Creating and returning queries from Java to CF

2005-03-22 Thread Tom Kitta
Hello, I have the following problem: I want to create a query object in Java *manually* and return in to CF. Lesser problem is to send a query to Java from CF. I looked all over the web and I was unable to find any example that would explain how to do in java simple things like “queryAddRow()

RE: Scheduled Task Listing

2005-05-04 Thread Tom Kitta
Hello, The simplest solution is to loop over all tasks and see whatever its on of yours. To do this define a list with all your task names. Then when you loop over the task in your code don't display them right away, but have an if statement that checks whatever a task is one of yours or not. TK

RE: XML as a database? Please say yes!

2005-09-13 Thread Tom Kitta
I used to store data in XML data files in few applications including a picture album and a guest book. XML as a storage was quite hard to work with when compared to a database and you really need a good reason to use it. For simple applications that don't have any special needs and can use a

RE: possible CFMX 6.1 cfschedule bug

2005-09-14 Thread Tom Kitta
You should always check whatever a scheduled process run and whatever that run was successful (i.e. no error was thrown). One simple way to make sure it run and the run was a success is to send an email at the end of the process file to your (or some designated for that purpose) email account.

RE: ColdFusion Security Holes - Best Practices

2005-10-07 Thread Tom Kitta
I remember one advisory, it was related to CF3 Administrator. The password field length was only secured by the form maxlength attribute, not on server side. Thus, someone could kill a CF server by posting to the administrator login screen password field some very long string. The application

RE: How Do I Get The Results of This Query Into a Cookie?

2005-10-07 Thread Tom Kitta
Modern browsers should support 4k worth of data in a cookie - i.e. about 4096 characters. There is also a limit on the number of cookies you can set - something around 20 per domain. It is a good idea to store as little information in a cookie as possible. WDDX is a quick solution to your problem,

RE: CFID

2005-10-07 Thread Tom Kitta
I think this note explains a lot about CFIDE and CFTOKEN: http://cfmxplus.blogspot.com/2002_06_23_cfmxplus_archive.html As mentioned in above article, by default CFIDE and CFTOKEN are just pseudo-random numbers that are rather short, thus, there is a chance of them repeating. TK -Original

RE: CFID

2005-10-07 Thread Tom Kitta
: Re: CFID OK Tom thanks, I had a read of that, most helpful .. so if I want to make sure I have a unique identifier all i need is the cftoken with uuid checked in cfadmin? Jenny - Original Message - From: Tom Kitta [EMAIL PROTECTED] To: CF-Talk cf-talk@houseoffusion.com Sent: Saturday

cfqueryparam

2003-10-22 Thread Tom Kitta
Hello, There is a very useful tag used together with cfquery, cfqueryparam. However, no matter how much I search I am unable to find a concise documentation for this tag. What I mean is the translation of CF_SQL argument types into database types. So far I am learning what works and what doesn't

RE: Getting a value from a query

2003-10-22 Thread Tom Kitta
I am not sure what exactly you are trying to do but you access specific parts of the query output by using this syntax: queryname.columnname[rownumber] If you want to get all data from specific column in a query and convert it into a long string (say comma delimited),you need to loop over a query

RE: cfqueryparam

2003-10-22 Thread Tom Kitta
I also discovered that CF_SQL_Numeric does not correspons to MS SQL Server Numeric type, it is closer to an integer as it killed my decimal point (rounds down to the closest integer). CF_SQL_MONEY seams to work fine -- direct correspondance to MS SQL Money type? (I think it is close enough) I

RE: Switch:Case Differs in CFMX from CF5?

2003-10-22 Thread Tom Kitta
I think the problem is in the fact that for CF no and false are the same thing (as well as yes and true). So you could try: function convertBooleanOrNull(target) { var value = NULL; switch (target) { case Y: case true: value = True; break; case N: case false: value = False; break; } return value;

RE: cfqueryparam

2003-10-22 Thread Tom Kitta
It is great that someone compiled a table of translation. However, are you sure about CF_SQL_NUMERIC? It doesn't correspond to MS SQL type numeric, MS SQL allows for decimal point in its numeric while CF_SQL_Numeric doesn't. I think CF_SQL_Numeric is more of an integer - or am I missing something

Re: Translation please: CFC::CF as ???:ASP

2003-10-23 Thread Tom Kitta
I am not an ASP person, but as far as I know ASP is an interpreted language and in its capabilities similar to CF5 (through CF has way more futures). There is no equivalent of components for ASP AFAIK. I think CFMX is more like .net. I would suggest that you use web services for communication

Re: EXECUTING EXTERNAL PROGRAM

2003-10-23 Thread Tom Kitta
Is there some CFX module for CF4 that mimicks cfexecute? There must be one, just have to search for it. TK - Original Message - From: Gunny To: CF-Talk Sent: Thursday, October 23, 2003 2:02 PM Subject: RE: EXECUTING EXTERNAL PROGRAM CFEXECUTE would be a snap, but it didn't exist in

Re: Strange CFLOGIN issue with timeouts for one user

2003-10-23 Thread Tom Kitta
Well, do you think every PC that she is tryied to use has cookies disabled? Also, if cookies are disabld logins still occur, but last only for the duration of a single request - this would be fine if you pass login information with each request. If you are not going to use cookies, get rid of

Re: CFCs and UDFs

2003-10-23 Thread Tom Kitta
I agree with this post, but there is another not too recommended way of getting that UDF, place it in say session scope and then you can access it from within your CFC TK - Original Message - From: Barney Boisvert To: CF-Talk Sent: Thursday, October 23, 2003 5:07 PM Subject: RE: CFCs

Re: Strange CFLOGIN issue with timeouts for one user

2003-10-23 Thread Tom Kitta
Certainly could be if she is in a company that doesn't allow cookies on browsers. But this would contradict everyone else not having any trouble with their logins. cflogin is required though to help enforce authentication checking. Also, afaik, cfloginuser should only be used inside cflogin.

Re: Dynamic Nav and evaluate()

2003-10-23 Thread Tom Kitta
That is quite complex navigation you got there. Do your navigation links change so much? How about using a database to populate your navigation or XML based menus? TK - Original Message - From: Shannon Rhodes To: CF-Talk Sent: Thursday, October 23, 2003 5:27 PM Subject: Dynamic Nav

Re: Macromedia sinks on sales news

2003-10-23 Thread Tom Kitta
What are your thoughts, will MM rebound or will it sink deeper? We don't want Jim's portfolio to sink any more ;-) TK - Original Message - From: Jim Davis To: CF-Talk Sent: Thursday, October 23, 2003 6:33 PM Subject: RE: Macromedia sinks on sales news Yeah. I noticed that today. My

RE: I need some enlightenment...

2003-10-24 Thread Tom Kitta
You mean you wanted to do something like: cfloop index=i from=1 to=4 cfset testStruct#i# = structNew() /cfloop 4 different structures or cfset testStruct = arrayNew(1) cfloop index=i from=1 to=4 cfset testStruct[i] = structNew() /cfloop array of 4 structs or cfset testStruct = structNew()

RE: I need some enlightenment...

2003-10-24 Thread Tom Kitta
Does anyone hold a patent for thought? If not, then it is about time someone patented it. Then each time someone uses his or her brain a fee would have to be paid. I wander which country/institution/social class would have to pay the most per capita :) TK -Original Message- From: Bryan F.

Checking array def

2003-10-25 Thread Tom Kitta
Hello, I have the following problem, I want to find out whatever the variable 'this.fieldArray[isUUIDpresent].selectArray' is Defined. 'this.fieldArray' is an array of structures. One member of some structure could be 'selectArray' I cannot do it with isDefined() function by doing this

Re: Checking array def

2003-10-25 Thread Tom Kitta
- From: Tom Kitta [mailto:[EMAIL PROTECTED] Sent: Saturday, October 25, 2003 6:18 PM To: CF-Talk Subject: Checking array def Hello, I have the following problem, I want to find out whatever the variable 'this.fieldArray[isUUIDpresent].selectArray' is Defined. 'this.fieldArray' is an array

Re: cfquery performance suggestions

2003-10-26 Thread Tom Kitta
You can make it a stored procedure in SQL server or at least use cfqueryparam tag. How often does the category data change and how recent results do you need? If it doesn't need to be the newest result set consider caching the query data (you may even run a process every so often to populate a

RE: CFMX 6.1 Session problems - help

2003-10-27 Thread Tom Kitta
I thought CFMX fix the session jumping problems that CF 5 had and thus did away with the need to lock session vars, other then in race conditions.Is this true?Is it possible that locking causes a problem if CFMX? [Tom Kitta] As far as Macromedia is disclosing, there is no need for shared

RE: Query-past protection?

2003-10-27 Thread Tom Kitta
It is an undocumented feature, also known as a software bug. Well, it is not the first nor the last that we see in CFMX. Well, then again someone migh say that this is the desired behaviour and anything else would be a bug. TK -Original Message- From: Michael Dinowitz [mailto:[EMAIL

RE: Trends in static vs dynamic websites

2003-10-27 Thread Tom Kitta
This article is basically saying dynamic is not for everyone and not the best solution to every problem. However, the same thing could be said of static pages. When information changes very often, like every minute or less, dynamic systems are far better bet. Sure, for something like About Us or

Re: Book to learn MS SQL 2000

2003-10-27 Thread Tom Kitta
If writing SQL then how about SQL in 10 minutes by Ben Forta? This is a very short primer on sql. TK - Original Message - From: Michael T. Tangorre To: CF-Talk Sent: Monday, October 27, 2003 7:21 PM Subject: RE: Book to learn MS SQL 2000 Are you talking administration or writing sql?

Re: CFMX 6.1 - false file not found error.

2003-10-28 Thread Tom Kitta
Happen to me once or twice, I have no clue why, but I am sure that strange behavior is not limited to MM products alone (having worked a bit with MS I sort of run into things ;) TK - Original Message - From: Bosky, Dave To: CF-Talk Sent: Tuesday, October 28, 2003 8:39 AM Subject: CFMX

Re: Dynamic CFCs

2003-10-28 Thread Tom Kitta
I done it once or twice before, I think the following would work (If my memory serves me well): cfset result = evaluate(Validation. dynamicFunctionName (argumentVar)) Anyways if above doesn't work, there is a solution, you just have to play around with it as I do remember doing above in CFMX.

Re: Dynamic CFCs

2003-10-28 Thread Tom Kitta
- Original Message - From: Bryan F. Hogan To: CF-Talk Sent: Tuesday, October 28, 2003 12:45 PM Subject: RE: Dynamic CFCs Why not just create a function that calls the correct function based on the supplied argument? How about having dynamic evaluation inside the CFC? If you have 20

Re: Wierd CFC Path Problem - Question on CFC types (HELP!!)

2003-10-28 Thread Tom Kitta
Have you tried restarting both servers? It solved many strange problems for me like invisible templates etc. TK - Original Message - From: Jim Davis To: CF-Talk Sent: Tuesday, October 28, 2003 8:42 PM Subject: RE: Wierd CFC Path Problem - Question on CFC types (HELP!!) Sorry - I'm

Re: Wierd CFC Path Problem - Question on CFC types (HELP!!)

2003-10-28 Thread Tom Kitta
in a different way and dropping the name as it found it? Should I be using com.depressedpress at all or maybe something more like com_depressedpress (so that com isn't the mapped folder...)? I'm going crazy on this one... Thanks, Jim Davis -Original Message- From: Tom Kitta [mailto:[EMAIL

RE: To MAXLENGTH or not that is the question?

2003-10-29 Thread Tom Kitta
The whole point of using cfqueryparam is to make sure that no one passes ;drop table users;- however, this is not what for the 'maxlength' parameter is. It is there, in my opinion, to limit the amount of data passed to the server to the specified number of characters. Say, a hacker circumvents

RE: Mapped drives on server not displaying...why?

2003-10-30 Thread Tom Kitta
The problem is that the CF server doesn't have access on the Win box to access mapped drives. You need to change the security setting for CF process to make it work. I saw a how to do list for this problem some time ago, and the above is what I remember from it. Maybe someone else on the list can

CF treatment of queries inside CFCs

2003-10-30 Thread Tom Kitta
Hello, I would like you guys to give me some feedback as to my recent programming practice. What do you think of it, how can it be improved etc. I decided to place all of my CF application database access into a single CFC, i.e. every query that the application ever uses is inside this cfc.

RE: CF treatment of queries inside CFCs

2003-10-30 Thread Tom Kitta
design. -Matt On Thursday, October 30, 2003, at 04:04 PM, Tom Kitta wrote: Hello, I would like you guys to give me some feedback as to my recent programming practice. What do you think of it, how can it be improved etc. I decided to place all of my CF application database access into a single

Re: CF treatment of queries inside CFCs

2003-10-30 Thread Tom Kitta
I never claimed that my solution is very OO. However, I treat DB interaction CFCs as objects - the more general cfc is inherited by child CFC and all cfcs encapsulate some functionality (like variable caching). Granted that I only need a single instance of my object and not much manipulation is

Re: emailings with cfmx and bad syntax email-adresses

2003-11-01 Thread Tom Kitta
How about using cftry and cfcatch? Or am I missing the main idea behind your question? TK - Original Message - From: [EMAIL PROTECTED] To: CF-Talk Sent: Saturday, November 01, 2003 6:21 PM Subject: emailings with cfmx and bad syntax email-adresses Hi list, we are using CFMX 6.1 now

Re: [Reply To] (CF 6 reliability) from Re: Memory Leak on Win2k/CMX6.1

2003-11-04 Thread Tom Kitta
The only problem we have with CFMX is the scheduler application under administrator. When we put scheduled events in MX they don't seam to run on the schedule we assign to them (don't run at all or run at different times). We were unable to fix this problem and thus all scheduled events are stuck

Re: Killing a session variable

2003-11-04 Thread Tom Kitta
cfset structClear(session) TK - Original Message - From: brob To: CF-Talk Sent: Tuesday, November 04, 2003 1:03 PM Subject: Killing a session variable Hey guyshow do i kill a session variable so that I people can't log bck into the admin site.I just havent touched it in a long time

Re: Novell to acquire SUSE

2003-11-04 Thread Tom Kitta
Well there is just a small problem with the enterprise edition, cost. It is very expensive solution as far as Linux goes. RH Linux 7.* was nice since it was a free download and had all the bells and whistles one needs. Now with Fedora we have not a very reliable version and Enterprise solution is

Re: Arden Weiss - virus sending messages to the list?

2003-11-06 Thread Tom Kitta
Poor Arden, his reputation is burned now. I didn't get anything from him - maybe that server e-mail virus scanner program that I installed last month does do something? TK - Original Message - From: Haggerty, Mike To: CF-Talk Sent: Thursday, November 06, 2003 12:29 PM Subject: RE:

OT: Re: weather feed

2003-11-06 Thread Tom Kitta
Check this guys site: http://www.singerscreations.com/ He created a small utility that grabs data from weather.com or something. I bet he can lead you to a solution you seek. TK - Original Message - From: [EMAIL PROTECTED] To: CF-Talk Sent: Thursday, November 06, 2003 1:18 PM

Re: M$ flash killer

2003-11-06 Thread Tom Kitta
I think it takes more than just putting M$ name on some product to make it great and widely accepted especially in the developer community. I believe that developers will ultimately gravitate towards product easier to use rather than the one managers could be pushing for. TK - Original

RE: cftransaction HELP Please...

2004-02-02 Thread Tom Kitta
Mainly performance loss, you don't want to hold a 'lock' on DB for too long. Keep anything inside cftransaction tag to the minimum, especially don't print long data results to the screen, or worse, do IO operations. TK -Original Message- From: Spectrum WebDesign [mailto:[EMAIL PROTECTED]

RE: OT-Firewall

2004-02-04 Thread Tom Kitta
If you want something easy to setup, it will not be free, but will cost you a bit. Most hard to setup FW are 'free' i.e. they either come with operating system or are free add ons (like using Linux or OpenBSD. Try to look for an appliance (otherwise known as HW firewall) - a little box which is

RE: OT-Firewall

2004-02-04 Thread Tom Kitta
can find out more about these HW FW by going to their respective websites. There are many models to choose, prices vary a lot (usually you can get the box for much less than the listed price on company website). TK [Tom Kitta]-Original Message- From: Eric Creese [mailto:[EMAIL PROTECTED

RE: Restoring DB I'm screwed!

2004-02-04 Thread Tom Kitta
Move with is just an option on the restore, you need to specify new path for the files that you are restoring. TK -Original Message- From: Eric Creese [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 2:40 PM To: CF-Talk Subject: RE: Restoring DB I'm screwed! You may have to

RE: OT-Firewall

2004-02-04 Thread Tom Kitta
that is statefull on dedicated OS 7 using real proxy firewall on common OS 8 using real proxy firewall on dedicated OS I would tie 6 and 7. Of course, specifics of the product will matter a lot and knowledge of the person that sets it all up. So above is only very general outline. TK [Tom Kitta

RE: XML storage

2004-02-05 Thread Tom Kitta
Matt, I have checked all of your links and none of them lead to articles you mentioned. TK -Original Message- From: Matt Liotta [mailto:[EMAIL PROTECTED] Sent: Thursday, February 05, 2004 4:02 PM To: CF-Talk Subject: XML storage I would normally responsd to specific messages, but I am

RE: RE: MySQL and CF

2004-02-06 Thread Tom Kitta
to show it too. Also, same thing holds for websites that use mySQL as a backend. Otherwise mySQL would be only useful for strictly non-commercial applications and it would simply be useless to most people. TK [Tom Kitta] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

Working with CLOBs

2004-02-06 Thread Tom Kitta
Hello, I am running into a strange problem with CFMX6.1 and SQL Server2000. I am able to insert 170k text into a 'text' field, however when I query and retrieve the same text CF only dumps the first 64000bytes precisely. The same query outside CF works fine (I cannot view actual data dump using

RE: Working with CLOBs

2004-02-06 Thread Tom Kitta
to pull back more than 64K bytes from a BLOB/CLOB field. Cheers, barneyb -Original Message- From: Tom Kitta [mailto:[EMAIL PROTECTED] Sent: Friday, February 06, 2004 1:53 PM To: CF-Talk Subject: Working with CLOBs Hello, I am running into a strange problem with CFMX6.1 and SQL

RE: Which is quicker

2004-02-11 Thread Tom Kitta
I don't know why people don't like iif (immediate if), it is as quick as cfif and takes only one line. For simple things, like if x y print true else print false, I think using iif makes code shorter without sacrificing clarity and speed. If you don't believe iif is fast then I encourage you to

RE: Which is quicker

2004-02-11 Thread Tom Kitta
/cfoutput /cf_stopwatch -Original Message- From: Tom Kitta [mailto:[EMAIL PROTECTED] Sent: Thursday, 12 February 2004 10:47 a.m. To: CF-Talk Subject: RE: Which is quicker I don't know why people don't like iif (immediate if), it is as quick as cfif and takes only one line. For simple

RE: Which is quicker

2004-02-11 Thread Tom Kitta
of situations. -Original Message- From: Tom Kitta [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 11, 2004 2:47 PM To: CF-Talk Subject: RE: Which is quicker I don't know why people don't like iif (immediate if), it is as quick as cfif and takes only one line. For simple things, like if x

RE: Which is quicker

2004-02-11 Thread Tom Kitta
Ooops, I forgot to say that my tests are all on MX6.1, of course on CF5 'iif' is painfully slow. TK -Original Message- From: Philip Arnold [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 11, 2004 6:11 PM To: CF-Talk Subject: RE: Which is quicker I don't know why people don't like

RE: Which is quicker

2004-02-11 Thread Tom Kitta
Thank you Barney for more scientific tests of conditional's performance. I hope these tests will show once and for all that in CFMX iif is nothing to be afraid of as far as speed goes. The results for cfswitch slower performance also surprise me, didn't expect that, good to know. TK -Original

RE: OT - Windows NT source code

2004-02-13 Thread Tom Kitta
I disagree, open source makes OS much safer than closed source OS. Everyone can inspect the code and point out problems with open source, not so when it is closed. Thus, MS has a problem when its source gets suddenly released -- people will most likely find a lot of holes in it which were long

RE: OT - Windows NT source code

2004-02-13 Thread Tom Kitta
Yes, you would like someone else to test your home security system. Even with a total knowledge of all weaknesses by the attacker you still should have strong security. You have to assume that robber knows as much about the system as the person who created it because they might be the same person.

RE: To be secure or not to be?

2004-02-13 Thread Tom Kitta
I sort of like it more with cfqueryparam in it, just place each cfqueryparam tag on a line by itself and it looks great. As for security, you will make it hard for someone to do sql injection but you will need to add some good old access security if you want to put people out of your update page -

RE: Security - Tag restrictions

2004-02-17 Thread Tom Kitta
How about just wrapping CFDirectory inside a custom CFC/custom tag? That is the 1st thing that comes to my mind. TK -Original Message- From: cfhelp [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 17, 2004 8:48 PM To: CF-Talk Subject: Security - Tag restrictions I have multiple clients

OT: windows mailing list

2004-02-19 Thread Tom Kitta
Hello, Sorry for off topic, but it seems that most people on this list are working with windows and thus most likely can point me in the right direction. I am having some problems setting up domain controller for my workplace. Does anyone know of a good mailing list or other resource that would

RE: OT: windows mailing list

2004-02-19 Thread Tom Kitta
Thank you all for replying, I joined some mailing lists and I hope that I will get answers to all of my windows networking related questions. Agree. Well if its any consolation - in my experience - going to Linux goes from hard to a better - where as going to windows goes from easy to

RE: Question regarding CFMX 6.2

2004-02-23 Thread Tom Kitta
I am wondering, will CF 6.2 be a free upgrade from 6.1 or will MM want us to pay for it? And if $$$ is involved, how much? TK -Original Message- From: Thomas Chiverton [mailto:[EMAIL PROTECTED] Sent: Monday, February 23, 2004 10:21 AM To: CF-Talk Subject: Re: Question regarding CFMX 6.2

RE: Single Quotes in Comment Fields Problem

2004-02-23 Thread Tom Kitta
Correct me, if I am wrong, but didn't MM release a hot fix regarding some problems with quotes in cfqueryparam tag? Maybe that is related to your problem. TK -Original Message- From: Les Mizzell [mailto:[EMAIL PROTECTED] Sent: Monday, February 23, 2004 8:40 PM To: CF-Talk Subject: Re:

RE: CFMX and CF5 on same server

2004-02-25 Thread Tom Kitta
a spare server. TK [Tom Kitta] -Original Message- From: Marlon Moyer [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 25, 2004 11:12 AM To: CF-Talk Subject: CFMX and CF5 on same server Has anyone deployed a server with both CF5 and CFMX on it.I've got a live server with CF5 applications

RE: OT - Datbase Transaction question

2004-02-26 Thread Tom Kitta
Copy your whole query, go to query analyzer - view execution plan. This will show you costs of each and every operation. TK -Original Message- From: Eric Creese [mailto:[EMAIL PROTECTED] Sent: Thursday, February 26, 2004 11:49 AM To: CF-Talk Subject: OT - Datbase Transaction question I

RE: Decrypt an encrypted CFM template

2004-02-27 Thread Tom Kitta
Last time I checked there were some commercial decrypters floating around for about $20 per copy. Sorry, I don't have a link handy, but they were not hard to find last time I checked. TK -Original Message- From: Burns, John [mailto:[EMAIL PROTECTED] Sent: Friday, February 27, 2004 9:30 AM

RE: Protect action pages

2004-02-27 Thread Tom Kitta
I am not sure whatever it was already mentioned here (didn't read the whole thread) but there was a security vulnerability in I believe CF4. The cracker could save the administrator login page, modify password length column to anything he wanted to (like 100) and send it over with a lot of

RE: Separate DB from Server or not

2004-03-01 Thread Tom Kitta
Nice dev box! It depends what you are developing, but for most cases it would be fine to run both SQL and CF on the same box. How many thousands of queries per second you plan to do, if you are warring? Anything under 1000/s of simple queries will not harm your server performance. Also, unless you

RE: OT: migrating to SQL Server 2000

2004-03-01 Thread Tom Kitta
I know there were some issues with upgrading servers. I cannot remember clearly now and I got book at home. As soon as I get there I take a look. I am quite sure you need to re-create statistics and re-populate all full text search indexes. TK -Original Message- From: Rob [mailto:[EMAIL

RE: Form Fields Disappearing

2004-03-03 Thread Tom Kitta
Long time ago, when we were still using CF5 as production server I had a similar problem. All seemed fine at first, but every 10th or 20th form submission the form scope was just gone. It was a self posting form, it was annoying to users to have to type everything again. I don't remember much of

RE: sot: Powerbooks and Coldfusion

2004-03-15 Thread Tom Kitta
Remote desktop is available for Mac, Linux and almost any PC running windows (If I remember correctly, minimum requirements are Win3.1, 386SX, 8Mb RAM). It is always free (but server part is not free, you need windows server software and for anything but Administrative mode you need a CAL). TK

RE: OT: SQL Server Table Design Question

2004-03-18 Thread Tom Kitta
I agree, we do the same thing here. TK -Original Message- From: Nick de Voil [mailto:[EMAIL PROTECTED] Sent: Thursday, March 18, 2004 10:26 AM To: CF-Talk Subject: Re: OT: SQL Server Table Design Question Just to play devil's advocate and also enjoy the unusual experience of disagreeing

RE: Syntax for an event loop

2004-03-18 Thread Tom Kitta
I know I did dynamic function naming some time ago, it works fine, I think syntax was: cfset function_result = evaluate(function_name_var ()) For passing arguments: cfset function_result = evaluate(function_name_var (#arg1_variable#,arg2_as_number,'arg3_as_text')) OR cfset function_result =

RE: Good (inexpensive) domain registration

2004-03-18 Thread Tom Kitta
Just wondering, does anyone have good/bad stories related to www.dotster.com or http://www.buydomains.com/ ? TK -Original Message- From: cfhelp [mailto:[EMAIL PROTECTED] Sent: Thursday, March 18, 2004 9:24 PM To: CF-Talk Subject: RE: Good (inexpensive) domain registration $8.95/Year if

RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
It is OK to code for a single DB for almost every application. It simply doesn't pay to ignore all DB enhancements and create fully DB independent SQL. There is a good article about that by Ben Forta. TK -Original Message- From: Tangorre, Michael [mailto:[EMAIL PROTECTED] Sent: Tuesday,

RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
I am sure everybody who goes as far as encrypting their form variables remembers about cfqueryparam. Otherwise it is like barricading the window and leaving the barn door open :) TK -Original Message- From: Ian Vaughan [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 10:54 AM To:

RE: RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
It is a positive sign when so many people on this list recognize the need for security in their web applications. The next step after acknowledging that security is needed is to determine how much security is needed. We don't want to protect 10c of assets using security worth $1000. Once we know

RE: RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
based on the definitions in E.O. 12958. -Original Message- From: Tom Kitta [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 2:39 PM To: CF-Talk Subject: RE: RE: Securing CF Apps. It is a positive sign when so many people on this list recognize the need for security in their web

RE: RE: RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
I agree with Kwang Suh, security through obscurity is no security at all. This is quite well known throughout security community and all encryption standards available to the wide public adhere to it. TK -Original Message- From: Kwang Suh [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23,

RE: RE: RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 3:47 PM To: CF-Talk Subject: Re: RE: RE: Securing CF Apps. If thats the case, then whats the big deal with the MS code leak? -adam -Original Message- From: Tom Kitta [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 08:08 PM To: 'CF

RE: RE: RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
information that is secured by it. How difficult (resource wise) do you want to make it for the attacker is up to you. Obfuscation alone might just not make it difficult enough for the attacker to get to your sensitive data in some cases. TK [Tom Kitta]-Original Message- From: Dave Watts [mailto

RE: RE: RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
As far as I know, in the Linux hacker community cracking Linux box of your enemy hacker is far more worthy of a prize than hacking some MS box of some inexperienced user. Anyway, I think this is getting off topic now, lets go back to CF application security exclusively. TK -Original

RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
Well, so anything out on the web fits the definition of an application. Any web page, including HTML is a set of instructions that enable a computer perform a desired sequence of operations. And of course it includes user interface. Before we get too far off topic I propose the following: - all

RE: why are procedures better? (was: RE: Securing CF Apps.)

2004-03-23 Thread Tom Kitta
The main reason that I don't use stored procedures often is the time it takes to write them. It turns out that it is quicker for me to write cfquery with cfqueryparams than stored procedure in sql server 2000 and cfstoredproc in CFMX. Also, when the query code is in the CFC I can right away see

RE: RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
no money is a natural state :) TK [Tom Kitta] -Original Message- From: Kwang Suh [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 23, 2004 7:13 PM To: CF-Talk Subject: Re: RE: Securing CF Apps. What a weak argument.Prove to me that is the definition of a web site. - Original Message

RE: Securing CF Apps.

2004-03-23 Thread Tom Kitta
I am not sure whatever Linux vis Windows security is not too much off topic, but here is my 2c. Linux comes out of the box with most major distributions in much more secure configuration. One of the biggest security advantages that Linux has over Windows is build in strong firewall (iptables).

RE: Last Chance Spectra Training

2004-03-25 Thread Tom Kitta
I only briefly got some Spectra training. My 1st thoughts (after seeing CF for the 1st time just few days before) were: who would ever use such a complex product? Through I spend some time looking at it, my progress was not as fast as in CF, spectra was just too complex for me at that time, I

RE: Popularity of Cold Fusion

2004-04-01 Thread Tom Kitta
I played around with this website a bit. I don't think that they are very reliable. For example, http://www.netcraft.com/?restriction=site+ends+withhost=.microsoft.com suggests that M$ is running on Linux ... Maybe this is what people mean by $ in M$, they are so cheap that they cannot even

RE: Newbie problem getting Mozilla Firefox to recognize .CFM file s...

2004-04-05 Thread Tom Kitta
This sounds like a problem with your Apache configuration, I didn't have any problems with Firefox .8 so far, works great for most sites except MS where they want explorer :( TK -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Monday, April 05, 2004 10:49 AM To: CF-Talk

RE: SQL Server SLOW

2004-04-05 Thread Tom Kitta
up your logs by performing transaction log backup (with remove log entries option). Then you can shrink your DB (not recommended). TK [Tom Kitta] -Original Message- From: brobborb [mailto:[EMAIL PROTECTED] Sent: Monday, April 05, 2004 1:46 PM To: CF-Talk Subject: OT: SQL Server SLOW Hey

RE: ColdFusion Coding Contest

2004-04-05 Thread Tom Kitta
Hmmm, it looks like there are going to be a lot of 'shortest path' algorithm implementations. I guess to win on speed it should be written in cfscript as much as possible. TK -Original Message- From: Tangorre, Michael [mailto:[EMAIL PROTECTED] Sent: Monday, April 05, 2004 2:06 PM To:

RE: ColdFusion Coding Contest

2004-04-05 Thread Tom Kitta
in cfscript as much as possible. Don't expect it to make much (or any) difference with CFMX. --- Ben From: Tom Kitta [mailto:[EMAIL PROTECTED] Sent: Monday, April 05, 2004 2:07 PM To: CF-Talk Subject: RE: ColdFusion Coding Contest Hmmm, it looks like

RE: ColdFusion Coding Contest

2004-04-05 Thread Tom Kitta
If you want people to re-submit + new people then how about new deadline for submissions? TK -Original Message- From: Kazmierczak, Kevin [mailto:[EMAIL PROTECTED] Sent: Monday, April 05, 2004 3:18 PM To: CF-Talk Subject: RE: ColdFusion Coding Contest Steve, Here is the deal.I am not the

RE: ColdFusion Coding Contest

2004-04-05 Thread Tom Kitta
Come on, that was top secret information. Now you taken my advantage edge away from me ;o) I think it was csc350 through or something like that. TK -Original Message- From: Jim McAtee [mailto:[EMAIL PROTECTED] Sent: Monday, April 05, 2004 8:06 PM To: CF-Talk Subject: Re: ColdFusion Coding

RE: Handling Passwords

2004-04-07 Thread Tom Kitta
What you are doing is called Caesar's cipher. This is 1st attempt at encryption. Very weak, takes piece of paper to decipher, statistical analysis are a killer. I guess it might deter a casual user or even a hacker if he or she doesn't know how you encrypt. If they knew that you are using this

  1   2   3   >