On Sun, May 19, 2013 at 11:41 PM, Russ Michaels r...@michaels.me.uk wrote:
Feel free to hack away and let me know if you find any problems or other
potential security issues.
it should provide an URL so we can send people back to test code without
requiring pasting into the fields like those
I'd still be concerned with code that runs forever, or uses other 'heavy'
calls like lots of cfhttp, etc.
On Sun, May 19, 2013 at 10:41 PM, Russ Michaels r...@michaels.me.uk wrote:
OK I have done a complete rewrite of how it works now.
All saved code is now executed in a totally difference
That is on the list of forthcoming features :-)
On Mon, May 20, 2013 at 11:10 AM, Casey Dougall - Uber Website Solutions
ca...@uberwebsitesolutions.com wrote:
On Sun, May 19, 2013 at 11:41 PM, Russ Michaels r...@michaels.me.uk
wrote:
Feel free to hack away and let me know if you find
Well Ray there will always be people who will try that, however this is far
less likely to cause an issue here because Java is running as a process
inside an application pool, not as a service.
So if a request takes too long the process gets killed and the application
pool recycled just like
OK I have done a complete rewrite of how it works now.
All saved code is now executed in a totally difference instance than the
site itself, so uploaded code no longer has any access to the site files,
so that avoids all the permissions issues, and that instance is not
remotely accessible either.
I was just thinking the other day, wouldn't it be handy if there was a
website where you could just type in some CF code and have it executed
instantly. this would really make it so much easier for testing quick
snippets of code when answering questions on lists or forums, or providing
support in
Russ,
Boffo! This is something that the CF world has needed for a long time.
However I am seeing an error, despite whatever code that I try to run:
key [FILENAME] doesn't exist in struct
(keys:lastvisit,urltoken,cftoken,sessionid,cfid)
It references a cffile on line 43
Rick
On Sat, May 18,
You should turn off that detailed exception info. Showing the full path to
the CFM.
On Sat, May 18, 2013 at 9:26 PM, Russ Michaels r...@michaels.me.uk wrote:
I was just thinking the other day, wouldn't it be handy if there was a
website where you could just type in some CF code and have it
Try it now
On Sun, May 19, 2013 at 3:37 AM, Rick Mason rhma...@gmail.com wrote:
Russ,
Boffo! This is something that the CF world has needed for a long time.
However I am seeing an error, despite whatever code that I try to run:
key [FILENAME] doesn't exist in struct
It is not all that hard to download Railo Express to test code.
http://www.getrailo.org/index.cfm/download/
These really seems to be a very risky thing to do.
On 19 May 2013 10:26, Russ Michaels r...@michaels.me.uk wrote:
I was just thinking the other day, wouldn't it be handy if there
Russ, what will happen if I do:
cfloop index=x from=1 to=9
cfset x = -1
/cfloop
And put a cflog in there as well (which would suck up disk space).
On Sat, May 18, 2013 at 9:59 PM, AJ Mercer ajmer...@gmail.com wrote:
It is not all that hard to download Railo Express to test code.
if that works for you then great :-)
personally I think that might be a lot of hassle to get Railo Express to
work on a table or smart phone though.
although aside from that I doubt it is risky to install it.
On Sun, May 19, 2013 at 3:59 AM, AJ Mercer ajmer...@gmail.com wrote:
It is not all
I also hope you wrote code to prevent me from writing over the file that
drives this. ;) Took a few seconds to get the contents of that file and
look at how you built this.
On Sat, May 18, 2013 at 10:01 PM, Raymond Camden raymondcam...@gmail.comwrote:
Russ, what will happen if I do:
cfloop
i'm not bothered if you look at the code, but yes I have taken measures to
make sure you cannot modify or delete those files :-)
On Sun, May 19, 2013 at 4:05 AM, Raymond Camden raymondcam...@gmail.comwrote:
I also hope you wrote code to prevent me from writing over the file that
drives
Do you mind if I try then?
On Sat, May 18, 2013 at 10:09 PM, Russ Michaels r...@michaels.me.uk wrote:
i'm not bothered if you look at the code, but yes I have taken measures to
make sure you cannot modify or delete those files :-)
On Sun, May 19, 2013 at 4:05 AM, Raymond Camden
Is Java disabled?
You server can be shutdown with very little code
On 19 May 2013 11:09, Raymond Camden raymondcam...@gmail.com wrote:
Do you mind if I try then?
On Sat, May 18, 2013 at 10:09 PM, Russ Michaels r...@michaels.me.uk
wrote:
i'm not bothered if you look at the code, but
You did. But you didn't lock down the code folder. I just wrote an
Application.cfm file in there.
On Sat, May 18, 2013 at 10:09 PM, Raymond Camden raymondcam...@gmail.comwrote:
Do you mind if I try then?
On Sat, May 18, 2013 at 10:09 PM, Russ Michaels r...@michaels.me.ukwrote:
i'm not
go for it.
there is nothing you can do on here than you couldn't do by signing up for
an account on cfmldeveloper.com anyway
Railo is sandboxed by default to stop any cfml code accessing files outsid
ethe webroot, but in addition to thatall the sites on CFMLDEveloper run
Railo in a dedicated
give it a try and let me know
On Sun, May 19, 2013 at 4:11 AM, AJ Mercer ajmer...@gmail.com wrote:
Is Java disabled?
You server can be shutdown with very little code
On 19 May 2013 11:09, Raymond Camden raymondcam...@gmail.com wrote:
Do you mind if I try then?
On Sat, May 18,
as I just said to Ray, this give you no more access than if you sign up for
an account yourself and upload files to the server.
On Sun, May 19, 2013 at 4:11 AM, AJ Mercer ajmer...@gmail.com wrote:
Is Java disabled?
You server can be shutdown with very little code
On 19 May 2013 11:09,
So yeah, block that, and App.cfc of course. ;)
On Sat, May 18, 2013 at 10:11 PM, Raymond Camden raymondcam...@gmail.comwrote:
You did. But you didn't lock down the code folder. I just wrote an
Application.cfm file in there.
On Sat, May 18, 2013 at 10:09 PM, Raymond Camden
Is this on the same server you provide hosting on?
On 19 May 2013 10:26, Russ Michaels r...@michaels.me.uk wrote:
I was just thinking the other day, wouldn't it be handy if there was a
website where you could just type in some CF code and have it executed
instantly. this would really make
But the difference is - you are asking folks to come here and play with
your tool. I could use this to add my own ads to your service or
spam/porn/etc.
On Sat, May 18, 2013 at 10:16 PM, Russ Michaels r...@michaels.me.uk wrote:
as I just said to Ray, this give you no more access than if you
it is on cfmldeveloper.com yes
On Sun, May 19, 2013 at 4:16 AM, AJ Mercer ajmer...@gmail.com wrote:
Is this on the same server you provide hosting on?
On 19 May 2013 10:26, Russ Michaels r...@michaels.me.uk wrote:
I was just thinking the other day, wouldn't it be handy if there was a
can;t really lock down that folder or the app itself wont be able to write
to it either, I will think on it
On Sun, May 19, 2013 at 4:16 AM, Raymond Camden raymondcam...@gmail.comwrote:
So yeah, block that, and App.cfc of course. ;)
On Sat, May 18, 2013 at 10:11 PM, Raymond Camden
ok have blocked your little application.cfm/cfc hack :-)
let me know if you think of anything else.
sadly I cannot block file access without breaking the app, am thinking of
an alternate solution.
On Sun, May 19, 2013 at 4:16 AM, Raymond Camden raymondcam...@gmail.comwrote:
So yeah,
26 matches
Mail list logo
