Re: ColdFusion8 silent installation

2008-08-11 Thread Andy Allan
The main differences between the CF7 and CF8 silent installs are the properties for things such as LCDS and the .NET bridge. CF7 http://www.adobe.com/go/87bd20f4 CF8 http://www.adobe.com/go/kb402572 The one omission that both have is the property for installing the Report Builder.

RE: cfimage - upgrading to from older server

2008-08-11 Thread Justin D. Scott
my webhost have too restart the cfapplication in order to unlock the files. I've found that some of these file in use situations can be averted by renaming the file just before deleting it. Set a variable with a UUID, rename the file, then delete. I've not run into this problem on CF8 and

Re: cfimage - upgrading to from older server

2008-08-11 Thread Azadi Saryev
advise your host to upgrade to cf8.0.1 and apply the latest hotfix that solves this issue. Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Mike Little wrote: hi guys, just having a few problems with a script i have used on older cf servers (6 and 7). i have attempted upgrading it to

Re: SVN in Production

2008-08-11 Thread Joeri B
You need to delete those SVN dir's with a script. Hello, Looking at some of the responses in the recent thread on SVN v ftp I get an impression that some folk are using SVN clients on Production boxes. What are people's thoughts on this? Is it a security risk, is it dangerous in some other

Re: SVN in Production

2008-08-11 Thread Joeri B
You need to delete those SVN dir's with a script. mbcomms BTW: I still prefer using DIFF in combination with FTP... But I am a lonely guy, if you search with deploy web app on google it's all SVN nowadays. ~| Adobe®

RE: SVN in Production

2008-08-11 Thread Andrew Scott
SVN SHOULD NEVER BE USED IN PRODUCTION... SVN is used to have a revision control system, so that you could roll back to a previous version or whatever you need to do. When it comes to production, why the hell would you install 99% of extra space taking codes and indexes to a production server?

CFEclipse code folding; not working

2008-08-11 Thread Dominic Watson
Hi all, i've just installed eclipse ganymede with aptana and then cfeclipse and code folding just isn't happening (no little grey fold icons). I have checked all the cfeclipse code folding preferences and no clues. Anyone experienced this? Thanks in advance, Dominic -- Blog it up:

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Andrew Scott
Well... This has got to be the strongest case for unit testing then... If a component is unit tested, then the first thing is that you will know that this could happen and fix it straight away. The second is that this is why. ColdFusion should have adopted an approach that used an ORM

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Andrew Scott
Hmmm... Of course it is possible to use cookies They chose not too... Why... Because they have no real need to be attached to a session Think about it for a minute or two... -- Senior Coldfusion Developer Aegeon Pty. Ltd. www.aegeon.com.au Phone: +613 9015 8628 Mobile: 0404 998 273

RE: CFEclipse code folding; not working

2008-08-11 Thread Andrew Scott
What version of cfeclipse are you using? 1.3.2 beta? Then maybe dropn back to the latest stable release of 1.3.1.6 and you should be fine. -- Senior Coldfusion Developer Aegeon Pty. Ltd. www.aegeon.com.au Phone: +613 9015 8628 Mobile: 0404 998 273 -Original Message- From: Dominic

Re: CFEclipse code folding; not working

2008-08-11 Thread Azadi Saryev
i have ganymede installed, even though i do not use eclipse day-to-day, and one thing i had to manually configure was to enable the line numbers bar - i think the latest cfeclipse has it disabled by default... now i do have the code folding handles... can't remember which blog i found the

Re: CFEclipse code folding; not working

2008-08-11 Thread Dominic Watson
I'm using the stable release :0 (couldn't open files in beta releases) Dominic 2008/8/11 Andrew Scott [EMAIL PROTECTED]: What version of cfeclipse are you using? 1.3.2 beta? Then maybe dropn back to the latest stable release of 1.3.1.6 and you should be fine. -- Senior Coldfusion

Re: CFEclipse code folding; not working

2008-08-11 Thread Dominic Watson
;) google it appears, is stumped. I've never had problems getting the code folding to work and it works at home with the same setup (though it can't quite be the same obviously!). Dominic 2008/8/11 Azadi Saryev [EMAIL PROTECTED]: i have ganymede installed, even though i do not use eclipse

Re: SVN in Production

2008-08-11 Thread Joeri B
clear statement, I'll use that in my meeting with the boss :) SVN SHOULD NEVER BE USED IN PRODUCTION... SVN is used to have a revision control system, so that you could roll back to a previous version or whatever you need to do. When it comes to production, why the hell would you install 99% of

Re: CFEclipse code folding; not working

2008-08-11 Thread Azadi Saryev
http://blog.critical-web.com/blog/index.cfm/2008/8/3/Enabling-Line-Numbers-In-CFEclipse-1316-On-Eclipse-Ganymede-34 Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Dominic Watson wrote: ;) google it appears, is stumped. I've never had problems getting the code folding to work and it

Re: CFEclipse code folding; not working

2008-08-11 Thread Dominic Watson
Thanks, but I have no problem with line numbers. My problem is with code folding. Dominic 2008/8/11 Azadi Saryev [EMAIL PROTECTED]: http://blog.critical-web.com/blog/index.cfm/2008/8/3/Enabling-Line-Numbers-In-CFEclipse-1316-On-Eclipse-Ganymede-34 Azadi Saryev Sabai-dee.com

RE: SVN in Production

2008-08-11 Thread Andrew Scott
Yeah There are so many different ways to deploy, the problem boils down to the tools that we use. Me, I can't vouch for the likes of svnAnt and I DO not see a need for svnAnt to migrate changes to production, a first of deployment sure I could see its merits. But not as I make changes or

Re: CFEclipse code folding; not working

2008-08-11 Thread Azadi Saryev
iirc, i had the code folding problem until i sorted the line numbers out... sorry caouln't help you more... Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Dominic Watson wrote: Thanks, but I have no problem with line numbers. My problem is with code folding. Dominic 2008/8/11 Azadi

Re: SVN in Production

2008-08-11 Thread Jochem van Dieten
Kym Kovan wrote: Looking at some of the responses in the recent thread on SVN v ftp I get an impression that some folk are using SVN clients on Production boxes. What are people's thoughts on this? Is it a security risk, is it dangerous in some other way, or is it a bad thing because of all

Re: CFEclipse code folding; not working

2008-08-11 Thread Dominic Watson
Ah I see, thank you. Frustrating, the line numbers are all working perfectly. I'll try installing europa and see if I have any luck there. Dominc 2008/8/11 Azadi Saryev [EMAIL PROTECTED]: iirc, i had the code folding problem until i sorted the line numbers out... sorry caouln't help you

Database Sessions

2008-08-11 Thread Robert Rawlins
Morning guys, Does anyone know how ColdFusion handles opening and closing a database session? Is it for every cfquery tag set? Or for every cftransaction tag set? Or is it less predictable than that? The reason I ask is that I've been looking at using temporary tables in a procedure, as I

RE: SVN in Production

2008-08-11 Thread Andrew Scott
What Do you mean by repo - server and server - repo? The latter should never be an issue, or even considered. Anyone who makes changes to production and not in a development environment shouod be hung out to dry or better still beaten with a stick until you realise that development is what it

Re: SVN in Production

2008-08-11 Thread Tom Chiverton
On Monday 11 Aug 2008, Andrew Scott wrote: SVN SHOULD NEVER BE USED IN PRODUCTION... I assume you mean 'to deploy code to a production box' ? Because as a production RCS it's well known for being utterly solid. When it comes to production, why the hell would you install 99% of extra space

Re: SVN in Production

2008-08-11 Thread Joeri B
Yes, indeed. With a diff ( I want to use free commander with Winmerge) tool, you SEE the changes going live. I point that one out in a previous post. I work on a large project in a existing application which I check-in constantly (Backup purpose and team work) , but doesn't need to go live.

RE: SVN in Production

2008-08-11 Thread Robert Rawlins
This is an interesting conversation, I've been using SVN Export for some time now when looking to deploy changes to production and not really had any beef from it. I understand what you guys are saying here about only wishing to deploy certain changes, that's a very valid use case, but to be

Re: SVN in Production

2008-08-11 Thread Tom Chiverton
On Monday 11 Aug 2008, Andrew Scott wrote: The latter should never be an issue, or even considered. Anyone who makes changes to production and not in a development environment shouod be hung out to dry or better still beaten with a stick until you realise that development is what it means.

Re: HELP! SQL Injection Attack!

2008-08-11 Thread Tom Chiverton
On Friday 08 Aug 2008, Brian Peddle wrote: Just curious as I have no seen this on an old asp site months ago and now on CF. Every IP lookup I do goes back to If it's just a blind SQL injection attempt, the actual sending of the attack could be from a spoofed IP. -- Tom Chiverton

RE: SVN in Production

2008-08-11 Thread Andrew Scott
No one and I will repeat myself... No one is saying hard drive is not cheap. But let me ask you this, if you had a shared hosting plan with 100mb of storagespace, and part of this is your SQL space is also included. If you checkout it might be a copy of the current index from svn, but that is

Re: Database Sessions

2008-08-11 Thread James Holmes
CF does conenctions two ways: 1) CF uses pooled connections if you have maintain connections checked for the datasource, This means a connection will stay open for quite some time, across multiple web requests. 2) If you don't maintain connections, CF opens a connection at the first cfquery tag

RE: Database Sessions

2008-08-11 Thread Robert Rawlins
Thanks James, that makes fair sense, I'll check my connection pooling setting and have a play around, I'll let you know how I get on. Rob -Original Message- From: James Holmes [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 11:55 To: CF-Talk Subject: Re: Database Sessions CF does

RE: SVN in Production

2008-08-11 Thread Andrew Scott
I am the same, I could have 20 tickets at any one time that I am also working on. The moment the client says I want ticket number such and such to go live, but the ticket that is completed I haven't completed. So what do you do. 1) Export from SVN to live, this will not work because the tickets

RE: SVN in Production

2008-08-11 Thread Andrew Scott
Really Let me tell you something then... I have 10 copies of this application in production, I could be fixing a bug that is related to only one of these branches. So if I switch ( come on I can't be the only one who uses the switch, to switch between different branches/tags?) then I can

RE: SVN in Production

2008-08-11 Thread Andrew Scott
DO NOT ASSUME WHAT I HAVE DONE OR NOT DONE I have not only been there, but that was 10 years ago and I have not only learnt from that, I have moved onto better and bigger things. If you feel it works for you then continue, but let me tell you this. Move outside of coldfusion and use those

Re: SVN in Production

2008-08-11 Thread Kym Kovan
Andrew Scott wrote: ... snip If you checkout it might be a copy of the current index from svn, but that is still and let me repeat myself this is still double your storage space if in a shared environment where space is an issue. Andrew, that is a major step back from your earlier

RE: SVN in Production

2008-08-11 Thread Robert Rawlins
You're an extremely aggressive individual aren't you Andrew? -Original Message- From: Andrew Scott [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 12:15 To: CF-Talk Subject: RE: SVN in Production DO NOT ASSUME WHAT I HAVE DONE OR NOT DONE I have not only been there, but that was 10

Re: SVN in Production

2008-08-11 Thread Kym Kovan
Andrew Scott wrote: I could create an image, this image could be used for 10 different sites and slight changes to each version, but it is only relevant to one of my clients. I would not be making that an export from SVN because you will end up with images that do not belong to the project

Re: SVN in Production

2008-08-11 Thread Tom Chiverton
On Monday 11 Aug 2008, Andrew Scott wrote: If you feel it works for you then continue, but let me tell you this. Move outside of coldfusion and use those same approaches you will be not only scoldered. But I would say you might become an outcast to boot I dunno, I bet the PHP folks are

Re: SVN in Production

2008-08-11 Thread Tom Chiverton
On Monday 11 Aug 2008, Kym Kovan wrote: intermediate server to import it into SVN and then checked it out to the test server and then ran some file sync tools to the Production boxes which are FTP distance away. It took over an hour to say no difference! That's one of the great steps SVN

RE: SVN in Production

2008-08-11 Thread Andrew Scott
Kym, I was not responding to you directly, if I did not answer your question then let me ask you this. If you are tight for HD space, and not everyone is. But what good would it be too actually have .svn files on your production server? If it doesn't need to be required to run, then it doesn't

RE: SVN in Production

2008-08-11 Thread Andrew Scott
No, but bad habits an ill advice can hurt you down the track, could it not? -- Senior Coldfusion Developer Aegeon Pty. Ltd. www.aegeon.com.au Phone: +613 9015 8628 Mobile: 0404 998 273 -Original Message- From: Kym Kovan [mailto:[EMAIL PROTECTED] Sent: Monday, 11 August 2008 9:33

RE: SVN in Production

2008-08-11 Thread Andrew Scott
Actually that's not entirely true And this is one reason I refuse to use subclipse What you don't see is the processes that can and do run in the background, if you run eclipse you can switch on to show hidden processes. Doing this will show you that svn can be contacted and updated

Re: SVN in Production

2008-08-11 Thread Kym Kovan
Tom Chiverton wrote: On Monday 11 Aug 2008, Kym Kovan wrote: intermediate server to import it into SVN and then checked it out to the test server and then ran some file sync tools to the Production boxes which are FTP distance away. It took over an hour to say no difference! That's one of

RE: SVN in Production

2008-08-11 Thread Andrew Scott
And how are you going to migrate small changes in a midst of other changes? -- Senior Coldfusion Developer Aegeon Pty. Ltd. www.aegeon.com.au Phone: +613 9015 8628 Mobile: 0404 998 273 -Original Message- From: Kym Kovan [mailto:[EMAIL PROTECTED] Sent: Monday, 11 August 2008 10:04

RE: CFEclipse code folding; not working

2008-08-11 Thread Rick Faircloth
I'm having trouble with code folding, too, and looked for a 1.3.1.6 release, but couldn't find one. I'm currently using 1.3.1.5, which comes upon the cfeclipse.org site as the latest stable release. Where can I get 1.3.1.6? Rick -Original Message- From: Andrew Scott [mailto:[EMAIL

Re: SVN in Production

2008-08-11 Thread Jochem van Dieten
Andrew Scott wrote: What Do you mean by repo - server and server - repo? The latter should never be an issue, or even considered. Anyone who makes changes to production and not in a development environment shouod be hung out to dry or better still beaten with a stick until you realise that

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Dave Morris
Ah. You're from the blame the victim school. Unfortunately, when I wrote the first 1,000 ColdFusion templates using Ben Forta's CF 4.0 book, there was no CFQueryParam. So going back and rewriting all those programs (now well into several thousand) has been a bitch. And all it took was one

Re: SVN in Production

2008-08-11 Thread Kym Kovan
Andrew Scott wrote: And how are you going to migrate small changes in a midst of other changes? Good response Andrew to my question, just what I wanted. Unfortunately your response is top-replied with your signature as well, with its correct --, so in Thunderbird my question below that is

Re: SVN in Production

2008-08-11 Thread Tom Chiverton
On Monday 11 Aug 2008, Andrew Scott wrote: And this is one reason I refuse to use subclipse will show you that svn can be contacted and updated without your knowledge, how else do you know if there are changes to the code... That's a good thing. I want my RCS updated when I delete or

Re: SVN in Production

2008-08-11 Thread Tom Chiverton
On Monday 11 Aug 2008, Andrew Scott wrote: secure you have your code base open to the whole world when and if it is hacked. With the vast majority of ColdFusion deployments, that's the case anyway. The default JRun connector for Adobe's engine still runs the .cfm files from inside the .svn

CFLOGON and screens go blank!

2008-08-11 Thread bill turner
I have been really struggling with this login thing. I really need some help. There must be something I am really not understanding about CFLOGIN. I've attached a copy of my Application.cfc and other templates. What happens is that if you start with a fresh session, you can link to the login

Re: SVN in Production

2008-08-11 Thread Brian Kotek
I disagree completely. There's absolutely nothing wrong with using SVN in production for deployment. Beyond Compare? It's a great program...but using it to deploy code? The idea makes me shudder. In fact, doing anything manual related to code deployment makes me shudder. There are easy ways

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Greg Morphis
Ummm but is it not your website that YOU left vulnerable? If you didn't have access to cfqueryparam then you should have used an alternate approach. I'm sure they exist even for CF 4.0, a little extra time at the beginning validating variables would save so much grief now right? And from what I'm

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Justin Scott
I'm sure they exist even for CF 4.0 Yup, the val() function did/does wonders for integer input on queries, even way back in CF4. -Justin Scott ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release

CF 8 Built in SQL Server drivers vs. MS SQL Server 2000 SP3 Driver

2008-08-11 Thread Scott Stewart
Hey all, I've run into an issue that I need opinions on. We've run into some SQL server issues, where MS is saying patch the driver. Has anyone used the MS SQL Server 2000 SP3 JDBC driver in place of the one shipped with CF8? Has it cleared up 8180 errors? Any performance gains/losses? Any

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Dave Morris
And that girl who was raped should not have been wearing a skirt. Yes, we've implemented things way more sophisticated than CFQUERYPARAM. Anybody who waits until the SQL query to try to detect bogus data is asking for trouble. But crime is crime, and we should not be allowing criminals to CHOP

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Greg Morphis
I see it as different than pointing fingers.. You ALLOWED it to happen by not fully protecting your code, you're not necessarily to blame. Anyways, good luck defending the attacks. On Mon, Aug 11, 2008 at 9:15 AM, Dave Morris [EMAIL PROTECTED] wrote: And that girl who was raped should not have

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Rick Faircloth
This would probably be more productively viewed as as responsibility issue, rather than blame. Both parties, webmaster and attacker, bear responsibility for the status of the server/data/etc. A negligent server/website admin bears a certain amount of responsibility for the situation. The

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Larry Lyons
Criticizing someone for negligence is not blaming the victim. If the person who coded the site is so incompetent as not to include a cfqueryparam for any user input that has direct impact on the database, then they deserve to get blamed. What's so difficult about cfqueryparam

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Brad Wood
Actually, if you read by blog analysis of the zombies: http://www.codersrevolution.com/index.cfm/2008/8/10/My-analysis-of-the-SQL-injection-zombies 7% of the IPs returned a cookie I set. 75% of IPs that sent more than 2 hits returned my cookie. (Hits came in groups of two) I'm fairly convinced

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Mark Kruger
Rick, While your argument is well put, perhaps we could choose a slightly less inflammatory analogy than rape. We have a large group here and I wouldn't want anyone to be incensed by trivializing such a traumatic event (although obviously that is not the intent). -Mark -Original

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Robert Rawlins
Rick, That might be a slightly off angle analogy. If a girl asks to be raped, then she is clearly consenting to the act and therefore it's not technically rape any more, that's the real world equivalent of building a server and publishing open source software for download, then complaining that

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Greg Morphis
Actually is was Dave Morris who originally used rape to compare the 2. Rick was just responding.. On Mon, Aug 11, 2008 at 10:23 AM, Mark Kruger [EMAIL PROTECTED] wrote: Rick, While your argument is well put, perhaps we could choose a slightly less inflammatory analogy than rape. We have a

Re: cfimage and Copy/Paste

2008-08-11 Thread Tom Chiverton
On Sunday 10 Aug 2008, Tom Jones wrote: I have a flash form on the client client... and drop a image into a cfimage tag. on the server. Is this possible? Not as stated, but then I'm not sure exactly what you want the end user experience to be. -- Tom Chiverton

Re: CF 8 Built in SQL Server drivers vs. MS SQL Server 2000 SP3 Driver

2008-08-11 Thread Tom Chiverton
On Monday 11 Aug 2008, Scott Stewart wrote: I've run into an issue that I need opinions on. We've run into some SQL server issues, where MS is saying patch the driver. And what has Adobe said ? -- Tom Chiverton This email is sent for and

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Tom Chiverton
On Monday 11 Aug 2008, Brad Wood wrote: I'm fairly convinced this bot used the Internet Explorer on the victims It would make sense to use the same ActiveX control IE uses, yes. -- Tom Chiverton This email is sent for and on behalf of

RE: CF 8 Built in SQL Server drivers vs. MS SQL Server 2000 SP3 Driver

2008-08-11 Thread Craig Dudley
Not for a while, from memory you just drop the three MS .jar's somewhere in CF's classpath and restart CF to install and creating datasources becomes a bit more dificult, I'll see if I can dig up an example for you. I seem to remember that performance wasn't all that great, in fact, CF7's built

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Rick Faircloth
I started not to use the rape analogy and certainly didn't want to trivialize something so terrible, but thought it appropriate, especially since someone had brought it up as an analogy previously. Please don't take offense, anyone. Know that I have a daughter and I tell her all the time not to

FCKeditor

2008-08-11 Thread webmaster
Here is my code yet the editor does not seem to work correctly. No toolbar is visible etc. CFFORM ACTION=update_categories.cfm METHOD=POST CFTEXTAREA NAME=Comments ROWS=4 COLS=60 richtext=yes toolbar=Basic#Comments#/CFTEXTAREA /CFFORM Any ideas where I should start to look for problems?

RE: FCKeditor

2008-08-11 Thread William Seiter
If you were to use a cfinput with the 'required='yes'' and the message='???', does that work for you? I only ask, because it is a fast and simple way to verify that the mappings to your CFIDE directory are accurate for your installation. William ::-Original Message- ::From: [EMAIL

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Jochem van Dieten
Dave Morris wrote: Ah. You're from the blame the victim school. I just see different degrees of guilt. Negligence from developers, greedy shortcuts from management, lazyness from end users, criminal intent from hackers etc. So I shouldn't be mad at the poor little hackers, because they

Re: CF 8 Built in SQL Server drivers vs. MS SQL Server 2000 SP3 Driver

2008-08-11 Thread Scott Stewart
Nothing, I've found a couple of CF blogs that point to cfqueryparam as being the culprit... But it's in very specific cases: http://www.petefreitag.com/item/677.cfm However, mine is a basic insert statement. the error code(s) returned are: [Macromedia][SQLServer JDBC Driver][SQLServer]Line

Re: CF 8 Built in SQL Server drivers vs. MS SQL Server 2000 SP3 Driver

2008-08-11 Thread Scott Stewart
Thanks Craig The higher ups have deemed this a last resort... so if it comes to this I'll put up some results. I'm pursuing what could be an issue with cfqueryparam Craig Dudley wrote: Not for a while, from memory you just drop the three MS .jar's somewhere in CF's classpath and restart

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Dana Kowalski
Seeing code solutions to this is cool. but imho its best left to your router/firewall to handle. I'd contact the provider to have them put some better controls in place. These are scenarios that almost delve into why cisco has the zero day features on their gear..

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Dave Watts
Ah. You're from the blame the victim school. Unfortunately, when I wrote the first 1,000 ColdFusion templates using Ben Forta's CF 4.0 book, there was no CFQueryParam. So going back and rewriting all those programs (now well into several thousand) has been a bitch. And all it took

RE: CF 8 Built in SQL Server drivers vs. MS SQL Server 2000 SP3 Driver

2008-08-11 Thread Craig Dudley
Had a good look but can't find the examples, it's fairly easy to set up anyway. The MS SQL Server JDBC driver is three/jar fiels I think? Just drop them into \ColdFusion8\runtime\jre\lib\ext and restart CF, the .jar should then appear in the big CF Server Java Class Path box in settings summary

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Dave Watts
Viewing this as a rape case, if a girl was hanging out on a street corner and asking passers-by to rape her, then, yes, she bears some responsibility for putting herself in that situation. It doesn't mean the one who rapes her doesn't bear the greater responsibility for the situation,

Re: CF 8 Built in SQL Server drivers vs. MS SQL Server 2000 SP3 Driver

2008-08-11 Thread Scott Stewart
That's cool, I appreciate the input. thanks sas Craig Dudley wrote: Had a good look but can't find the examples, it's fairly easy to set up anyway. The MS SQL Server JDBC driver is three/jar fiels I think? Just drop them into \ColdFusion8\runtime\jre\lib\ext and restart CF, the .jar should

RE: SQL injection attack on House of Fusion

2008-08-11 Thread Dave Watts
The second is that this is why. ColdFusion should have adopted an approach that used an ORM instead With an ORM it reduces the risk, provided the ORM takes these attacks seriously. I have never seen these attacks with hibernate, within GORM and Domain Driven design approaches.

select input value selection problem

2008-08-11 Thread Eclectic User
tr tdCountry/td td select name=addr_country cfoutput query=getCountries option value=#getCountries.cty_iso2# cfif variables.addr_country eq getCountries.cty_iso2selectedcfelseif not len(trim(variables.addr_country)) and getCountries.cty_iso2 eq

Re: SQL injection attack on House of Fusion

2008-08-11 Thread Wil Genovese
Security in layers. While it is usually best to thwart this style of attack at the route/firewall, it is wise to have the extra layers at the Apache/IIS/webserver, Coldfusion Application, CF Query and JDBC DB user permission layers. If the first layer is bypassed or compromised then the next

select input value selection problem

2008-08-11 Thread Eclectic User
tr tdCountry/td td select name=addr_country cfoutput query=getCountries option value=#getCountries.cty_iso2# cfif variables.addr_country eq getCountries.cty_iso2selectedcfelseif not len(trim(variables.addr_country)) and getCountries.cty_iso2 eq

RE: FCKeditor

2008-08-11 Thread webmaster
No this is not working actually. So this means I just need to add a mapping in IIS for the CFIDE directory for this site and it should work? I think I tried that with no joy. -Original Message- From: William Seiter [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 12:03 PM To:

Re: SVN in Production

2008-08-11 Thread Jochem van Dieten
Kym Kovan wrote: Yes, and that lends me to the thought that the best scenario for our particular problem would be to have an exported copy on each production box (yes, they are clustered) and use a standard diff tool from there to flip the changes over to the actual production site. I can

Using CFLoop to Define Variables

2008-08-11 Thread Jeanmarie Richardson
Hello -- I am not sure if I am approaching this correctly BUT I have a list of 22 possible items where only 5 can be selected. I then need to assign these five items to a list of variables - SC1, SC2, SC3, SC4, SC5. I am trying to use CFSet within a CFLOOP tag (which loops through the list)

Re: Using CFLoop to Define Variables

2008-08-11 Thread Josh Nathanson
Try putting quotes around your variable: cfset SC#x# = listElement / -- Josh - Original Message - From: Jeanmarie Richardson [EMAIL PROTECTED] To: CF-Talk cf-talk@houseoffusion.com Sent: Monday, August 11, 2008 10:23 AM Subject: Using CFLoop to Define Variables Hello -- I am not

RE: FCKeditor

2008-08-11 Thread webmaster
I readded this virtual directory and this time it works. Thanks for the help. -Original Message- From: William Seiter [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 12:03 PM To: CF-Talk Subject: RE: FCKeditor If you were to use a cfinput with the 'required='yes'' and the

Re: Using CFLoop to Define Variables

2008-08-11 Thread Jeanmarie Richardson
Thanks Josh!! Not sure why I didn't try that :-) Try putting quotes around your variable: cfset SC#x# = listElement / -- Josh ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the

RE: FCKeditor

2008-08-11 Thread William Seiter
cheers ::-Original Message- ::From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ::Sent: Monday, August 11, 2008 10:33 AM ::To: CF-Talk ::Subject: RE: FCKeditor :: ::I readded this virtual directory and this time it works. Thanks for the ::help. :: :: ::-Original Message- ::From:

select problem

2008-08-11 Thread Eclectic User
tr tdCountry/td td select name=addr_country cfoutput query=getCountries option value=#getCountries.cty_iso2# cfif variables.addr_country eq getCountries.cty_iso2selectedcfelseif not len(trim(variables.addr_country)) and getCountries.cty_iso2 eq

RE: select problem

2008-08-11 Thread Dave Phillips
Have you looked at your 'view source' code to see if 'selected' is every being generated? Are there any records in your table that have an empty cty_iso2 column? Dave -Original Message- From: Eclectic User [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 1:07 PM To: CF-Talk

cfqueryparam and bit field (was:Re: CF 8 Built in SQL Server drivers vs. MS SQL Server 2000 SP3 Driver)

2008-08-11 Thread Scott Stewart
The cfqueryparam tags work fine with the character fields, but they're returning true or false as opposed to 1 or 0, even though 1 or 0 is passed to it from the form. Any ideas? Scott Stewart wrote: That's cool, I appreciate the input. thanks sas Craig Dudley wrote: Had a good look

RE: Using CFLoop to Define Variables

2008-08-11 Thread Dave Phillips
Jeanmarie, Another way is like this: cfset setVariable(SCx,listElement) Or for more cfscript purists: cfscript loop here... { setVariable(SCx,listElement); } Regarding cfset SC#x# = listEelment : Since this is an 'evaluation', and I have heard that 'evaluations' cost more

Re: Using CFLoop to Define Variables

2008-08-11 Thread Yuliang Ruan
design wise, would you be better putting those in an array instead of seperate variables? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial

Re: cfqueryparam and bit field

2008-08-11 Thread Carl Von Stetten
Scott, What cfsqltype attribute are you using in your cfqueryparam? You might try cf_sql_bit. Also, I had to write a custom function to generate bit values for all boolean values. Here's my function: !--- BooltoBit can be used to convert logical boolean values (on/off,true/false,yes/no,

Re: Using CFLoop to Define Variables

2008-08-11 Thread C. Hatton Humphrey
Regarding cfset SC#x# = listEelment : Since this is an 'evaluation', and I have heard that 'evaluations' cost more performance wise than using a setVariable() with a concatenated variable name, I prefer to use the first method I indicated above. However, I can't confirm this performance

Re: ColdFusion8 silent installation

2008-08-11 Thread Don L
Thank you, Andy, I initially did not find the link about cf8 silient installation. The missing attribute may also imply that some of these attributes are optional... ColdFusion8 silent installation - Andy Allan The main differences between the CF7 and CF8 silent installs are the properties

Re: ColdFusion8 silent installation

2008-08-11 Thread Don L
Sure. But there's a reason to add a cf8 datasource without using the admin API. ColdFusion8 silent installation - Dave Watts, CTO, Fig Leaf Software Thanks, Dave. Another question, it looks like one may also be able to create a cf8 data source dynamically, and the neo-datasource.xml file

RE: Using CFLoop to Define Variables

2008-08-11 Thread Dave Phillips
From http://www.cfquickdocs.com/?getDoc=SetVariable#SetVariable: Description This function is no longer required in well-formed ColdFusion pages. Well, that's good news. So all it comes down to then is preference. Although I do second Yuliang's comment that using an array might be better

Re: select problem

2008-08-11 Thread Eclectic User
Hi Dave! Thanks for responding. There is no NULL value in the country table and in the source code, United States is 'selected' but its not selected on the page. I am not getting why its happening. Please guide me if you know the reason. Have you looked at your 'view source' code to see if

Re: select problem

2008-08-11 Thread Alan Rother
What browser are you using? Some browsers like to help their users by remembering the most recent state (what was selected in a select box, or typed in a text field) and defaulting to that when you hit a form again. This will even override the Selected attribute of a select box. I know FireFox

  1   2   >