Dam,

That really looks open to SQL Injection, someone should let them know.

Regards
Dale Fraser

> -----Original Message-----
> From: cfaussie@googlegroups.com [mailto:[EMAIL PROTECTED] On
> Behalf Of Chad Renando
> Sent: Friday, 31 March 2006 14:06 PM
> To: cfaussie@googlegroups.com
> Subject: [cfaussie] tvguide.com.au
> 
> 
> Crash, bang, boom of a CF site.
> 
> I wonder what kind of traffic they get?  Might be some job opps
> opening up or maybe just some hosting opportunities maybe? ;)
> 
> Chad
> 
> --------------------------------------------------------------------------
> ---------------------------------------
> 
>  The web site you are accessing has experienced an unexpected error.
> Please contact the website administrator.
> 
> The following information is meant for the website developer for
> debugging purposes.
> Error Occurred While Processing Request
> Error Executing Database Query.
> [Macromedia][SQLServer JDBC Driver][SQLServer]Database 'users' cannot
> be opened because it is offline.
> 
> The error occurred in D:\web\tvguide.com.au\index.cfm: line 32
> 
> 30 : select person_id, password
> 31 : from users.dbo.person
> 32 : where person_id = #Val(cookie.person_id)#
> 33 : </cfquery>
> 34 :
> 
> SQL      select person_id, password from users.dbo.person where
> person_id = 2617356
> DATASOURCE      hww_sql
> VENDORERRORCODE         942
> SQLSTATE        HY000
> Resources:
> 
>     * Check the ColdFusion documentation to verify that you are using
> the correct syntax.
>     * Search the Knowledge Base to find a solution to your problem.
> 
> Browser       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.9)
> Gecko/20050711 Firefox/1.0.5 (ax)
> Remote Address        58.104.59.236
> Referrer
> Date/Time     31-Mar-06 02:01 PM
> Stack Trace
> at cfindex2ecfm1650242660.runPage(D:\web\tvguide.com.au\index.cfm:32)
> at cfindex2ecfm1650242660.runPage(D:\web\tvguide.com.au\index.cfm:32)
> 
> java.sql.SQLException: [Macromedia][SQLServer JDBC
> Driver][SQLServer]Database 'users' cannot be opened because it is
> offline.
>       at macromedia.jdbc.base.BaseExceptions.createException(Unknown
> Source)
>       at macromedia.jdbc.base.BaseExceptions.getException(Unknown Source)
>       at
> macromedia.jdbc.sqlserver.tds.TDSRequest.processErrorToken(Unknown Source)
>       at
> macromedia.jdbc.sqlserver.tds.TDSRequest.processReplyToken(Unknown Source)
>       at macromedia.jdbc.sqlserver.tds.TDSRequest.processReply(Unknown
> Source)
>       at
> macromedia.jdbc.sqlserver.SQLServerImplStatement.getNextResultType(Unknown
> Source)
>       at
> macromedia.jdbc.base.BaseStatement.commonTransitionToState(Unknown Source)
>       at macromedia.jdbc.base.BaseStatement.postImplExecute(Unknown
> Source)
>       at macromedia.jdbc.base.BaseStatement.commonExecute(Unknown Source)
>       at macromedia.jdbc.base.BaseStatement.executeInternal(Unknown
> Source)
>       at macromedia.jdbc.base.BaseStatement.execute(Unknown Source)
>       at
> coldfusion.server.j2ee.sql.JRunStatement.execute(JRunStatement.java:212)
>       at coldfusion.sql.Executive.executeQuery(Executive.java:719)
>       at coldfusion.sql.Executive.executeQuery(Executive.java:652)
>       at coldfusion.sql.Executive.executeQuery(Executive.java:613)
>       at coldfusion.sql.SqlImpl.execute(SqlImpl.java:236)
>       at coldfusion.tagext.sql.QueryTag.doEndTag(QueryTag.java:499)
>       at
> cfindex2ecfm1650242660.runPage(D:\web\tvguide.com.au\index.cfm:32)
>       at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:152)
>       at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:349)
>       at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65)
>       at
> coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:210)
>       at coldfusion.filter.PathFilter.invoke(PathFilter.java:86)
>       at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:69)
>       at
> coldfusion.filter.BrowserDebugFilter.invoke(BrowserDebugFilter.java:52)
>       at
> coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersisten
> ceFilter.java:28)
>       at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)
>       at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
>       at
> coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
>       at
> coldfusion.filter.RequestThrottleFilter.invoke(RequestThrottleFilter.java:
> 115)
>       at coldfusion.CfmServlet.service(CfmServlet.java:107)
>       at
> coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:78)
>       at jrun.servlet.FilterChain.doFilter(FilterChain.java:86)
>       at com.seefusion.Filter.doFilter(Filter.java)
>       at com.seefusion.SeeFusion.doFilter(SeeFusion.java)
>       at jrun.servlet.FilterChain.doFilter(FilterChain.java:94)
>       at jrun.servlet.FilterChain.service(FilterChain.java:101)
>       at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:91)
>       at
> jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42)
>       at
> jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:257)
>       at
> jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:541)
>       at
> jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:20
> 4)
>       at
> jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.jav
> a:318)
>       at
> jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:4
> 26)
>       at
> jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:
> 264)
>       at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)
> 
> 

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"cfaussie" group.
To post to this group, send email to cfaussie@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cfaussie
-~----------~----~----~----~------~----~------~--~---

Reply via email to