.com/leveragingJava.htm --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 10, 2001 12:24 PM Subject: RE: [KCFusion] off topic - classpath, xml and java I took the jar files they provided and installed them in one recommended location, and added their names to the classpath. (I'm including classpath with line returns for readability.) Some of the online docs I found attribute my error message to an inability to find the java compiler. I don't know if that's the case, and if either of the last two items (which installed with ColdFusion) is the compiler. %SystemRoot%\Java\Classes\xalan.jar; %SystemRoot%\Java\Classes\xerces.jar; %SystemRoot%\Java\Classes\xalansamples.jar; %SystemRoot%\Java\Classes\bsf.jar; %SystemRoot%\Java\Classes\bsfengines.jar; %SystemRoot%\Java\Classes\java_cup.jar; %SystemRoot%\Java\Classes\JLex.jar; %SystemRoot%\Java\Classes\runtime.jar; %SystemRoot%\Java\Classes\BCEL.jar; %SystemRoot%\Java\Classes\xalanservlet.jar; %SystemRoot%\Java\Classes\xml-apis.jar; %SystemRoot%\Java\Classes\xsltc.jar; C:\CFUSION\jre\bin\java.exe; C:\CFUSION\jre\bin\javaw.exe Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] Voice: (816) 801-5200 Fax: (816) 880-4776 (800) 525-1101 CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Monday, December 10, 2001 12:11 PM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] off topic - classpath, xml and java Keith, Giving some snippet would
Re: [KCFusion] CFTRY CFCATCH
Uh..well..actually, the Exception=.. is not required. It has the same options as the type attribute of cfcatch, with the same default: Any. I'll ping the documentation guys about that. --Daryl - Original Message - From: Ramphal, Ron [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 21, 2001 6:23 AM Subject: RE: [KCFusion] CFTRY CFCATCH Hello Daryl, I was not aware of the Type=Exception clause. This raises 2 questions, 1. CFERROR is normally used in the Application.cfm (if I understand correctly) and CFTRY/CFCATCH in individual templates, which one should get priority when errors occur? 2. In looking at the docs for CFERROR Type=Exception it indicates that the clause EXCEPTION=exception_type is required, I am not sure what the allowed values for exception_type are? Thanks, Ron. -Original Message- From: Daryl Banttari Sent: Thu 12/20/2001 7:21 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [KCFusion] CFTRY CFCATCH Hmm... the page should not compile in the first place. If you're wrapping entire pages like that, I'd suggest you look into cferror type=exception instead. You can use any CF tags you like with type=exception (as opposed to the older type, request, which drastically limited the available tags.) --Daryl - Original Message - From: Ramphal, Ron [EMAIL PROTECTED] To: KCFusion-List (E-mail) [EMAIL PROTECTED] Sent: Thursday, December 20, 2001 6:40 PM Subject: [KCFusion] CFTRY CFCATCH Hello folks, If I wrap a whole template between these tags, eg. CFTRY template code CFCATCH Type = Any show error message and whatever else /CFCATCH /CFTRY and in my template, I accidentally deleted the character from a closing CFIF eg. CFIF whatever do this CFELSE do that /CFIF why would the code in the CATCH block not execute? This is a syntax error Thanks, Ron. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFHTTP hopeless with proxy?
I once got a Java http client working from within CF. Here's what I did to get it working: 1. Download the HTTPClient class files (.zip) from http://www.innovation.ch/java/HTTPClient/ 2. Extract to C:\jdk1.3\jre\lib\HTTPClient 3. Add C:\jdk1.3\jre\lib\ as Class Path in CF Admin 4. Run following CF code: cfobject action = Create type = Java class = HTTPClient.HTTPConnection name = httpConn cfscript httpConn.init(www.windsorcs.com); response=httpConn.Get(/); content=response.getText(); /cfscript cfoutput #content# /cfoutput Voila! (I wonder why the method is called Get(), instead of get()...) - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: KCFusion (E-mail) [EMAIL PROTECTED] Sent: Friday, January 11, 2002 9:31 AM Subject: [KCFusion] CFHTTP hopeless with proxy? Before I give up on CFHTTP, I'll offer this description of my problem and hope for a solution. We run CF5 on NT4 SP6a. It's a private server hosting our intranet. I built a simple template that would use CFHTTP to go out through our proxy server and test one of our public sites to make sure it was up and running. If not, it notifies me. Then I scheduled the template to run once an hour in the CF Admin. The template works fine if I use my browser to access it. However, called my the Scheduler, this template always fails to get past the proxy server, and instead returns 407 Proxy Authentication Required. I have established a user account on the proxy server and made sure to use the same username and password as I put in the tag. I have also checked the username/password used inside the Scheduler, and the username/password used by CF. The process only fails when the Scheduler tries to call the template, and CFHTTP tries to get past the proxy. There are a number of related threads on this in the Allaire forums. But the only solutions people have found were to either write their own CFX, or purchase the $150 Mabry HTTP/X and a related $50 custom tag. I can't do either right now. I approached someone in the forum who had written their own solution, but they didn't want to send me a copy. Just as frustrating, I can't find any record of these failures in the proxy log! This particular template is not mission critical, but if I can't make CFHTTP get past the proxy, then I can't use it elsewhere. Comments? CFHTTP URL=http://www.domain.com/index.html; METHOD=GET RESOLVEURL=No PROXYSERVER=ip.address.here PROXYPORT=8080 USERNAME=username PASSWORD=password THROWONERROR=No TIMEOUT=120 Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFHTTP hopeless with proxy?
Drop HTTPClient from the end of the lib path. When you specify class=HTTPClient.HTTPClient the part before the period becomes a directory. --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 14, 2002 9:42 AM Subject: RE: [KCFusion] CFHTTP hopeless with proxy? I unzipped as required, then went into CF Admin JVM and Java Settings and used the Browse Server button next to Class Path to arrive at C:\jdk1.3.1_01\jre\lib\HTTPClient, then I clicked the Submit Changes button at the bottom of the page. I have also tried stopping and restarting the CF service. Perhaps I need to add this as a system variable not just in CF? Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daryl Banttari Sent: Monday, January 14, 2002 9:30 AM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] CFHTTP hopeless with proxy? java.lang.ClassNotFoundException means that CF couldn't find the class files... One of two things have gone wrong: 1. You didn't add the jre/lib path to the CFAdmin (make sure it's valid!) 2. You didn't extract the .zip file into jre/lib/HTTPClient Double-check these things. --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 14, 2002 9:14 AM Subject: RE: [KCFusion] CFHTTP hopeless with proxy? I installed this item as described and ran the code. I'm enclosing the error message because I'm not familiar with Java ... Diagnostics: Unhandled System exception ! java.lang.ClassNotFoundException: ClassFormatError for class HTTPClient.HTTPConnection. Java exception occurred in call to method. The error occurred while processing an element with a general identifier of (CFOBJECT), occupying document position (90:1) to (95:2). Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daryl Banttari Sent: Friday, January 11, 2002 10:28 AM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] CFHTTP hopeless with proxy? I once got a Java http client working from within CF. Here's what I did to get it working: 1. Download the HTTPClient class files (.zip) from http://www.innovation.ch/java/HTTPClient/ 2. Extract to C:\jdk1.3\jre\lib\HTTPClient 3. Add C:\jdk1.3\jre\lib\ as Class Path in CF Admin 4. Run following CF code: cfobject action = Create type = Java class = HTTPClient.HTTPConnection name = httpConn cfscript httpConn.init(www.windsorcs.com); response=httpConn.Get(/); content=response.getText(); /cfscript cfoutput #content# /cfoutput Voila! (I wonder why the method is called Get(), instead of get()...) - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: KCFusion (E-mail) [EMAIL PROTECTED] Sent: Friday, January 11, 2002 9:31 AM Subject: [KCFusion] CFHTTP hopeless with proxy? Before I give up on CFHTTP, I'll offer this description of my problem and hope for a solution. We run CF5 on NT4 SP6a. It's a private server hosting our intranet. I built a simple template that would use CFHTTP to go out through our proxy server and test one of our public sites to make sure it was up and running. If not, it notifies me. Then I scheduled the template to run once an hour in the CF Admin. The template works fine if I use my browser to access it. However, called my the Scheduler, this template always fails to get past the proxy server, and instead returns 407 Proxy Authentication Required. I have established a user account on the proxy server and made sure to use the same username and password as I put in the tag. I have also checked the username/password used inside the Scheduler, and the username/password used by CF. The process only fails when the Scheduler tries to call the template, and CFHTTP tries to get past the proxy. There are a number of related threads on this in the Allaire forums. But the only solutions people have found were to either write their own CFX, or purchase the $150 Mabry HTTP/X and a related $50 custom tag. I can't do either
Re: [KCFusion] CFHTTP hopeless with proxy?
The full docs are at http://www.innovation.ch/java/HTTPClient/api/HTTPClient/HTTPConnection.html Look into the setProxyServer() and addBasicAuthorization methods... --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 14, 2002 10:12 AM Subject: RE: [KCFusion] CFHTTP hopeless with proxy? Well that didn't do it, so I went ahead and added the class path at the system level. Now the CFOBJECT runs without error. But instead of returning the external Web page that is called in the contents, I get our generic firewall message for people whose browsers are not properly configured. It's not getting past our proxy. Is there some way to pass a username and password in CFSCRIPT? Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daryl Banttari Sent: Monday, January 14, 2002 9:48 AM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] CFHTTP hopeless with proxy? Drop HTTPClient from the end of the lib path. When you specify class=HTTPClient.HTTPClient the part before the period becomes a directory. --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 14, 2002 9:42 AM Subject: RE: [KCFusion] CFHTTP hopeless with proxy? I unzipped as required, then went into CF Admin JVM and Java Settings and used the Browse Server button next to Class Path to arrive at C:\jdk1.3.1_01\jre\lib\HTTPClient, then I clicked the Submit Changes button at the bottom of the page. I have also tried stopping and restarting the CF service. Perhaps I need to add this as a system variable not just in CF? Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daryl Banttari Sent: Monday, January 14, 2002 9:30 AM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] CFHTTP hopeless with proxy? java.lang.ClassNotFoundException means that CF couldn't find the class files... One of two things have gone wrong: 1. You didn't add the jre/lib path to the CFAdmin (make sure it's valid!) 2. You didn't extract the .zip file into jre/lib/HTTPClient Double-check these things. --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 14, 2002 9:14 AM Subject: RE: [KCFusion] CFHTTP hopeless with proxy? I installed this item as described and ran the code. I'm enclosing the error message because I'm not familiar with Java ... Diagnostics: Unhandled System exception ! java.lang.ClassNotFoundException: ClassFormatError for class HTTPClient.HTTPConnection. Java exception occurred in call to method. The error occurred while processing an element with a general identifier of (CFOBJECT), occupying document position (90:1) to (95:2). Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daryl Banttari Sent: Friday, January 11, 2002 10:28 AM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] CFHTTP hopeless with proxy? I once got a Java http client working from within CF. Here's what I did to get it working: 1. Download the HTTPClient class files (.zip) from http://www.innovation.ch/java/HTTPClient/ 2. Extract to C:\jdk1.3\jre\lib\HTTPClient 3. Add C:\jdk1.3\jre\lib\ as Class Path in CF Admin 4. Run following CF code: cfobject action = Create type = Java class = HTTPClient.HTTPConnection name = httpConn cfscript httpConn.init(www.windsorcs.com); response=httpConn.Get(/); content=response.getText(); /cfscript cfoutput #content# /cfoutput
Re: [KCFusion] MS SQL and query results
Assuming the username is unique, simply drop the and Pword = '#Trim(form.Pword)#' and check the password match at the application layer. --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: KCFusion (E-mail) [EMAIL PROTECTED] Sent: Monday, January 28, 2002 11:02 AM Subject: [KCFusion] MS SQL and query results If I query a MS SQL7 db asking for a record that matches two values, and the query can't make a match, is there a way to tell which of the values didn't match? In the query below is there a way to know that the username matched but the password did not? The only way I can think of to do this is two different queries. I'm trying to provide more meaningful error messages when user logins fail. CFQUERY name=QueryTest DATASOURCE=SQL7 SELECT Username, Pword FROM TableName WHERE Username = '#Trim(form.Username)#' AND Pword = '#Trim(form.Pword)#' /CFQUERY Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Text box value
Use the htmlEditFormat() function around the value. Value=#htmlEditFormat( someValue )# This will replace the double quotes with quot;, as needed. --Daryl - Original Message - From: Laire Josh [EMAIL PROTECTED] To: KCFusion (E-mail) [EMAIL PROTECTED] Sent: Monday, January 28, 2002 1:47 PM Subject: [KCFusion] Text box value Is there a way to show around a value inside a text box? __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] How to preserve lt; and gt; strings... (was: Text box value)
Not to be too picky about things, but (imho) there is no such thing as a 'legitimate' angle bracket in an input's Value attribute. According to the HTML spec, angle brackets, quotes, and ampersands in html tag attibutes 'should be' replaced with their entity references (granted, the angle brackets are replaced mainly to support old/broken implementations): http://www.w3.org/MarkUp/html-spec/html-spec_foot.html#FOOT7 Note that failure to escape ampersands in HREF attributes can sometimes cause unpredictable things to occur in some versions of Netscape-- for example, a href=somepage.cfm?voltage=100amperage=5 will take the amp out of context and change the URL, when clicked, to somepage.cfm?voltage=100erage=5. Which is part of the reason I prefix all form fields and url parameters with ff. Of course, you could make it a point to always use amp; when seperating parameters in HREF attributes, but I personally don't have that kind of patience. (More suggestions on entity references: http://www.w3.org/TR/REC-html40/charset.html#h-5.3.2 --not singled out in that doc is apos;, which escapes the single quote character. For an exhaustive (and exhausting!) list of HTML4 entity references, see: http://www.w3.org/TR/REC-html40/sgml/entities.html ) Also, htmlEditFormat in CF5 no longer eats carriage returns, though it's still documented as doing so. (Shhh!) I guess the rule of thumb (according to Daryl) is to always use htmlEditFormat() when redisplaying user-entered values in HTML form input fields (when using CF5.) --Daryl - Original Message - From: Ron Hornbaker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 28, 2002 5:00 PM Subject: RE: [KCFusion] How to preserve lt; and gt; strings... (was: Text box value) Daryl, Well slap my a** and call me Sally. I'm actually doing this with ASP at the moment, and since it doesn't (to my knowledge) have a fn comparable to htmlEditFormat, I didn't actually try it with CF first. My apologies to the group. :) BTW, the ASP fix is like so: Replace(objRS(body),,amp;) when writing the KB article body to the textarea. Even with CF, the htmlEditFormat() fn is a little too several for my purpose, since it also escapes legitimate and marks, and strips carriage returns. -Ron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daryl Banttari Sent: Monday, January 28, 2002 4:50 PM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] How to preserve lt; and gt; strings... (was: Text box value) If you use htmlEditFormat, then the string gt; will be sent to the browser as amp;gt; So, it should work just fine. Doesn't it? If not, please post the snippet in question. Thanks! --Daryl - Original Message - From: Ron Hornbaker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 28, 2002 3:26 PM Subject: [KCFusion] How to preserve lt; and gt; strings... (was: Text box value) Use the htmlEditFormat() function around the value. Value=#htmlEditFormat( someValue )# This will replace the double quotes with quot;, as needed. Speaking of htmlEditFormat, here's a question for you. Say you've got a textarea where users can enter a combination of text and html. A knowledge base system, for the sake of argument. The user decides to enter some displayed code, like this: This is how to bbold/b a word: lt;bgt;boldlt;/bgt; The user saves the record, and so far so good. Now comes time to edit the article, and here's where it gets ugly... MSIE will display the lt; and gt; strings as actual brackets in the text area, so the article now looks like this in the textarea input box: This is how to bbold/b a word: bbold/b and when the user re-saves the article, they of course get switched back to real brackets. Any workarounds would be appreciated... -Ron __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Secure file download
Why would CFCONTENT be slow? How would CFFILE replace CFCONTENT? You may want to take a moment and re-examine your assumptions... --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: KCFusion (E-mail) [EMAIL PROTECTED] Sent: Monday, February 04, 2002 3:41 PM Subject: [KCFusion] Secure file download I'm trying to choose between CFFILE and CFCONTENT for secure file download. Some have said CFCONTENT is too slow. That's a possible issue for me, since some of my files are up to 10MB. But I'm on a low-traffic intranet with a maximum of 400 visitors. People in various departments can upload files and make them available to other employees via hyperlinks. So a person can go to the main Marketing page, and click on a link that downloads a Word file stored /marketing/docs/. Unfortunately, anyone with a full address can defeat my intranet security that only kicks in for CF templates (via application.cfm and cookies). I'd like to move all these downloadable files to the D drive on that same server, then let CF make them available via the same hyperlinks, except only for logged-on people. The pros and cons of this were mentioned in email traffic from another CF list, which I have attached below. Any comments here? We're running CF5 on NT4 SP6a with IIS. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. = -Original Message- From: Matt Liotta [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 13, 2000 12:23 PM Generally this is the best way to do it with one exception. Never use CFContent with large files. This will destroy your response time. Web servers were designed to deal with serving files and should be used in place of CF whenever possible. The only problem of course is security. If you make the directory web accessible then you have no security. However, you can't really secure the directory well with a web server since it has no concept of your application security. Below I describe how we solved this issue. Whenever we need to serve a file we create a symbolic link to the file in question. This symbolic link is placed in a web accessible directory and its file name is a UUID. This allows us to serve a file that would otherwise not be web accessible, by simply linking to its symbolic link. The likelihood of someone guessing a UUID is very low because it is based on a 128 bit integer. Further we have a process that deletes symbolic links after they have been around for more then five minutes. Thus even if the UUID was guessed it would only be accessible for five minutes. Hope this helps. -Matt -Original Message- From: Jon Cole [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 13, 2000 7:15 AM I agree with Nathan this would be the best approach. The problem is that you can't control what the file name would be. You can fix this with CFHEADER Like so: CFHEADER NAME=Content-Disposition VALUE=inline; filename=#ExportFile# Thank You, Jon Cole ACP DevTech Inc. [EMAIL PROTECTED] 206.956.0888 Learn more about DevTech @ www.Dev-Tech.com -Original Message- From: Nathan Dintenfass [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 12, 2000 6:34 PM One way I have dealt with something like this is to keep the files outside the web root, so they are not accessible over the web at all. Then, use CFCONTENT to deliver the files -- that way your CF security you already have running can secure access to the files (assuming the server itself is secure, of course). You may want to store a separate DB of file information such as MIME type, etc., but it's not necessary. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
[KCFusion] CFHTTP
Is anyone on the list using CFHTTP extensively? I'm going to be doing some QA work on that tag for Neo, and I want to hear about anyone's negative experiences with CFHTTP. Please contact me off-list, so we don't clutter everyone's inbox. --Daryl __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Tuesday's meeting
Wow... the silence is deafening. Anyone curious about Neo? --Daryl - Original Message - From: Ryan Hartwich [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, February 11, 2002 4:51 PM Subject: [KCFusion] Tuesday's meeting Is anyone planning on coming to tomorrow (Tuesday's) CF meeting at UMKC? Ryan __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Tuesday's meeting
Well, the beta does imply an NDA, but it is in (semi-)public beta now. --Daryl - Original Message - From: LaPlante, Bryan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 12, 2002 1:33 PM Subject: RE: [KCFusion] Tuesday's meeting I want a copy, I thought that neo was still under the NDA and could not be discussed yet. Bryan LaPlante -Original Message- From: Matthew W Jones [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 1:24 PM To: '[EMAIL PROTECTED]' Subject: RE: [KCFusion] Tuesday's meeting I want a copy -Original Message- From: Daryl Banttari [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 1:21 PM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] Tuesday's meeting OK, I'll bring it along on my laptop. Can someone find a projector? I can throw Beta 1 on a CDR, so if anyone wants a copy, let me know beforehand! --Daryl - Original Message - From: Bakken, Kory [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 12, 2002 1:17 PM Subject: RE: [KCFusion] Tuesday's meeting If you're showing Neo, I'll be there! -Original Message- From: Ryan Hartwich [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 1:13 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Tuesday's meeting Yes, very! Don't suppose you can come and show us a demo? __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Tuesday's meeting
Gah! Uh I checked upstream on this, and the official word is that they don't want me showing off Neo...yet. Beta 1 is on a restricted release, but I do have a couple of nifty Macromedia-logoed cd carrying cases. So... any other topics? (And I will have Neo on my laptop, but y'all have to promise not to look, if I start playing with it.) --Daryl - Original Message - From: Daryl Banttari [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 12, 2002 1:50 PM Subject: Re: [KCFusion] Tuesday's meeting Well, the beta does imply an NDA, but it is in (semi-)public beta now. --Daryl - Original Message - From: LaPlante, Bryan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 12, 2002 1:33 PM Subject: RE: [KCFusion] Tuesday's meeting I want a copy, I thought that neo was still under the NDA and could not be discussed yet. Bryan LaPlante -Original Message- From: Matthew W Jones [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 1:24 PM To: '[EMAIL PROTECTED]' Subject: RE: [KCFusion] Tuesday's meeting I want a copy -Original Message- From: Daryl Banttari [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 1:21 PM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] Tuesday's meeting OK, I'll bring it along on my laptop. Can someone find a projector? I can throw Beta 1 on a CDR, so if anyone wants a copy, let me know beforehand! --Daryl - Original Message - From: Bakken, Kory [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 12, 2002 1:17 PM Subject: RE: [KCFusion] Tuesday's meeting If you're showing Neo, I'll be there! -Original Message- From: Ryan Hartwich [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 1:13 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Tuesday's meeting Yes, very! Don't suppose you can come and show us a demo? __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Flatlined Services
The two usual suspects are database drivers and CFX tags. If the db driver stops responding to requests normally, then all of the threads will hang. Similarly, if a CFX tag hangs, and enough requests enter the CFX so that all of the maximum simultaneous requests are hung, then all new requests will just queue up. Hope this helps you get started... --Daryl - Original Message - From: Bakken, Kory [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 27, 2002 4:05 PM Subject: [KCFusion] Flatlined Services Does anyone know what would cause the web services to lock up, forcing ALL pending requests to be queued. I am running CF 5.0 on a NT 4.0 box. If I restart CF Services, all requests are processed as if nothing happened. However, in the meantime, users receives an error stating that their request was not returned within the time limit set within CF Server. BTW this happens sometimes regardless of load on the server. Kory Bakken IT Enterprise Release Management Tools / Process desk: 816.559.4801 pcs:816.305.5890 __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] innerText Help!
Using jsEncodedFormat() might help. Generally, just put a backslash before
the special character:
foo = 'You want the truth? You can\'t handle the truth!'
--daryl
- Original Message -
From: LaPlante, Bryan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, March 12, 2002 3:08 PM
Subject: RE: [KCFusion] innerText Help!
long story short innerText refers to the text part of a href=blathis
is
innerText/a
innerHTML refers to the whole anchor tag.
Expermint
--
div id=foo
a href=blathis is innertext/a
/div
button onClick=alert(foo.innerText)InnerText of div/button
button onClick=alert(foo.innerHTML)InnerHTML of div/button
---
run the code above and check the spelling of innerHTML, I am not certain
that it is all cap's.
Bryan
-Original Message-
From: Keith Purtell [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 12, 2002 2:46 PM
To: [EMAIL PROTECTED]
Subject: RE: [KCFusion] innerText Help!
What are innerText and innerHTML?
Keith Purtell, Web/Network Administrator
VantageMed Operations (Kansas City)
Email: [EMAIL PROTECTED]
CONFIDENTIALITY NOTICE: This email message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply email and destroy all copies of the original
message.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of LaPlante, Bryan
Sent: Tuesday, March 12, 2002 2:28 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [KCFusion] innerText Help!
use innerHTML instead
-Original Message-
From: Justin Hansen [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 12, 2002 1:41 PM
To: [EMAIL PROTECTED]
Subject: [KCFusion] innerText Help!
I am trying to replace a whole table in side a div tag with a new table.
The
new contents of the div contain quotes () and ticks ('). How can I escape
them with JavaScript so the 'innerText' will work?
Justin Hansen
--
Uhlig Communications
Web Developer / Programmer
--
[EMAIL PROTECTED]
913-498-0123 ext 284
--
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
__
The KCFusion.org list and website is hosted by Humankind Systems, Inc.
List Archives http://www.mail-archive.com/cf-list@kcfusion.org
Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED]
To Subscribe mailto:[EMAIL PROTECTED]
To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Replacing double quotes in a string
If you're putting the values into option value=..., then use htmlEditFormat(...) to escape the quotes into quot; --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, March 15, 2002 4:43 PM Subject: RE: [KCFusion] Replacing double quotes in a string I've tried all the suggestions. Here's the latest version; the additional Chr's catch other types of quote marks. Well, they're supposed to. After that, you can see results from the page output by CF. The problem when this goes to the browser is that this is part of a loop that populates a SELECT list, and the extraneous quote marks cause the browser to render the drop-down as much wider than normal. VALUE='#ReplaceList(#StringName#, Chr(34),Chr(39),Chr(147),Chr(148), in,in,in,in)#' VALUE='XVGA Color Flat Panel 15 Inch Monitor Upgrade from 17 SVGA' Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cox, Billy Sent: Friday, March 15, 2002 4:02 PM To: '[EMAIL PROTECTED]' Subject: RE: [KCFusion] Replacing double quotes in a string Your code is literally looking for ##148 rather than the double quote character. I would use Chr(34) to designate double quotes in your ReplaceList function. Billy Cox Intranet/Extranet Development Sprint PCS (816) 559-5672 (voice) (816) 559-5810 (fax) -Original Message- From: Keith Purtell [mailto:[EMAIL PROTECTED]] Sent: Friday, March 15, 2002 3:40 PM To: KCFusion (E-mail) Subject: [KCFusion] Replacing double quotes in a string I'm trying to catch double quote characters in a text string and replace them with the word inch. No error messages, but my code lets double quotes get past. I can't see what's wrong. Anyone care to diagnose this? I'm using CF5. VALUE='#ReplaceList(StringName, ##148;, ##147;, ##34;, ##8220;, ##8221;, ##8222;, inch, inch, inch, inch, inch, inch)#' Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Query Problem
Misty, Try using the Microsoft ODBC driver for Oracle (seriously!). For one thing, there is a bug in the way the Oracle native client handles CLOBs (if you're using them), that the MS driver does not have. In particular, we've had to tell people with Spectra sites to not use the native drivers, since Spectra uses CLOBs extensively. HTH? --Daryl - Original Message - From: Misty Woodward [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, March 27, 2002 11:38 PM Subject: RE: [KCFusion] Query Problem Returns about 2k records. The whole database is only 430k rows. We are using Oracle native drivers. The application is currently written in server side javascript and runs so fast its like lightening. I just find it very odd to be such a difference. I checked on the macromedia boards and Im not the first to see this happen, of course no one ever seems to get an answer on the boards. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Hartwich Sent: Wednesday, March 27, 2002 11:14 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Query Problem If it's a big query and uses lots of ram, and your machine is out of ram it would have to page the info to the hard drive. But if your run time is consistent then that's not it. Are you using the correct odbc drivers? __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] OT: browser type
Probably a Java-based vulnerability scanner. If your site is linked a lot, expect /many/ of these sorts of attempts every day. Things like: (a sample of the most popular vulnerability scans from my logs) /_vti_bin/_vti_aut/author.exe /cgi-bin/formmail.pl /msoffice/cltreq.asp /_vti_bin/owssvr.dll /cgi-bin/formmail.cgi /cgi-local/formmail.pl /cgi-local/formmail.cgi /cgibin/formmail.cgi /cgibin/formmail.pl And, of course, all of the usual CodeRed and CRII scans. (Which are blocked by my firewall software and never make it into my logs.) --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 15, 2002 9:03 AM Subject: RE: [KCFusion] OT: browser type Well, the page request came from an overseas IP address, and they were trying to access a page that might contain information about administrators, so I was suspicious. Thanks for the info. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Hartwich Sent: Monday, April 15, 2002 8:55 AM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] OT: browser type Java 1.3.0 is one of the current standard versions of the java virtual machine. I believe the numbers are the same as what is installed by Netscape 6/6.2 and is or was one of the versions that Jrun and the betas of CF MX uses. You might be seeing another server trying to pull a page versus a browser, or just a funky Unix browser like Mozilla that is highly dependent on Java. Ryan __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] 100% processor time used (ntconsolejava)
(a) uninstall and reinstall CF or (b) if you're not using cfgraph, disable the ColdFusion Graphing Server. --Daryl - Original Message - From: Richard Morrison To: [EMAIL PROTECTED] Sent: Monday, April 15, 2002 11:42 PM Subject: [KCFusion] 100% processor time used (ntconsolejava) I gotta a problem, a few days ago, i moved all my files from one drive to another on the server, I just cutted and pasted them , then reconfigured IIS, now everytime I reboot the ntconsolejava file loads twice, and takes 100% of the CPU processor,did anyone have that problem before? any clue how I can fix it? Richard MorrisonCold Fusion Programmer (SDS), SchlumbergerDRILLING SERVICES P.O.Box 9261, Dubai. United Arab EmiratesDirect: 971 4 306 7127, Fax: 971 4 331 3614Mobile: 971 50 62 10 869 .=I understand that U.S. trade regulations prohibit certain transfers of U.S. technology technical data or software to U.S. embargoed states. I am aware of Schlumberger's Trade Control Policy and the OFS Export Administration procedures with respect to U.S. embargoed states and confirm that this transmission does not cause a prohibited transfer of technology technical data or software.=
Re: [KCFusion] Form fields a structure in CF5
Fieldnames is not a struct. Form is. isStruct(Form) is true. Also, stop using evaluate or structFind(), use array syntax! cfoutput cfloop collection=#form# item=i the form element #i# has the value #form[i]#! - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 3:48 PM Subject: RE: [KCFusion] Form fields a structure in CF5 That resulted in this: Loop error Invalid collection '#FIELDNAMES#' - must be a valid struct or COM object So now I'll try the CFDUMP that was suggested. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Justin Hansen Sent: Tuesday, April 23, 2002 3:40 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Form fields a structure in CF5 cfloop collection=#form# item=locField form.#locField# = #evaluate(form.#locField#)# /cfloop This will show all the form fields in the form struct. Justin Hansen -- Uhlig Communications Web Developer / Programmer -- [EMAIL PROTECTED] 913-498-0123 ext 284 -- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cox, Billy W Sent: Tuesday, April 23, 2002 3:30 PM To: '[EMAIL PROTECTED]' Subject: RE: [KCFusion] Form fields a structure in CF5 This is a bit of code from a custom tag written by Ben Forta showing the use of form fields in a list loop. I too have tried to do a collection loop on fieldnames with no success. CFLOOP INDEX=form_element LIST=#FORM.fieldnames# Billy Cox Intranet/Extranet Development Sprint PCS -Original Message- From: Keith Purtell [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 3:23 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Form fields a structure in CF5 I tried your suggestion but same problem. And my basic test still tells me ... IsStruct(FIELDNAMES) = NO The docs say it's a structure, my test says it's not. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cox, Billy W Sent: Tuesday, April 23, 2002 2:55 PM To: '[EMAIL PROTECTED]' Subject: RE: [KCFusion] Form fields a structure in CF5 Keith, I have had success with this methodology except that I use a list loop. Billy Cox Intranet/Extranet Development Sprint PCS -Original Message- From: Keith Purtell [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 2:51 PM To: KCFusion (E-mail) Subject: [KCFusion] Form fields a structure in CF5 We're running CF5 on NT. According to the docs, As of ColdFusion 5, Form, Application, Session, Server, Request, and URL variables are stored in structures. However when I try to retrieve form field information, I get error messages about not having a valid structure. I test my form (which only has three plain text input fields) with IsStruct and get False. Here's my code, which is only an adaptation of the example in the Allaire docs... CFIF IsDefined(FIELDNAMES) CFIF IsStruct(FIELDNAMES) IS True CFOUTPUT CFLOOP COLLECTION=#FIELDNAMES# ITEM=FieldValue #FieldValue# = #StructFind(FIELDNAMES, FieldValue)# BR /CFLOOP /CFOUTPUT CFELSE BError; these form field values are not a structure./BBRBR /CFIF /CFIF Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives
Re: [KCFusion] Form fields a structure in CF5
Fieldnames is not a struct. Form is. isStruct(Form) is true. Also, stop using evaluate or structFind(), use array syntax! cfoutput cfloop collection=#form# item=i the form element #i# has the value #form[i]#!br /cfloop /cfoutput --Daryl P.S. It's important to remember that unlike Studio, ctrl-Enter in Outlook is Send, not br - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 3:48 PM Subject: RE: [KCFusion] Form fields a structure in CF5 That resulted in this: Loop error Invalid collection '#FIELDNAMES#' - must be a valid struct or COM object So now I'll try the CFDUMP that was suggested. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Justin Hansen Sent: Tuesday, April 23, 2002 3:40 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Form fields a structure in CF5 cfloop collection=#form# item=locField form.#locField# = #evaluate(form.#locField#)# /cfloop This will show all the form fields in the form struct. Justin Hansen -- Uhlig Communications Web Developer / Programmer -- [EMAIL PROTECTED] 913-498-0123 ext 284 -- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cox, Billy W Sent: Tuesday, April 23, 2002 3:30 PM To: '[EMAIL PROTECTED]' Subject: RE: [KCFusion] Form fields a structure in CF5 This is a bit of code from a custom tag written by Ben Forta showing the use of form fields in a list loop. I too have tried to do a collection loop on fieldnames with no success. CFLOOP INDEX=form_element LIST=#FORM.fieldnames# Billy Cox Intranet/Extranet Development Sprint PCS -Original Message- From: Keith Purtell [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 3:23 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Form fields a structure in CF5 I tried your suggestion but same problem. And my basic test still tells me ... IsStruct(FIELDNAMES) = NO The docs say it's a structure, my test says it's not. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cox, Billy W Sent: Tuesday, April 23, 2002 2:55 PM To: '[EMAIL PROTECTED]' Subject: RE: [KCFusion] Form fields a structure in CF5 Keith, I have had success with this methodology except that I use a list loop. Billy Cox Intranet/Extranet Development Sprint PCS -Original Message- From: Keith Purtell [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 2:51 PM To: KCFusion (E-mail) Subject: [KCFusion] Form fields a structure in CF5 We're running CF5 on NT. According to the docs, As of ColdFusion 5, Form, Application, Session, Server, Request, and URL variables are stored in structures. However when I try to retrieve form field information, I get error messages about not having a valid structure. I test my form (which only has three plain text input fields) with IsStruct and get False. Here's my code, which is only an adaptation of the example in the Allaire docs... CFIF IsDefined(FIELDNAMES) CFIF IsStruct(FIELDNAMES) IS True CFOUTPUT CFLOOP COLLECTION=#FIELDNAMES# ITEM=FieldValue #FieldValue# = #StructFind(FIELDNAMES, FieldValue)# BR /CFLOOP /CFOUTPUT CFELSE BError; these form field values are not a structure./BBRBR /CFIF /CFIF Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The
[KCFusion] [OT] Spam Reduction
Hey everyone, My signal-to-noise ratio with regard to SPAM has gotten to about 20%, and I'm fed up. So I did something about it. My weekend project was building a generic SMTP proxy for mail servers, that works with the SpamCop blackhole list. I looked for a new NT mailserver that would work with these sorts of blackholes, but they were in excess of $700, which is more than I'm prepared to pay for a simple feature that I could write in my "spare time". So, I wrote a generic TCP proxy (working title: "JSpamProxy") that works like this: 1. Some remotemailserver connects to port 25, where JSpamFilter is listening. 2. JSpamFilter spawns a thread to handle the connection, then initiates a DNS lookup against bl.spamcop.net 3a. If the address is a known spammer address, the connection is dropped (with a 421 Service Not Available message) 3b. If the address appears clean, a new connection is established to the port the mail server is "really" listening on (port 26, by default.) A "Received:" header is added to the mail headers, so that the source IP is not lost (since the mail server thinks the source IP is 127.0.0.1). It's available under GPL at http://www.darylb.net/JSpamFilter/ Note: the SpamCop blackhole list is rather aggressive, and if you have a large volume of [legitimate] mail, you'll likely refuse some legitimate mail thatsimply got caught in the crossfire (because they're using a mail server that is/was used by spammers.) SpamCop also requests a donation if you use their service: see http://spamcop.net/bl.shtmland http://spamcop.net/fom-serve/cache/299.htmlbefore using this. That being said, it'd be trivial to modify the source to use a different DNS-based blackhole list, such as MAPS or SPAMHAUS. --Daryl P.S. I'm going to be out of town on Tuesday night, and can't make the meeting. :-(
Re: [KCFusion] Processor Spicked
Check for zero-length files in \cfserver\mail\spool and delete them. Is that it? --Daryl - Original Message - From: cfhelp [EMAIL PROTECTED] To: CF-List (E-mail) [EMAIL PROTECTED] Sent: Friday, June 21, 2002 9:38 PM Subject: [KCFusion] Processor Spicked Isn't there some known issues with CF4 and 4.5 eating the processor and crashing CF? Do any of them deal with email? Is there a website with a list of issues and the fix? Rick __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Processor Spicked
If the server ran out of disk space, a zero-length file would have been created. When this happens, ColdFusion will use 100% of one processor (if this server has more than two processors, then the overall CPU utilization will stick at 50%, and so forth.) This sounds more like bad code that is stuck in a loop. At the moment the ColdFusion server is restarted, the Web server should log a bunch of 500 errors for the pages that got axed. Look at the URLs for those pages to figure out what may be causing the problem. --Daryl - Original Message - From: cfhelp [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, June 21, 2002 10:25 PM Subject: RE: [KCFusion] Processor Spicked I really wouldn't know about the Zero Length I am looking for reasons it would of crashed and if there are fix's. Our Hosting Company COMMUNITECH (we have had nothing but problems with) is saying we crashed there server trying to send 18,000+ emails over the whole day. We have been doing this for 6 months but know its our fault. I can send them out on my server with no problems and my server is an 800Mhz AMD with 512RAM running CF5, SQL2k, on Win2k. So unless they have a realy bad server or pour technicians I don't see how the emails would have crashed it. How would a Zero Length file get in the Spool? Rick -Original Message- From: Daryl Banttari [mailto:[EMAIL PROTECTED]] Sent: Friday, June 21, 2002 9:53 PM To: [EMAIL PROTECTED] Subject: Re: [KCFusion] Processor Spicked Check for zero-length files in \cfserver\mail\spool and delete them. Is that it? --Daryl - Original Message - From: cfhelp [EMAIL PROTECTED] To: CF-List (E-mail) [EMAIL PROTECTED] Sent: Friday, June 21, 2002 9:38 PM Subject: [KCFusion] Processor Spicked Isn't there some known issues with CF4 and 4.5 eating the processor and crashing CF? Do any of them deal with email? Is there a website with a list of issues and the fix? Rick __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFMX Possible Bug HELP!
Actually, there was a slight change in behavior with CFMX. In CF5 (and prior), automatic SQL string quoting would not happen if a function was used against the data (in this case, the Left() function). In CFMX, the strings are properly escaped, even if a function is used first. So, you should instead have: WHERE NAME LIKE '%#preserveSingleQuotes(left(table1query.name,5))%#' ...as Ryan suggested. --Daryl - Original Message - From: Doug Teetzen [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, August 12, 2002 10:28 AM Subject: [KCFusion] CFMX Possible Bug HELP! I am having terrible luck trying to resolve an issue that came up this weekend. It appears that using certain expressions within CFMX are not properly escaping quotes in strings. Objective= Find possible dupe records before inserting a record from Table1 into Table2 Sample Data In Database #1 and #2: Name= Dick's Sporting Goods ZIPCode=00101 I have a loop over the data in table1 that queries against table2 in the following way Sample Query1: SELECT ID,NAME FROM TABLE1 Loop Start Sample Query2: SELECT ID FROM TABLE2 WHERE NAME LIKE '%#left(table1query.name,5)%#' (checking the first 5 chars only in comparison) **So the resulting query is as follows from debug output** Problem Query Sample: SELECT ID FROM TABLE2 WHERE NAME LIKE '%Dick'%#' ** End Loop What happens is that it blows up when there is a single quote in the name result from table1 and it is used as a parm to query table2 (in an expression). From the debug output, it appears that it may be an error in how it is passed from CFMX to the JDBC:SqlServer driver. Any help or contacts anyone can offer would be GREATLY appreciated. Doug Teetzen Bushnell Performance Optics __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFMX Possible Bug HELP!
Actually, this is the exact opposite problem I thought it was at first glance. It's not that single quotes are being quoted that shouldn't, the problem is that single quotes are getting overlooked. Let me try to replicate that and get back to the list. --Daryl - Original Message - From: Doug Teetzen [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, August 12, 2002 10:28 AM Subject: [KCFusion] CFMX Possible Bug HELP! I am having terrible luck trying to resolve an issue that came up this weekend. It appears that using certain expressions within CFMX are not properly escaping quotes in strings. Objective= Find possible dupe records before inserting a record from Table1 into Table2 Sample Data In Database #1 and #2: Name= Dick's Sporting Goods ZIPCode=00101 I have a loop over the data in table1 that queries against table2 in the following way Sample Query1: SELECT ID,NAME FROM TABLE1 Loop Start Sample Query2: SELECT ID FROM TABLE2 WHERE NAME LIKE '%#left(table1query.name,5)%#' (checking the first 5 chars only in comparison) **So the resulting query is as follows from debug output** Problem Query Sample: SELECT ID FROM TABLE2 WHERE NAME LIKE '%Dick'%#' ** End Loop What happens is that it blows up when there is a single quote in the name result from table1 and it is used as a parm to query table2 (in an expression). From the debug output, it appears that it may be an error in how it is passed from CFMX to the JDBC:SqlServer driver. Any help or contacts anyone can offer would be GREATLY appreciated. Doug Teetzen Bushnell Performance Optics __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] OT- DNS question reverse lookup
The people who gave you your IP address range have to delegate the reverse DNS for your subnets to you. Until then, the world doesn't know to ask your servers for the reverse lookup info. This process is simple, and shouldn't take long for your upstream provider to complete. --Daryl - Original Message - From: Keith Purtell [EMAIL PROTECTED] To: KCFusion (E-mail) [EMAIL PROTECTED] Sent: Thursday, August 29, 2002 2:39 PM Subject: [KCFusion] OT- DNS question reverse lookup I'm trying to fix our flawed DNS record which lacks a reverse lookup. We do our own DNS with Microsoft DNS on NT 4 (Yes I know it's not a great DNS product). The intent here is to head off potential mail delivery problems, since some servers won't accept email if there is no reverse lookup. I read several docs (including http://www.stamey.nu/DNS/DNS-MSReverseLookups.asp) on how to create the record. Followed their directions then updated the server records and also stopped/started the MS DNS service. Yet when I run a test at dnsreport.com I not only keep flunking, but they ask for a DNS record using a name format which I was told was illegal, one which uses four octets instead of three. Here's the message from dnsreport, followed by my format (name only, does not show PTR contents). Can someone help? ERROR: One of more of your mail server(s) have no reverse DNS (PTR) entries (if you see Timeout below, it may mean that your DNS servers did not respond fast enough). RFC1912 2.1 says you should have a reverse DNS for all your mail servers. It is strongly urged that you have them, as many mailservers will not accept mail from mailservers with no reverse DNS entry. The problem MX records are: 10.42.116.65.in-addr.arpa [No reverse DNS entry (rcode: 3 ancount: 0)] 42.116.65.in-addr.arpa Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] checking for nulls...
Michael, ColdFusion has no true null primitive. It is, therefore, impossible through normal means to differentiate between a true null and the zero-length string nulls are translated into. For an example of working around this when using Java classes, see my article, Leveraging Java Classes from ColdFusion: http://www.macromedia.com/v1/handlers/index.cfm?id=22277method=full --Daryl - Original Message - From: Johnson, Michael [EMAIL PROTECTED] To: CF-List (E-mail) [EMAIL PROTECTED] Sent: Thursday, September 12, 2002 7:46 AM Subject: [KCFusion] checking for nulls... what's the syntax to check if a variable is null... i.e. cfif var is 'null cfset var = something /cfif Mike Johnson Science Application International Corporation (757) 870-9165 Emai: [EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] CFApplication::execute
Sounds like someone is using unlocked Application and/or Session variables. If they're running a shared hosting environment, they should consider turning on "full checking" for both variable types to identify the culprit. --Daryl - Original Message - From: cfhelp To: [EMAIL PROTECTED] Sent: Thursday, September 12, 2002 9:02 AM Subject: [KCFusion] CFApplication::execute Our hosting Company "Communitech keeps coming up with this error this morning" What does this mean? Error Occurred While Processing Request Error Diagnostic Information unknown exception condition CFApplication::execute The error occurred while processing an element with a general identifier of (CFAPPLICATION), occupying document position (1:1) to (5:50). Rick
Re: [KCFusion] deletes on database?
I (personally) find using stored procedures instead of simple queries to be a nuisance for anything but large, cross-platform projects. Instead of replacing simple queries with stored procedures, you can just use cfqueryparam to get the same performance benefit (query plan reuse) in SQL Server or Oracle. --Daryl Banttari Macromedia - Original Message - From: Adaryl Wakefield [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 12, 2002 12:58 PM Subject: Re: [KCFusion] deletes on database? Hey why is it every time I post something it generates an avalanche of activity. :-) Its like you guys forget this thing exist. So (and anybody can field this one) I was studying how to write stored procedures in SQL Server last night I was like..gee. thats a lot of freaking work. So what would you say was the most appropriate time to use stored procedures vs. just putting it on the page. A. P.S. As a matter of fact Misty, no, I don't have a jobI'm a consultant! - Original Message - From: Misty Woodward [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 12, 2002 10:59 AM Subject: RE: [KCFusion] deletes on database? In one of the projects I am working on now, they use Oracle stored functions only for database calls. When I first started doing it, I hated it. Honestly, I still hate it. From a development standpoint, as far as time goes, i would say it takes longer than just writing it directly into CF. When Im coding in CF I just write out my CF query and move on. When writing Stored Functions your 8 line query turns into a huge function where you have to declare varaibles, check for variabls, create the function, create your IN Variables, write in your return values, etc. The part that Stored Functions shine in, is with code re-use. The function I wrote is to be used across 3 systems. Which means, I only have to change it in one place and I can manage all 3 sites with it. Misty -- Original Message -- From: Glenn Crocker [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Thu, 12 Sep 2002 10:50:12 -0500 MessageI generally don't do any JOINs in my CF code, instead using queries/views to accomplish them. (Sometimes, when a parameter needs to be way inside a JOIN, I'll put one in CF.) I haven't done the full-on stored procedure architecture, but most of my projects are just one or two developers, so it's not a big team thing with lots of turnover. -glenn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Hartwich Sent: Wednesday, September 11, 2002 10:28 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] deletes on database? Adaryl, Somewhere I interviewed or spoke with someone about this topic. It was my understanding that the individual coders being employed were generally not allowed to do any form of insert/update/delete into the database through their code. They were however permitted to write Select statements to tables and/or views. The coders were given a set of API calls utilizing XML services internally to do the direct DB manipulation. The idea was to force data integrity and consistency by only allowing data to be modified through approved prebuilt modules. A permutation of this would be to not permit inline DB calls in your CF code and to call all DB statements via stored procedures. I have heard this speeds up development, improves reusability, and quality. I'm a bit skeptical of this however. I have spent a few years writing code as the primary developer and write my SQL code directly inside of my CF pages. At least for small development teams with ad-hoc design standards that change frequently I think the extra overhead of standardizing and separating the layers adds significant complexity. However, I would love to hear from those who have used this method in large, formal design groups. It may be the way to go. Ryan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Adaryl Wakefield Sent: Wednesday, September 11, 2002 10:10 PM To: [EMAIL PROTECTED] Subject: [KCFusion] deletes on database? I once saw a job announcement that said something to the effect. ..no deletes on the database will be allowed. All deletes are done via XML... At the time I just raised my eyebrow and went on but now I'm kinda curious if anybody can shed some light on what exactly they meant. I only have an academic understanding of XML and a small one at that. A. __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto
Re: [KCFusion] KC CF employment opportunity
Candidate should also: - Be able to do high-level management, yet retain a current, practical knowledge of 80386 machine language and have memorized the complete Win32 API; - Have a Zodiac sign of Pisces, Virgo, or Leo. Aquarius will not be considered; - Have between 18 and 24 months' practical experience in quantum mechanics; - Have studied golf at a university in Scotland; - Served between 2 and 6 months in jail for a gross misdemeanor, but not felony, offense; And of course, - This ten year IT vet should be willing to work for under $25/hr, with the employer's option to convert to a salaried position at half that rate. Is it me, or are these job orders getting a bit ridiculous these days? --Daryl - Original Message - From: Ryan Hartwich [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, September 18, 2002 1:24 PM Subject: [KCFusion] KC CF employment opportunity -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Subject: employment opportunity Skills Set: Candidate must have at least ten years of progressive IT software development and software management experience using structured system development methodologies as well as systems life cycle management methodology. Must have Four years of experience in designing Web sites, integrating Web and Database applications, managing and controlling system development projects using system life cycle management, system development methodologies and structured analysis and design techniques. Project experience must include client-server, web-enabled. and standalone applications. Detailed knowledge of Cold Fusion, Visual Basic and C++. Contract for hire position, must be willing to convert. Position is located in Kansas City. John Triggs Senior Technical Recruiter Technisource 9300 West 110th Street, Suite 460 Overland Park KS 66210 913-696-0808 ext. 227 local office phone 1-800-932-2372 toll free office phone 816-805-7250 mobile phone www.technisource.com __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Impossible Candidate
Darn... I was doing fine until I hit the team player requirement. Oh well... ;-) --Daryl - Original Message - From: Misty Woodward [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 03, 2002 1:21 PM Subject: [KCFusion] Impossible Candidate I know last week we had the discussion about how employers were wanting candidates with CF experience plus maybe some C or VB. Even the skills required in that post I was quite surprised. UNTIL (Landed in my inbox today) The candidate should have all these skills: 1. Computer Science undergraduate degree is big plus 2. Minimum of 5 years of web development experience 3. ColdFusion 4. Java a. Classes, Servlets b. JMS c. JBOSS, WebLogic, TogetherJ d. Javascripting 5. Oracle 8i and/or 9i a. DBA b. PL/SQL 6. XML/DTD - Using, parsing, developing in CF and Java 7. BizTalk with IWay or any similar tools / ETL tools knowledge is a plus 8. Extremely good understanding of development cycles and needs in each cycle a. Development, Test, Q/A, Product b. Unit testing c. Scripted deployment / deployment scripting (nightly builds, etc.) d. Bug tracking e. Documentation 9. Visual Basic 10. Very comfortable with CF Studio, MS Visial Studio 6.x (esp. VB), CVS,MS VSS, Rapid SQL, Adobe Web Development tools, Macromedia Web Development tools 11. Windows 2000 O/S knowledge 12. Unix/Linux O/S knowledge is a plus 13. Very good in tranlating business requirements into programming 14. Extremely good team player 15. EDI knowledge is a plus 16. ASP and VB scripting is a plus 17. DHTML knowledge 18. Very comfortable in O/S, application, etc. software installation 19. Very comfortable in TCP/IP Networking, esp. VPN How much you wanna bet they only wanna pay about $50k for this super-geek lol Misty __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Impossible Candidate
I'd look for more honesty in those that weeded themselves out ;-) --Daryl - Original Message - From: Matt Jones [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 03, 2002 1:41 PM Subject: RE: [KCFusion] Impossible Candidate They could have the candidates interview themselves to determine if they are qualified and skilled in those areas. Then the HR department merely has to take those candidates that deem themselves qualified and skilled, and determine who is the most honest out of the group, and hire that person. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 03, 2002 1:36 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Impossible Candidate Who would be qualified to interview this candidate and determine that they are truly skilled in all of those areas? -Original Message- From: Keith Purtell [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 03, 2002 1:29 PM To: [EMAIL PROTECTED] Subject: RE: [KCFusion] Impossible Candidate In addition to the wildly unrealistic nature of their wish list, there's another problem. No human being in existence could pack all those activities into a normal work day. Someone in their HR department is smoking banana peelings. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Misty Woodward Sent: Thursday, October 03, 2002 1:21 PM To: [EMAIL PROTECTED] Subject: [KCFusion] Impossible Candidate I know last week we had the discussion about how employers were wanting candidates with CF experience plus maybe some C or VB. Even the skills required in that post I was quite surprised. UNTIL (Landed in my inbox today) The candidate should have all these skills: 1. Computer Science undergraduate degree is big plus 2. Minimum of 5 years of web development experience 3. ColdFusion 4. Java a. Classes, Servlets b. JMS c. JBOSS, WebLogic, TogetherJ d. Javascripting 5. Oracle 8i and/or 9i a. DBA b. PL/SQL 6. XML/DTD - Using, parsing, developing in CF and Java 7. BizTalk with IWay or any similar tools / ETL tools knowledge is a plus 8. Extremely good understanding of development cycles and needs in each cycle a. Development, Test, Q/A, Product b. Unit testing c. Scripted deployment / deployment scripting (nightly builds, etc.) d. Bug tracking e. Documentation 9. Visual Basic 10. Very comfortable with CF Studio, MS Visial Studio 6.x (esp. VB), CVS,MS VSS, Rapid SQL, Adobe Web Development tools, Macromedia Web Development tools 11. Windows 2000 O/S knowledge 12. Unix/Linux O/S knowledge is a plus 13. Very good in tranlating business requirements into programming 14. Extremely good team player 15. EDI knowledge is a plus 16. ASP and VB scripting is a plus 17. DHTML knowledge 18. Very comfortable in O/S, application, etc. software installation 19. Very comfortable in TCP/IP Networking, esp. VPN How much you wanna bet they only wanna pay about $50k for this super-geek lol Misty --- [This E-mail scanned for viruses by Declude Virus] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] * This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify [EMAIL PROTECTED] * __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To
Re: [KCFusion] a design question (off topic)
Adaryl, The onClick handler for submit buttons requires that you return a "true" or "false" value from the handler, which determines whether or not the form submission actually happens. If you wanted the form to actually submit after the "goEmail()" function completes, you'd do this: Conversely, if you did not want the form to submit, you'd return false. If you want goEmail() to decide whether the form submits, have the functionreturn a true or false value, and codethe submit button's onClick handlerthis way: n.b. The use of "javascript:" is only requred in HREF attributes of links; and onClick handlers work similarly for links (they should also return "true" or "false" toindicate whether the link should actually followed.) If you don't return a true/false for an onClick handler in these cases, the behavior is undefined/unpredictable. HTH --Daryl - Original Message - From: Adaryl Wakefield To: [EMAIL PROTECTED] Sent: Wednesday, December 04, 2002 4:12 PM Subject: [KCFusion] a design question (off topic) I've hit an odd issue. I have a simple submit button that calls a js function when clicked. The problem is it does not work in Netscape6 (go figure). The buttons don't even respond to mouse clicks or anything its all very odd. This is not normally part of my job (graphics, yik)and I know some of you do this full time. The tag looks like this: input type="Submit" name="email" value="Go" Anybody see anything glaringly wrong with it? A.
Re: [KCFusion] Email Problem
Those are Tabs... - Original Message - From: cfhelp [EMAIL PROTECTED] To: KCFusion [EMAIL PROTECTED] Sent: Wednesday, December 11, 2002 7:22 PM Subject: [KCFusion] Email Problem One of our newsletter clients is getting email all full of ==09. They are running Win2k and Using Netscape Mail. Here is a piece of one of the newsletters. --part1_ef.6bbe8a7.2b26d046_boundary Content-Type: text/plain; name=BlueEarD.txt Content-Transfer-Encoding: quoted-printable Content-Disposition: inline; filename=BlueEarD.txt =09=09=09 =09=20 =20 =20 =20 =20 =09=09 =09=09 =09=09 =09=09 =09=09Welcome! 09=09=09 =09=09 =09=09December 09, 2002 =09=09 =09=09 =09=09 =09=09 =09=09 =09=09 =09=09 =09=09=09 Password? 3D%22http://www.blueear.com/Login.cfm%22 |=20 =09=09=09Help 3D%22http://www.blueear.com/help.cfm%22 |=20 =09=09=09Tell=20= a Friend 3D%22http://www.blueear.com/friend.cfm%22 Anyone seen this before please help. Rick __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/cf-list@kcfusion.org Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
Re: [KCFusion] Verity
Rick, blue and ear should return the results you want. In fact, for simple user searches, using listChangeDelims(searchTerms, and , ) will force an and between each search term. This will cause an error if the user puts in their own and or or, so only do that if there's not already an and or or in the searchTerms already... --Daryl - Original Message - From: cfhelp [EMAIL PROTECTED] To: KCFusion [EMAIL PROTECTED] Sent: Monday, June 09, 2003 8:56 AM Subject: [KCFusion] Verity I have created a Verity (SQL Data) that I index once a day separate from the search. Then on the website I run the CFSEARCH tag against it but it doesn't search out all keywords. If I search for Blue I get back anything with Blue in it. If I search for Blue Ear I get back anything with Blue Ear but not My ear is blue I thought Verity was supposed to return results in that matter by relevance? This is the search tag on the search page. cfsearch collection=BE_SearchAll criteria=#criteria# name=SearchResults type=EXPLICIT I also tried Simple. !--- The file that runs daily is: --- cfquery datasource=BlueNew name=QryGetNewPost SELECT ListMessages.MessageGUID, ListMessages.EntryDate, ListMessages.Subject, ListMessages.Body, ListMessages.MemberID FROM ListMessages WHERE (Blocked = 0 AND Hold = 0) /cfquery cfindex query=QryGetNewPost action=UPDATE key=MessageGUID collection=BE_SearchAll title=Subject type=CUSTOM body=Subject,Body custom1=EntryDate custom2=MemberID Rick __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/[EMAIL PROTECTED] Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED] __ The KCFusion.org list and website is hosted by Humankind Systems, Inc. List Archives http://www.mail-archive.com/[EMAIL PROTECTED] Questions, Comments or Glowing Praise.. mailto:[EMAIL PROTECTED] To Subscribe mailto:[EMAIL PROTECTED] To Unsubscribe mailto:[EMAIL PROTECTED]
