RE: managing emails

2010-01-18 Thread Richard Meredith-Hardy
Hmm. Not sure what you mean, are you suggesting there should be a group for every job? There are 1000's of them. Richard -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: 16 January 2010 17:06 To: cf-talk Subject: Re: managing emails What I'm really reluctant

RE: managing emails

2010-01-18 Thread Richard Meredith-Hardy
I don't think that matters, so long as it is a cheaper solution than Exchange or Zimbra as Dave suggests. I'm not clear on how one would use it to isolate correspondence relating to single jobs though. I'm probably being thick... Richard -Original Message- From: Cameron Childress

Re: Recent SQL Injection attacks

2010-01-18 Thread Tom Chiverton
On Friday 15 Jan 2010, Chung Chow wrote: if ( isdefined(cgi.query_string) and ( findnocase(DECLARE,cgi.query_string) or I do declare that keyword matching alone has issues :-) -- Helping to challengingly envisioneer eigth-generation network integrated turn-key bandwidth as

64bit CF Server and System DSNs

2010-01-18 Thread Bobby Hartsfiled
Normal 0 false false false EN-US X-NONE X-NONE MicrosoftInternetExplorer4 We are in the process of setting up a 64bit, multiserver configuration ColdFusion server. We have setup and tested multiserver configuration in the past but that was on 32bit. This is our first attempt

Re: 64bit CF Server and System DSNs

2010-01-18 Thread Greg Luce
Bobby, I'm no sys admin, but I found on windows 7 64 bit that TCP/IP was disabled by default in MSSQL. Not sure if that helps, but it tripped me up for awhile and I've heard of others getting stuck on that. -- Greg Luce Luce Consulting Services, Inc. www.luceconsulting.net (863) 273-0289 On

Re: 64bit CF Server and System DSNs

2010-01-18 Thread Bobby Hartsfiled
Hi Greg, thanks for the response. The SQL server is an existing (separate) server that we have used for years. It has no problems talking to our other existing servers. Return-Path: listmas...@houseoffusion.com Received: from mail.houseoffusion.com

RE: More Efficient (Faster) Method

2010-01-18 Thread Eric Nicholas Sweeney
Thanks Everyone for the great feedback - Qing: Is the inner loop for query qryGetShipCosts really necessary? No - it wasn't - thanks for the catch! I always include SELECT TOP 1... I can't do that (MySQL) - but I can do Maxrows=1 - and I usually do. Thanks for that catch as well. And you

Injection Testing/Monitoring

2010-01-18 Thread Andrew Tegenkamp
With the recent SQL Injection talk, I was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. Monitor downtime and all that is covered, but I don't have anything too useful for testing SQL Injection on new code and monitoring for SQL Injection on

RE: More Efficient (Faster) Method

2010-01-18 Thread brad
I can't do that (MySQL) - but I can do Maxrows=1 - and I usually do. For the record, putting maxrows=1 in a cfquery still asks the database to retrieve all the rows-- the drivers just stop fetching after the first row. Your database might be able to optimize fetching the first record better

RE: Injection Testing/Monitoring

2010-01-18 Thread brad
One of the best ways to test your site is to post the URL here and claim it can't be hacked. Usually people will help you out. :) As far as specific testing tools, I think good practice and code reviews are one of the best things here. You should be able to look at a query and spot any

Re: Injection Testing/Monitoring

2010-01-18 Thread Cameron Childress
On Mon, Jan 18, 2010 at 12:44 PM, b...@bradwood.com wrote: As far as specific testing tools, I think good practice and code reviews are one of the best things here.  You should be able to look at a query and spot any dynamic parts that are out of a cfqueryparam or not sanitized in some other

Injection Testing/Monitoring

2010-01-18 Thread Andrew Tegenkamp
With the recent SQL Injection talk, I was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. Monitor downtime and all that is covered, but I don't have anything too useful for testing SQL Injection on new code and monitoring for SQL Injection on

RE: Injection Testing/Monitoring

2010-01-18 Thread Justin Scott
With the recent SQL Injection talk, I was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. One of the prevention tools that I made available a while back will find many SQL injection attempts and can stop them and notify you. It's not perfect

Re: ORM question

2010-01-18 Thread Victor Moore
I think I will stick with one load per call and probably will end up saving it in the application scope so it's available in other places as needed. Thank you Victor On Mon, Jan 18, 2010 at 2:06 AM, Barney Boisvert bboisv...@gmail.com wrote: It does solve the problem, but has pretty

Re: ORM question

2010-01-18 Thread Barney Boisvert
You should virtually never cache ORM-managed instances anywhere. Their state MUST be managed by the ORM framework, or you run into all kinds of crazy issues. If you simply must cache one (a common-ish use case is for business-level transactions where you need to keep modified persistent

RE: Injection Testing/Monitoring

2010-01-18 Thread brad
On the topic, I guess to be fair I could mention that there are web application firewalls out there that filter for attacks such as these. They are probably going to be able to filter a high amount of traffic faster that CF can, and if you pay $$ the vendor keeps up with all the latest attack

Re: ORM question

2010-01-18 Thread Dave Watts
You should virtually never cache ORM-managed instances anywhere. Their state MUST be managed by the ORM framework, or you run into all kinds of crazy issues.  If you simply must cache one (a common-ish use case is for business-level transactions where you need to keep modified persistent

Difference between 3 tier architecture and MVC pattern

2010-01-18 Thread funand learning
Hi All, I was trying to understand the concepts of fusebox and came across MVC design pattern, Can anyone please help me in understanding the difference between MVC and 3 tier architecture. I am confused as both are concerened with separation of layers? Thanks.

Re: ORM question

2010-01-18 Thread Victor Moore
Good to know. This is exactly the stuff I was talking about. Using old tricks with new dogs :) Before, I as just running the query at application start up, loading it in app scope (I need it for read only purposes anyway) and use it whenever i need it. It changes very rarely but when changes I

Re: Difference between 3 tier architecture and MVC pattern

2010-01-18 Thread Barney Boisvert
MVC is a pattern for structuring your UI-layer code, while a three tier architecture is about how your hardware is laid out. MVC is about separating the request processing code from the state (model) code and from the display (view) code. The three all worth together to deal with a user

Downloading a file from a website

2010-01-18 Thread Phillip Vector
If I wanted to have my server download an image from a website, would cffile be able to handle that? If so, how since I thought cffile can only work with files it has or the user is uploading. If not, then what will work? ~|

RE: Downloading a file from a website

2010-01-18 Thread Che Vilnonis
cfcontent should work if I remember correctly. ~CV -Original Message- From: Phillip Vector [mailto:vec...@mostdeadlygame.com] Sent: Monday, January 18, 2010 3:15 PM To: cf-talk Subject: Downloading a file from a website If I wanted to have my server download an image from a website,

Re: Downloading a file from a website

2010-01-18 Thread Cameron Childress
On Mon, Jan 18, 2010 at 3:14 PM, Phillip Vector vec...@mostdeadlygame.com wrote: If I wanted to have my server download an image from a website, would cffile be able to handle that? If so, how since I thought cffile can only work with files it has or the user is uploading. If not, then what

RE: Downloading a file from a website

2010-01-18 Thread Che Vilnonis
OOPS, I misread the email... Yup, you can scrape images from other sites with cfhttp. ~CV -Original Message- From: Cameron Childress [mailto:camer...@gmail.com] Sent: Monday, January 18, 2010 3:17 PM To: cf-talk Subject: Re: Downloading a file from a website On Mon, Jan 18, 2010 at

Re: Downloading a file from a website

2010-01-18 Thread Phillip Vector
From what I am reading, that is used to make a page using a file. What I'd like to do is connect to www.foo.bar/images/foobar.jpg and then save that jpg file as an image on my server. On Mon, Jan 18, 2010 at 12:16 PM, Che Vilnonis ch...@asitv.com wrote: cfcontent should work if I remember

Re: Downloading a file from a website

2010-01-18 Thread Phillip Vector
Thanks all. :) ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329773

Re: Downloading a file from a website

2010-01-18 Thread Dave Watts
What I'd like to do is connect to www.foo.bar/images/foobar.jpg and then save that jpg file as an image on my server. That's what CFHTTP is for. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB)

Re: Difference between 3 tier architecture and MVC pattern

2010-01-18 Thread Sean Corfield
On Mon, Jan 18, 2010 at 11:56 AM, Barney Boisvert bboisv...@gmail.com wrote: Three tier architecture is about physically separating your presentation code (typically an MVC application) from your business logic (typically a set of business objects) and your persistence layer (a database) onto