RE: local sql error, not on live site.

2010-02-18 Thread Mark A. Kruger
I would post the whole query... sometimes the line number is not precisely correct :) -mk Mark A. Kruger, MCSE, CFG (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Matthew Smith [mailto:chedders...@gmail.com] Sent: Wednesday,

RE: CF8/Vista 64 debug output not showing up

2010-02-18 Thread Mark A. Kruger
Mary Jo, I have CF 8 (32bit) installed on a 64bit Win7 desktop using the built in web server and I am able to get debugging running fine - so I do not think this is a 64bit or a win7 issue. Please forgive this question - I know you know what you are doing, but I wonder if you have the right

Re: jquery find/replace on an entire body DOM

2010-02-18 Thread Will Tomlinson
Your problem is twofold. 1) change $(this) to this $('body') (assuming that the text will only appear within the body tag. Thanks Andy! I'm having a problem with the page choking on this line: $('body').html(replaced); It literally bogs thr browser down and it just churns away with a blank

RE: jquery find/replace on an entire body DOM

2010-02-18 Thread Andy Matthews
Well, more than likely it's too much text. Is there any way you could narrow down the location of the string in question? Even if you could split the page in half, it might be okay. Will the string always be in an anchor tag? Or a form action attribute? Anything you could do to make jQuery have

Re: jquery find/replace on an entire body DOM

2010-02-18 Thread Will Tomlinson
Your problem is twofold. 1) change $(this) to this $('body') (assuming that the text will only appear within the body tag. Thanks Andy! I'm having a problem with the page choking on this line: $('body').html(replaced); It literally bogs thr browser down and it just churns away with a blank

CFPdfForm

2010-02-18 Thread Chad Gray
Is there a best practice with CFPDFForm? The first time I hit a page using it, it streamed binary into the web browser instead of rendering a PDF. The second time I hit it the PDF opened in Acrobat. Should I use these to be safe? cfcontent type=application/pdf cfsetting

cfdpfform checkboxes

2010-02-18 Thread Imperial, Bob
Hi folks, Can anyone shed some light on how to set a checkbox to checked in a pdfform? I've just started playing with populating a existing pdfform using cfpdfform source=MyPDF.pdf overwrite=yes action=populate and query data (what a time saver). I've googled the checkbox deal but no love

RE: CFPdfForm

2010-02-18 Thread Rick Faircloth
I may be getting this same behavior in FF. When I first go to the page, I get a white screen with Stopped in the status bar at the bottom. Upon hitting the refresh key (sometimes more than once) I'm able to get the PDF to show. IE usually shows the PDF the first time. I'm just using a

Re: CFCOOKIE and IE 78 and Privacy

2010-02-18 Thread br...@electricedgesystems.com br...@electricedgesystems.com
Thanks Dave, and I suppose I should have said that I have used cookies, but have been dealing with government clients that are stuck on IE 6 where there is no privacy settings that govern cookie acceptance ;-) So it looks like the solution is not a CF one (i.e. there isn't an attribute I

Mac II or ColdSpring

2010-02-18 Thread sandeep saini
Guys, We are creating a new website and i have to lay down the architecture for that. Its basically a reporting tool which will fetch data from DB and display. The data can be few records to Thousands of records depending on search criteria. we have to create about 15 reports. The client

Re: CFCOOKIE and IE 78 and Privacy

2010-02-18 Thread Dave Watts
and I suppose I should have said that I have used cookies, but have been dealing with government clients that are stuck on IE 6 where there is no privacy settings that govern cookie acceptance ;-) OK, that makes a lot more sense. So it looks like the solution is not a CF one (i.e.

Re: CFPdfForm

2010-02-18 Thread Dave Watts
The first time I hit a page using it, it streamed binary into the web browser instead of rendering a PDF.  The second time I hit it the PDF opened in Acrobat. That's a fairly common issue - I think it's a browser issue, rather than a server-side issue. That said, you can probably limit it or

Re: Mac II or ColdSpring

2010-02-18 Thread Dominic Watson
Mach II and Coldspring are not setup to achieve the same thing. You could use ColdSpring *within* Mach II. More suitable comparisons to Mach II: * Model glue * Fusebox * ColdBox * CFWheels * ...others that I'm not familiar with I have not used ColdBox or CFWheels and I've only glimpsed at Mach

Re: Mac II or ColdSpring

2010-02-18 Thread Dominic Watson
This looks more helpful than my response: http://www.remotesynthesis.com/post.cfm/Mach-II-or-ColdSpring-Understanding-the-Differences-Between-ColdFusion-Frameworks Dominic On 18 February 2010 17:22, Dominic Watson watson.domi...@googlemail.comwrote: Mach II and Coldspring are not setup to

RE: CFPdfForm

2010-02-18 Thread Rick Faircloth
After doing a little reading in the Adobe docs, I tried this solution: cfDocument format = pdf cfDocumentSection pnbsp;/p /cfDocumentSection cfPDFForm source = ../documents/2010_0211_HoltzmanRentalApplicationOnline_Foxit_htmlSubmit.pdf

RE: cfdpfform checkboxes

2010-02-18 Thread Imperial, Bob
Ok after putzing around with some conditional logic just before the checkboxes I was able to get them checked using On/Off :-). Bob -Original Message- From: Imperial, Bob [mailto:bob_imper...@med.unc.edu] Sent: Thursday, February 18, 2010 10:47 AM To: cf-talk Subject: cfdpfform

Re: CFCOOKIE and IE 78 and Privacy

2010-02-18 Thread br...@electricedgesystems.com br...@electricedgesystems.com
Thanks again Dave! and I suppose I should have said that I have used cookies, but have been dealing with government clients that are stuck on IE 6 where there is no privacy settings that govern cookie acceptance ;-) OK, that makes a lot more sense. So it looks like the

Re: local sql error, not on live site.

2010-02-18 Thread Jochem van Dieten
On 2/18/10, Matthew Smith wrote: I am getting an error in a query that does not happen with crystaltech. Error Executing Database Query. [Macromedia][SequeLink JDBC Driver][ODBC Socket][Microsoft][ODBC SQL Server Driver]Invalid precision value I am betting that a reputable hoster such as

Re: local sql error, not on live site.

2010-02-18 Thread Matthew Smith
That did it. Set up a regular sql server datasource and it worked. Thank you so much. Just out of curiosity, when should I use nvarchar as opposed to varchar? On Thu, Feb 18, 2010 at 12:20 PM, Jochem van Dieten joch...@gmail.comwrote: On 2/18/10, Matthew Smith wrote: I am getting an

Re: local sql error, not on live site.

2010-02-18 Thread Alan Rother
Just out of curiosity, when should I use nvarchar as opposed to varchar? nvarchar allows for an expanded set of characters, for example if you want your app to be able to handle double byte characters for non latin languages such as Chinese or Russian you would use nvarchar or ntext. However,

Re: local sql error, not on live site.

2010-02-18 Thread Judah McAuley
I also believe (though I'm happy to be corrected if I'm wrong) that you can later safely switch from a varchar to an nvarchar. You'd be in danger of truncating data if you went from nvarchar to varchar, but since varchar is a subset of nvarchar, changing the data type at a later date should be

data length for encrypted data

2010-02-18 Thread Matthew Smith
I will be encrypting data using aes within sql server., If the plain text field is nvarchar(100), how long should the encrypted field be? ~| Want to reach the ColdFusion community with something they want? Let them know on

Re: data length for encrypted data

2010-02-18 Thread Mike Chabot
Much longer The actual answer depends on a number of factors. Instead of going down that path, the easiest thing to do is to use a varchar(5000), insert all the data, use SQL to figure out the max length, then shrink the column width. -Mike Chabot On Thu, Feb 18, 2010 at 2:55 PM, Matthew

Time to patch the servers ...

2010-02-18 Thread Dave Watts
http://kb2.adobe.com/cps/822/cpsid_82241.html Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training

Re: Time to patch the servers ...

2010-02-18 Thread Matt Quackenbush
Thanks for the tip, Dave. One quick question: If one's server(s) do not utilize flash in any way (e.g. no flash in any application), is it still vulnerable? ~| Want to reach the ColdFusion community with something they want?

Webservice and TCPMonitor

2010-02-18 Thread John M Bliss
Hi. I'm getting an error when trying to consume a webservice and when I use GetSOAPRequest() to try to see the SOAP request being sent, I get, Unable get the SOAP message as XML. There was an error when retrieving the SOAP envelope from the web service engine:

RE: cfdpfform checkboxes

2010-02-18 Thread Leigh
Ok after putzing around with some conditional logic just before the checkboxes I was able to get them checked using On/Off :-). Glad you figured it out. IIRC the values are also case sensitive. Just something to watch out for.

Re: Time to patch the servers ...

2010-02-18 Thread Dave Watts
If one's server(s) do not utilize flash in any way (e.g. no flash in any application), is it still vulnerable? My understanding is, yes, your servers are still vulnerable unless you specifically disabled BlazeDS/Remoting/LCDS functionality. Dave Watts, CTO, Fig Leaf Software

Re: Webservice and TCPMonitor

2010-02-18 Thread Dave Watts
So I'm trying to use TCPMonitor detailed here: http://livedocs.adobe.com/coldfusion/8/htmldocs/webservices_27.html#1222065instead.  When I set it up like this: Listen Port: 8123 Host: 127.0.0.1 Port: 80 ,,,and then call http://localhost:8123/page_with_call_to_webservice.cfmTCPMonitor

Re: Time to patch the servers ...

2010-02-18 Thread Matt Quackenbush
Ok, cool. Thanks. I have those turned off. :-) ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive:

Re: Time to patch the servers ...

2010-02-18 Thread Dave Watts
Ok, cool.  Thanks.  I have those turned off.  :-) You have remoting turned off? Are you sure? I don't recall an off switch for that, really - you have to edit configuration files manually to disable this if I recall correctly. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/

Re: Time to patch the servers ...

2010-02-18 Thread Barney Boisvert
You can remove the servlet mappings from web-xml. I suppose that's technically editing configuration files manually, but everyone already does that for RDS, so it's not that foreign. cheers, barneyb On Thu, Feb 18, 2010 at 1:50 PM, Dave Watts dwa...@figleaf.com wrote: Ok, cool.  Thanks.  I

Re: Webservice and TCPMonitor

2010-02-18 Thread John M Bliss
Change the host to the remote host you're trying to connect to? Let's say webservice is at https://domain.com/this?wsdl I tried setting TCPMonitor to: Listen Port: 443 Host: domain.com Port: 443 ...but when I click Start, I get, java.net.BindException: Address already in use: JVM_Bind So

Where to encrypt - cf or db or both?

2010-02-18 Thread Matthew Smith
I want to encrypt billing information an ecommerce app. I know the argument against storing it, and we are considering not storing it. But I just want to explore options. So I can encrypt in cf with aes, or in sql server with a certificate and triple des symmetric key, or both cf AND sql

Re: Webservice and TCPMonitor

2010-02-18 Thread denstar
I use the one built into Eclipse : http://coldshen.com/blog/index.cfm/2007/7/29/Using-the-TCPIP-Monitor-in-Eclipse-33 :den -- The artist finds, that the more he can confine his attention to a particular part of any work, his productions are the more perfect, and grow under his hands in the

Re: Webservice and TCPMonitor

2010-02-18 Thread John M Bliss
Hm. That doesn't come with CFBuilder standalone. Anyone know how to add it in? On Thu, Feb 18, 2010 at 4:50 PM, denstar valliants...@gmail.com wrote: I use the one built into Eclipse : http://coldshen.com/blog/index.cfm/2007/7/29/Using-the-TCPIP-Monitor-in-Eclipse-33 :den -- The

Re: Time to patch the servers ...

2010-02-18 Thread Dave Watts
You can remove the servlet mappings from web-xml.  I suppose that's technically editing configuration files manually, but everyone already does that for RDS, so it's not that foreign. Alas, let me tell you, everyone does not already do that for RDS in production. Dave Watts, CTO, Fig Leaf

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Alan Rother
What is required for PCI compliance? Short answer, if you're storing it, obtaining PCI compliance is nearly impossible* *Impossible: SO fraggin expensive and complicated it's not worth doing. My 2cents on encryption: I'd use CF and a complex rotating schema of keys. If you use the SQL server

Re: Webservice and TCPMonitor

2010-02-18 Thread Dave Watts
Change the host to the remote host you're trying to connect to? Let's say webservice is at https://domain.com/this?wsdl  I tried setting TCPMonitor to: Listen Port: 443 Host: domain.com Port: 443 ...but when I click Start, I get, java.net.BindException: Address already in use: JVM_Bind

Re: Webservice and TCPMonitor

2010-02-18 Thread Dave Watts
Well, so much for that guess. I just use Wireshark/tcpdump for this sort of thing nowadays, typically. The utility you're using is there to let you capture incoming requests, and I don't know if it supports outgoing requests. OK, I spent a minute reading the documentation for the TCPMonitor

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Maureen
I second the comments about not storing it unless absolutely required. You are just buying headaches. For PCI, go forth and read: https://www.pcisecuritystandards.org/index.shtml On Thu, Feb 18, 2010 at 2:44 PM, Matthew Smith chedders...@gmail.com wrote: I want to encrypt billing information

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Matthew Smith
When would an ecommerce site be required to get PCI certified? At what volume of transactions? On Thu, Feb 18, 2010 at 5:25 PM, Maureen mamamaur...@gmail.com wrote: I second the comments about not storing it unless absolutely required. You are just buying headaches. For PCI, go forth and

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Dave Watts
I want to encrypt billing information an ecommerce app.  I know the argument against storing it, and we are considering not storing it.  But I just want to explore options. So I can encrypt in cf with aes, or in sql server with a certificate and triple des symmetric key, or both cf AND sql

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Dave Watts
Also, if I encrypt in sql server with a certificate and key, if I back up the live server and restore locally, will the data be accessible?  Are the certificates and keys movable? I haven't actually done this with SQL Server. I would, however, be extremely surprised if this isn't portable,

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread James Holmes
Don't store it. You can save some money and check each transaction manually by using e-Path instead of a traditional gateway: http://www.e-path.com.au/ mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ On 19 February 2010 06:44, Matthew Smith

RE: Where to encrypt - cf or db or both?

2010-02-18 Thread Eric Nicholas Sweeney
I run into this problem/question as well - for small companies/storefronts who want to offer online purchasing or bill pay... From their business perspective it doesn't make sense to purchase an online payment gateway. The reasons vary - but usually it is because of extremely low volume and/or

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Maureen
There are many methods for small online businesses to accept credit cards without storing the data on their servers - paypal, google payments, authorizenet, etc...and the cost per transaction is not going to be any more than it would be if they used their own Merchant processor manually, and in

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Judah McAuley
I concur with Maureen, look at Google and Paypal. The key there is that you send the user off to Google's site and the CC info is entered there, not on your client's site, so you don't even have to worry about SSL on the client site, let alone PCI compliance. Years and years ago, I did do an

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Matthew Smith
Ok, I'm convinced, we shouldn't store it. So what's the best way to carry it to the final order commitment step? Session variables? On Thu, Feb 18, 2010 at 6:07 PM, Maureen mamamaur...@gmail.com wrote: There are many methods for small online businesses to accept credit cards without

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Dave Watts
When would an ecommerce site be required to get PCI certified?  At what volume of transactions? My understanding is that you must comply with PCI-DSS if you handle a single transaction. I don't know if certification is ever required, but you may well be liable if you're not certified and you

RE: Where to encrypt - cf or db or both?

2010-02-18 Thread Eric Nicholas Sweeney
Yes Maureen - I know this. What we are asking is - What if the customer DOESN'T WANT TO USE THOSE - What if they want you to store the credit card anyway... regardless of compliance. (Compliance isn't law...) What if that is your option? What then? How should you do it? Matt's original

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Judah McAuley
On Thu, Feb 18, 2010 at 4:26 PM, Eric Nicholas Sweeney n...@bigfatdesigns.com wrote: To me, recommending a service is like answering the question How do you hammer a nail? with the answer being Hire a contractor. In this case, the answer is hire a lawyer because you will be dragged in to any

RE: Where to encrypt - cf or db or both?

2010-02-18 Thread Josh Nathanson
To me, recommending a service is like answering the question How do you hammer a nail? with the answer being Hire a contractor. Well...not exactly. There aren't huge legal ramifications if you decide to hammer the nail yourself. In this case hire a contractor is the right answer.

RE: Where to encrypt - cf or db or both?

2010-02-18 Thread Josh Nathanson
So what's the best way to carry it to the final order commitment step? Session variables? Best case scenario, it IS the final order step. That way it is never stored in a persistent scope. Most eCommerce sites seem to do it that way (there are exceptions of course). -- Josh

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Dave Watts
Yes Maureen - I know this. What we are asking is - What if the customer DOESN'T WANT TO USE THOSE - What if they want you to store the credit card anyway... regardless of compliance. (Compliance isn't law...)  What if that is your option? What then? How should you do it? Sometimes the best

RE: Where to encrypt - cf or db or both?

2010-02-18 Thread Mark A. Kruger
Dave, You win my weekly erudition award :) -Mark Mark A. Kruger, MCSE, CFG (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, February 18, 2010 6:41 PM To: cf-talk Subject:

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Dave Watts
You win my weekly erudition award :) Is there a cash prize attached? I've been involved with quite a few lawsuits lately, as an expert witness. People get sued for the darndest things. If a development client asked me to build persistent storage of CC info, I'd require complete indemnification

Re: CF8/Vista 64 debug output not showing up

2010-02-18 Thread Mary Jo Sminkey
Yes Maureen - I know this. What we are asking is - What if the customer DOESN'T WANT TO USE THOSE - What if they want you to store the credit card anyway... regardless of compliance. (Compliance isn't law...) What if that is your option? Actually, there *are* states that have made compliance a

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread James Holmes
The e_Path provider I linked earlier caters for specifically this kind of situation. mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ On 19 February 2010 07:57, Eric Nicholas Sweeney n...@bigfatdesigns.comwrote: From their business perspective it doesn't make

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Matthew Smith
Ok, so, obviously there a ton of issues involved. I don't think we could hand off the payment to paypal because some of the stuff they are selling is unique. The final order step involves transactional locking and I can't hold up the process and wait for them to come back to our site. We have

Re: Mac II or ColdSpring

2010-02-18 Thread Charlie Griefer
You do realize that most of what you're asking isn't the function of a framework and the framework itself would really have no part in any of the items you listed. Also, as Dominic pointed out, Mach ii and ColdSpring address different areas of concerns. Mach-ii (and ColdBox and Fusebox and

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Maureen
Then the client is an idiot, and you are taking a grave risk in allowing them to proceed. P Please let us know who is it so we don't use their web site and expose our credit card numbers to potential hackers. Not long ago I had a project with a large government agency who wanted to store all

Re: Where to encrypt - cf or db or both?

2010-02-18 Thread Jason Fisher
Agreed. The question has come up from the OP on how to deal with the CC if you never have it in persistent scope, and the answer is simply that capturing the CC number (and IPV code etc) should only ever be the final step. In other words: * build the cart: in session or DB, your preference

Re: Mac II or ColdSpring

2010-02-18 Thread James Holmes
It's really worth becoming familiar with Framework one: http://fw1.riaforge.org/ mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ On 19 February 2010 01:22, Dominic Watson watson.domi...@googlemail.comwrote: Mach II and Coldspring are not setup to achieve the

RE: Where to encrypt - cf or db or both?

2010-02-18 Thread Eric Nicholas Sweeney
I understand the legal ramifications very well - very well versed in it all - I use to design Internet Banking Apps (GUI - not backend) and I am a reseller of Authorize.net... It's in my best interest to use them and I push them continually. I get all your points and agree 100%. I understand it's

is there a safe way to save an object/cfc loaded into the app scope into the session scope?

2010-02-18 Thread crippe crippe
I am building an application that loads all my cfc objects into the application scope in the onApplicationStart function like so: cfset Application.components[variables.thisComponentVarName] = CreateObject(component,variables.thisComponentRelativeLoc) / (notice i am not calling the init

Re: is there a safe way to save an object/cfc loaded into the app scope into the session scope?

2010-02-18 Thread James Holmes
CF copies objects by reference. If you want a new copy of the sessionHandler, createobject() a new one. mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ On 19 February 2010 14:22, crippe crippe crippe...@hotmail.com wrote: I am building an application that

Re: is there a safe way to save an object/cfc loaded into the app scope into the session scope?

2010-02-18 Thread Matt Quackenbush
CFCs, like structs, are passed by reference, which is why you are seeing the behavior you are seeing. That is exactly what it is suppose to do. If you want a per-session object, then you must actually create that object per session. session.myObject = createObject(component,path.to.cfc).init()