On Monday 08 January 2007 20:42, Anthony Cole wrote:
I started looking into this matter a little and the protocol is easy to
crack. I only coded 3 functions, but I found many other operations by
playing with IIS logs.
Cool.
What would rock would be writing up a list of which methods have been
I started looking into this matter a little and the protocol is easy to crack.
I only coded 3 functions, but I found many other operations by playing with IIS
logs.
http://www.angryprogramming.com/download_details.cfm/download_id/3
[EMAIL PROTECTED]
Sent: Thursday, September 11, 2003 7:48 PM
Subject: Re: Cracking the RDS protocol?
On Wednesday, Sep 10, 2003, at 05:42 US/Pacific, Deanna Schneider wrote:
live (in our case development) server, where we rely on the
cgi.remote_user variable to determine who someone is. Do you
Unless you are writing code for a very specific environment
where you can guarantee cgi.remote_user will work, I'd be
very wary of relying on any CGI variables...
But, aren't cgi variables determined by the server? These are
internal apps, LDAP-protected to our employees. They're not
On Wednesday, Sep 10, 2003, at 05:42 US/Pacific, Deanna Schneider wrote:
live (in our case development) server, where we rely on the
cgi.remote_user variable to determine who someone is. Do you use LDAP
to
Unless you are writing code for a very specific environment where you
can guarantee
For the same reasons asp developers like the ability to edit data in
addition to browsing, as well as stored proc editing and debugging
straight from their ide.
I just can't imagine, for the life of me, how you could find RDS
lacking in any regard
In my case, I simply don't interact
Why not just run the server on your local machine for development?
Matt - this is what we're contemplating doing here. But, it brings up other
issues - like how to handle directories that would be LDAP protected on the
live (in our case development) server, where we rely on the
cgi.remote_user
I long ago stopped using the traditional web site security model based
on directory structure. I make use of request dispatchers that handle
all requests and then dispatch the request to the correct handler. This
allows among other things an easy way to handle security. Further, to
speak
We're so not there yet. Thanks, though.
- Original Message -
From: Matt Liotta [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Wednesday, September 10, 2003 7:54 AM
Subject: Re: Cracking the RDS protocol?
I long ago stopped using the traditional web site security model based
and Contribute users on the same
system.
-Kevin
- Original Message -
From: Matt Liotta [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 10:28 PM
Subject: Re: Cracking the RDS protocol?
RDS is great 'cause it provides real in-place editing. With all other
-Original Message-
From: Claude Schneegans [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 10, 2003 12:05 AM
To: CF-Talk
Subject: Re: Cracking the RDS protocol?
Why not just run the server on your local machine for development?
Absolutely. I don't see any advantage working on files
No, it's also used to edit files. Its big advantage is that
it easily allows remote access, when you haven't set up any
other alternative for remote access, without worrying about
firewall configuration or software installation. I don't know
whether a lot of people use it when they
We wouldn't want 100 developers having access via
there desktop PCs.
I was meaning doing everything on PCs, including database replicas, etc.
Even with Oracle, you can have a Personal Oracle installed on you PC.
Of course, this is not always possible on very large installations.
The talking beetwin CF-studio or DWMX and the CF RDS server
is all done using HTTP access.
I wonder if any one is aware of some documentation about this
protocole or if any one ever tried to crack it?
After all, HTTP is something one could sing with CF... We
just need the words ;-)
I've looked into it before as have others such as Aaron Ward. All that's really
required is watching the exact commands being issued over HTTP from studio to
the CF server and recording them. Not hard at all.
I've asked MM on many (many, many) occasions to make the protocol public as
there are a
I've also asked Macromedia to document it as well, with no response. How
about we all send a request to their wish form:
http://www.macromedia.com/support/email/wishform/ I already have.
---
Pete Freitag
http://www.cfdev.com
Author CFMX
: Cracking the RDS protocol?
I've also asked Macromedia to document it as well, with no
response. How
about we all send a request to their wish form:
http://www.macromedia.com/support/email/wishform/ I already have.
---
Pete Freitag
PM
To: CF-Talk
Subject: RE: Cracking the RDS protocol?
I've also asked Macromedia to document it as well, with no
response. How
about we all send a request to their wish form:
http://www.macromedia.com/support/email/wishform/ I already have
Don't take this the wrong way, but why bother? I mean do people still
use RDS? Doesn't DWMX talk to CFMX through web services now?
Matt Liotta
President CEO
Montara Software, Inc.
http://www.MontaraSoftware.com
(888) 408-0900 x901
Don't take this the wrong way, but why bother? I mean do people
still use RDS? Doesn't DWMX talk to CFMX through web services now?
Yes, people still use RDS. DWMX doesn't talk to CFMX through web services -
to use a lot of the functionality of DWMX with CF, like the recordset
builder, I'm
Doesn't DWMX talk to CFMX through web services now?
I tried it yesterday, and it still needs RDS to get information about the database.
~|
Archives: http://www.houseoffusion.com/lists.cfm?link=t:4
Subscription:
Yes, people still use RDS. DWMX doesn't talk to CFMX through web
services -
to use a lot of the functionality of DWMX with CF, like the recordset
builder, I'm pretty sure you need to use RDS.
Is building queries the only thing people use RDS for or is there other
things as well? Why would
.
- Original Message -
From: Matt Liotta [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 7:54 PM
Subject: Re: Cracking the RDS protocol?
Yes, people still use RDS. DWMX doesn't talk to CFMX through web
services -
to use a lot of the functionality of DWMX
RDS also allows browsing and editing of the server's local file system.
I can't imagine RDS would provide a better solution than ssh or scp.
For databases, it allowed one to view tables, sprocs, views via
whatever
datasources you had in CF. Handy if the db server wasn't exposed on
the
Is building queries the only thing people use RDS for or is there
other things as well? Why would one use RDS as opposed to an interface
provided by their RDBMS? Just curious as I really don't know since I
don't use RDS. I tried making use of it in Studio a long time ago and
found it
I can't imagine RDS would provide a better solution than ssh or scp.
Perhaps not assuming ssh or scp are available options...which isn't always
the case. RDS is quite handy for remote editing and the DB access is nice
for quick stuff though sorely lacking compared to proper tools.
Not sure how
--
-Original Message-
From: Matt Liotta [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 9:54 PM
To: CF-Talk
Subject: Re: Cracking the RDS protocol?
Yes, people still use RDS. DWMX doesn't talk to CFMX through web
services -
to use a lot of the functionality
RDS is great 'cause it provides real in-place editing. With all other
technologies, you have download/change/upload concept (although it can
be
hidden by the IDE). With RDS, it's pretty much always in-place
editing so
changes are immediately seen by others and via the CF server.
Why not
I've looked into it before as have others such as Aaron Ward. All
that's really
required is watching the exact commands being issued over HTTP from
studio to
the CF server and recording them. Not hard at all.
Can you provide the list with what has been documented so far?
Matt Liotta
Why not just run the server on your local machine for development?
Absolutely. I don't see any advantage working on files on the server.
One would not work on the files on the production server (I hope!).
So you need to work on a miror of the application, and still have to update the
production
I use it for quick reference...that's about it...but less these days
cause DWMX was buggy as a mofo.
Stace
-Original Message-
From: Matt Liotta [mailto:[EMAIL PROTECTED]
Sent: September 9, 2003 9:54 PM
To: CF-Talk
Subject: Re: Cracking the RDS protocol?
Yes, people still use RDS. DWMX
It's been a while since we last went at it (at least a year). Let me see what I
have in email and ICQ logs. Basically, it's an HTTP call to /cfide/main/ide.cfm.
If I remember correctly, the ide.cfm does not have to exist but the directory
does or it fails. I believe that CF automatically sees any
Lets put things this way. The HoF server is down south. Way down south and out
of my reach. If I have to alter some code, I usually need access to the live
data from the server. This stops me from doing the development locally. RDS gets
me to the server, shows me the code, shows me the DB
On Tuesday, Sep 9, 2003, at 19:26 US/Pacific, Dave Watts wrote:
No, it's also used to edit files. Its big advantage is that it easily
allows
remote access, when you haven't set up any other alternative for remote
access, without worrying about firewall configuration or software
installation.
Tuesday, September 9, 2003, 9:54:21 PM, you wrote:
Yes, people still use RDS. DWMX doesn't talk to CFMX through web
services -
to use a lot of the functionality of DWMX with CF, like the recordset
builder, I'm pretty sure you need to use RDS.
ML Is building queries the only thing people use
I loved the run-time debugger in CF5. It's a major loss that it doesn't
work in CFMX. I don't know if MM would bring it back 'cause DWMX doesn't
support it so they'd need major changes to DWMX to support run-time
debugging (and no, these changes are not present in DWMX 2004).
Actually, the
Although it sounds handy, it does crash a lot :)
- Original Message -
From: Matt Liotta [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 8:12 PM
Subject: Re: Cracking the RDS protocol?
RDS also allows browsing and editing of the server's local file
37 matches
Mail list logo
