RE: cfquery and cfstoredproc

2008-07-22 Thread Mark Kruger
Dave, I never disagree with you (usually a fools errand) but I want a clarification. I think you might mean that this particular use is safe because CF will escape the single quotes. But the code below is vulnerable in exactly the same as a CFQUERY. As a test I created an SP ---

RE: cfquery and cfstoredproc

2008-07-22 Thread Mark Kruger
Dave, What about a semi-colon? Storedproc '#var1#','#var2#' ; *other code* Would the CFQUERY not allow this additional code to run? -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Dave Watts [

RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... For Ma rk Kruger

2008-07-22 Thread Mark Kruger
Brian, No worries. You just cost me an hour of my life approving changes to our portfolio section (ha). -mark -Original Message- From: Brian Yager [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2008 3:52 PM To: CF-Talk Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Hea

RE: cfquery and cfstoredproc

2008-07-22 Thread Mark Kruger
A couple of approaches to order by http://www.coldfusionmuse.com/index.cfm/2008/7/21/SQL-injection-using-order- by Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Brad Wood [mailto:[EMAIL PROTECTED]

RE: cfquery and cfstoredproc

2008-07-22 Thread Mark Kruger
Yes you are vulnerable if you do not sanitize the inputs. Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Tim Do [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2008 2:28 PM To: CF-Talk Subject: cf

RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... For Ma rk Kruger

2008-07-22 Thread Mark Kruger
It's ok dave... I put myself out there after all -mark -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2008 2:09 PM To: CF-Talk Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... For Ma rk Kruger > I went to your site Coldfusio

RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... For Mark Kruger

2008-07-22 Thread Mark Kruger
e.com www.necfug.com -Original Message- From: Brian Yager [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2008 10:22 AM To: CF-Talk Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... For Mark Kruger Mark, I went to your site Coldfusionmuse to read about that attack. I

RE: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-21 Thread Mark Kruger
Regarding performance... On high traffic sites with a good SQL server cfqueryparam can result in 10 to sometimes as much as 40 percent performance increase - especially if your SQL server is finely tuned and has good indexing and schema practices. In addition, I don't find the queries less reada

RE: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-21 Thread Mark Kruger
And embedded in his code is one of the "other" ways of executing SQL - using sp_executeSQL His script is better than mine I think. Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Andy Matthews [mail

RE: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-21 Thread Mark Kruger
Brad/dave, Back when it was working the script did little more than insert a link inot the page that sent the user to a tageted "links" site/page... In other words it was a basic spam traffic generator - at least the ones on our sites. -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 ww

RE: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-21 Thread Mark Kruger
For those of you who have been hit by this attack and who need to try something short of restoring your DB, this script will generate a series of update statements in reverse of the hack that's been going around: --- DECLARE @T varchar(255),

RE: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-21 Thread Mark Kruger
This is a popular and very malicious SQL injection attack that is making the rounds: http://www.coldfusionmuse.com/index.cfm/2008/7/18/Injection-Using-CAST-And-A SCII -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original

RE: application memory pool issues

2008-07-02 Thread Mark Kruger
Nate, I do like a separate app pool for just CF and another for "just" .net -mk Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Nathan Strutz [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 02, 20

RE: Clarification Required Concerning CFC...

2008-06-22 Thread Mark Kruger
Dave, Ah... But a lot of folks come to CFCs from using cfincludes. Modular code from many legacy CF applications really means stringing together procedural code by including various files. In fact, a lot of display code is still written like this (and why not). So from that standpoint these folk

RE: Stored Procedures

2008-06-21 Thread Mark Kruger
Rick, Um... This is not going to help. You will probably need to post the error you are receiving and also the SP code. There's nothin inherently wrong with the code below at first glance. -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necf

RE: How can I restate this without using EVALUATE?

2008-06-19 Thread Mark Kruger
This is done frequently in frameworks that use controllers (ie model glue) -mark Mark A. Kruger, CFG, MCSE www.coldfusionmuse.com -Original Message- From: James Holmes [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2008 8:42 PM To: CF-Talk Subject: Re: How can I restate this with

RE: Waaahhhh! Why won't my CFC work!

2008-06-19 Thread Mark Kruger
I think you need to use soemthing other than "password" - isn't that a named attribute of cfinvoke? Meanwhile I can't every debug these things using the 1 step "cfinvoke". I always turn to createobject. #manager_id# Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www

RE: ComboBox?

2008-06-19 Thread Mark Kruger
ot on the same line as the rest of the tag. Hopefully this is enough to get started. You can get a lot of help on the jQuery Google Groups (http://groups.google.com/group/jquery-en). Carl Mark Kruger wrote: > Anyone know of an example? That would be interesting to me as well. > > -mk &g

RE: ComboBox?

2008-06-19 Thread Mark Kruger
Anyone know of an example? That would be interesting to me as well. -mk -Original Message- From: Carl Von Stetten [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2008 10:20 AM To: CF-Talk Subject: Re: ComboBox? jQuery Autocomplete? Carl Les Mizzell wrote: > I've been searching, but

RE: s, scopes, and JVM memory.

2008-06-18 Thread Mark Kruger
Ian, First... I would var any variables used inside the thread. Second, you should be able to "write" this file using cffile - but I'm not sure why your cfpdf action is not working. But you want to try this code outside your cfthread to see how it behaves - cfthread obscures error information and

RE: load issue and SQL Server

2008-06-16 Thread Mark Kruger
What driver are you using? What's networking like (port settings etc)? What are the connection settings? I would think there is an explination for this further down the stack - long before you start looking at isolation levels :) In almost ever case you should experience an increase in performanc

RE: Case Sensitive Form Field Names

2008-06-14 Thread Mark Kruger
Bobby and Barney, I liked this solution so well that I wrote a blog post on it. Good stuff: http://www.coldfusionmuse.com/index.cfm/2008/6/14/form.case.insensitive#more -mk -Original Message- From: Bobby Hartsfield [mailto:[EMAIL PROTECTED] Sent: Saturday, June 14, 2008 12:48 PM To:

RE: JVM Tuning and s... I'm Back

2008-06-14 Thread Mark Kruger
ginal Message- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Saturday, June 14, 2008 9:02 AM To: CF-Talk Subject: RE: JVM Tuning and s... I'm Back Ian, I have tried and I cannot reproduce your results. Using your code I seem to be able to spawn any number of threads and they all

RE: JVM Tuning and s... I'm Back

2008-06-14 Thread Mark Kruger
r threads? -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Ian Skinner [mailto:[EMAIL PROTECTED] Sent: Friday, June 13, 2008 4:15 PM To: CF-Talk Subject: Re: JVM Tuning and s... I'm Back Mark K

RE: JVM Tuning and s... I'm Back

2008-06-13 Thread Mark Kruger
inner [mailto:[EMAIL PROTECTED] Sent: Friday, June 13, 2008 1:25 PM To: CF-Talk Subject: Re: JVM Tuning and s... I'm Back Mark Kruger wrote: > Ian, > > Ok... What if you strip out the DB calls and strip out the Report > calls - just run the thread creation and removal. Do the threads

RE: JVM Tuning and s... I'm Back

2008-06-13 Thread Mark Kruger
: CF-Talk Subject: Re: JVM Tuning and s... I'm Back Mark Kruger wrote: > So... You are creating a total of 1300 threads with this code? > Yes, 10 at a time per the Administrator setting with the others queued up awaiting their turn. > This (untested) example makes the loop sleep

RE: JVM Tuning and s... I'm Back

2008-06-13 Thread Mark Kruger
PM To: CF-Talk Subject: Re: JVM Tuning and s... I'm Back Mark Kruger wrote: > So... You are creating a total of 1300 threads with this code? > Yes, 10 at a time per the Administrator setting with the others queued up awaiting their turn. > This (untested) example makes the loop s

RE: JVM Tuning and s... I'm Back

2008-06-13 Thread Mark Kruger
So... You are creating a total of 1300 threads with this code? I would be surprised if you could ever get that to run successfully. Some things to try. You can check the length of a running thread and terminate it if it runs past a certain time. You could add a sleep to the loop to slow down the s

RE: Alarming

2008-06-09 Thread Mark Kruger
Dave, Yes... But there is a necessity of securing applications like CMS systems and other tools that include rich content. In that case you have no choice but to work it from the other end. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.ne

RE: TOT, but very cool...geek alert...mineral oil cooled case using fishtank

2008-06-09 Thread Mark Kruger
Way way too cool... Looks like a good science experiment for my two boys ... -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Eric Roberts [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2008 10:

RE: Alarming

2008-06-09 Thread Mark Kruger
Richard, First... The log files will not show values from a POST request. As to preventing it, there are a number of UDFs available for this. The trick is to run your string through the UDF prior to insertion. In fact, run all user input through a scrubber udf to be doubly safe. Since some of th

RE: Jrun Memory Usage Problem: could fileexists() be the culprit?

2008-06-07 Thread Mark Kruger
Isaac, That's an interesting guess and comment. We should test it and see if it does degrade performance as you suggest. Sean, Check out my post from Feb where we had a similar issue: http://www.coldfusionmuse.com/index.cfm/2008/2/12/leaky.heap.jvm At least it will give you something to look

RE: CF Studio 5

2008-06-04 Thread Mark Kruger
Troublemaker... :) -Original Message- From: Charlie Griefer [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2008 5:17 PM To: CF-Talk Subject: Re: CF Studio 5 y'know, somebody's bound to say it... so i'll just throw out a suggestion that this might be a good time to check out eclip

RE: Adobe ColdFusion Survey

2008-06-03 Thread Mark Kruger
I would have guessed Dave Watts. Or is that hat size Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Phillip Vector [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2008 3:59 PM To: CF-Talk Sub

RE: do not increase counter is returns 0

2008-06-03 Thread Mark Kruger
Gerald, Regarding grammar and writing skill (and forgive me because I don't know this) but is it possible there is a language barrier here? The subject line above reminds me of someone for whom English is possibly a second language. I don't know Erick but I certainly don't want to chase people awa

RE: CSV Generation MEMORY SUCK

2008-06-02 Thread Mark Kruger
Don't forget to turn off debugging (or remove the 127.0.0.1 ip) -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Rick Root [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2008 10:19 AM To: CF-Ta

RE: CSV Generation MEMORY SUCK

2008-06-02 Thread Mark Kruger
'm open to "non-CF" solutions, I'm not sure there really would be anyway except maybe a homegrown java class to handle the work and be more strict with memory consumption Rick On Mon, Jun 2, 2008 at 10:13 AM, Mark Kruger <[EMAIL PROTECTED]> wrote: > Rick, >

RE: CSV Generation MEMORY SUCK

2008-06-02 Thread Mark Kruger
Rick, What's your DB platform? Are you sure there is not a better "non-cf" way to do it? Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Rick Root [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2008

RE: CF8 server for intranet, which OS? what hardware? what network?

2008-05-31 Thread Mark Kruger
Henry, Your question is really broad and a lot of answers could be right. I would buy based on cost. For less than 10 clients it is not going to matter a great deal whether your RAM is one type or another. A 4GB windows server (2003r2) should be fine - buy what you can afford. Heck, buy a desktop

RE: Best CF editor?

2008-05-30 Thread Mark Kruger
Rick... Don't encourage them Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Rick Faircloth [mailto:[EMAIL PROTECTED] Sent: Friday, May 30, 2008 7:59 AM To: CF-Talk Subject: RE: Best CF editor? Just

RE: When is is time to upgrade to Enterprise Edition?

2008-05-29 Thread Mark Kruger
We use both of these GC's under different circumstances. Concurrent mark sweep GC is useful in that it is a little less heavy handed (using a 2 step recovery process that ties to young GC), but either of these GC's will work. Your description of your "memory" leak problem sounds very much like

RE: When is is time to upgrade to Enterprise Edition?

2008-05-29 Thread Mark Kruger
Michael, These args are pretty close to what I use on several CF7 standard servers. I don't see anything that jumps out at me. I wonder where you got the idea that Jrun is only using 350 megs of memory however. The args below should put it close to 1200 megs (1.2 gigs). What are you using to make

RE: Application encryption

2008-05-29 Thread Mark Kruger
Please note that this is really just obscurity. Unecrypting it is pretty easy and there are a good number of free tools out there that can do it. Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Phillip V

RE: When is is time to upgrade to Enterprise Edition?

2008-05-29 Thread Mark Kruger
Michael, The level of traffic and usage you describe should be able to be handled easily by a standard server (just ignore Adobe's marketing speak). The question on upgrading is really about why you are experiencing difficulty and what you expect to get out of enterprise. If you have a capacity is

RE: CFHTTP Post

2008-05-27 Thread Mark Kruger
Rick, To be clear - using a browser on the server itself (RDP in and open up FF or IE) you can type in the URL and it works - correct? Remember that if you are using a cert that is not in your Java keystore it will need to be added before CFHTTP can handshake properly. -Mark Mark A. Kruger, C

RE: mssql beyond compare tool?

2008-05-27 Thread Mark Kruger
We use "redgate"... It's a commercial tool but quite powerful. -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Jay Cronen [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2008 2:24 PM To: CF-Talk

RE: Help! I get someone else's variables!

2008-05-22 Thread Mark Kruger
Caching is not going to be your problem unless the "user" query you are caching is exactly the same from one user to another: SELECT * FROM Users WHERE userID='AB' Would be a different item in the cache than... SELECT * FROM Users WHERE userID='AC' even if everything in the q

RE: Scratching my head over this one

2008-05-17 Thread Mark Kruger
Toby, To be clear Once you click on the link that hits the security system your CF application is no longer in play. You are hitting a different server/application at that point. So the question is, what port are you hitting on that COP system? It looks like (from your code below) that it is

RE: **UPDATE** JRn 600MB+ shortly after boot up

2008-05-16 Thread Mark Kruger
What makes you think that is not right? If your Max is set to 512 and you load something as an application, the JVM will determine when to recover memory based on it's own timetable and settings. 427 megs could indeed be appropriate depending on the settings. There are some code snippets on this

RE: Dealing with MySQL escape sequences

2008-05-16 Thread Mark Kruger
Azadi, Excellent tip - and another item to add to the arsenal against sql injection :) Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Azadi Saryev [mailto:[EMAIL PROTECTED] Sent: Thursday, May 15, 2008

RE: need to understand jrun

2008-05-15 Thread Mark Kruger
Richard, First... When you say 'all our computers' - It seems like you might be talking about the client side (how your app performs in the browser) which honestly has literally nothing to do with Jrun. If you are talking about running CF on a whole bunch of laptops then I would say you need to m

RE: JRun 600MB+ shortly after boot up

2008-05-15 Thread Mark Kruger
suggestion however James Holmes beat you to it. Unfortunately, running on 1.5_13 and 1.5_14 has the same results. Jrun hovers around 400MB until I try to initialize my first app. -Original Message----- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Thursday, May 15, 2008 8:27 AM To: CF-Talk S

RE: JRun 600MB+ shortly after boot up

2008-05-15 Thread Mark Kruger
iable values. http://www.durhamcons.com/error.htm -Original Message- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 14, 2008 8:34 PM To: CF-Talk Subject: RE: JRun 600MB+ shortly after boot up Yep... That's the default all right. Did you make any changes to the

RE: JRun 600MB+ shortly after boot up

2008-05-14 Thread Mark Kruger
./lib # JVM classpath java.class.path={application.home}/servers/lib,{application.home}/../lib /macromedia_drivers.jar,{application.home}/lib/cfmx_mbean.jar,{applicati on.home}/lib -Original Message- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 14, 2008 5:45 PM To: CF

RE: JRun 600MB+ shortly after boot up

2008-05-14 Thread Mark Kruger
Post your jvm.config file so we can see the start up args. -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Jason Durham [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 14, 2008 5:32 PM To: CF-Talk

RE: any ideas

2008-05-14 Thread Mark Kruger
I have done this with a function for type that keeps my cfqueryparams intact... Instead of building the where clause as a string (usually a kind of a tricky proposition and not a great idea) put your logic inside the cfquery and do something like this. SELECT

RE: Playing movies in cfpresentation

2008-05-09 Thread Mark Kruger
Dominic, I think you should post your code. It almost seems like you are pointed to the FLA or the FLV instead of the SWF file in your presentation. -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From

RE: ColdFusion query question

2008-04-25 Thread Mark Kruger
Erik, This is pretty difficult to troubleshoot without looking at the data. I suspect it is your loop and initial query and not your insert code. -mk Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: erik

RE: This is what I need at home.

2008-04-24 Thread Mark Kruger
What they didn't tell you is that, while they will upgrading your ram, it will take 10 modules taken from an old Pentium 1 in the basement (ha). Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Andy Matthe

RE: webservice over SSL error - javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated error

2008-04-23 Thread Mark Kruger
You may need this fix... http://www.coldfusionmuse.com/index.cfm/2005/01/29/keystore Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Phillip Molaro [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 23,

RE: URL re-write SEO friendly

2008-04-21 Thread Mark Kruger
I confess to not having a clue as to what is going on here.. A pop culture inside joke is my best guess :) Mark -Original Message- From: Dominic Watson [mailto:[EMAIL PROTECTED] Sent: Monday, April 21, 2008 1:03 PM To: CF-Talk Subject: Re: URL re-write SEO friendly > Sometimes - very

RE: URL re-write SEO friendly

2008-04-21 Thread Mark Kruger
Dominic, There is one called IsapiRewrite4 by Phil Hazel from the uk. It is open source and free And it seems to perform well - with no difference between it and the commercial verison referenced below. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfus

RE: CF and SQL Server temporary tables

2008-04-18 Thread Mark Kruger
I'm with Dave... The connection persists for the length of the request. I wonder however about scoping and components. For example, what if I did the following: 1) createobject("component","com.dbObj").createTempTable() 2) createobject("component","com.dbObj").getDataFromTempTable(firstname='B

RE: ColdFusion - Oracle - kill unresponsive query

2008-04-05 Thread Mark Kruger
Matt, Actually the subject of the blog post is about how to configure settings on BOTH sides for graceful connection management :) -mk Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Matthew Williams [m

RE: ColdFusion - Oracle - kill unresponsive query

2008-04-05 Thread Mark Kruger
Rich, Not without using something that can terminate the thread. seeFusion can do it. If your problem is an abundance of haning connections that climb and never seem to go away... Check out my recent post on the subject. http://www.coldfusionmuse.com/index.cfm/2008/3/8/coldfusion.oracle.8i I be

RE: inefficient query

2008-03-31 Thread Mark Kruger
Mike, You would only need to validate it if you were accepting it as user input. In that case you would need to compare it to a list or array of valid values... Or perhaps pass in something that you compare to derive this value as in. In this way - you are compari

RE: inefficient query

2008-03-31 Thread Mark Kruger
Mike, Are you making sure that either product_id or cat_id is required? If not then this query has the potential to select all the records from your DB. You also need to specify actual columns rather than the asterisk. As for complexity - I've seen far worse :) I would use aliases instead of

RE: Memory discrepancy

2008-03-25 Thread Mark Kruger
I'm not sure I would get hung up on what windows task manager reports vs. the server monitor or Jprofiler. Looking at this log it appears that the number of simultaneous requests is set at 25. When 25 is reached all other threads begin to queue. It goes from 0/5 (0 "running requests" out of 5 to

RE: Any "Gotcha's" in using CF UUID for db record primary key?

2008-03-24 Thread Mark Kruger
Dave, Of course the other side of the coin is writing an application that can work with multiple databases... That can sometimes require a generic approach that resides in the application logic. Many shopping carts are like that. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfweb

RE: CF 8 Performance Problems?

2008-03-21 Thread Mark Kruger
Pat, Put me on the "I think it's a high priority" list. If they are going to tout CF8 as a huge performance gain and certifiy it for 1.6 then I would think this would be an issue for them. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.ne

RE: CF 8 Performance Problems?

2008-03-20 Thread Mark Kruger
2 follow up.. What are the actual JVM settings (the arguments in the jvm.config file). What is your setting for simultaneous requests. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Annie x [mailt

RE: CF 8 Performance Problems?

2008-03-19 Thread Mark Kruger
You did not mention the JVM settings... I assume that you have changed the JVM args for memory to conform to the production environment - yes? What version of cf? What are the settings etc. You definitely should see a boost not a decline in performance. Mark A. Kruger, CFG, MCSE (402) 408-3733 e

RE: Hostmysite down?

2008-03-19 Thread Mark Kruger
Patrick Excellent excellent information pat - thanks! Do you have any articles or other information on just exactly what is this "OS Native Socket code" of which you speak? I'd love to learn more about it. -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusio

RE: SQL Injection

2008-03-16 Thread Mark Kruger
Ian, I posted an example of this recently on my blog. http://www.coldfusionmuse.com/index.cfm/2008/2/22/sql-injection-on-a-charact er-field The long and short is that different platforms allow you to escape single quotes differently and this technique can be used to get the right number of quote

RE: Hostmysite down?

2008-03-14 Thread Mark Kruger
Jamie, There are a couple of new features of 8 that will help. One is the ability to set timeout values on threads in the queue (nice to have on a very busy server) and another is the ability to configure the automated killing of long running threads in the alerts area. I have not yet configured t

RE: Hostmysite down?

2008-03-14 Thread Mark Kruger
Jamie, Ah Well it's likely you will run into the same issue with the server monitor. I know it's important to be able to do that in a shared environment. On one of my seeFusion (windows) box I have a hard time killing them as well... Usually takes a couple tries per thread - and even then some

RE: cfqueryparam

2008-03-14 Thread Mark Kruger
only seen bind variables used when the value is actually variable. On Fri, Mar 14, 2008 at 10:43 AM, Mark Kruger <[EMAIL PROTECTED]> wrote: > Sonny, > > These "constants" are not constants to the SQL server. To the SQL > server these are still unbound variables... So

RE: cfqueryparam

2008-03-14 Thread Mark Kruger
Sonny, These "constants" are not constants to the SQL server. To the SQL server these are still unbound variables... So yes, you need to use cfqueryparam if you want to hit the cache pool and execution plan cache. Otherewise the driver hands off the "prepare" operation to the SQL server - meaning

RE: SPAM: Re: cheap CF8 hostings

2008-03-14 Thread Mark Kruger
them. They also allow you to have multiple domains under one account which was one of the primary reasons I first looked at them. I've been with them ever since. andy -Original Message----- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Friday, March 14, 2008 8:49 AM To: CF-Talk S

RE: Hostmysite down?

2008-03-14 Thread Mark Kruger
Jamie, In a recent project I used the new server monitor on a Linux CF8 ent server... There were some things from SeeFusion has that I missed - but over all the server monitor provided some excellent tools and was an acceptable replacement. One item that was particularly useful was the alert set

RE: SPAM: Re: cheap CF8 hostings

2008-03-14 Thread Mark Kruger
That is amazing I have no idea how they could afford to offer CF for 10 bucks a month... I would be afraid of paying so little What is their incentive to help when things go wrong? I'm all in favor of low prices but sometimes I think it would be better if there were not so many commodity

RE: Hostmysite down?

2008-03-14 Thread Mark Kruger
Yes... I thought the response was good as well. Thanks for Jamie. Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Adam Churvis [mailto:[EMAIL PROTECTED] Sent: Friday, March 14, 2008 4:05 AM To: CF-Talk

RE: Google Maps, CF and Ajax

2008-03-13 Thread Mark Kruger
w.coldfusionmuse.com www.necfug.com -Original Message----- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 3:23 PM To: CF-Talk Subject: RE: Google Maps, CF and Ajax Cool... I didn't think to look there. Thanks Steve. -mark Mark A. Kruger, CFG, MCSE (402) 408-3733 e

RE: Google Maps, CF and Ajax

2008-03-13 Thread Mark Kruger
Subject: RE: Google Maps, CF and Ajax I so hope everyone knows that's in reference to Red Dwarf! :O. http://en.wikipedia.org/wiki/Red_Dwarf_characters#Ace_Rimmer :OD -Original Message- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: 12 March 2008 22:25 To: CF-Talk Subject: RE: Google

RE: Help Adobe plan the future of ColdFusion (along that line)

2008-03-13 Thread Mark Kruger
Don, I was responding to your suggestion and I got carried away and wrote about 5 paragraphs So instead of cluttering up the list I put it in a blog post: http://www.coldfusionmuse.com/index.cfm/2008/3/13/cf8.catch.22 As a practical note specifically for you, I would mention that you are fr

RE: Help Adobe plan the future of ColdFusion (along that line)

2008-03-13 Thread Mark Kruger
Right on.. -Original Message- From: James Holmes [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:03 PM To: CF-Talk Subject: Re: Help Adobe plan the future of ColdFusion (along that line) Sure, but not Java. Flex does this really well and fits better with CF as an adobe pro

RE: Help Adobe plan the future of ColdFusion (along that line)

2008-03-12 Thread Mark Kruger
Don, I'm with Sonny on the virus thing... But I do like the idea of better file upload... Like some of the java applets that are out there. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Sonny Sa

RE: Google Maps, CF and Ajax

2008-03-12 Thread Mark Kruger
eve "Cutter" Blades Adobe Certified Professional Advanced Macromedia ColdFusion MX 7 Developer _____ http://blog.cutterscrossing.com Mark Kruger wrote: > Cool... I didn't think to look there. Thanks Steve. > > -mark > > > >

RE: Google Maps, CF and Ajax

2008-03-12 Thread Mark Kruger
Advanced Macromedia ColdFusion MX 7 Developer _ http://blog.cutterscrossing.com Mark Kruger wrote: > Mashup gurus, > > I'm looking for some simple examples of using google maps version 2 > with CF and Ajax Anyone? Also - any tips you have on perfo

Google Maps, CF and Ajax

2008-03-12 Thread Mark Kruger
Mashup gurus, I'm looking for some simple examples of using google maps version 2 with CF and Ajax Anyone? Also - any tips you have on performance when using a lot of markers. Thanks! -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfu

RE: Slow machine - JRun?

2008-03-05 Thread Mark Kruger
ades Adobe Certified Professional Advanced Macromedia ColdFusion MX 7 Developer _ http://blog.cutterscrossing.com Mark Kruger wrote: > I have a recent one one to add to this list: > > http://www.coldfusionmuse.com/index.cfm/2008/2/12/leaky.heap.jv

RE: Slow machine - JRun?

2008-03-05 Thread Mark Kruger
I have a recent one one to add to this list: http://www.coldfusionmuse.com/index.cfm/2008/2/12/leaky.heap.jvm Good luck.. -Mark -Original Message- From: Cutter (CFRelated) [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 05, 2008 12:14 PM To: CF-Talk Subject: Re: Slow machine - JRun?

RE: CF functions question

2008-03-03 Thread Mark Kruger
Dom, Great example -Original Message- From: Dominic Watson [mailto:[EMAIL PROTECTED] Sent: Monday, March 03, 2008 2:24 PM To: CF-Talk Subject: Re: CF functions question No, you absolutely should var that variable, persistant component or UDF or whatever and I always var my function

RE: How much memory should be allocated to the JVM?

2008-02-29 Thread Mark Kruger
Dave, Whoa Do you know which patch? Was it one of the auto-update ones? We should write that down. That would be one of those things that would take forever to figure out. -mark -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Friday, February 29, 2008 1:05 PM T

RE: How much memory should be allocated to the JVM?

2008-02-29 Thread Mark Kruger
Russ, Not so fast... If you are using 7 gigs already then the issue is not how much memory you have free total.. The issue is are there enough blocks of contiguous memory available to equal the heap size you are targeting. On a server running JUST an operating system (say Win2000 or 03) and 2 gigs

RE: How much memory should be allocated to the JVM?

2008-02-29 Thread Mark Kruger
allocated to the JVM? Mark Kruger wrote: > ... there is a limit to how large the heap can be (on 32bit anyway). > > -mark Well there is a limit on a 64 bit system to. It is just a much bigger limit. ~| AdobeĀ® Cold

RE: How much memory should be allocated to the JVM?

2008-02-29 Thread Mark Kruger
that. It works well with 1024. Is there a smaller limit for 1.4 JVM? Russ > -Original Message- > From: Mark Kruger [mailto:[EMAIL PROTECTED] > Sent: Friday, February 29, 2008 9:39 AM > To: CF-Talk > Subject: RE: How much memory should be allocated to the JVM? > > It is

RE: How much memory should be allocated to the JVM?

2008-02-29 Thread Mark Kruger
It is quite surprising how many CF Servers go into production having just the default JVM settings (0 to 512 heap). I think that Adobe should have some choices during install... Maybe profiles based on load and resources or whatever. I don't think that many people understand that throwing CF on

RE: How much memory should be allocated to the JVM?

2008-02-29 Thread Mark Kruger
Pete, I have a number of blog posts on JVM memory and links to other CF related "tuning" of the JVM. My latest post on it is a good start... http://www.coldfusionmuse.com/index.cfm/2008/2/12/leaky.heap.jvm -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusio

RE: Sending File Data Over Webservice

2008-02-28 Thread Mark Kruger
Dave, What's your take on heavy use of cfexecute and the shell - at least in Windows we have found it to be a little dicey. Sometimes command shells are left in the process space without terminating. -Mark -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Thursday, Fe

<    1   2   3   4   >