[cfaussie] Version control + ColdFusion development

2008-09-25 Thread Matthew
Hi everyone, Setup: Windows environment, IIS, CF7, Eclipse I'm looking to apply version control to a website I'm working on and would appreciate any recommendations on how best to set everything up in regards to version control + CF coding. If you can't be bothered to ready the long winded

[cfaussie] SQL INJECTION

2008-09-25 Thread Claude Raiola
Hi, We have just had an SQL injection attack. Given we have several hundred cold fusion pages and the sql database as several hundred tables has anyone found a reliable solution where why script can be placed in the application.cfm page that will prevent code being appended to queries as a

[cfaussie] Re: SQL INJECTION

2008-09-25 Thread Taco Fleur
Lots of things you can do 1. always use cfqueryparam 2. you can enable script protection from CF admin (depending on what version you are on), alternatively you can use a custom function that filters the URL and FORM vars, I can send it to you if you can't enable it in the admin On Fri, Sep 26,

[cfaussie] Re: SQL INJECTION

2008-09-25 Thread Matthew
Hi Claude As you pointed out the cfqueryparam is the best bet however even though we had cfqueryparam and weren't affected it was still anyoying getting all the errors on the logs so we added the following to Application.cfm: cfif reFindNocase(declare,cgi.query_string)cfcontent reset=Yescfheader

[cfaussie] Re: SQL INJECTION

2008-09-25 Thread Barry Beattie
funny this post should come up. right at this moment I'm just watching a Connect presso of a CFUG in the states: Ben Greenbaum from Symantec is speaking about web application security, and how web applications are being attacked to harvest and gather information from end-users. it's

[cfaussie] Re: Version control + ColdFusion development

2008-09-25 Thread Scott Thornton
Hi, Hope you get some great answers. I need to do this myself with a few other developers here. Version control as you have found, is as much about the process of using it as it is as having a repository. It is the process part that undoes me. Matthew [EMAIL PROTECTED] 26/09/2008 9:25 am

[cfaussie] Re: Version control + ColdFusion development

2008-09-25 Thread Kym Kovan
Matthew wrote: Hi everyone, Setup: Windows environment, IIS, CF7, Eclipse I'm looking to apply version control to a website I'm working on and would appreciate any recommendations on how best to set everything up in regards to version control + CF coding. Question: I've install

[cfaussie] Re: SQL INJECTION

2008-09-25 Thread Kym Kovan
Claude Raiola wrote: We have just had an SQL injection attack. Given we have several hundred cold fusion pages and the sql database as several hundred tables has anyone found a reliable solution where why script can be placed in the application.cfm page that will prevent code being

[cfaussie] Re: Version control + ColdFusion development

2008-09-25 Thread Toby Tremayne
Hi Matthew, there were some posts about this a few weeks back in which I detailed the process we used - search the google groups for it and you should find a stack of answers. Feel free to drop me a line if you need any help. Toby On 26/09/2008, at 9:25 AM, Matthew wrote: Hi

[cfaussie] Re: SQL INJECTION

2008-09-25 Thread Taco Fleur
Another thing you can do is create different datasources, each with different rights; - read only - update - delete And use the read only datasource on the queries that only read data. The ones that update data might be behind a username and password so that would make it more difficult for the

[cfaussie] CF8 Ent on windows 64Bit

2008-09-25 Thread Taco Fleur
Hi, We've just moved all our servers from overseas to Australia and on 64Bit. All good so far, but I'm wondering whether anyone has experienced any trouble with CF on 64Bit in the past? Cheers -- Try advertising on the new Australian Business Directory www.clickfind.com.au blog:

[cfaussie] Re: Version control + ColdFusion development

2008-09-25 Thread Matthew
Hi Kym Thanks very much for such a detailed response. So just to be 100% sure of what you're saying: 1. You should only ever one version of the code on your dev machine i.e. if you're working on one branch (Branch A) but need to swap to another branch (Branch B) than you should check in Branch A

[cfaussie] Re: Version control + ColdFusion development

2008-09-25 Thread Kym Kovan
Matthew wrote: Hi Kym Thanks very much for such a detailed response. So just to be 100% sure of what you're saying: 1. You should only ever one version of the code on your dev machine i.e. if you're working on one branch (Branch A) but need to swap to another branch (Branch B) than you

[cfaussie] Re: CF8 Ent on windows 64Bit

2008-09-25 Thread Kym Kovan
Steve Onnis wrote: I would just load it up, run a heap of queries and create a heap of emails and stuff and see how you go. Currently I have a gig allocated to the jvm and it always uses between 900 mb and 1200 mb. Right now its sitting on 1100 mb. Seriously, test the crap out of it

[cfaussie] Re: CF8 Ent on windows 64Bit

2008-09-25 Thread Steve Onnis
I have had Mark Mandel do some heap inspection for me and even gave the heap dump to the Adobe techs and they couldn't see anything in there that would suggest and memory leaks so they don't know what it is. -Original Message- From: cfaussie@googlegroups.com [mailto:[EMAIL PROTECTED] On

[cfaussie] Re: CF8 Ent on windows 64Bit

2008-09-25 Thread Mark Mandel
I was going to say, I did a bunch of heap introspection, and found a bunch of stuff just waiting to be Finalized, but it never seemed to get there. It was really, really weird. Mark On Fri, Sep 26, 2008 at 12:55 PM, Steve Onnis [EMAIL PROTECTED] wrote: I have had Mark Mandel do some heap

[cfaussie] Re: Version control + ColdFusion development

2008-09-25 Thread CyberAngel
Mathew, As suggested please read the book I suggested, what you describe below is correct. However the client tools for subversion allow you to switch between versions/revisions, basically doing what happens below in one process. So in Eclipse, it works like this. I have trunk copy on my

[cfaussie] Re: Version control + ColdFusion development

2008-09-25 Thread Mark Mandel
There was a FAQU that was full of SVN resources on doing workflow management etc, I would suggest tracking it down. Mark On Fri, Sep 26, 2008 at 11:06 AM, Toby Tremayne [EMAIL PROTECTED] wrote: Hi Matthew, there were some posts about this a few weeks back in which I detailed the

[cfaussie] Re: Version control + ColdFusion development

2008-09-25 Thread Matthew
Hi Kym Thanks once again for taking the time to respond (and for clarifying various points). I've had a quick look at Eclipse and hunted around and finally found the Switching thing you've been talking about... if anyone else is looking for it it you just right click on your project (or Working