Re: 9.02 Updater

2013-02-21 Thread Dave Watts
e from 9.0.1. There is no reason to install 9.0.2 if you have 9.0.1. It is simply 9.0.1 without Verity, as Adobe no longer has a license to distribute Verity. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Busine

Re: How would you optimize this SQL?

2013-02-20 Thread Dave Watts
ither case, I'd still advocate the use of schema prefixes/aliases. Me too. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized i

Re: How would you optimize this SQL?

2013-02-20 Thread Dave Watts
use of any cached execution plans at all. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers,

Re: CF 10 Multiple Instances & Apache

2013-02-14 Thread Dave Watts
o let you separate your web and application tiers onto different boxes (often for security reasons). Historically, the wsconfig tool doesn't work all that well with Apache, so you'd typically have to do a bit of httpd.conf editing after the fact. I don't know if that's still the

Re: Creating instances on CF 10

2013-02-14 Thread Dave Watts
believe this is already a known issue. You could temporarily run the instance as an administrator, when you need to create services for other instances. If this instance isn't being used to do anything but create other instances, this approach might be fine - just turn it off when you don&

Re: Hosting A to Z

2013-02-14 Thread Dave Watts
t > don't use it." I thought it was kind of funny hearing that from Ray, who after all is Mr. Adobe, but he's right. What CF gives you is good if you don't know JavaScript, but it's somewhat limited. Overall, you're better off learning JS and using common JS librar

Re: Hosting A to Z

2013-02-14 Thread Dave Watts
s to your own site, then specify the appropriate SCRIPTSRC attribute in your CFFORM tags. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-autho

Re: Hack - Further Information

2013-02-12 Thread Dave Watts
this behavior. And I wouldn't be surprised if you are doing these other things, because they're commonly done by people who are concerned about security. Again, though, the "out-of-the-box" behavior does not guarantee that these scripts can't be executed. Dave

Re: Problem with Hackers on Donation form through Authorize.net

2013-02-11 Thread Dave Watts
t with reCaptcha. I like using CF's solution, > because I can code it myself. But if it doesn't work... I recommend you use this instead of any CAPTCHA: http://cfformprotect.riaforge.org/ Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig

Re: Nesting Issue?

2013-02-08 Thread Dave Watts
> IS NOT NULL > > > > > name="Voucher" I suggest you create a unique name for each voucher. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and p

Re: Nesting Issue?

2013-02-08 Thread Dave Watts
On Fri, Feb 8, 2013 at 10:31 AM, Bruce Sorge wrote: > > Hey all, > I have an app that at midnight each day, queries a database and fires of an > email with a .PDF attachment for a ski voucher. The problem is that each > person is getting not only their voucher but the others who registered as

Re: Dealing with HIGH secuity on a W2008 server

2013-02-05 Thread Dave Watts
licitly choose to use them. This protects Windows against the historic, ongoing problem of administrators having their accounts compromised and being tricked into performing malicious tasks with administrative privileges. http://technet.microsoft.com/en-us/library/cc709691(v=ws.10).aspx Dave Watts, CTO,

Re: Dealing with HIGH secuity on a W2008 server

2013-02-05 Thread Dave Watts
bloc-note to run as administrator, the check box is greyed. > > How do you guys deal with this situation? Can you run a command prompt as Administrator? If so, you should be able to open any program from that prompt and have it use Administrator privileges. Dave Watts, CTO, Fig Leaf Softw

Re: Hack - Further Information

2013-02-05 Thread Dave Watts
set up a web server without the CF Administrator, CF will be able to run /CFIDE/Administrator/index.cfm. Again, we typically demonstrate this in class, so it's fairly replicable. The key is simply to be aware of servlet mappings and how they work. Dave Watts, CTO, Fig Leaf Software http://www.

Re: Hack - Further Information

2013-02-04 Thread Dave Watts
problem, as CF would still be able to resolve to the original location of the file. We actually go through this in our "Administering ColdFusion 9" course as it's a fairly common configuration mistake. http://training.figleaf.com/courses/administering_coldfusion.cfm Dave Watts, CTO,

Re: Hack - Further Information

2013-02-04 Thread Dave Watts
erver to reject these patterns. The CF 9 Lockdown Guide (which I believe Pete wrote in part, if not in full) describes how to do this for IIS and Apache. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Busin

Re: Possible Hack?

2013-02-04 Thread Dave Watts
ase are even on the same machine). Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training ce

Re: Possible Hack?

2013-02-04 Thread Dave Watts
and elsewhere people focusing on identifying and closing specific exploits, when their time would be best served by preventing the possibility of those exploits working by proper configuration. I'm not calling you out, Robert, I'm just using your message as a convenient place to reitera

Re: Source control in CF

2013-02-03 Thread Dave Watts
your main point, which is that this kind of stuff is well within a developer's ability. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-aut

Re: Source control in CF

2013-02-02 Thread Dave Watts
nk you would find that most professional drivers are actually pretty good at simple car repairs. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber

Re: Source control in CF

2013-02-02 Thread Dave Watts
istrator how best to manage CF, you're probably going to get a blank stare in response. Hell, I developed a class for CF administration for this very reason - I ran into so many clients who simply didn't know what they were doing (and this remains the case to this very day). Dave Watts

Re: Possible Hack?

2013-02-02 Thread Dave Watts
se files so the attack would have most likely come in > via CF somewhere. Does the CF server have permission to write to .cfm files? Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule

Re: Possible Hack?

2013-02-02 Thread Dave Watts
You should do this as a matter of course for any CF server install. http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/91025512-cf9-lockdownguide-wp-ue.pdf Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.c

Re: Source control in CF

2013-01-31 Thread Dave Watts
> And how's that exception log you accidentally deleted going, Eric? http://instantrimshot.com/ Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest

Re: Developer knowledge/admin access was: Source control in CF

2013-01-31 Thread Dave Watts
ll software, period. That has to be done by IT (manually, or via automation). Fortunately, CF can actually be run as an application rather as a service, so you can run it without even installing it! Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf So

Re: SOT: cfhttp & geolocation

2013-01-30 Thread Dave Watts
http://tools.ietf.org/html/draft-thomson-geopriv-http-geolocation-00 > > ...as follows: > > > > ...where [lat],[lon] is "elsewhere." This appeared to be ignored. > > Any ideas? Is your goal to pass the user's location to Google instead of your server'

Re: Log question

2013-01-28 Thread Dave Watts
> How do you restore a deleted log? In an attempt to clear the exception log, > I ended up deleting it (they should label those buttons better).help! [insert Delorean time machine joke here] Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fi

Re: invalid parameter binding?

2013-01-25 Thread Dave Watts
ght want to try creating a stored procedure, then calling that from CF. That'll let you use parameters. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest calibe

Re: invalid parameter binding?

2013-01-25 Thread Dave Watts
Out of curiosity, what happens if you remove the TYPE attributes from your CFARGUMENT tags and use CFQUERYPARAM with either field? Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule,

Re: invalid parameter binding?

2013-01-25 Thread Dave Watts
> Also, using this works.. > c.conferenceUID = '#arguments.conf_id#' > > So I'm not sure what the problem is with cfqueryparam I think it's pretty clear - we're not specifying the right parameter type. How many characters are in the UUID? Da

Re: invalid parameter binding?

2013-01-25 Thread Dave Watts
I'm not sure what database you're using, but I don't think UUID fields are treated as generic strings. You might try using CF_SQL_IDSTAMP or CF_SQL_CHAR(36) for the CFSQLTYPE attribute. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf

Re: First time caller, long time listener . . . why does Captivate 6 hate CF

2013-01-25 Thread Dave Watts
hem inline, but I'd also recommend you put your code and the original PHP script in as well. Or use Pastebin as Russ suggested. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and

Re: Can CF Datasource connect to remote db using ssh

2013-01-25 Thread Dave Watts
could run the Bitvise SSH client as a service, which would presumably make it available for any other service to use. http://www.bitvise.com/ssh-client-as-windows-service CF doesn't natively support SSH tunnels to remote servers in order to connect to datasources, but this can be d

Re: First time caller, long time listener . . . why does Captivate 6 hate CF

2013-01-25 Thread Dave Watts
hen you don't have to. My second recommendation would be to post specific errors, rather than "every attempt ends in failure". Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA S

Re: Does CF10 support 64-bit COM Objects?

2013-01-24 Thread Dave Watts
> Jiminy Christmas, we live in a 64 bit world now, come-on Adobe! We also live in a .NET world. I'm not sure how many Adobe customers use COM any more. I would not recommend the use of COM from CF, based on its history of poor performance as a COM client. Dave Watts, CTO, Fig Leaf Softw

Re: search email list to extract data in spreadsheet

2013-01-19 Thread Dave Watts
in our > database - to promote our product/services. Have you tried contacting those universities for the information? They could provide it in a more easily consumable format. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owne

Re: cfimage error

2013-01-16 Thread Dave Watts
to get off this list. You could spend five minutes setting up a Gmail filter and not being a dick. Your choice I guess. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and pro

RE: form-post to SQL-insert creates double-entry

2013-01-15 Thread Dave Jemison
Oops- forgot that you had CFPARAMs for all the variables. You'd need to remove those with the conditional. -Original Message- From: Dave Jemison [mailto:djemi...@vinesse.com] Sent: Tuesday, January 15, 2013 12:46 PM To: 'cf-talk@houseoffusion.com' Subject: RE: form-pos

RE: form-post to SQL-insert creates double-entry

2013-01-15 Thread Dave Jemison
the query to only fire if the form has been submitted: INSERT INTO DONOR (first,last,flag,supe,phone) VALUES ('#form.first#','#form.last#','#form.flag#','#form.supe#','#form.phone#') Additionally, you need to do some data scrubbing be

Re: Java Advisory

2013-01-12 Thread Dave Watts
FFORM tags that used Java in earlier versions of CF, but it's unlikely you're using those in your applications. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides

Re: Email attachment problem

2013-01-05 Thread Dave Watts
r is set to, that's how many threads are available. To process a page, CF assigns a thread to it, and that thread can't do anything else (like service other user requests) until it has finished with that page. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.f

Re: getting CFMAIL to dance with Microsoft Exchange

2013-01-04 Thread Dave Watts
, like read mail, you might need to use CFEXCHANGE for MAPI access. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at

Re: cfquery results--memory resident?

2013-01-04 Thread Dave Watts
nt. > > Anyone know the answer to this? Can it be controlled and/or limited? (CF 9) All CF variables are stored in memory. You can limit the size of the resultset by writing your SQL accordingly, but that's it really. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http

Re: What is this code doing? Is it harmful?

2013-01-03 Thread Dave Watts
> Thank you all. I am going through all of the sites on that box to see if any > discernible damage has been done and have already > started implementing some of the steps detailed in the Lockdown Guide Dave > mentioned. What a way to start off the new year. Unfortunately,

Re: What is this code doing? Is it harmful?

2013-01-03 Thread Dave Watts
F 9 Lockdown Guide, which I think is still on the Adobe site. Then, do the things it says to do. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest calibe

Re: CF10 and IIS

2012-12-20 Thread Dave Watts
> How are CFM pages skipping the windows authentication? By default, CF URLs are passed by IIS to CF before IIS checks the filesystem. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on

Re: Redirecting PDF documents

2012-12-20 Thread Dave Watts
t redirection by default. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training ce

Re: CF10 and IIS

2012-12-20 Thread Dave Watts
quot; group has read/execute right on the folder. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our t

RE: Need help finding new CF Hosting

2012-12-18 Thread Dave Long
You are correct in assuming I've been using CF5. If I move to a newer version will my MySQL DBs stop working? Dave -Original Message- From: Russ Michaels [mailto:r...@michaels.me.uk] Sent: Tuesday, December 18, 2012 12:28 PM To: cf-talk Subject: Re: Need help finding new CF Ho

Re: Need help finding new CF Hosting

2012-12-18 Thread Dave Watts
> If your using odbc them ypu must be on coldfusion 5 or older, as cf runs on > java since cf6 and java uses jdbc. CF includes a JDBC-ODBC bridge, called SequeLink, licensed from DataDirect Technologies. I believe that CF 10 still includes this, and know that CF 9 does. Dave Watts, CT

RE: Need help finding new CF Hosting

2012-12-18 Thread Dave Long
Thanks to everyone for such a quick response. Now comes the hard part... Making a choice. I'm just a bit confused when Russ said ODBC datasources don't work with CF. I've been using them for more than 10 years. Thanks again. Dave -Original Message- From:

Need help finding new CF Hosting

2012-12-18 Thread Dave Long
I'm trying to find a CF Hosting provider with 24/7 support and allows code such as CFILE plus access to the CF Administrator so I can add ODBC sources timely. Any suggestions? Dave Long NorthGoods Merchant Services ~|

Re: jrun max mem size configuration

2012-12-17 Thread Dave Watts
> Anyone know where the parameter is located in a multi-server CF9 Enterprise > configuration for the max memory that Jrun can use? It's in jvm.config, in the java.args section: -Xmx http://www.coldfusionmuse.com/index.cfm/2005/10/28/jvm.gc Dave Watts, CTO, Fig Leaf So

Re: (ot) Windows Mesh Alternatives

2012-12-14 Thread Dave Watts
box.com and Dropbox do not offer this option. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers

Re: (ot) Windows Mesh Alternatives

2012-12-14 Thread Dave Watts
really seem to have the best overall solution out there, as far as I can tell. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authoriz

Re: Changes do not show up on live website

2012-12-14 Thread Dave Watts
> Dave, do you know if there's a good reason they'll all stuck in the same > dir, as opposed to hierarchically? I suspect it's just an oversight / it > not occurring to them on Adobe's part, but perhaps it needs to be this > way? It's always bugged me. I don

Re: Changes do not show up on live website

2012-12-14 Thread Dave Watts
a separate issue, and of course that can be disabled in production - but simply the seek time needed to find the compiled class on disk in the first place. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Busin

Re: Changes do not show up on live website

2012-12-14 Thread Dave Watts
> Another question. Is it safe to delete those files? Coldfusion does not use > any of those files, right? CF does use them if they're there, but it is perfectly safe to delete them. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf So

Re: Future Proofing/Backward compatibility

2012-12-11 Thread Dave Merrill
+1 for Cameron's approach. I use that construct in lots of places internally to create value objects with default values for keys that weren't passed. Dave Merrill On Fri, Dec 7, 2012 at 9:42 AM, Cameron Childress wrote: > > On Wed, Dec 5, 2012 at 6:50 PM, Chris Velevitch &g

Re: ACF8 server service fails to restart

2012-12-10 Thread Dave Watts
actly sure whether it's on the caching page, but I think so. If you do this, files will need to be recompiled when they're first run, but this is often faster than trying to find the already-compiled files on disk! Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://train

Re: CFERROR Handler

2012-12-06 Thread Dave Watts
ut you should still use the site-wide error handler as a last level of defense against anything that can go wrong. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides

Re: CF8 - sending mail via exchange?

2012-12-03 Thread Dave Watts
k SMTP mail that isn't being sent to the domain(s) managed by the Exchange server, though - you may need your Exchange administrator to allow it to relay mail from the IP address of your CF server. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Le

Re: (ot) CF Builder & SVN

2012-11-27 Thread Dave Merrill
+1 for visualsvn server if you'e hosting locally. Really straightforward. Dave Merrill On Wed, Nov 7, 2012 at 2:24 PM, Matthew wrote: > > Out if interest, what OS do you develop on? If it's on windows OS have > considered visualsvn server? http://www.visualsvn.com/server

Trouble with CF 9 Spreadsheet functions

2012-11-27 Thread Dave Phillips
che.poi.poifs.filesystem.POIFSFileSystem" ).Init( LOCAL.FileInputStream ); (I've confirmed that I'm using the full path (as is indicated on his website) I'm at a loss of how else to get this data out of the spreadsheet. Has someone had success with this and, if so, what can

Re: Opening a template in CF Studio from an HTML link

2012-11-26 Thread Dave Watts
is way? I've done that successfully. Maybe there's some Windows profile issue with CF Studio. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest cali

Re: Opening a template in CF Studio from an HTML link

2012-11-26 Thread Dave Watts
I get is a blank page and CFStudio does not open. That's not going to work unless (a) all components (CF, CFStudio, browser, web server) are on the same machine, and (b) the service logs on as SYSTEM and is allowed to interact with the desktop. Dave Watts, CTO, Fig Leaf Software http://www.fi

Re: check validity of zip file with cfzip

2012-11-21 Thread Dave Watts
st four bytes (and you can probably do that in CF too, I've never tried), but not with CFZIP specifically. But honestly, that just tells you that you have a zip file, not that you have a usable zip file. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fi

Re: $.get URL length CF10/Tomcat

2012-11-21 Thread Dave Watts
nce/system.webserver/security/requestfiltering/requestlimits#001 Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our traini

Re: Can I create a form with several HTML5 multi-file uploads and send to unique destinations?

2012-11-20 Thread Dave Watts
> Dave said you can't have one form with multiple destinations. That isn't > technically true. The HTML5 spec supports a formaction attribute for the > tag that allows multiple destinations for different fields in the > same form. For the life of me I can't imagine u

Re: Can I create a form with several HTML5 multi-file uploads and send to unique destinations?

2012-11-20 Thread Dave Watts
to directories within your web root as a general rule anyway until you can verify the safety of uploaded files. So create a file uploader action page that uploads files to a safe (non-web-accessible) location, verifies the safety of those files, then moves the files where you want them to be. Dave Wa

Re: cfm files bypass permissions -- htm files get 401 unauthorized

2012-11-19 Thread Dave Watts
>> The same test file saved as a .htm is correctly blocked with 401 unauthorized > > Do you have "Check that file exists" enabled within IIS? If not, you > may have to enable that to get IIS file permissions to work properly. Aaand, I just realized that I was responding t

Re: cfm files bypass permissions -- htm files get 401 unauthorized

2012-11-19 Thread Dave Watts
s - it just sends the request, along with the presumptive file path, to CF. This is how CF can execute URL patterns for files that don't actually even exist - RDS, graphing, and CFIMAGE all rely on this behavior. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.

Re: cfm files bypass permissions -- htm files get 401 unauthorized

2012-11-19 Thread Dave Watts
st file saved as a .htm is correctly blocked with 401 unauthorized Do you have "Check that file exists" enabled within IIS? If not, you may have to enable that to get IIS file permissions to work properly. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/

Re: How to deal with outbound http calls

2012-11-18 Thread Dave Watts
gn under load conditions. Is > there a better way to fetch off site content? Yes, you should ideally do it either before (via caching) or after (via asynchronous processing) the user wants this content, instead of exactly when the user wants it. Dave Watts, CTO, Fig Leaf Softw

Re: CF 9.0.1 stops accepting/processing HTTP requests after DB connection failure

2012-11-18 Thread Dave Watts
hem, for the data source in question. This should be scriptable without too much effort. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized

Re: JRUN Version

2012-11-16 Thread Dave Watts
> Is jrun's version specific to the version of CF running on the server. Not necessarily, but usually, yes. Recent versions of CF all have JRun 4, with different patch levels. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a

Re: Security Question(s)

2012-11-16 Thread Dave Watts
he latest and greatest. That was a long time ago! Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instructi

Re: Huge rowcounts in CFCLIENTS database

2012-11-15 Thread Dave Watts
ill have no effect on users being orphaned from their Client data, as you're not storing that in memory, but rather in the database. Users will have access to the Client data as long as their cookies are intact. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figle

Re: Security Question(s)

2012-11-15 Thread Dave Watts
g data directly from the browser and using it to do something. Now, that specific attack wouldn't be very helpful to an attacker in most cases, but it shows you what I mean, I guess. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Softwar

Re: Anybody seen this hack/exploit?

2012-11-13 Thread Dave Watts
database logins used by your web applications - limiting the rights of service users generally Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendo

Re: Anybody seen this hack/exploit?

2012-11-13 Thread Dave Watts
legitimate access to the server, for a wide variety of reasons. Having a robots.txt file would not have any effect on this. I'm not sure what Chrome has to do with this. Perhaps I'm misunderstanding what you're getting at. Dave Watts, CTO, Fig Leaf Software http://www.figlea

Re: Coldfusion Report with multiple queries

2012-11-13 Thread Dave Watts
e going to output HTML. You can use CFDOCUMENTSECTION and CFDOCUMENTITEM to divide the dockets, handle page breaks, etc. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides th

Re: Displaying flash on a site where script protect is enabled?

2012-11-09 Thread Dave Watts
s, you don't need to worry about XSS vulnerabilities, I guess. The problem with SCRIPTPROTECT is that it's fairly easy to bypass. I recommend you read this: http://www.12robots.com/index.cfm/2010/3/1/A-warning-about-ColdFusions-scriptProtect Dave Watts, CTO, Fig Leaf Software http://ww

Re: Read / Serve a file with CFHEADER

2012-11-09 Thread Dave Watts
> > Anyone see what I'm doing wrong here? The FILE attribute of CFCONTENT requires a path to a file. If you want to serve content from a variable, don't use the FILE attribute: #toBase64(your binary content)# Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://train

Re: Displaying flash on a site where script protect is enabled?

2012-11-09 Thread Dave Watts
you against. All that said, SCRIPTPROTECT only provides limited protection against those vulnerabilities. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the high

Re: JRun Console dies with ELContext error

2012-11-08 Thread Dave Watts
ng to do from the JRun console exactly? Many tasks can be done without going in there. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authori

Re: encrypt / decrypt question

2012-11-04 Thread Dave Watts
parate JVMs that are used by bundled applications. > Also, should I turn off the ColdFusion service before I place these files? I think you'll need to restart CF afterwards, yes. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is

Re: (ot) Blocking IPs

2012-11-01 Thread Dave Watts
> I have found it effective to block troublesome emails for some length of > time, usually 6 months does it. http://instantrimshot.com/ Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB)

Re: cftransaction

2012-11-01 Thread Dave Watts
7;d recommend this - is have two transactions run essentially in parallel, have a wait/sleep loop in the first, and when the second one completes you could have it set a flag that can be read by the first one and then it could either commit or rollback. Dave Watts, CTO, Fig Leaf Software http://www.fi

Re: How do I implement "Show More Results"

2012-10-31 Thread Dave Watts
o render the results using XSLT from the appliance - it's generally easier to fetch raw XML from the appliance (by omitting the proxystylesheet URL parameter) and format it from CF. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Vetera

Re: multi sessions in one

2012-10-30 Thread Dave Watts
estly, you probably won't even need to do that - you know the path of the editing process, so you know when a user goes to the first step of the process they're starting a new edit. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software

Re: multi sessions in one

2012-10-30 Thread Dave Watts
tches the stored value. But if you simply use CFLOCK, you probably don't need to bother with this. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest calib

Re: cfdirectory

2012-10-30 Thread Dave Watts
s you to the Adobe ColdFusion 10 product page. Here's the new, improved link: http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/91025512-cf9-lockdownguide-wp-ue.pdf Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig

Re: cfdirectory

2012-10-30 Thread Dave Watts
a guide for configuring the service user account. http://www.adobe.com/products/coldfusion/whitepapers/pdf/91025512_cf9_lockdownguide_wp_ue.pdf Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA

Re: alias URL not recognizing relative paths

2012-10-29 Thread Dave Watts
settings in IIS for the > alias to work properly? I'm not sure what you did exactly, but you can't create an alias (virtual web server) and have it inherit other aliases (virtual directories). Each virtual server has to have its own virtual directories created specifically for it

Re: CF 9 Updates

2012-10-28 Thread Dave Watts
7 native connectors. Everything will presumably still work, but since IIS 7 has a new architecture, you're better off moving to that at some point. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (V

Re: CF 9 Updates

2012-10-22 Thread Dave Watts
sing the Web Server Configuration Tool - uninstall IIS 6 compatibility mode using Add/Remove Windows Features - install CF 9.0.1 - reinstall the web connectors using the Web Server Configuration Tool You do NOT have to uninstall CF itself. Dave Watts, CTO, Fig Leaf Software http://www.figle

Re: cf schudule varication

2012-10-17 Thread Dave Watts
run on a Linux box. Have you considered simply using cron and wget or cURL instead of CFSCHEDULE? Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber

Re: Best practice question for Application.cfc

2012-10-13 Thread Dave Watts
er-write a unique client file with default values). I think the most common approach for this sort of thing with Application.cfc is to use inheritance. You can have a base Application.cfc, then use the EXTENDS attribute to create a new Application.cfc with customized settings, overridden event hand

Re: Reading a ColdFusion session with a JSP App

2012-10-11 Thread Dave Watts
ariables, and you can just refer to them in JSP like you would any other session variables. If they're not both deployed in the same container, you'd need to write something in CF to expose the variable values, and something in JSP to fetch the CF page via HTTP. Dave Wat

<    1   2   3   4   5   6   7   8   9   10   >