Re: Test

2015-04-01 Thread Michael Grant
Not working. Please try again. On Mon, Mar 30, 2015 at 10:29 PM, wrote: Is this list working? ~| Order the Adobe Coldfusion Anthology now!

Re: Test

2015-03-31 Thread John M Bliss
Yes. On Mon, Mar 30, 2015 at 10:29 PM, wrote: Is this list working? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

RE: Test

2015-03-31 Thread Robert Harrison
?= =?ISO-8859-1?Q?ue.com=3E?=] Sent: Monday, March 30, 2015 10:29 PM To: cf-talk Subject: Test Is this list working? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155

Re: Test

2015-03-31 Thread Claude Schnéegans
Yes, but apparently it was down for several hours. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

Test

2015-03-31 Thread Claude Schnéegans
Is this list working? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

RE: test

2014-12-09 Thread Robert Harrison
Test from address2. Robert Harrison Full Stack Developer AIMG rharri...@aimg.com Main Office: 704-321-1234 ext.121 Direct Line: 516-302-4345 www.aimg.com -Original Message- From: rob...@creativecyberspace.com [mailto:rob...@creativecyberspace.com] Sent: Tuesday, December 09, 2014 5

RE: test

2014-12-09 Thread robert
Test from address 1 -Original Message- From: Robert Harrison rharri...@aimg.com Sent: Tuesday, December 9, 2014 5:10pm To: cf-talk cf-talk@houseoffusion.com Subject: RE: test Test from address2. Robert Harrison Full Stack Developer AIMG rharri...@aimg.com Main Office: 704-321-1234 ext

RE: Test - Ignore

2014-09-16 Thread Robert Harrison
Test from new account... also ignore. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk

Re: TEST IGNORE (2)

2013-12-04 Thread Russ Michaels
Would be easier to switch to google groups maybe Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 4 Dec 2013 02:33, Michael Dinowitz mdino...@houseoffusion.com wrote: Sorry for the backlog deluge. The server got overwhelmed and took a bit to get back on track.

Re: TEST IGNORE (2)

2013-12-04 Thread Phillip Vector
Unless Google Groups can send email and can act exactly like a mailing list, please don't move it there. On Wed, Dec 4, 2013 at 1:50 AM, Russ Michaels r...@michaels.me.uk wrote: Would be easier to switch to google groups maybe Russ Michaels www.michaels.me.uk cfmldeveloper.com

Re: TEST IGNORE (2)

2013-12-04 Thread Adam Cameron
Would be easier to switch to google groups maybe Seconded. -- Adam ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

Re: TEST IGNORE (2)

2013-12-04 Thread Adam Cameron
Unless Google Groups can send email and can act exactly like a mailing list, please don't move it there. Yeah it can. And a lot better than this implementation does. -- Adam ~| Order the Adobe Coldfusion Anthology now!

Re: TEST IGNORE (2)

2013-12-04 Thread Russ Michaels
Yes philip that is exactly qhat it does very well Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 4 Dec 2013 09:55, Phillip Vector vec...@mostdeadlygame.com wrote: Unless Google Groups can send email and can act exactly like a mailing list, please don't move it

Re: TEST IGNORE (2)

2013-12-03 Thread John M Bliss
Having trouble starting a new thread via email. Am I the only one? On Wed, Nov 27, 2013 at 11:18 AM, Bryan Stevenson br...@electricedgesystems.com wrote: YepI think I joined in the late 90sprobably 98 *Bryan Stevenson*B.Comm. President CEO Electric Edge Systems Group Inc. -

Re: TEST IGNORE (2)

2013-12-03 Thread Phillip Duba
I seem to be on a 4 day backlog on receiving messages from cf-talk. The mapping thread's last 10 messages from the 27th didn't get into my inbox until yesterday, Phi On Dec 3, 2013 2:29 PM, John M Bliss bliss.j...@gmail.com wrote: Having trouble starting a new thread via email. Am I the only

Re: TEST IGNORE (2)

2013-12-03 Thread Russ Michaels
no, we got your email 3 times you don;t get a copy of your own emails. On Tue, Dec 3, 2013 at 11:22 AM, John M Bliss bliss.j...@gmail.com wrote: Having trouble starting a new thread via email. Am I the only one? On Wed, Nov 27, 2013 at 11:18 AM, Bryan Stevenson

Re: TEST IGNORE (2)

2013-12-03 Thread Matt Quackenbush
I've gotten three (identical) thread-starting emails from you today. I think it's working just fine. :-) On Dec 3, 2013 1:29 PM, John M Bliss bliss.j...@gmail.com wrote: Having trouble starting a new thread via email. Am I the only one? On Wed, Nov 27, 2013 at 11:18 AM, Bryan Stevenson

Re: TEST IGNORE (2)

2013-12-03 Thread Nick Gleason
Dec 2013 14:29:05 -0500 To: cf-talk cf-talk@houseoffusion.com Message-ID: cagj-xcqeaxhxq1nd086r+1v+5zgkczayc6dgqts5ibgbukj...@mail.gmail.com Subject: Re: TEST IGNORE (2) References: 52961b59.3060...@electricedgesystems.com Date: Tue, 3 Dec 2013 06:22:33 -0500 Precedence: bulk Reply-To: cf-talk

Re: TEST IGNORE (2)

2013-12-03 Thread John M Bliss
you don;t get a copy of your own emails. Yes, you do. Or, at least, I did...almost one day later. I checked after each of my three sends and none of them appeared here: http://www.houseoffusion.com/groups/cf-talk/ until almost one day later. On Tue, Dec 3, 2013 at 2:58 PM, Russ Michaels

Re: TEST IGNORE (2)

2013-12-03 Thread Russ Michaels
hmm ok perhaps there is a setting for that then, I have never received copies of my own posts, which is the default behaviour of most list servers. On Tue, Dec 3, 2013 at 11:28 PM, John M Bliss bliss.j...@gmail.com wrote: you don;t get a copy of your own emails. Yes, you do. Or, at least,

Re: TEST IGNORE (2)

2013-12-03 Thread Michael Dinowitz
Sorry for the backlog deluge. The server got overwhelmed and took a bit to get back on track. I'm going to take it down for a few hours tonight for maintenance and upgrades. On Tue, Dec 3, 2013 at 8:13 PM, Russ Michaels r...@michaels.me.uk wrote: hmm ok perhaps there is a setting for that

Re: TEST IGNORE (2)

2013-12-02 Thread Bryan Stevenson
YepI think I joined in the late 90sprobably 98 *Bryan Stevenson*B.Comm. President CEO Electric Edge Systems Group Inc. - makers of FACTS^(TM) phone: 250.480.0642 cell: 250.920.8830 e-mail: br...@electricedgesystems.com mailto:br...@electricedgesystems.com web:

TEST IGNORE

2013-11-27 Thread Adam Cameron
Having trouble posting via email. -- Adam ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

TEST IGNORE (2)

2013-11-27 Thread Adam Cameron
(second attempt) Having trouble posting via email. -- Adam ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

Re: TEST IGNORE (2)

2013-11-27 Thread Russ Michaels
I see you have given in to the dark side and joined the evil cf-talk :-) On Wed, Nov 27, 2013 at 10:23 AM, Adam Cameron dacc...@gmail.com wrote: (second attempt) Having trouble posting via email. -- Adam ~| Order

Re: TEST IGNORE (2)

2013-11-27 Thread Adam Cameron
I've been monitoring it for over a year, and have been a member for about... perhaps not ten years (because I doubt it's been around that long, but for ages). I have just seldom had need to reply, and had not noticed what few replies I had made had disappeared into the ether. But I seem to have

Re: TEST IGNORE (2)

2013-11-27 Thread Steve 'Cutter' Blades
No, it's been around longer than ten years. I've been lurking around in here since at least 2000 (if not a little earlier...) Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com

test

2013-08-28 Thread Torrent Girl
test ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356592 Subscription

Re: test

2013-08-28 Thread Wil Genovese
fail :D Wil Genovese One man with courage makes a majority. -Andrew Jackson A fine is a tax for doing wrong. A tax is a fine for doing well. On Aug 28, 2013, at 12:20 PM, Torrent Girl moniqueb...@gmail.com wrote: test

Re: test

2013-08-05 Thread Alan Rother
This one showed up =] On Sat, Aug 3, 2013 at 5:12 PM, Torrent Girl moniqueb...@gmail.com wrote: my last post didn't show ~| Order the Adobe Coldfusion Anthology now!

test

2013-08-03 Thread Torrent Girl
my last post didn't show ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

Test

2013-05-17 Thread rbh22
Test from alternate email account. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk

test

2013-05-17 Thread Robert Harrison
test Robert Harrison Director of Interactive Services Austin Williams Advertising I Branding I Digital I Direct   125 Kennedy Drive,  Suite 100   I  Hauppauge, NY 11788 T 631.231.6600 X 119   F 631.434.7022   http://www.austin-williams.com Blog: http://www.austin-williams.com/blog

Test

2013-05-16 Thread rbh22
Test from alternate email account. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm

test

2013-05-16 Thread Robert Harrison
Test from removed email address. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm

CF Builder 2 or Sublime Test 2

2013-03-18 Thread Rob Voyle
Hi Folks Looking at: CF Builder 2 or Sublime Test 2 do either validate web pages (missing td p) etc. do either validate missing links? Thanks Rob ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe

Re: CF Builder 2 or Sublime Test 2

2013-03-18 Thread Mark Drew
Folks Looking at: CF Builder 2 or Sublime Test 2 do either validate web pages (missing td p) etc. do either validate missing links? Thanks Rob ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com

Re: CF Builder 2 or Sublime Test 2

2013-03-18 Thread Rob Voyle
for Sublime Text 2 but that is just a matter of time really, it should be fairly easy to write Sincerely Mark Drew On 18 Mar 2013, at 16:45, Rob Voyle robvo...@voyle.com wrote: Hi Folks Looking at: CF Builder 2 or Sublime Test 2 do either validate web pages (missing td p) etc

Re: CF Builder 2 or Sublime Test 2

2013-03-18 Thread Mark Drew
Folks Looking at: CF Builder 2 or Sublime Test 2 do either validate web pages (missing td p) etc. do either validate missing links? Thanks Rob ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com

Re: CF Builder 2 or Sublime Test 2

2013-03-18 Thread Rodney Enke
really, it should be fairly easy to write Sincerely Mark Drew On 18 Mar 2013, at 16:45, Rob Voyle robvo...@voyle.com wrote: Hi Folks Looking at: CF Builder 2 or Sublime Test 2 do either validate web pages (missing td p) etc. do either validate missing

Re: CF Builder 2 or Sublime Test 2

2013-03-18 Thread Raymond Camden
...@voyle.com wrote: Hi Folks Looking at: CF Builder 2 or Sublime Test 2 do either validate web pages (missing td p) etc. do either validate missing links? Thanks Rob

Test

2012-09-19 Thread Peter Donahue
This is a test. Peter Donahue “No weapon that is formed against thee shall prosper.” Isaiah 54:17 “While for our princes they prepare In caverns deep a burning snare, He shot from heaven a piercing ray, And the dark treachery brought to day.” Anonymo

Fwd: Tomorrow: Join 55 ColdFusion Users at Automating CFML App Build, Test, Deploy, with Joseph Lamoree

2012-07-25 Thread Brian Thornton
-- Forwarded message -- From: The Online ColdFusion Meetup i...@meetup.com Date: Wed, Jul 25, 2012 at 12:24 PM Subject: Tomorrow: Join 55 ColdFusion Users at Automating CFML App Build, Test, Deploy, with Joseph Lamoree To: vegasthorn...@gmail.com [image: Meetup] http

Re: Tomorrow: Join 55 ColdFusion Users at Automating CFML App Build, Test, Deploy, with Joseph Lamoree

2012-07-25 Thread Mike Kear
, Test, Deploy, with Joseph Lamoree To: vegasthorn...@gmail.com [image: Meetup] http://www.meetup.com/t/md1_1 tomorrow Automating CFML App Build, Test, Deploy, with Joseph Lamoree http://www.meetup.com/__ms1204811/coldfusionmeetup/events/74575422/t/md1_grp/?rv=md1_af_eid=74575422_af

Re: Tomorrow: Join 55 ColdFusion Users at Automating CFML App Build, Test, Deploy, with Joseph Lamoree

2012-07-25 Thread Russ Michaels
all you need to do is click the link and it shows you. Our 6pm *(US ET)* talk on Thursday July 26 will be Automating CFML App Build, Test, Deploy, with Joseph Lamoree. On Wed, Jul 25, 2012 at 8:34 PM, Mike Kear afpwebwo...@gmail.com wrote: Thank you, Brian. This meeting is of interest

Re: Tomorrow: Join 55 ColdFusion Users at Automating CFML App Build, Test, Deploy, with Joseph Lamoree

2012-07-25 Thread Matt Quackenbush
will be Automating CFML App Build, Test, Deploy, with Joseph Lamoree. On Wed, Jul 25, 2012 at 8:34 PM, Mike Kear afpwebwo...@gmail.com wrote: Thank you, Brian. This meeting is of interest to me, but I don't know when it's on. I'm afraid in a world-wide forum, just saying '6pm' doesn't

Re: Javascript test in ColdFusion

2012-04-04 Thread Robert Rhodes
functionality using something like Modernizr. http://www.modernizr.com/ andy -Original Message- From: Robert Rhodes [mailto:rrhode...@gmail.com] Sent: Monday, March 26, 2012 12:00 PM To: cf-talk Subject: Javascript test in ColdFusion Hello again. I have a site that loads all

Re: Javascript test in ColdFusion

2012-04-04 Thread Phillip Vector
-Original Message- From: Robert Rhodes [mailto:rrhode...@gmail.com] Sent: Monday, March 26, 2012 12:00 PM To: cf-talk Subject: Javascript test in ColdFusion Hello again. I have a site that loads all the content in ajax.  I also have a version of the site that does not use ajax. I am

RE: Javascript test in ColdFusion

2012-04-04 Thread andy matthews
My pleasure RR. andy -Original Message- From: Robert Rhodes [mailto:rrhode...@gmail.com] Sent: Wednesday, April 04, 2012 7:05 PM To: cf-talk Subject: Re: Javascript test in ColdFusion Thanks to all for the suggestions on this. I went with the approach below and it worked well

How to validate a CFINPUT Test field to NOT allow certain values?

2012-03-27 Thread Les Mizzell
Trying to figure out how to validate a specific cfinput text input field. I need this input to NOT allow any previously existing value coming from a query. (long list of part numbers.) Is there any way to use the bind parameter to pull this off? Suggestions? Looking at jquery ideas, but

Re: How to validate a CFINPUT Test field to NOT allow certain values?

2012-03-27 Thread Andrew Scott
And bind or jQuery / ExtJS plugin that can do an Ajax call will be able to do this. All you need to do is bind (Bind is the same as an Ajax call) to a component that could do the lookup for you. I am not sure if bind in ColdFusion can delay sending till a certain amount of characters are

Re: How to validate a CFINPUT Test field to NOT allow certain values?

2012-03-27 Thread Andrew Scott
Btw I have a 3 part serious that does an FAQ lookup based on a user input, which might help some. http://www.andyscott.id.au/2009/9/9/ColdFusion-and-leveraging-extJS-from-within--Part-I -- Regards, Andrew Scott WebSite: http://www.andyscott.id.au/ Google+:

Re: Failed PCI Compliance test on CF9.01

2012-03-26 Thread Robert Rhodes
I wanted to circle back and thank everyone for their suggestions. Running the site in SSL all the time got us passed, and the site seems to be working fine. I wish there was a better way, but this works. Thanks again. -RR On 3/6/12, Robert Rhodes rrhode...@gmail.com wrote: If jsessionids

Javascript test in ColdFusion

2012-03-26 Thread Robert Rhodes
Hello again. I have a site that loads all the content in ajax. I also have a version of the site that does not use ajax. I am looking for some code I can put in the application.cfm to test to see if the visitor's browser supports javascipt or not, so I can load the right version of the site

Re: Javascript test in ColdFusion

2012-03-26 Thread Cameron Childress
This is something you must do on the client (browser) and is not information available on the server. So, putting it in Application.cfc isn't at straightforward as you think. If you google test javascript enabled you'll get a bunch of links on some client side code to run the test. BrowserHawk

Re: Javascript test in ColdFusion

2012-03-26 Thread Azadi Saryev
looking for some code I can put in the application.cfm to test to see if the visitor's browser supports javascipt or not, so I can load the right version of the site. Any ideas? Thanks. --RR ~| Order the Adobe Coldfusion

RE: Javascript test in ColdFusion

2012-03-26 Thread andy matthews
Subject: Javascript test in ColdFusion Hello again. I have a site that loads all the content in ajax. I also have a version of the site that does not use ajax. I am looking for some code I can put in the application.cfm to test to see if the visitor's browser supports javascipt or not, so I can load

RE: Failed PCI Compliance test on CF9.01

2012-03-06 Thread DURETTE, STEVEN J
To: cf-talk Subject: Failed PCI Compliance test on CF9.01 So a site that I built failed PCI compliance testing because the jsessionid cookie is not set securely. I found this posthttp://thinkinglemur.com/index.php/2009/02/setting-secure-attribute-of-jsessionid-cookie-in-coldfusion-8/that shows how

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
? Ever since Firesheep came out it is actually suggested to be all encrypted all the time. Steve -Original Message- From: Robert Rhodes [mailto:rrhode...@gmail.com] Sent: Tuesday, March 06, 2012 2:20 AM To: cf-talk Subject: Failed PCI Compliance test on CF9.01 So a site that I

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Justin Scott
It's a video streaming site for members.  I can't believe my only option is to stream video across ssl.  There must be another solution. There is: take the main site out of scope for compliance. The only parts of a system that have to be PCI compliant are the ones that handle credit card

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
Justin, thanks for the reply, and I get your point, but I can't break out the registration process into a standalone site quickly. There must be a fairly quick solution to this problem. Surely, I can't be the first to deal with this. On Tue, Mar 6, 2012 at 8:44 AM, Justin Scott

RE: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Che Vilnonis
...@gmail.com] Sent: Tuesday, March 06, 2012 9:08 AM To: cf-talk Subject: Re: Failed PCI Compliance test on CF9.01 Justin, thanks for the reply, and I get your point, but I can't break out the registration process into a standalone site quickly. There must be a fairly quick solution

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Donnie Bachan (Gmail)
and thought these options might help. Ché -Original Message- From: Robert Rhodes [mailto:rrhode...@gmail.com] Sent: Tuesday, March 06, 2012 9:08 AM To: cf-talk Subject: Re: Failed PCI Compliance test on CF9.01 Justin, thanks for the reply, and I get your point, but I can't break out

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Phillip Duba
I'll echo what Donnie said. We're actually running CF 8 with the DB client settings and did not have any issues with the cookies in our PCI audit, Phil On Tue, Mar 6, 2012 at 9:24 AM, Donnie Bachan (Gmail) donnie.bac...@gmail.com wrote: Robert, This is odd that you are losing the session,

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Cameron Childress
On Tue, Mar 6, 2012 at 9:07 AM, Robert Rhodes rrhode...@gmail.com wrote: Justin, thanks for the reply, and I get your point, but I can't break out the registration process into a standalone site quickly. There must be a fairly quick solution to this problem. Surely, I can't be the first to

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Justin Scott
Justin, thanks for the reply, and I get your point, but I can't break out the registration process into a standalone site quickly.  There must be a fairly quick solution to this problem.  Surely, I can't be the first to deal with this. Another option might be to ask your scanning vendor for

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Donnie Bachan (Gmail)
Justin, I don't think that would work though, depending on the level of compliance and the SAQ being completed I don't think any vendor will allow that exemption regardless of if credit card information is visible or not. If an attacker is allowed any access to a user session and can harvest any

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Justin Scott
Justin, I don't think that would work though, depending on the level of compliance and the SAQ being completed I don't think any vendor will allow that exemption regardless of if credit card information is visible or not. If an attacker is allowed any access to a user session and can harvest

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
Subject: Re: Failed PCI Compliance test on CF9.01 Justin, thanks for the reply, and I get your point, but I can't break out the registration process into a standalone site quickly. There must be a fairly quick solution to this problem. Surely, I can't be the first to deal

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Phillip Duba
. Ché -Original Message- From: Robert Rhodes [mailto:rrhode...@gmail.com] Sent: Tuesday, March 06, 2012 9:08 AM To: cf-talk Subject: Re: Failed PCI Compliance test on CF9.01 Justin, thanks for the reply, and I get your point, but I can't break out

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
...@gmail.com] Sent: Tuesday, March 06, 2012 9:08 AM To: cf-talk Subject: Re: Failed PCI Compliance test on CF9.01 Justin, thanks for the reply, and I get your point, but I can't break out the registration process into a standalone site quickly. There must

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Donnie Bachan (Gmail)
Hi Robert, I'm not sure if I'm missing something but shouldn't you have setClientCookies to Yes? Otherwise you'd have to pass the JSESSIONID in the url on each request. Best Regards, Donnie Bachan Nitendo Vinces - By Striving You Shall Conquer

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
and cftoken insecurely which is what caused the PCI test failure. This really should not be this hard. I an't be the only person dealing with this issue. :( On Tue, Mar 6, 2012 at 10:44 AM, Donnie Bachan (Gmail) donnie.bac...@gmail.com wrote: Hi Robert, I'm not sure if I'm missing something

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Cameron Childress
On Tue, Mar 6, 2012 at 11:13 AM, Robert Rhodes rrhode...@gmail.com wrote: I just put back the jrun setting to pass cookies securely, and am sending the jsessionid securely again. And I am set up to use the database for client storage. It's still losing the session when I switch between

RE: Failed PCI Compliance test on CF9.01

2012-03-06 Thread DURETTE, STEVEN J
PCI Compliance test on CF9.01 I just put back the jrun setting to pass cookies securely, and am sending the jsessionid securely again. And I am set up to use the database for client storage. It's still losing the session when I switch between http and https. I do have setclientcookies

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Pete Freitag
Hi Robert, You are caught in a bit of a catch 22 here. If you want to set the secure attribute on session cookies delivered over SSL, but also have it use the same cookie values over non-ssl - then that defeats the purpose of adding the secure attribute. If you want to do that you can't use the

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
I hear you, but there are issues preventing me from going all https. It's a long story. Is there a way to copy, with some code in the application.cfm, the jsessionid between http and https so we don't lose the session state? -rr On Tue, Mar 6, 2012 at 11:24 AM, Pete Freitag p...@foundeo.com

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Cameron Childress
On Tue, Mar 6, 2012 at 11:55 AM, Robert Rhodes rrhode...@gmail.com wrote: I hear you, but there are issues preventing me from going all https. It's a long story. Is there a way to copy, with some code in the application.cfm, the jsessionid between http and https so we don't lose the

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
Ok, I am going to try to make the site work all ssl. I am concerned about the video streaming over ssl, but I guess we will see how it goes. On a related subject: is there a way to make the jsessionid cookie secure without making the jrun change? I ask because doing so affects all sites on

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Cameron Childress
Yes. If it were me, I would turn setClientCookies=false in the Applciation.cfc|cfm and then set them manually using: cfcookie name=cfid value=#session.cfid# secure=true/ cfcookie name=cftoken value=#session.cftoken# secure=true/ If you google around a bit you can probably find some sample code

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
That works for cfid and cftoken, thanks. But it won't work for jsessionid, because once that is selected in the administrator, it shows up as an unsecure cookie, even if you have setclientcookies turned off. That's a bummer, I wanted to use jsessionids. On Tue, Mar 6, 2012 at 1:59 PM, Cameron

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Cameron Childress
Try this: http://www.12robots.com/index.cfm/2009/5/6/Making-the-JSESSIONID-Session-Token-Cookie-SECURE-and-HTTPOnly-and-settings-its-PATH -Cameron On Tue, Mar 6, 2012 at 2:39 PM, Robert Rhodes rrhode...@gmail.com wrote: That works for cfid and cftoken, thanks. But it won't work for

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Cameron Childress
...also - make sure you've cleared out cookies in your browser after you've made CF code changes. Old cookies could be hanging out and screwing up your testing. -Cameron On Tue, Mar 6, 2012 at 2:39 PM, Robert Rhodes rrhode...@gmail.com wrote: That works for cfid and cftoken, thanks. But it

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Justin Scott
On a related subject:  is there a way to make the jsessionid cookie secure without making the jrun change?  I ask because doing so affects all sites on the server, and I had planed to run other sites on this particular server. Be careful with this... if your billing system is on this server

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
Yes, I saw that. But he does not say how he made the new jsession id string. I am sure it is not some random string he pro grammatically generated. So, there must be a way to get at the jsessionid even if you don't have jsessionidenabled in the administrator. On Tue, Mar 6, 2012 at 2:44 PM,

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Cameron Childress
On Tue, Mar 6, 2012 at 2:56 PM, Robert Rhodes rrhode...@gmail.com wrote: Yes, I saw that. But he does not say how he made the new jsession id string. I am sure it is not some random string he pro grammatically generated. So, there must be a way to get at the jsessionid even if you don't

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Robert Rhodes
If jsessionids are enabled, CF appears to set that cookie, no matter what. I know of no way to prevent that from happening. And yes, even those the site being loaded by https, the jsessionid cookie is still being set insecurely. As I said before, this should be easier than it is. Or maybe

Failed PCI Compliance test on CF9.01

2012-03-05 Thread Robert Rhodes
So a site that I built failed PCI compliance testing because the jsessionid cookie is not set securely. I found this posthttp://thinkinglemur.com/index.php/2009/02/setting-secure-attribute-of-jsessionid-cookie-in-coldfusion-8/that shows how to force jrun to do always set the session cookies

Online Test

2011-03-03 Thread John Eubanks
I am building an online test (actually, several of them) and need some help. Would it be easier to build a db with the questions, answers, etc. or just set them manually using cfset? If using the second method, how would you display a percentage showing the grade for the test

Re: Online Test

2011-03-03 Thread Michael Grant
building an online test (actually, several of them) and need some help. Would it be easier to build a db with the questions, answers, etc. or just set them manually using cfset? If using the second method, how would you display a percentage showing the grade for the test

RE: Online Test

2011-03-03 Thread Jacob
I would think the DB approach would be easier to maintain and scalable... -Original Message- From: John Eubanks [mailto:jae...@hotmail.com] Sent: Thursday, March 03, 2011 12:51 PM To: cf-talk Subject: Online Test I am building an online test (actually, several of them) and need some

Re: Online Test

2011-03-03 Thread Alan Rother
Given that you plan to build several, it would be easiest to make one generic codebase that can query the Database for all questions belonging to a certain test. Then your one codebase can server as all tests =] On Thu, Mar 3, 2011 at 2:00 PM, Jacob ja...@excaliburfilms.com wrote: I would

(ot) People using your shop cart to test credit cards.

2011-02-25 Thread Casey Dougall
Hi, This comes up from time to time and it's truly been a pain to stop completely. I'm wondering what some of you are doing that could help me fight this type of fraudulent activity. I've got checks in place for ipAddress, use of similar names on or addresses on multiple decline attempts,

RE: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread Brook Davies
Are you using AVS (address verification system)? Brook -Original Message- From: Casey Dougall [mailto:ca...@uberwebsitesolutions.com] Sent: February-25-11 9:22 AM To: cf-talk Subject: (ot) People using your shop cart to test credit cards. Hi, This comes up from time to time and it's

RE: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread Robert Harrison
All different names and addresses and credit card numbers but similar enough to know it was same person. The part where you say and credit card numbers is a bit scary. How do you know that unless you're keeping the unencrypted card numbers somewhere? Robert B. Harrison Director of

Re: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread Casey Dougall
On Fri, Feb 25, 2011 at 2:37 PM, Robert Harrison rob...@austin-williams.com wrote: All different names and addresses and credit card numbers but similar enough to know it was same person. The part where you say and credit card numbers is a bit scary. How do you know that unless you're

Re: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread .jonah
Do you think they're manually entering cards into your forms or using a script? If it's some sort of automated process possibly checking the time between steps in the checkout as well as protecting against CSRF might help. http://cfformprotect.riaforge.org/ http://www.google.com/search?q=csrf

Re: (ot) People using your shop cart to test credit cards.

2011-02-25 Thread Brian Cain
This may or may not help you, but we do not process new transactions from strangers. We run a SaaS site, and when a new customer signs up for our site, we store the information encrypted in the database, but do not process the transaction. Our sales staff is immediately alerted via email that a

RE: Care to Beta test new ColdFusion Exception Manager App?

2010-12-23 Thread Russ Michaels
CFLOG which isn't really that helpful. Russ -Original Message- From: denstar [mailto:valliants...@gmail.com] Sent: 23 December 2010 04:24 To: cf-talk Subject: Re: Care to Beta test new ColdFusion Exception Manager App? On Wed, Dec 22, 2010 at 3:57 PM, Saman Jayasekara wrote: I just

Care to Beta test new ColdFusion Exception Manager App?

2010-12-22 Thread Saman Jayasekara
I just posted Kakapo: Enhanced ColdFusion Exception/error Manager App. Care to Beta test anyone? http://cflove.org/2010/11/coldfusion-error-handler.cfm ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe

  1   2   3   4   5   6   7   8   9   10   >