Re: Move CF website to non CF host

2010-08-13 Thread Jerry Cooper
Excellent! Thanks again to all that contributed. I will return and let you all know the outcome of this adventure. I hate it when people leave these threads hanging without and ending. ~| Order the Adobe Coldfusion Anthology

Re: Move CF website to non CF host

2010-08-13 Thread Scott Stewart
Yes, just do a view source, copy the source into what ever editor you're using and save it as a .html file On Fri, Aug 13, 2010 at 5:41 PM, Jerry Johnson wrote: > > Exactly that. > > > On Fri, Aug 13, 2010 at 5:31 PM, Jerry Cooper wrote: > >> >> >In short,  anything that already has a .htm or .

Re: Move CF website to non CF host

2010-08-13 Thread Jerry Johnson
Exactly that. On Fri, Aug 13, 2010 at 5:31 PM, Jerry Cooper wrote: > > >In short, anything that already has a .htm or .html extension will > >run fine, anything with a .cfm extension will need to have it's > >rendered output saved as a .html file before it's moved to the new > >server. > > Sc

Re: Move CF website to non CF host

2010-08-13 Thread Jerry Cooper
>In short, anything that already has a .htm or .html extension will >run fine, anything with a .cfm extension will need to have it's >rendered output saved as a .html file before it's moved to the new >server. Scott, Now I feel like I am taking advantage but here goes. When you say "rendered ou

Re: Move CF website to non CF host

2010-08-13 Thread Scott Stewart
Jerry, Just make sure that you convert index.cfm from the generated source code... and you should be good to go On Fri, Aug 13, 2010 at 4:45 PM, Jerry Cooper wrote: > > Wow, thanks for all the great info! > > To answer a couple questions. > > Pages ending in .cfm?  Only index.cfm It's only 7 pa

RE: Preventing use of remote method by other sites

2010-08-13 Thread Andy Matthews
Okay. Phew. This is a single CFC available on our site. andy -Original Message- From: Tony Bentley [mailto:cascadefreehee...@gmail.com] Sent: Friday, August 13, 2010 4:17 PM To: cf-talk Subject: Re: Preventing use of remote method by other sites Yes you are right. I just wasn't sur

Re: Preventing use of remote method by other sites

2010-08-13 Thread Tony Bentley
Yes you are right. I just wasn't sure if you were building an API or something that would require public access. On Fri, Aug 13, 2010 at 1:48 PM, Andy Matthews wrote: > > But crossdomain policies would prevent it from being accessed via AJAX > right? > > > > andy > > -Original Message- >

Re: Move CF website to non CF host

2010-08-13 Thread Jerry Cooper
Wow, thanks for all the great info! To answer a couple questions. Pages ending in .cfm? Only index.cfm It's only 7 pages and all others are .html tags? There no tags on any of the pages. I just did a "view source" on all the pages and searched. Thanks again for all the effort to help some

RE: Preventing use of remote method by other sites

2010-08-13 Thread Andy Matthews
But crossdomain policies would prevent it from being accessed via AJAX right? andy -Original Message- From: Tony Bentley [mailto:cascadefreehee...@gmail.com] Sent: Friday, August 13, 2010 3:33 PM To: cf-talk Subject: Re: Preventing use of remote method by other sites Any time! Kee

RE: Move CF website to non CF host

2010-08-13 Thread Che Vilnonis
Nice affiliate link! Hope you make a few shekels from developers clicking. https://alurium.com/clients/affiliates.php -Original Message- From: Scott Stewart [mailto:webmas...@sstwebworks.com] Sent: Friday, August 13, 2010 4:40 PM To: cf-talk Subject: Re: Move CF website to non CF host i

Re: Move CF website to non CF host

2010-08-13 Thread Scott Stewart
if we're going to pitch hosting options: I host my blog, http://www.sstwebworks.com with Alurium. They're running Railo which will run about 99% of the CFML code that's out there. They don't have GoDaddy's draconian sandboxing ( no use of the createObject() function stands out) and they're running

Re: Preventing use of remote method by other sites

2010-08-13 Thread Tony Bentley
Any time! Keep in mind that anyone can call your method with Ajax so you still need to verify the request (localhost or otherwise) On Fri, Aug 13, 2010 at 1:17 PM, Andy Matthews wrote: > > Oooh. That's a good idea. Since we're using it for AJAX, then make it so > that it can ONLY be used as AJA

RE: Preventing use of remote method by other sites

2010-08-13 Thread Andy Matthews
Works perfectly Tony. I simplified the conditional tho' -Original Message- From: Tony Bentley [mailto:cascadefreehee...@gmail.com] Sent: Friday, August 13, 2010 2:55 PM To: cf-talk Subject: Re: Preventing use of remote method by other sites I use a cfc tha

Re: Move CF website to non CF host

2010-08-13 Thread Alan Rother
Hey Jerry, I'm going to offer another alternative. I'm assuming they want to move to another host, that doesnt support CF to save money on their monthly hosting fees. If that is so, you could instead move them to a host that charges very little for CF hosting. GoDaddy's basic CF packages is $4.9

Re: Preventing use of remote method by other sites

2010-08-13 Thread Scott Stewart
here's another possibilty: If you're using CF9 and the built in AJAX functionality you can use the "verifyClient" attribute of CFFUNCTION to attach a security token to each request. CF will look for the token, if it doesn't see it, the request will be denied On Fri, Aug 13, 2010 at 2:17 PM, Andy

Re: Move CF website to non CF host

2010-08-13 Thread Scott Stewart
Jerry, The problem that you'll run into is that there's going to be a lot of work involved in saving out the generated source code for each page as a .htm or .html file. A webserver that has not been set up to be aware of ColdFusion files (.cfm) read: does not have a ColdFusion installation to pr

RE: Preventing use of remote method by other sites

2010-08-13 Thread Andy Matthews
Oooh. That's a good idea. Since we're using it for AJAX, then make it so that it can ONLY be used as AJAX, which would prevent other sites from using it because of the cross site scripting. Great idea Tony, thanks! -Original Message- From: Tony Bentley [mailto:cascadefreehee...@gmail.co

Re: Preventing use of remote method by other sites

2010-08-13 Thread Tony Bentley
I use a cfc that checks to see if the method being called is from within the domain, is indeed ajax and that the method is indeed is accessed remotely, otherwise abort the request. If you are doing cross site requests, pass a unique key in your form. Is it ajax?

ShadoCMS / ZoomFlex

2010-08-13 Thread Cameron Childress
Has anyone on the list used ShadoCMS or more importantly, ZoomFlex from Straker? If so, I would like to communicate with you offlist. Thanks! -Cameron -- Cameron Childress Sumo Consulting Inc http://www.sumoc.com --- cell:  678.637.5072 aim:   cameroncf email: camer...@gmail. ~~~

Re: Move CF website to non CF host

2010-08-13 Thread Michael Grant
If there's nothing dynamic about your pages you could just copy the compiled page and paste it into notepad. Then just save the page as whatevs.html. So go to index.cfm. In your browser click "view source." Copy, and paste into notepad. Save as index.html. I think that's what your asking. Note

Re: Move CF website to non CF host

2010-08-13 Thread Jerry Johnson
Do the other pages of your site that you want to keep end in .cfm, or do they end in .htm or .html? If they are .htm files then you should be good to go (there are cases where you might not be, but you are most likely ok) If they are .cfm files, can you run a file search/scan on your codebase/ht

CF8 DateFormat supporting Time mask? Since when?

2010-08-13 Thread Michael Grant
I've always thought it sucked that DateFormat didn't support both date and time masks. Then today I'm making a date string DateFormat(dObj,"mm/dd/"). I copy and paste and change the mask to DateFormat(dObj,"h:mm tt"). I hit refresh and I end up with "11:30 tt" as my string. I look back at the

Re: Move CF website to non CF host

2010-08-13 Thread Stephane Vantroyen
Hi, if your site (mean the viewed pages of the site) aren't cfm pages anymore and all are html pages (or something alike), yes you sure can. But if some called pages have cfml extension, you still need CF application server to be served to the web server. Stephane >Hi, newbie here so I apo

Move CF website to non CF host

2010-08-13 Thread Jerry Cooper
Hi, newbie here so I apologize in advance. I had a website developed that used an MS SQL database and it was done with CF. I no longer require the database or MS SQL as that part (one page) of the site is no longer used. I would like to move that site to be hosted without CF (or MS SQL)

Re: Preventing use of remote method by other sites

2010-08-13 Thread Stephane Vantroyen
Hi, I would instantiate a session variable on begin of calling page, add it to the parameters when calling the function, and then just check in the remote function if the one given via parameter matches the one from session scope. Regards, Stephan > I have a method that I'm exposing remotel

Preventing use of remote method by other sites

2010-08-13 Thread Andy Matthews
I have a method that I'm exposing remotely. We'll be using AJAX calls to insert usability stats about a new application. I'm working through the code when I realize that since it's remote access, anyone from any site could post to it and skew our results. I'm wondering what's the best way to p

Preventing use of remote method by other sites

2010-08-13 Thread Andy Matthews
I have a method that I'm exposing remotely. We'll be using AJAX calls to insert usability stats about a new application. I'm working through the code when I realize that since it's remote access, anyone from any site could post to it and skew our results. I'm wondering what's the best way to p

Re: Extracting data from Java ByteArrayOutputStream

2010-08-13 Thread Jeff Chastain
Pete, This does have me an ASCII string of the contents of the byte array. After a lot of string parsing, I can get the SOAP envelope out and convert it to XML. However, the binary images that are also included here are apparently encoded some how and I have yet to be able to use any form

Re: Extracting data from Java ByteArrayOutputStream

2010-08-13 Thread Pete Freitag
This should give you the cfhttp response as a string, when you get back a byte array: cfhttp.filecontent.toString("UTF-8") -- Pete Freitag http://foundeo.com/ - ColdFusion Consulting & Products http://petefreitag.com/ - My Blog http://hackmycf.com - Is your ColdFusion Server Secure? On Thu, A

Re: Key management for PCI DSS compliance

2010-08-13 Thread Cutter (ColdFusion)
Storing the key in the same db is ok, if you also encrypt the key. You might use a combination of the app name and the timestamp of the key record as the key to unencrypt the key (wow that's confusing). Steve "Cutter" Blades Adobe Community Professional - ColdFusion Adobe Certified Profession

Re: Key management for PCI DSS compliance

2010-08-13 Thread Cameron Childress
http://www.braintreepaymentsolutions.com/services/pci-compliance On Fri, Aug 13, 2010 at 9:52 AM, Dave Burns wrote: > I have a client I'm helping with their PCI compliance effort. One question I > have is where to store the key that encrypts account numbers, etc. Right now, > it's in one locat

Key management for PCI DSS compliance

2010-08-13 Thread Dave Burns
I have a client I'm helping with their PCI compliance effort. One question I have is where to store the key that encrypts account numbers, etc. Right now, it's in one location in their CF code. Is there a better practice? I understand that storing it in the same database that contains the encry