[cfaussie] Re: SQL Injection in CF

2006-06-07 Thread Tom Kerr
On Tue, Jun 06, 2006 at 11:17:24PM -0700, [EMAIL PROTECTED] wrote: Hi Folks, Read a good article on SQL Injection attacks today: http://www.unixwiz.net/techtips/sql-injection.html I've always been under the impression that quoted form fields are safe from SQL injection attacks because

[cfaussie] Currency conversion webservice

2006-06-07 Thread Rod Higgins
Hi, Anyone know of an Australian based currency conversion webservice, preferably free. Thanks in advanced. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups cfaussie group. To post to this group, send email to

[cfaussie] CF7 Flashforms and Flash Remoting

2006-06-07 Thread Brett Payne-Rhodes
I'm finally embarking on a project that will use CF7, Flashforms and Flash Remoting. So I've downloaded the Real Estate sample application from Adobe, installed it and fired it up. Looks great! However as soon as I hit the 'search' button I get the message: service

[cfaussie] Re: [OT] File upload with Ajax

2006-06-07 Thread darryl lyons
To be honest, I have not done it. I've seen the IFRAME trick around the traps, and there is an interesting example here - http://www.15seconds.com/issue/010522.htm (IE only). Darryl On 6/7/06, Taco Fleur [EMAIL PROTECTED] wrote: Is there any way to upload a file with AJAX? I know you can

[cfaussie] Re: CF7 Flashforms and Flash Remoting

2006-06-07 Thread Charlie Arehart
First things first: is /realestate the name of a server on your server? If not, that's your problem. (I'm not familiar with that demo app to know if that's hard-coded there or not). You'd need to change that to the name of your server where you have CFMX (and thus the /flashservices/gateway)

[cfaussie] Re: Currency conversion webservice

2006-06-07 Thread Charlie Arehart
Have you checked out those at xmethods.net? They're the classics used often by most getting started with (or demonstrating) web services. There are several there, especially if you take the link at the bottom of the page for "full list". /charlie From: cfaussie@googlegroups.com

[cfaussie] Re: [OT] bring up file dialogue with JS

2006-06-07 Thread Ryan Sabir
Pretty sure there isn't, I've tried to do that in the past. They've really locked down the functionality of the FILE input field, to avoid _javascript_ hackers randomly uploading files from your HD to the internet. bye From: cfaussie@googlegroups.com [mailto:[EMAIL PROTECTED]

[cfaussie] Re: [OT] bring up file dialogue with JS

2006-06-07 Thread Taco Fleur
Surely there must be, just look at the gmail attach a file, it doesn't look like a browse button, but just a link. On 6/8/06, Ryan Sabir [EMAIL PROTECTED] wrote: Pretty sure there isn't, I've tried to do that in the past. They've really locked down the functionality of the FILE input field, to

[cfaussie] Re: [OT] bring up file dialogue with JS

2006-06-07 Thread Taco Fleur
OK, this works - a href="" 'fileUpload1' ).click();test/a Just what I need, its an IE only environment anyway. On 6/8/06, Taco Fleur [EMAIL PROTECTED] wrote: Surely there must be, just look at the gmail attach a file, it doesn't look like a browse button, but just a link. On 6/8/06, Ryan Sabir

[cfaussie] Re: [OT] bring up file dialogue with JS

2006-06-07 Thread Blair McKenzie
Actually Google doesn't do it with a link. Attach a file displays a file input, it doesn't open the dialog.BlairOn 6/8/06, Taco Fleur [EMAIL PROTECTED] wrote: OK, this works - a href="" 'fileUpload1' ).click();test/a Just what I need, its an IE only environment anyway. On 6/8/06, Taco Fleur

[cfaussie] Re: SQL Injection in CF

2006-06-07 Thread Joel Cass
Because there has been some issues with the cfqueryparam tag (I've had a love-hate relationship with this tag since CF 4.5), I've made the following function - does it seem safe? I can't crack it anyway ALso, it seems that PreserveSingleQuotes() isnt required around values to be put into the

[cfaussie] OT: Virus protection software

2006-06-07 Thread Ryan Sabir
Hey all, Just a quick poll to find out which Virus / Spywareprotection software people are using these days (no Linux is not an answer :). I turn to you CFAUSSIES because you probably have a similar work environment to me, andso understand the needs of a web agency. We have been using CA

[cfaussie] flash/flex contractors

2006-06-07 Thread Steve Onnis
any flash/flex contractors looking for some work at all? I have a project here that I want to do in flex so if your interested email me at [EMAIL PROTECTED] Steve --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups

[cfaussie] Re: SQL Injection in CF

2006-06-07 Thread Mark Mandel
What issues have you hit with cfqueryparam Joel? I've also been using it since 4.5, and have never really hit a wall with it. I'm curious to know what your problems have been? Regards, Mark On 6/8/06, Joel Cass [EMAIL PROTECTED] wrote: Because there has been some issues with the

[cfaussie] Re: OT: Virus protection software

2006-06-07 Thread Joel Cass
Symantec all the way :) You can turn off the annoying features if necessary - The interface is quite easy to understand unlike some others where you have to delve through 14 levels of tabs and dialogs to find a setting.. Joel -Original Message-From: cfaussie@googlegroups.com

[cfaussie] Re: OT: Virus protection software

2006-06-07 Thread Kym Kovan
Hi Ryan, you wrote: Just a quick poll to find out which Virus / Spyware protection software people are using these days (no Linux is not an answer :). I turn to you CFAUSSIES because you probably have a similar work environment to me, and so understand the needs of a web agency. We

[cfaussie] Re: OT: Virus protection software

2006-06-07 Thread Scott Thornton
Hello, At hunter health we use Trend Micro... I guess its acorporate edition as updates are regularly updated. [EMAIL PROTECTED] 08/06/2006 10:00 am Hey all, Just a quick poll to find out which Virus / Spyware protection software people are using these days (no Linux is not an answer :).

[cfaussie] Re: SQL Injection in CF

2006-06-07 Thread Joel Cass
From a couple of emails back, I still get the strange error from time to time: Error Executing Database Query. [Macromedia][SQLServer JDBC Driver][SQLServer]Could not find prepared statement with handle [X]. Gets to a stage where it happens on a certain query, regardless of what is being

[cfaussie] [OT] Dreamweaver not overwritting files

2006-06-07 Thread Taco Fleur
I have the checkout option enabled in dreamweaver, and it's just not overwritting any files after changes are made. I have to go on the server delete the file and upload it from the local machine. It doesn't happen with every file. Anyone seen this before?-- Taco Fleur -

[cfaussie] Re: [OT] Dreamweaver not overwritting files

2006-06-07 Thread Chad Renando
I have. I suspect it has something to do with dreamweaver not overwriting a file if it is seen as the same on the server. I typically delete the server file and reupload, although I suppose you could try the opposite and move the local to a safe place, refresh, then move it back and try. The

[cfaussie] Re: OT: Virus protection software

2006-06-07 Thread Chris Velevitch
We use nod32 from http://www.eset.com. Chris -- Chris Velevitch Manager - Sydney Flash Platform Developers Group www.flashdev.org.au --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups cfaussie group. To post to this

[cfaussie] Re: CF7 Flashforms and Flash Remoting

2006-06-07 Thread Brett Payne-Rhodes
Thanks Charlie, Yes, I've defined 'realestate' in my hosts file and my apache configuration and the initial page itself comes up fine. The demo app actually uses cgi variables to dynamically access the gateway. I've also tried http://localhost/flashservices/gateway and

[cfaussie] Re: CF7 Flashforms and Flash Remoting

2006-06-07 Thread Boredenator
Brett, By default, Macromedia Flash Remoting cannot access web services through ColdFusion MX 7. You need to enable it manually. To enable Flash Remoting to access web services through ColdFusion MX 7: 1. Open the cf_root/WEB-INF/gateway-config.xml file in a text editor. 2. Locate the

[cfaussie] Re: [OT] Dreamweaver not overwritting files

2006-06-07 Thread Tom MacKean
UncheckMaintain syncronization information in the Remote Info panel Tom On 6/8/06, Chad Renando [EMAIL PROTECTED] wrote: I have.I suspect it has something to do with dreamweaver notoverwriting a file if it is seen as the same on the server.I typically delete the server file and reupload,

[cfaussie] Re: [OT] Dreamweaver not overwritting files

2006-06-07 Thread Taco Fleur
That would mean I could overwrite some of the work the other developers are doing, at least thats the message I got when I unticked it. On 6/8/06, Tom MacKean [EMAIL PROTECTED] wrote: UncheckMaintain syncronization information in the Remote Info panel Tom On 6/8/06, Chad Renando [EMAIL

[cfaussie] Re: CF7 Flashforms and Flash Remoting

2006-06-07 Thread Brett Payne-Rhodes
Thanks Chris, What happens when you click on the 'search' button? That is where I am getting the error message. Cheers, Brett B) Chris Velevitch wrote: On 6/8/06, Boredenator [EMAIL PROTECTED] wrote: By default, Macromedia Flash Remoting cannot access web services through ColdFusion MX 7.

[cfaussie] Re: CF7 Flashforms and Flash Remoting

2006-06-07 Thread Chris Velevitch
On 6/8/06, Brett Payne-Rhodes [EMAIL PROTECTED] wrote: What happens when you click on the 'search' button? That is where I am getting the error message. It works and I can also add new entries. Chris -- Chris Velevitch Manager - Sydney Flash Platform Developers Group www.flashdev.org.au

[cfaussie] Re: CF7 Flashforms and Flash Remoting

2006-06-07 Thread Chris Velevitch
Which version of the example did you download? I downloaded http://download.macromedia.com/pub/developer/realestate_pt2.zip Chris -- Chris Velevitch Manager - Sydney Flash Platform Developers Group www.flashdev.org.au --~--~-~--~~~---~--~~ You received this

[cfaussie] datediff() error

2006-06-07 Thread George
Hi, I try to use datediff() function in SQl select statement but got an error: Error Executing Database Query. Query Of Queries syntax error.Encountered (. Incorrect Select Statement, Expecting a 'FROM', but encountered '(' instead, A select statement should have a 'FROM' construct.

[cfaussie] Re: datediff() error

2006-06-07 Thread grant
hashes are your friendOn 6/8/06, George [EMAIL PROTECTED] wrote: Hi, I try to use datediff() function in SQl select statement but got an error: Error Executing Database Query. Query Of Queries syntax error.Encountered (. Incorrect Select Statement, Expecting a 'FROM', but encountered '('

[cfaussie] Re: datediff() error

2006-06-07 Thread Joel Cass
 Is this too advanced for CF's ailing query of queries? I do not use this feature much so am unsure You could try SELECT (date_com-date_submitted) AS SubTotalNum Though I cannot guarantee that it works as I used to subtractdates this way a long long time ago.. before I knew that

[cfaussie] Re: OT: Virus protection software

2006-06-07 Thread Joel Cass
Just wondering (this may sound a little dumb to some of you), how can I find out more information about Symantec's architecturally poor software architecture? How do you gauge it against other antivirus apps in this way? It's always been very reliable and has picked up viruses pretty well up til

[cfaussie] Re: OT: Virus protection software

2006-06-07 Thread Barry Beattie
have ppl seen what Microsoft are up to? http://australianit.news.com.au/articles/0,7204,19345228%5E15865%5E%5Enbv%5E,00.html On 6/8/06, Joel Cass [EMAIL PROTECTED] wrote: Just wondering (this may sound a little dumb to some of you), how can I find out more information about Symantec's

[cfaussie] Re: OT: Virus protection software

2006-06-07 Thread Brett Payne-Rhodes
And this is why I'll probably never use it... http://techrepublic.com.com/5254-6257-0.html?forumID=99threadID=176853messageID=2024208id=2252949 B) Barry Beattie wrote: have ppl seen what Microsoft are up to?

[cfaussie] Re: datediff() error

2006-06-07 Thread George
Thank you Joel. It's QoQ issue. I can't use Datediff in QoQ :( On 08/06/06, Joel Cass [EMAIL PROTECTED] wrote:  Is this too advanced for CF's ailing query of queries? I do not use this feature much so am unsure You could try SELECT (date_com-date_submitted) AS SubTotalNum Though I cannot

[cfaussie] Re: OT: Virus protection software

2006-06-07 Thread David Pietersen
Actually, it might work outbetter for their competition. NowMicrosoft have zero incentive to really secure their products out-of-the-box, and it is clear that you will have to buy something to do the job, there is no need for it to be a MS product. Of course, plenty of people will use it by