-- Topica Digest --
RE: Session Handling in FB3
By [EMAIL PROTECTED]
tablewrapper custom tag from thirdwheelbikes
By [EMAIL PROTECTED]
sessions and fbx_settings file
By [EMAIL PROTECTED]
RE: sessions and fbx_settings file
By [EMAIL PROTECTED]
Re: sessions and fbx_settings file
By [EMAIL PROTECTED]
RE: sessions and fbx_settings file
By [EMAIL PROTECTED]
cfmodule and xfa's
By [EMAIL PROTECTED]
RE: sessions and fbx_settings file
By [EMAIL PROTECTED]
RE: sessions and fbx_settings file
By [EMAIL PROTECTED]
RE: cfmodule and xfa's
By [EMAIL PROTECTED]
RE: sessions and fbx_settings file
By [EMAIL PROTECTED]
RE: cfmodule and xfa's
By [EMAIL PROTECTED]
Re: cfmodule and xfa's
By [EMAIL PROTECTED]
RE: OT: Government Data
By [EMAIL PROTECTED]
RE: OT: Government Data
By [EMAIL PROTECTED]
RE: OT: Government Data
By [EMAIL PROTECTED]
RE: OT: Government Data
By [EMAIL PROTECTED]
Urgent - Conference Questions
By [EMAIL PROTECTED]
dreaded templat not found error: going nuts
By [EMAIL PROTECTED]
RE: Urgent - Conference Questions
By [EMAIL PROTECTED]
Re: dreaded templat not found error: going nuts
By [EMAIL PROTECTED]
Re: Session Management FB3
By [EMAIL PROTECTED]
Re: sessions and fbx_settings file
By [EMAIL PROTECTED]
Fusebox on Perl? And a question on standardized XML Schemas
By [EMAIL PROTECTED]
Re: Fusebox on Perl? And a question on standardized XML Schemas
By [EMAIL PROTECTED]
Question about Password Protection
By [EMAIL PROTECTED]
Re: Question about Password Protection
By [EMAIL PROTECTED]
Re: Question about Password Protection
By [EMAIL PROTECTED]
Mindmapper Fusebox examples
By [EMAIL PROTECTED]
RE: Mindmapper Fusebox examples
By [EMAIL PROTECTED]
------------------------------------------------------------
Date: Fri, 20 Sep 2002 08:41:34 -0400
From: Robert Everland <[EMAIL PROTECTED]>
Subject: RE: Session Handling in FB3
There is a way you could do that in CF 5, but the problem is, Google
spiders wouldn't have cookies enabled. So if googled indexed you and someone
found you off of google they would potentially get google's session. Though
you could do a quick check as soon as they go there to see if that session
is in use and give them a new one.
Robert Everland III
Web Developer Extraordinaire
Dixon Ticonderoga Company
http://www.dixonusa.com
-----Original Message-----
From: John Quarto-vonTivadar [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 1:12 AM
To: [EMAIL PROTECTED]
Subject: Re: Session Handling in FB3
I read somewhere that in CFMX you can have it determne if cookies are
enabled and if so it uses them and if not then it uses CFID/CFTOKEN on the
URL.. can anyone confirm? that is a big convenience if true
----- Original Message -----
From: "Chris Brinker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, September 20, 2002 12:29 AM
Subject: Session Handling in FB3
> Hello,
> I was recently poking around inside the source of 3rd wheel bikes
> (the demo app showing fb in action). Istumbled across something that I
> think is disturbing. It seems as though the shopping cart is dependent
> upon cookies being enabled. I have tested this and indeed when cookies
> are disabled the cart no longer functions. I know that there are other
> ways to do session management other than cookie/client based.
>
> My primary concern is in that there appears to be a security risk when
> dealing with information residing on the client's machine. I was
> wondering if anyone could make some arguments as to whether this
> practice is considered secure versus other methods of session
> management. Also I would like to
hear
> comments on all known alternatives to this issue.
>
> I wonder if the idea of Server side session management works with FB3
> and
if
> so, why would you not use it?
>
> Thank For Any Comments,
> Chris Brinker
>
> _________________________________________________________________
> Join the world's largest e-mail service with MSN Hotmail.
> http://www.hotmail.com
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Fri, 20 Sep 2002 14:48:39 +0200
From: "Urs Bertschy" <[EMAIL PROTECTED]>
Subject: tablewrapper custom tag from thirdwheelbikes
This is a multi-part message in MIME format.
------=_NextPart_000_0009_01C260B4.CEC9D9F0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
I'm just wondering if it is common practice to use a custom tag like tablewrapper in
thirdwheelbikes to apply layouts.
I am thinking about making a similiar customtag for layouting my portlets, error
dialogs, forms etc. I can't use fbx_layouts since they are in the in the same circuit
and can have differents layouts. Also I have already layout page for that circuit. Now
I thought the taplewrapper-method could be an elegant way to apply these layouts
individually rather than hardcoding every table around every portlet an every form.
But I am afraid that a custom tags just for formating is a litte bit an overkill,
since it allocates its own memory space.
What do you think?
Or would it even be better to move to fuseQ for portal-like sites?
Thanks
------=_NextPart_000_0009_01C260B4.CEC9D9F0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2600.0" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I'm just wondering if it is common practice to use
a custom tag like tablewrapper in thirdwheelbikes to apply layouts.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I am thinking about making a similiar customtag for
layouting my portlets, error dialogs, forms etc. I can't use fbx_layouts since
they are in the in the same circuit and can have differents layouts. Also I have
already layout page for that circuit. Now I thought the
taplewrapper-method could be an elegant way to apply these layouts individually
rather than hardcoding every table around every portlet an every form. But I am
afraid that a custom tags just for formating is a litte bit an overkill, since
it allocates its own memory space. </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>What do you think? </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Or would it even be better to move to fuseQ for
portal-like sites?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks</FONT></DIV>
</BODY></HTML>
------=_NextPart_000_0009_01C260B4.CEC9D9F0--
------------------------------
Date: Fri, 20 Sep 2002 14:08:04 +0000
From: <[EMAIL PROTECTED]>
Subject: sessions and fbx_settings file
I've been trying to get FB to secure a directory by checking for the
presence (or absence) of a cookie set at login. Easy, right? Pre FB, I
would put this code into the application.cfm file for whatever directory
I wanted to secure:
<cfif IsDefined ("cookie.login") IS "FALSE">
show a 'you are not logged in' page here
<cfabort>
</cfif>
and that would be it. Works great.
Now, how do I do this inside the fbx_setting.cfm file?
The above code (and many other variations of it) seems to get ignored -
even though the cookie is not present, the directory is wide open to
anyone who types in the correct fuseaction.
any help would be much appreciated.
Jeff
------------------------------
Date: Fri, 20 Sep 2002 16:17:51 +0100
From: John Beynon <[EMAIL PROTECTED]>
Subject: RE: sessions and fbx_settings file
What about:
<cfif fusebox.IsHomeCircuit>
<!--- put settings here that you want to execute only when this is
the application's home circuit (for example "<cfapplication>" )--->
<cfelse>
<!--- put settings here that you want to execute only when this is
not an application's home circuit --->
<cfif IsDefined ("cookie.login") IS "FALSE">
show a 'you are not logged in' page here
<cfabort>
</cfif>
</cfif>
In the circuit we're securing...
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 20 September 2002 15:08
To: [EMAIL PROTECTED]
Subject: sessions and fbx_settings file
I've been trying to get FB to secure a directory by checking for the
presence (or absence) of a cookie set at login. Easy, right? Pre FB, I
would put this code into the application.cfm file for whatever directory
I wanted to secure:
and that would be it. Works great.
Now, how do I do this inside the fbx_setting.cfm file?
The above code (and many other variations of it) seems to get ignored -
even though the cookie is not present, the directory is wide open to
anyone who types in the correct fuseaction.
any help would be much appreciated.
Jeff
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
_____________________________________________________________________
This e-mail has been scanned for viruses by the WorldCom Internet Managed
Scanning Service - powered by MessageLabs. For further information visit
http://www.worldcom.com
*************************************************************************
Copyright ERA Technology Ltd. 2002. (www.era.co.uk). All rights reserved.
The information supplied in this email should be treated in confidence.
No liability whatsoever is accepted for any loss or damage
suffered as a result of accessing this message or any attachments.
_____________________________________________________________________
This e-mail has been scanned for viruses by the WorldCom Internet Managed Scanning
Service - powered by MessageLabs. For further information visit http://www.worldcom.com
------------------------------
Date: Sat, 21 Sep 2002 01:29:57 +1000
From: "Lee Borkman" <[EMAIL PROTECTED]>
Subject: Re: sessions and fbx_settings file
Hi Jeff,
Are you sure that fbx_settings is being executed? If it is being executed, then
I'm sure that your cookie check won't be ignored. There's nothing special that
FB3 does that would prevent this code from working.
On the other hand, I prefer to put this kind of code in fbx_switch, because
that's where my app's functions/fuseactions are defined. This means I can get
fine-grained security on individual fuseactions, or on the entire circuit of
fuseactions, by choosing where in fbx_switch I place my security check. This
also means that my security checks are only executed in the target circuit, so I
don't get multiple checks as FB3 descends through the nesting.
Anyway, can you drop some debug code into fbx_settings, or otherwise confirm
that fbx_settings is actually being run?
Thanks,
LeeBB
----- Original Message -----
From: <[EMAIL PROTECTED]>
> I've been trying to get FB to secure a directory by checking for the
> presence (or absence) of a cookie set at login. Easy, right? Pre FB, I
> would put this code into the application.cfm file for whatever directory
> I wanted to secure:
>
> <cfif IsDefined ("cookie.login") IS "FALSE">
> show a 'you are not logged in' page here
> <cfabort>
> </cfif>
>
> and that would be it. Works great.
>
> Now, how do I do this inside the fbx_setting.cfm file?
>
> The above code (and many other variations of it) seems to get ignored -
> even though the cookie is not present, the directory is wide open to
> anyone who types in the correct fuseaction.
>
------------------------------
Date: Fri, 20 Sep 2002 11:35:08 -0400
From: "McCartney, Jeff (EST)" <[EMAIL PROTECTED]>
Subject: RE: sessions and fbx_settings file
yep, tried that, John. Nothing.
What I've done in the meantime, and I don't like it because it's extra code,
is put the conditional logic into the fbx_switch file inside the <cfcase>
tags for each subdirectory I'm trying to secure. It works, but it seems less
er, elegant. Hmmm.
thx for your reply.
-----Original Message-----
From: John Beynon [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 11:18 AM
To: '[EMAIL PROTECTED]'
Subject: RE: sessions and fbx_settings file
What about:
<cfif fusebox.IsHomeCircuit>
<!--- put settings here that you want to execute only when this is
the application's home circuit (for example "<cfapplication>" )--->
<cfelse>
<!--- put settings here that you want to execute only when this is
not an application's home circuit --->
<cfif IsDefined ("cookie.login") IS "FALSE">
show a 'you are not logged in' page here
<cfabort>
</cfif>
</cfif>
In the circuit we're securing...
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 20 September 2002 15:08
To: [EMAIL PROTECTED]
Subject: sessions and fbx_settings file
I've been trying to get FB to secure a directory by checking for the
presence (or absence) of a cookie set at login. Easy, right? Pre FB, I
would put this code into the application.cfm file for whatever directory
I wanted to secure:
and that would be it. Works great.
Now, how do I do this inside the fbx_setting.cfm file?
The above code (and many other variations of it) seems to get ignored -
even though the cookie is not present, the directory is wide open to
anyone who types in the correct fuseaction.
any help would be much appreciated.
Jeff
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
_____________________________________________________________________
This e-mail has been scanned for viruses by the WorldCom Internet Managed
Scanning Service - powered by MessageLabs. For further information visit
http://www.worldcom.com
*************************************************************************
Copyright ERA Technology Ltd. 2002. (www.era.co.uk). All rights reserved.
The information supplied in this email should be treated in confidence.
No liability whatsoever is accepted for any loss or damage
suffered as a result of accessing this message or any attachments.
_____________________________________________________________________
This e-mail has been scanned for viruses by the WorldCom Internet Managed
Scanning Service - powered by MessageLabs. For further information visit
http://www.worldcom.com
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Fri, 20 Sep 2002 11:33:45 -0400
From: "Ken Beard" <[EMAIL PROTECTED]>
Subject: cfmodule and xfa's
Looking for opinions.. if i'm cfmoduling a fuseaction from within a fuse,
should i pass in an xfa for the cfmodule? I would say yes as a knee-jerk,
but then again I think of xfa's as places that the app could pass control
to, and with cfmodule i'm not passing control (atleast in this instance),
I'm just calling an action and returning control to the current fuse
(action).
thanks
Ken Beard
Tampa
------------------------------
Date: Fri, 20 Sep 2002 11:37:19 -0400
From: "McCartney, Jeff (EST)" <[EMAIL PROTECTED]>
Subject: RE: sessions and fbx_settings file
Hi Lee,
That's exactly what I've done, and it works. I know my fbx_settings file is
being executed because i have some variables in there and they get called no
problem.
I can live with the fbx_switch solution, even though it means more coding.
Whatever works!
-----Original Message-----
From: Lee Borkman [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 11:30 AM
To: [EMAIL PROTECTED]
Subject: Re: sessions and fbx_settings file
Hi Jeff,
Are you sure that fbx_settings is being executed? If it is being executed,
then
I'm sure that your cookie check won't be ignored. There's nothing special
that
FB3 does that would prevent this code from working.
On the other hand, I prefer to put this kind of code in fbx_switch, because
that's where my app's functions/fuseactions are defined. This means I can
get
fine-grained security on individual fuseactions, or on the entire circuit of
fuseactions, by choosing where in fbx_switch I place my security check.
This
also means that my security checks are only executed in the target circuit,
so I
don't get multiple checks as FB3 descends through the nesting.
Anyway, can you drop some debug code into fbx_settings, or otherwise confirm
that fbx_settings is actually being run?
Thanks,
LeeBB
----- Original Message -----
From: <[EMAIL PROTECTED]>
> I've been trying to get FB to secure a directory by checking for the
> presence (or absence) of a cookie set at login. Easy, right? Pre FB, I
> would put this code into the application.cfm file for whatever directory
> I wanted to secure:
>
> <cfif IsDefined ("cookie.login") IS "FALSE">
> show a 'you are not logged in' page here
> <cfabort>
> </cfif>
>
> and that would be it. Works great.
>
> Now, how do I do this inside the fbx_setting.cfm file?
>
> The above code (and many other variations of it) seems to get ignored -
> even though the cookie is not present, the directory is wide open to
> anyone who types in the correct fuseaction.
>
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Fri, 20 Sep 2002 11:53:28 -0400
From: "Patrick McElhaney" <[EMAIL PROTECTED]>
Subject: RE: sessions and fbx_settings file
Jeff,
Something just doesn't seem right about that. I have almost
exactly the same code in one of my fbx_settings files and it
works beautifully. Try taking the if statement out so that
the code will always execute and no one should be able to
access the circuit.
I'm not going to let you get away with "Oh, well, I'll just
write more code." ;-)
BTW, rumour has it Cameron Childress has a "revolutionary
new security circuit" that he's going to be talking about at
the conference.
Patrick
------------------------------
Date: Fri, 20 Sep 2002 12:04:55 -0400
From: "Patrick McElhaney" <[EMAIL PROTECTED]>
Subject: RE: cfmodule and xfa's
> Ken wrote:
>
> Looking for opinions.. if i'm cfmoduling a
> fuseaction from within a fuse, should i pass
> in an xfa for the cfmodule? I would say yes
> as a knee-jerk, but then again I think of xfa's
> as places that the app could pass control to,
> and with cfmodule i'm not passing control
> (atleast in this instance), I'm just calling
> an action and returning control to the current
> fuse (action).
>
If you think of xfas as event handlers, I think your
knee-jerk makes sense.
Think about how you would design a fuseaction that displays
a form. It could be used for adding an item, updating an
item, or even searching for an item. Which fuseaction the
form should post to depends on the context
in which its called. So it can't set its on xfa.submitForm.
It has to get that value from the fuseaction that's calling
it.
Make sense?
Patrick
------------------------------
Date: Fri, 20 Sep 2002 12:09:35 -0400
From: "McCartney, Jeff (EST)" <[EMAIL PROTECTED]>
Subject: RE: sessions and fbx_settings file
you slavedriver.
I popped that code into the fbx_settings file one level up the tree and it
does execute - in an infinite loop - so the code appears ok.
I'm going to stick with the fbx_switch solution for now because I haven't
got time for any more headscratching - gotta install CFMX Server and get my
site up and running... <groundskeeperWillie>There's work to be
done!</groundskeeperWillie>
Hey, I just finished writing an app in asp (gasp!) so this is not a lot code
to deal with, relatively speaking.
enjoy the conference, I'll be watching for news of Cameron's revolutionary
security thingy.
-----Original Message-----
From: Patrick McElhaney [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 11:53 AM
To: [EMAIL PROTECTED]
Subject: RE: sessions and fbx_settings file
Jeff,
Something just doesn't seem right about that. I have almost
exactly the same code in one of my fbx_settings files and it
works beautifully. Try taking the if statement out so that
the code will always execute and no one should be able to
access the circuit.
I'm not going to let you get away with "Oh, well, I'll just
write more code." ;-)
BTW, rumour has it Cameron Childress has a "revolutionary
new security circuit" that he's going to be talking about at
the conference.
Patrick
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Fri, 20 Sep 2002 16:55:14 +0000
From: Neo Rye <[EMAIL PROTECTED]>
Subject: RE: cfmodule and xfa's
Hey Ken,
I've fretted over this to and have been all over place. In the end I
settled on a solution that has ended up being very flexible. I'd like to
propose it for you to consider.
It all started because I wanted to <cfmodule> my XFA's. So my first
question is are XFA's Attributes.XFA's or are they Variables.XFA's? I
don't like it when things are sometimes one way and then sometimes the
other. I also had issues with naming my XFA's Attributes.XFA becasue
then there was more of a potential of overwriting other XFA's in other
templates. So I decided I would just (and always) leave my XFA's as
Variables.XFA.
The second problem I had was that I wanted to be able to pass my XFA's
into the <cfmodule>, but then I'd have XFA's on the <cfmoduled> template
page that would go to another page with XFA's. So I needed a way to not
only pass XFA's to my <cfmodule> but also to the next template that
those XFA's sent me to. And this could get real confusing if you try to
set XFA's for 10 templates based on one entry point. Most likely the XFA
is sending you someplace and that someplace is also going to have XFA's
that need to be set based on your original entry point.
My Solution:
I decide to treat my circuits more like objects and my <cfmodule> calls
will be my access method to those objects. But how to link them all
together and create a workflow? I decided that I would first create a
new template called flo_login.cfm. This flo_login.cfm file would contain
an array of fuseaction and XFA's that would work like a thread to link
all my fuseactions to other fuseaction based on where the XFA was
sending me next.
Here is a simple example of my flo_login.cfm file located in my login
circuit:
<cfscript>
steps = ArrayNew(1);
steps[1] = structnew();
steps[1].fuseaction="login.default";
steps[1].xfa = StructNew();
steps[1].xfa.pass = "customer.default";
steps[1].xfa.fail = "login.default";
steps[1].xfa.submit = "login.default";
steps[1].attributes = StructNew();
</cfscript>
This is a simple example, but could be a very large array that defined a
complex workflow. This defined the workflow of logging into my site.
Basically what happens is that this code is generated when the user goes
to login.default and when the fuseaction in the URL matches the
fuseaction in my array, I dump the XFA's to that template. This example
doesn't show the more complex version, but lets start here and if your
interested, I'll show some more.
I have some supporting template files and here is how I access them from
the fbx_switch.cfm file:
<cfcase action="default">
<!---the workflow definition file--->
<cfinclude template="flo_Login.cfm">
<!---set the workflow process for login. This stores a copy of the
workflow in the seesion state for this user--->
<cfmodule template="#thisModule#" FuseAction="WorkFlow.Create"
Steps="#steps#" WorkFlowStart="#attributes.fuseaction#">
<!---this fuseaction is part of a workflow process, get the workflow if
it exists--->
<cfmodule template="#thisModule#" FuseAction="WorkFlow.Get"
getFlow="#attributes.fuseaction#">
<!----login form--->
<cfinclude template="frm_Login.cfm">
</cfcase>
Here is where I create the workflow for this user:
<cfsilent>
<cfparam name="attributes.steps" default="">
<cfparam name="attributes.WorkFlowStart" default="">
<cfscript>
//only create the workflow if it doesn't already exist
if(not isdefined("caller.user.workflow.start") OR
CompareNoCase(caller.user.workflow.start,attributes.WorkFlowStart))
{
WorkFlow = structnew();
WorkFlow.CurrentStep = 1;
//a static type is when the workflow is defined from a
static flo_
file.
WorkFlow.type = 'static';
WorkFlow.start = attributes.WorkFlowStart;
WorkFlow.steps = ArrayNew(1);
WorkFlow.steps = attributes.steps;
/*typically this file is only called as a <cfmodule>
-set the user.WorkFlow structure*/
caller.user.WorkFlow = structNew();
caller.user.WorkFlow = WorkFlow;
}
</cfscript>
</cfsilent>
Here is my WorkFlow.Get:
<!---attributes.setStep is the fuseaction that the xfa variables should
be set for--->
<cfsilent>
<!---get flow is the circuit.fuseaction=--->
<cfparam name="attributes.getFlow" default="">
<cfscript>
//does the user have the workflow structure
if(isdefined("caller.user.workflow.steps"))
{
//loop over the array looking for the fuseaction to get the
xfa's and
attributes for.
for(i=1; i lte arraylen(caller.user.workflow.steps); i=i+1)
{
//is this the fuseaction
if(Not
CompareNoCase(attributes.getFlow,caller.user.WorkFlow.steps[i].fuseaction))
{
//append the xfa's if the exist
if(isStruct(caller.user.WorkFlow.steps[i].xfa))
StructAppend(caller.xfa,caller.user.WorkFlow.steps[i].xfa);
//we can also append attributes
if(isStruct(caller.user.WorkFlow.steps[i].attributes))
StructAppend(caller.attributes,caller.user.WorkFlow.steps[i].attributes);
//set the current step
caller.user.workflow.currentstep = i;
//lets break if we found what we are looking for
break;
}
}
}
</cfscript>
</cfsilent>
Anyway, that's alot for this reply, if your interested, we can talk
more. Look it over and let me know if you have any questions.
Ken Beard wrote:
> Looking for opinions.. if i'm cfmoduling a fuseaction from within a
> fuse,
> should i pass in an xfa for the cfmodule? I would say yes as a
> knee-jerk,
> but then again I think of xfa's as places that the app could pass
> control
> to, and with cfmodule i'm not passing control (atleast in this
> instance),
> I'm just calling an action and returning control to the current fuse
> (action).
>
> thanks
> Ken Beard
> Tampa
>
>
>
------------------------------
Date: Fri, 20 Sep 2002 13:30:03 -0400
From: "John Quarto-vonTivadar" <[EMAIL PROTECTED]>
Subject: Re: cfmodule and xfa's
perhaps just create a structure in Request scope and by-pass the whole
problem?
----- Original Message -----
From: "Neo Rye" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, September 20, 2002 12:55 PM
Subject: RE: cfmodule and xfa's
> Hey Ken,
> I've fretted over this to and have been all over place. In the end I
> settled on a solution that has ended up being very flexible. I'd like to
> propose it for you to consider.
>
> It all started because I wanted to <cfmodule> my XFA's. So my first
> question is are XFA's Attributes.XFA's or are they Variables.XFA's? I
> don't like it when things are sometimes one way and then sometimes the
> other. I also had issues with naming my XFA's Attributes.XFA becasue
> then there was more of a potential of overwriting other XFA's in other
> templates. So I decided I would just (and always) leave my XFA's as
> Variables.XFA.
>
> The second problem I had was that I wanted to be able to pass my XFA's
> into the <cfmodule>, but then I'd have XFA's on the <cfmoduled> template
> page that would go to another page with XFA's. So I needed a way to not
> only pass XFA's to my <cfmodule> but also to the next template that
> those XFA's sent me to. And this could get real confusing if you try to
> set XFA's for 10 templates based on one entry point. Most likely the XFA
> is sending you someplace and that someplace is also going to have XFA's
> that need to be set based on your original entry point.
>
> My Solution:
> I decide to treat my circuits more like objects and my <cfmodule> calls
> will be my access method to those objects. But how to link them all
> together and create a workflow? I decided that I would first create a
> new template called flo_login.cfm. This flo_login.cfm file would contain
> an array of fuseaction and XFA's that would work like a thread to link
> all my fuseactions to other fuseaction based on where the XFA was
> sending me next.
>
> Here is a simple example of my flo_login.cfm file located in my login
> circuit:
> <cfscript>
> steps = ArrayNew(1);
> steps[1] = structnew();
> steps[1].fuseaction="login.default";
> steps[1].xfa = StructNew();
> steps[1].xfa.pass = "customer.default";
> steps[1].xfa.fail = "login.default";
> steps[1].xfa.submit = "login.default";
> steps[1].attributes = StructNew();
> </cfscript>
> This is a simple example, but could be a very large array that defined a
> complex workflow. This defined the workflow of logging into my site.
> Basically what happens is that this code is generated when the user goes
> to login.default and when the fuseaction in the URL matches the
> fuseaction in my array, I dump the XFA's to that template. This example
> doesn't show the more complex version, but lets start here and if your
> interested, I'll show some more.
>
> I have some supporting template files and here is how I access them from
> the fbx_switch.cfm file:
> <cfcase action="default">
> <!---the workflow definition file--->
> <cfinclude template="flo_Login.cfm">
> <!---set the workflow process for login. This stores a copy of the
> workflow in the seesion state for this user--->
> <cfmodule template="#thisModule#" FuseAction="WorkFlow.Create"
> Steps="#steps#" WorkFlowStart="#attributes.fuseaction#">
> <!---this fuseaction is part of a workflow process, get the workflow if
> it exists--->
> <cfmodule template="#thisModule#" FuseAction="WorkFlow.Get"
> getFlow="#attributes.fuseaction#">
> <!----login form--->
> <cfinclude template="frm_Login.cfm">
> </cfcase>
>
> Here is where I create the workflow for this user:
> <cfsilent>
> <cfparam name="attributes.steps" default="">
> <cfparam name="attributes.WorkFlowStart" default="">
>
> <cfscript>
> //only create the workflow if it doesn't already exist
> if(not isdefined("caller.user.workflow.start") OR
> CompareNoCase(caller.user.workflow.start,attributes.WorkFlowStart))
> {
>
> WorkFlow = structnew();
> WorkFlow.CurrentStep = 1;
> //a static type is when the workflow is defined from a static flo_
> file.
> WorkFlow.type = 'static';
> WorkFlow.start = attributes.WorkFlowStart;
> WorkFlow.steps = ArrayNew(1);
> WorkFlow.steps = attributes.steps;
> /*typically this file is only called as a <cfmodule>
> -set the user.WorkFlow structure*/
> caller.user.WorkFlow = structNew();
> caller.user.WorkFlow = WorkFlow;
> }
> </cfscript>
> </cfsilent>
>
> Here is my WorkFlow.Get:
> <!---attributes.setStep is the fuseaction that the xfa variables should
> be set for--->
> <cfsilent>
> <!---get flow is the circuit.fuseaction=--->
> <cfparam name="attributes.getFlow" default="">
>
> <cfscript>
> //does the user have the workflow structure
> if(isdefined("caller.user.workflow.steps"))
> {
>
> //loop over the array looking for the fuseaction to get the xfa's and
> attributes for.
> for(i=1; i lte arraylen(caller.user.workflow.steps); i=i+1)
> {
> //is this the fuseaction
> if(Not
>
CompareNoCase(attributes.getFlow,caller.user.WorkFlow.steps[i].fuseaction))
>
> {
>
> //append the xfa's if the exist
> if(isStruct(caller.user.WorkFlow.steps[i].xfa))
> StructAppend(caller.xfa,caller.user.WorkFlow.steps[i].xfa);
>
> //we can also append attributes
> if(isStruct(caller.user.WorkFlow.steps[i].attributes))
>
> StructAppend(caller.attributes,caller.user.WorkFlow.steps[i].attributes);
>
>
> //set the current step
> caller.user.workflow.currentstep = i;
>
> //lets break if we found what we are looking for
> break;
> }
> }
> }
> </cfscript>
> </cfsilent>
>
>
> Anyway, that's alot for this reply, if your interested, we can talk
> more. Look it over and let me know if you have any questions.
> Ken Beard wrote:
> > Looking for opinions.. if i'm cfmoduling a fuseaction from within a
> > fuse,
> > should i pass in an xfa for the cfmodule? I would say yes as a
> > knee-jerk,
> > but then again I think of xfa's as places that the app could pass
> > control
> > to, and with cfmodule i'm not passing control (atleast in this
> > instance),
> > I'm just calling an action and returning control to the current fuse
> > (action).
> >
> > thanks
> > Ken Beard
> > Tampa
> >
> >
> >
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
------------------------------
Date: Fri, 20 Sep 2002 14:03:52 -0400
From: "Dan O'Keefe" <[EMAIL PROTECTED]>
Subject: RE: OT: Government Data
Thanks,
The Capitol Advantage link did not work.
Dan
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 19, 2002 8:46 PM
To: [EMAIL PROTECTED]
Subject: Re: OT: Government Data
Dan,
I wrote a nice long email about a couple companies and that my company might
have some of what you need. Well, my isp's online email application's
session timed out and when I submitted I was prompted to login, lost it all.
Anways, check out:
www.CaptiolAdvantage.com (probably has what you need, definitely legislative
and agency data)
www.LeadershipDirectories.com (definitely has all the information but they
are a publishing company and data might not be organized in the way you
need)
www.TheSoftEdge.com (my company, no agency or judiciary data, only Members
of Congress, staff, committees, etc. If you need votes, bills, etc let us
know. Programs for automating communication to congress, tracking
legislation, grass roots membership, e-advocacy, etc. For more info, check
out our website and/or email John Chamberlain, our VP of Sales,
[EMAIL PROTECTED])
hope that helps!
Dan
>
> From: Dan O'Keefe <[EMAIL PROTECTED]>
> Date: 2002/09/19 Thu PM 05:47:33 EDT
> To: Fusebox <[EMAIL PROTECTED]>
> Subject: OT: Government Data
>
>
> Does anyone know of a source for a nested federal government data list? I
> would also be looking for states also. I am looking to be able to drill
down
> into the data to eventually get to the individual in that position.
>
> example:
> Government
> -Federal
> --Executive
> ---Cabinet
> ----Secretary of Agriculture
> ----Secretary of Commerce
> ----Secretary of Defense
> -----Donald Rumsfeld
> --Legislative
> --Judicial
>
> Dan
>
> -----------------------------------------
> Dan O'Keefe
> TriPoint Technologies
> 954.501.3115
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Fri, 20 Sep 2002 14:08:08 -0400
From: "Stover, John" <[EMAIL PROTECTED]>
Subject: RE: OT: Government Data
Spelling...
http://www.capitoladvantage.com
Please let me know if I can be of assistance.
Thank you,
John M Stover II
[EMAIL PROTECTED]
-----Original Message-----
From: Dan O'Keefe [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 2:04 PM
To: [EMAIL PROTECTED]
Subject: RE: OT: Government Data
Thanks,
The Capitol Advantage link did not work.
Dan
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 19, 2002 8:46 PM
To: [EMAIL PROTECTED]
Subject: Re: OT: Government Data
Dan,
I wrote a nice long email about a couple companies and that my company
might have some of what you need. Well, my isp's online email
application's session timed out and when I submitted I was prompted to
login, lost it all.
Anways, check out:
www.CaptiolAdvantage.com (probably has what you need, definitely
legislative and agency data)
www.LeadershipDirectories.com (definitely has all the information but
they are a publishing company and data might not be organized in the way
you
need)
www.TheSoftEdge.com (my company, no agency or judiciary data, only
Members of Congress, staff, committees, etc. If you need votes, bills,
etc let us know. Programs for automating communication to congress,
tracking legislation, grass roots membership, e-advocacy, etc. For more
info, check out our website and/or email John Chamberlain, our VP of
Sales,
[EMAIL PROTECTED])
hope that helps!
Dan
>
> From: Dan O'Keefe <[EMAIL PROTECTED]>
> Date: 2002/09/19 Thu PM 05:47:33 EDT
> To: Fusebox <[EMAIL PROTECTED]>
> Subject: OT: Government Data
>
>
> Does anyone know of a source for a nested federal government data
> list? I would also be looking for states also. I am looking to be able
> to drill
down
> into the data to eventually get to the individual in that position.
>
> example:
> Government
> -Federal
> --Executive
> ---Cabinet
> ----Secretary of Agriculture
> ----Secretary of Commerce
> ----Secretary of Defense
> -----Donald Rumsfeld
> --Legislative
> --Judicial
>
> Dan
>
> -----------------------------------------
> Dan O'Keefe
> TriPoint Technologies
> 954.501.3115
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Fri, 20 Sep 2002 14:09:28 -0400
From: "Tangorre, Michael" <[EMAIL PROTECTED]>
Subject: RE: OT: Government Data
i dont get it...
also, send me that link to that cool phone!
-----Original Message-----
From: Stover, John
Sent: Friday, September 20, 2002 2:08 PM
To: [EMAIL PROTECTED]
Subject: RE: OT: Government Data
Spelling...
http://www.capitoladvantage.com
Please let me know if I can be of assistance.
Thank you,
John M Stover II
[EMAIL PROTECTED]
-----Original Message-----
From: Dan O'Keefe [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 2:04 PM
To: [EMAIL PROTECTED]
Subject: RE: OT: Government Data
Thanks,
The Capitol Advantage link did not work.
Dan
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 19, 2002 8:46 PM
To: [EMAIL PROTECTED]
Subject: Re: OT: Government Data
Dan,
I wrote a nice long email about a couple companies and that my company
might have some of what you need. Well, my isp's online email
application's session timed out and when I submitted I was prompted to
login, lost it all.
Anways, check out:
www.CaptiolAdvantage.com (probably has what you need, definitely
legislative and agency data)
www.LeadershipDirectories.com (definitely has all the information but
they are a publishing company and data might not be organized in the way
you
need)
www.TheSoftEdge.com (my company, no agency or judiciary data, only
Members of Congress, staff, committees, etc. If you need votes, bills,
etc let us know. Programs for automating communication to congress,
tracking legislation, grass roots membership, e-advocacy, etc. For more
info, check out our website and/or email John Chamberlain, our VP of
Sales,
[EMAIL PROTECTED])
hope that helps!
Dan
>
> From: Dan O'Keefe <[EMAIL PROTECTED]>
> Date: 2002/09/19 Thu PM 05:47:33 EDT
> To: Fusebox <[EMAIL PROTECTED]>
> Subject: OT: Government Data
>
>
> Does anyone know of a source for a nested federal government data
> list? I would also be looking for states also. I am looking to be able
> to drill
down
> into the data to eventually get to the individual in that position.
>
> example:
> Government
> -Federal
> --Executive
> ---Cabinet
> ----Secretary of Agriculture
> ----Secretary of Commerce
> ----Secretary of Defense
> -----Donald Rumsfeld
> --Legislative
> --Judicial
>
> Dan
>
> -----------------------------------------
> Dan O'Keefe
> TriPoint Technologies
> 954.501.3115
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Fri, 20 Sep 2002 14:14:29 -0400
From: "Dan O'Keefe" <[EMAIL PROTECTED]>
Subject: RE: OT: Government Data
Thanks. Looks like that site may have some of what I am looking for.
Dan
-----Original Message-----
From: Stover, John [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 2:08 PM
To: [EMAIL PROTECTED]
Subject: RE: OT: Government Data
Spelling...
http://www.capitoladvantage.com
Please let me know if I can be of assistance.
Thank you,
John M Stover II
[EMAIL PROTECTED]
-----Original Message-----
From: Dan O'Keefe [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 2:04 PM
To: [EMAIL PROTECTED]
Subject: RE: OT: Government Data
Thanks,
The Capitol Advantage link did not work.
Dan
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 19, 2002 8:46 PM
To: [EMAIL PROTECTED]
Subject: Re: OT: Government Data
Dan,
I wrote a nice long email about a couple companies and that my company
might have some of what you need. Well, my isp's online email
application's session timed out and when I submitted I was prompted to
login, lost it all.
Anways, check out:
www.CaptiolAdvantage.com (probably has what you need, definitely
legislative and agency data)
www.LeadershipDirectories.com (definitely has all the information but
they are a publishing company and data might not be organized in the way
you
need)
www.TheSoftEdge.com (my company, no agency or judiciary data, only
Members of Congress, staff, committees, etc. If you need votes, bills,
etc let us know. Programs for automating communication to congress,
tracking legislation, grass roots membership, e-advocacy, etc. For more
info, check out our website and/or email John Chamberlain, our VP of
Sales,
[EMAIL PROTECTED])
hope that helps!
Dan
>
> From: Dan O'Keefe <[EMAIL PROTECTED]>
> Date: 2002/09/19 Thu PM 05:47:33 EDT
> To: Fusebox <[EMAIL PROTECTED]>
> Subject: OT: Government Data
>
>
> Does anyone know of a source for a nested federal government data
> list? I would also be looking for states also. I am looking to be able
> to drill
down
> into the data to eventually get to the individual in that position.
>
> example:
> Government
> -Federal
> --Executive
> ---Cabinet
> ----Secretary of Agriculture
> ----Secretary of Commerce
> ----Secretary of Defense
> -----Donald Rumsfeld
> --Legislative
> --Judicial
>
> Dan
>
> -----------------------------------------
> Dan O'Keefe
> TriPoint Technologies
> 954.501.3115
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Fri, 20 Sep 2002 18:50:13 +0000
From: Marwan Saidi <[EMAIL PROTECTED]>
Subject: Urgent - Conference Questions
Ok, I thought that the Early Bird price was good through today, but if I
try to register on the fusebox.org site, it wants to charge me $275.
Second thing, I need to register myself and one of my developers. I want
to put this on my card (one receipt), but it seems to only want to
register me. If I want to sign my developer up on Fusebox.org, that's
all well and good, but I need to have one invoice with both charges.
Any advice?
Marwan
------------------------------
Date: Fri, 20 Sep 2002 14:56:46 -0400
From: "Rich Brant" <[EMAIL PROTECTED]>
Subject: dreaded templat not found error: going nuts
Anyone think of some obvious things I am overlooking. I can not figure out
for the life of me what is going on here. evything is fine in my
FBX_Circuits file. All my other circuits work just fine. I cant even get a
test fuseaction to work, by putting the text, "test" in a case statement of
a fuseaction named "test". I am still getting the template not found error.
Any ideas??
_________________________________________________________________
MSN Photos is the easiest way to share and print your photos:
http://photos.msn.com/support/worldwide.aspx
------------------------------
Date: Fri, 20 Sep 2002 12:13:22 -0700
From: "Nat Papovich" <[EMAIL PROTECTED]>
Subject: RE: Urgent - Conference Questions
These questions should be directed to [EMAIL PROTECTED] I've answered
directly to you, Marwan.
NAT
> -----Original Message-----
> From: Marwan Saidi [mailto:[EMAIL PROTECTED]]
> Sent: Friday, September 20, 2002 11:50 AM
> To: [EMAIL PROTECTED]
> Subject: Urgent - Conference Questions
>
>
> Ok, I thought that the Early Bird price was good through today, but if I
> try to register on the fusebox.org site, it wants to charge me $275.
>
> Second thing, I need to register myself and one of my developers. I want
> to put this on my card (one receipt), but it seems to only want to
> register me. If I want to sign my developer up on Fusebox.org, that's
> all well and good, but I need to have one invoice with both charges.
>
> Any advice?
>
> Marwan
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>
------------------------------
Date: Fri, 20 Sep 2002 15:14:30 -0400
From: "Rich Brant" <[EMAIL PROTECTED]>
Subject: Re: dreaded templat not found error: going nuts
nevermind! I was missing a '/' in my circuits file... not sure how I could
have missed it after about a thousand views.
>From: Rich Brant <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>Subject: dreaded templat not found error: going nuts
>Date: Fri, 20 Sep 2002 14:56:46 -0400
>
>
>Anyone think of some obvious things I am overlooking. I can not figure out
>for the life of me what is going on here. evything is fine in my
>FBX_Circuits file. All my other circuits work just fine. I cant even get
>a test fuseaction to work, by putting the text, "test" in a case statement
>of a fuseaction named "test". I am still getting the template not found
>error. Any ideas??
>
>
>_________________________________________________________________
>MSN Photos is the easiest way to share and print your photos:
>http://photos.msn.com/support/worldwide.aspx
>
>
>__________________________________________/Fusebox Conference!
>
>Sign up for the Fusebox Conference today! October
>26th & 27th: Orlando, FL, just before MACR DevCon. 2 jam-packed days,
>15 speakers in three tracks, World Fuseball Championship
>
>http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
_________________________________________________________________
MSN Photos is the easiest way to share and print your photos:
http://photos.msn.com/support/worldwide.aspx
------------------------------
Date: Fri, 20 Sep 2002 14:36:44 -0500
From: "Chris Brinker" <[EMAIL PROTECTED]>
Subject: Re: Session Management FB3
Jeff,
Thank you for the reply, more than anything I am interested if you have
ever run into any kind of security problems with the method you were using
on that sample site. I find that in my apps I would much rather not even
think about the possibility of bad data, and so I tend to do a great deal of
application variables as well as session variables.
Just out of curiosity has anyone done research on the different methods of
session management as far as security and other issues.
Thanks,
Chris Brinker
>From: Jeff Peters <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>Subject: Re: Session Management FB3
>Date: Thu, 19 Sep 2002 10:34:39 -0400
>MIME-Version: 1.0
>Received: from [66.180.244.21] by hotmail.com (3.2) with ESMTP id
>MHotMailBF53FB6B0047400437CD42B4F415133A1; Thu, 19 Sep 2002 22:21:51 -0700
>Received: (qmail 9071 invoked by uid 0); 19 Sep 2002 14:39:51 -0000
>Received: from unknown (HELO outmta005.topica.com) (192.168.3.5) by 0 with
>SMTP; 19 Sep 2002 14:39:51 -0000
>Received: (qmail 8419 invoked for bounce); 19 Sep 2002 14:39:46 -0000
>Received: (qmail 2063 invoked by alias); 19 Sep 2002 14:35:04 -0000
>Received: (qmail 2058 invoked by uid 0); 19 Sep 2002 14:35:04 -0000
>Received: from unknown (HELO mailsvr.fastdnsservers.com) (209.81.157.3) by
>0 with SMTP; 19 Sep 2002 14:35:04 -0000
>Received: from Oberon (unverified [63.216.177.37]) by
>mailsvr.fastdnsservers.com (Vircom SMTPRS 1.4.232) with ESMTP id
><[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>; Thu, 19
>Sep 2002 10:38:41 -0400
>From [EMAIL PROTECTED] Thu,
>19 Sep 2002 22:22:19 -0700
>Message-ID: <[EMAIL PROTECTED]>
>Errors-To:
><[EMAIL PROTECTED]>
>X-Topica-Id: <1032446105.inmta008.11679.1024160>
>List-Help: <http://topica.com/lists/fusebox/>
>List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
>Return-Path: <[EMAIL PROTECTED]>
>In-reply-to: <[EMAIL PROTECTED]>
>X-mailer: Pegasus Mail for Windows (v4.01)
>
>Chris -
>
>You certainly can do server-side session management with FB3. Third Wheel
>Bikes is just the sample app
>for the book Nat and I wrote; it is not intended to be an exhaustive "this
>is how FB3 must be" application.
>Within an application, we could only represent one way of doing a
>particular task (like managing a shopping
>cart); you should not infer that we recommend you NOT use another method.
>In fact, we're not
>recommending you use any particular method for your shopping cart. We're
>just showing you how to
>organize your code "a la Fusebox".
>
>Fusebox is about architecture and organization; what you do within your
>fuses is entirely up to you.
>
>- Jeff
>
>On 19 Sep 2002 at 9:04, Chris Brinker wrote:
>
> > Hello,
> > I was recently poking around inside the source of 3rd wheel bikes (the
> > demo app showing fb in action). Istumbled across something that I think
>is
> > disturbing. It seems as though the shopping cart is dependent upon
>cookies
> > being enabled. I have tested this and indeed when cookies are disabled
>the
> > cart no longer functions. I know that there are other ways to do session
> > management other than cookie/client based.
> >
> > My primary concern is in that there appears to be a security risk when
> > dealing with information residing on the client's machine. I was
>wondering
> > if anyone could make some arguments as to whether this practice is
> > considered
> > secure versus other methods of session management. Also I would like to
>hear
> > comments on all known alternatives to this issue.
> >
> > I wonder if the idea of Server side session management works with FB3
>and if
> > so, why would you not use it?
> >
> > Thank For Any Comments,
> > Chris Brinker
>
>
>__________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
_________________________________________________________________
MSN Photos is the easiest way to share and print your photos:
http://photos.msn.com/support/worldwide.aspx
------------------------------
Date: Sat, 21 Sep 2002 08:49:20 +1000
From: "Lee Borkman" <[EMAIL PROTECTED]>
Subject: Re: sessions and fbx_settings file
Hey, just to summarise where a permission-checking code should live...
* if just one fuseaction needs particular permissions, put the check code at the
top of the fuseaction;
* if an entire circuit needs particular permissions, put the check code at the
top of fbx_switch;
* if an entire tree of circuits needs particular permissions (never needed to do
this), put the check code in fbx_settings at the start of the tree.
If you do it like this, you won't have any unnecessary duplication, and you
won't have security checks being run that do not pertain to the action the user
is attempting to perform.
See ya,
LeeBB
----- Original Message -----
From: Lee Borkman <[EMAIL PROTECTED]>
...I prefer to put this kind of code in fbx_switch, because
> that's where my app's functions/fuseactions are defined. This means I can get
> fine-grained security on individual fuseactions, or on the entire circuit of
> fuseactions, by choosing where in fbx_switch I place my security check. This
> also means that my security checks are only executed in the target circuit, so
I
> don't get multiple checks as FB3 descends through the nesting.
>
...
> ----- Original Message -----
> From: <[EMAIL PROTECTED]>
>
> > I've been trying to get FB to secure a directory by checking for the
> > presence (or absence) of a cookie set at login. Easy, right? Pre FB, I
> > would put this code into the application.cfm file for whatever directory
> > I wanted to secure:
> >
> > <cfif IsDefined ("cookie.login") IS "FALSE">
> > show a 'you are not logged in' page here
> > <cfabort>
> > </cfif>
> >
> > and that would be it. Works great.
> >
> > Now, how do I do this inside the fbx_setting.cfm file?
> >
> > The above code (and many other variations of it) seems to get ignored -
> > even though the cookie is not present, the directory is wide open to
> > anyone who types in the correct fuseaction.
------------------------------
Date: Sat, 21 Sep 2002 11:11:01 +0300
From: Nicholas Milas <[EMAIL PROTECTED]>
Subject: Fusebox on Perl? And a question on standardized XML Schemas
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title></title>
</head>
<body>
Is there by any chance some Perl specialist in the Fusebox community? I would
like to ask if, at least theoretically, a Perl clone of Fusebox is feasible?
And if so, would it make sense to create such a clone? I know PHP is better
for web apps, but there might be cases when someone would want to use Perl.<br>
<br>
Also, does anybody know if there is in this world any kind of XML-schema
standardization
for the output of various classes of applications? I know that such standards
have been developed for the exchange of data in industrial applications (Rosseta
net for example), but I don't know if such standards exist (perhaps prepared
in the framework of open source projects) for use in major categories of
applications like content-management (intranets, portals) and generic ecommerce
apps (or a combination of these) - later, application types would include
generalized standards for eForums, etc. These XML schemas would apply to
the development of these applications; XML output would then be transformed
for actual display using XSLT in each separate application. I believe that
such a conribution would be invaluable to the development community since
it would set the principles for successful implementation of a large range
of common applications.<br>
<br>
The idea is: why create html output? Use XML output <b>in all cases</b> and
then convert it to whatever is needed. This makes an app ready to be used
in all sorts of environments. If anybody wants, please provide your feedback.<br>
<br>
Nick Milas<br>
Athens, Greece<br>
<br>
</body>
</html>
------------------------------
Date: Sat, 21 Sep 2002 20:36:15 +1000
From: "Lee Borkman" <[EMAIL PROTECTED]>
Subject: Re: Fusebox on Perl? And a question on standardized XML Schemas
hi nicholas,
i have recently written a first perl port of the fb3 core. indeed, i'm using it
on some small production apps right now, and it's looking pretty sweet. you are
very welcome to have a look if you like, and use it or amend it as you see fit.
as for php being better than perl for web apps, i just don't know about that -
perl is a superb text-processing language, and that's what generating html is
all about, neh? for many web apps, i actually prefer perl to cf - it's only in
the ridiculously easy database communication that cf gets the upper hand.
anyways, let me know if you're interested. i'd like to tighten up my perl fb3
core, and i'd *really* like to get a better port of the cfsavecontent function.
thanks,
leebb
----- Original Message -----
From: Nicholas Milas <[EMAIL PROTECTED]>
> Is there by any chance some Perl specialist in the Fusebox community? I would
like to ask if, at least theoretically, a Perl clone of Fusebox is feasible? And
if so, would it make sense to create such a clone? I know PHP is better for web
apps, but there might be cases when someone would want to use Perl.
> ...
------------------------------
Date: Sat, 21 Sep 2002 08:37:49 -0400
From: "Mike Elmalem" <[EMAIL PROTECTED]>
Subject: Question about Password Protection
This is a multi-part message in MIME format.
------=_NextPart_000_000F_01C2614A.2AE3EDD0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hello,
Thanks for the help on my last question. Now I have moved a little further along in
my learning process with Lee's Portal sample running on ColdfusionMX.
I have a problem with trying to password protect fusebox application on MX.
I am checking for a session variable in the out_portal page this is the page that
holds the design of the website.
So before the code of the layout page I inserted
<cflock timeout="30" throwontimeout="Yes" type="READONLY" scope="SESSION">
<CFIF NOT ISDEFINED("SESSION.userinfo")>
<CFLOCATION URL="dsp_login.cfm" ADDTOKEN="No">
</CFIF>
</cflock>
This should redirect people that haven't logged in to the login page. It works but
now the thing that I don't understand I would like to show a simple greeting so in the
cfcase of home.welcome the default case I placed
<cfcase value="welcome">
<CFOUTPUT><br> Welcome #session.userinfo#</CFOUTPUT>
</cfcase>
This causes an error. What I don't understand is should the code that checks to see
if the user is logged in be called before the welcome case?
Thanks in advance.
Mike
------=_NextPart_000_000F_01C2614A.2AE3EDD0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hello,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks for the help on my last question. Now
I have moved a little further along in my learning process with Lee's Portal
sample running on ColdfusionMX.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have a problem with trying to password protect
fusebox application on MX. </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I am checking for a session variable in the
out_portal page this is the page that holds the design of the website.
</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>So before the code of the layout page I inserted
</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><cflock timeout="30" throwontimeout="Yes"
type="READONLY" scope="SESSION"><BR> <CFIF NOT
ISDEFINED("SESSION.userinfo")><BR> <CFLOCATION
URL="dsp_login.cfm"
ADDTOKEN="No"><BR> </CFIF> <BR></cflock></FONT></DIV>
<DIV><STRONG><FONT face=Arial size=2></FONT></STRONG> </DIV>
<DIV><STRONG><FONT face=Arial size=2>This should redirect people that haven't
logged in to the login page. It works but now the thing that I don't
understand I would like to show a simple greeting so in the cfcase of
home.welcome the default case I placed </FONT></STRONG></DIV>
<DIV><STRONG><FONT face=Arial size=2></FONT></STRONG> </DIV>
<DIV><STRONG><FONT face=Arial size=2><cfcase
value="welcome"><BR>
<CFOUTPUT><br>&nbsp;&nbsp;Welcome
#session.userinfo#</CFOUTPUT><BR>
</cfcase></FONT></STRONG></DIV>
<DIV><STRONG><FONT face=Arial size=2></FONT></STRONG> </DIV>
<DIV><STRONG><FONT face=Arial size=2>This causes an error. What I don't
understand is should the code that checks to see if the user is logged in be
called before the welcome case?</FONT></STRONG></DIV>
<DIV><STRONG><FONT face=Arial size=2></FONT></STRONG> </DIV>
<DIV><STRONG><FONT face=Arial size=2>Thanks in advance.</FONT></STRONG></DIV>
<DIV><STRONG><FONT face=Arial size=2></FONT></STRONG> </DIV>
<DIV><STRONG><FONT face=Arial size=2>Mike</FONT></STRONG></DIV>
</BODY></HTML>
------=_NextPart_000_000F_01C2614A.2AE3EDD0--
------------------------------
Date: Sat, 21 Sep 2002 23:03:20 +1000
From: "Lee Borkman" <[EMAIL PROTECTED]>
Subject: Re: Question about Password Protection
Hi Mike,
Certainly the code that checks that the user is logged in should be called
before the *layout* template, which is where you have it at the moment.
If I could just quote some learned gent from a post a few hours ago:
...to summarise where a permission-checking code should live...
* if just one fuseaction needs particular permissions, put the check code at the
top of the fuseaction;
* if an entire circuit needs particular permissions, put the check code at the
top of fbx_switch;
* if an entire tree of circuits needs particular permissions (never needed to do
this), put the check code in fbx_settings at the start of the tree.
In short, the layout template is too late to do this checking. The layout
template is executed after everything else, so it's too late to prevent anything
that the non-logged-in user might try to do (like deleting a record, or reading
a session variable in your example).
So have a think about what function or group of functions you want to tie to a
certain user class/group/permission, and that will give you a big clue in
deciding where to put the security check. But wherever you put it, it must be
executed *before* the part of your code that actually *does* something.
btw, you are cflocating to "dsp_login.cfm", which is a fuse. This is generally
a no-no in Fusebox. All requests must go through the front door, ie
"index.cfm", so you probably want something more like this:
<cflocation url="index.cfm?fuseaction=login.form">
Hope that helps some,
See ya,
LeeBB
----- Original Message -----
From: Mike Elmalem <[EMAIL PROTECTED]>
Hello,
Thanks for the help on my last question. Now I have moved a little further
along in my learning process with Lee's Portal sample running on ColdfusionMX.
I have a problem with trying to password protect fusebox application on MX.
I am checking for a session variable in the out_portal page this is the page
that holds the design of the website.
So before the code of the layout page I inserted
<cflock timeout="30" throwontimeout="Yes" type="READONLY" scope="SESSION">
<CFIF NOT ISDEFINED("SESSION.userinfo")>
<CFLOCATION URL="dsp_login.cfm" ADDTOKEN="No">
</CFIF>
</cflock>
This should redirect people that haven't logged in to the login page. It works
but now the thing that I don't understand I would like to show a simple greeting
so in the cfcase of home.welcome the default case I placed
<cfcase value="welcome">
<CFOUTPUT><br> Welcome #session.userinfo#</CFOUTPUT>
</cfcase>
This causes an error. What I don't understand is should the code that checks to
see if the user is logged in be called before the welcome case?
Thanks in advance.
------------------------------
Date: Sat, 21 Sep 2002 09:16:23 -0400
From: "Mike Elmalem" <[EMAIL PROTECTED]>
Subject: Re: Question about Password Protection
Thanks Lee,
I understand what you are saying about the dsp_login.cfm being a fuse and
going through the front door, that is a good point.
Thanks for the tips, I will be placing the check at the top the FBX_Switch
for this excercise.
Thanks again
Mike
----- Original Message -----
From: "Lee Borkman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, September 21, 2002 9:03 AM
Subject: Re: Question about Password Protection
> Hi Mike,
>
> Certainly the code that checks that the user is logged in should be called
> before the *layout* template, which is where you have it at the moment.
>
> If I could just quote some learned gent from a post a few hours ago:
>
> ...to summarise where a permission-checking code should live...
>
> * if just one fuseaction needs particular permissions, put the check code
at the
> top of the fuseaction;
> * if an entire circuit needs particular permissions, put the check code at
the
> top of fbx_switch;
> * if an entire tree of circuits needs particular permissions (never needed
to do
> this), put the check code in fbx_settings at the start of the tree.
>
>
>
> In short, the layout template is too late to do this checking. The layout
> template is executed after everything else, so it's too late to prevent
anything
> that the non-logged-in user might try to do (like deleting a record, or
reading
> a session variable in your example).
>
> So have a think about what function or group of functions you want to tie
to a
> certain user class/group/permission, and that will give you a big clue in
> deciding where to put the security check. But wherever you put it, it
must be
> executed *before* the part of your code that actually *does* something.
>
> btw, you are cflocating to "dsp_login.cfm", which is a fuse. This is
generally
> a no-no in Fusebox. All requests must go through the front door, ie
> "index.cfm", so you probably want something more like this:
> <cflocation url="index.cfm?fuseaction=login.form">
>
> Hope that helps some,
> See ya,
> LeeBB
>
> ----- Original Message -----
> From: Mike Elmalem <[EMAIL PROTECTED]>
>
> Hello,
>
> Thanks for the help on my last question. Now I have moved a little
further
> along in my learning process with Lee's Portal sample running on
ColdfusionMX.
>
> I have a problem with trying to password protect fusebox application on
MX.
>
> I am checking for a session variable in the out_portal page this is the
page
> that holds the design of the website.
>
> So before the code of the layout page I inserted
>
> <cflock timeout="30" throwontimeout="Yes" type="READONLY" scope="SESSION">
> <CFIF NOT ISDEFINED("SESSION.userinfo")>
> <CFLOCATION URL="dsp_login.cfm" ADDTOKEN="No">
> </CFIF>
> </cflock>
>
> This should redirect people that haven't logged in to the login page. It
works
> but now the thing that I don't understand I would like to show a simple
greeting
> so in the cfcase of home.welcome the default case I placed
>
> <cfcase value="welcome">
> <CFOUTPUT><br> Welcome #session.userinfo#</CFOUTPUT>
> </cfcase>
>
> This causes an error. What I don't understand is should the code that
checks to
> see if the user is logged in be called before the welcome case?
>
> Thanks in advance.
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>
------------------------------
Date: Sat, 21 Sep 2002 10:26:46 -0700
From: "Mike Brunt" <[EMAIL PROTECTED]>
Subject: Mindmapper Fusebox examples
We are about to move of our current dev utility (The Brain) to MindMapper.
Can someone point me to an example of a Mindmapper_Fusebox
structure/methodology?
Kind Regards - Mike Brunt, CTO
Webapper
http://www.webapper.com
Downey CA Office
562.243.6255
AIM - webappermb
"Webapper - Making the NET work"
------------------------------
Date: Sat, 21 Sep 2002 12:02:20 -0600
From: "Emilio Gagliardi" <[EMAIL PROTECTED]>
Subject: RE: Mindmapper Fusebox examples
Hi Mike,
I would be really interested to see how you use theBrain in development
currently. When I was employed, we tried to establish a knowledge base
utility. We found that certain information easily lends itself to be
referenced for later use, but other things didn't. What do you
currently use the Brain to map?
I.e., do you store specific code snippets, link to specific files or
templates? Or simply capture more abstract concepts.
I recently used Mindmapper for the first time, and will continue to use
it for architecting the site structure. I haven't put much thought into
extending mind mapping to capture both your application development
processes as well as your application design and implementation. It
sounds really intriguing.
Would you be able to share the mind map you are considering to port into
a Mind Mapper version? Lastly, what exactly do you mean by
"Mindmapper_fusebox structure"? My understanding is that you have a mind
map in one technology that you want to port into another? Do you mean,
is there a mind map that someone has made that represents the FLiP
methodology? I would certainly be willing to produce something or help
put something together.
I hope that I have understood what you were getting at!!
_- Emilio -_
------------------------------
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
End of [EMAIL PROTECTED] digest, issue 944
