Re: Compromising Security

2001-05-23 Thread another programmer
no. the issue is how you use the info. A piece of text (eg Search text) like '; drop table myTable; select name as thatData from sysObjects where '' = ' shouldn't be a problem, if executed like so: cfquery select thatData from myTable where thatValue= '#form.thatvalue#'; /cfquery but if you do

Re: The Ugliest Function = PreserveSingleQuotes

2001-05-23 Thread another programmer
I don't remember having problem with scope before, but I have had a problem with using a function inside preserveSingleQuotes(), I overcame it by setting a tmp variable, then using that in preserveSingleQuotes. Annoying. It was a time ago... it could be my own stupid fault. Anyway, your SQL

Re: Is it possible to send attach with cfmail ?

2001-05-22 Thread another programmer
yep, though the links may be damaged (eg. images no longer appear) due to the location of the html file changing. Use absolute links to fix this (eg. instead of /my.gif use http://mysite.com/my.gif) If you want, the mail can be html (check cfmail docs and look at 'type' attribute) -

Re: Compromising Security

2001-05-22 Thread another programmer
Uh.. Raymond's email is better. I wrote this before I received his, as I've had work to do I only now found Raymond's email. I've emailed anyway, as while somethings overlap, there is a bit more specific information on the topic of server side validation. Examine how you treat the URL/FORM

Re: Is it possible to send attach with cfmail ?

2001-05-21 Thread another programmer
again, from the docs CFMAIL FROM=[EMAIL PROTECTED] To=[EMAIL PROTECTED] Subject=See Important Attachments and Reply CFMAILPARAM NAME=Reply-To VALUE=[EMAIL PROTECTED] Please read the text file and view the new logo, and let us know what you think. CFMAILPARAM

Re: CF vs Perl

2001-05-17 Thread another programmer
Watch the I thinks I'd bet because it's just that, not I have observed or I know I think Perl, in the past, would've been frowned upon because the execution of the perl engine would've been required for every request, but now it's a part of Apache... if it's compiled as so... which'd lessen the

Re: SQL Newbie - Help!!!!! (well, I'm answering part 2, though this was originally an answer to part 1... hey! what a long title!)

2001-05-15 Thread another programmer
What do I change to make it grab the max CasacApptID PER iCMApptID Well, that'd require you connecting the CMAppt table and the CasacAppt table somehow... I'm guessing CasacApptRelationship is meant to be the table which joins the two (CMAppt CasacAppt)? SELECT cas.iCasacApptID, cas.cEncCatID

OT Re: open link in new, maximized window?

2001-05-15 Thread another programmer
How does oNewWindow = window.open(http://www.yahoo.com;, demo, fullscreen=yes); interact with Macs? - Original Message - From: Jann VanOver [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Sent: Wednesday, May 16, 2001 8:54 AM Subject: RE: open link in new, maximized window? Nope.

Re: Redirects

2001-05-15 Thread another programmer
in the root index.cfm, not the application.cfm ;-) !--- unsure... if the user is using http 1.0 will http_host exist? better make sure it does... --- cfparam name=cgi.http_host default= cfswitch expression=#cgi.http_host# cfcase value=www.yahoo.com cflocation url=/yahoo_files/