-- Topica Digest --
CFDJ article
By [EMAIL PROTECTED]
RE: online cc billing systems
By [EMAIL PROTECTED]
Re: Hal's "Scope Creep" on AListApart.com
By [EMAIL PROTECTED]
RE: online cc billing systems
By [EMAIL PROTECTED]
SOT: MM CFMX Ball dropped?
By [EMAIL PROTECTED]
Re: Stopping Layout Inheritance in Fusebox.
By [EMAIL PROTECTED]
Re: SOT: MM CFMX Ball dropped?
By [EMAIL PROTECTED]
fa_files (was Re: Question re core file performance)
By [EMAIL PROTECTED]
------------------------------------------------------------
Date: Thu, 3 Oct 2002 16:27:44 -0400
From: "Hal Helms" <[EMAIL PROTECTED]>
Subject: CFDJ article
For those of you who don't get my Occasional Newsletter, ColdFusion
Developer's Journal picked up the latest one entitled "Is ColdFusion
Dying?" and has posted it on their site at
http://www.sys-con.com/coldfusion/. I wrote this in response to
questions that people asked me when they heard about the Java for
ColdFusion Programmers class I'm giving. The piece attempts to look at
the question from the point of view of managing risk.
Info on subscribing to the the newsletter:
http://halhelms.com/index.cfm?fuseaction=newsletters.detail
Info on the Java for CF Programmer's class:
http://halhelms.com/index.cfm?fuseaction=training.javaDetails
Hal Helms
"Java for CF Programmers" class immediately
after Macromedia DevCon.
Info at www.halhelms.com
------------------------------
Date: Thu, 3 Oct 2002 16:37:20 -0400
From: Daniel Daugherty <[EMAIL PROTECTED]>
Subject: RE: online cc billing systems
Steve
I will send you more details off list. If other are interested
please mail me and I will add you also or move the message to community if
there is enough interest.
Daniel
-----Original Message-----
From: Steven Au [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 03, 2002 5:13 PM
To: [EMAIL PROTECTED]
Subject: RE: online cc billing systems
Hi Daniel
wow thanks for all the info. i would love to implement the system, but have
concerns as it is a shared box on a web hosting company. i believe the SQL
server is on a separate server not directly accessible from the outside.
could you elaborate on the passing of the numbers between servers. i'm
guessing that you're referring to two db servers. you mentioned having the
encryption key not on the primary server. how does this work? maybe I need
to understand the encryption packages a little more... i know that cffile
is enabled as, i can upload our demo file via cffile. I guess my next round
of questions should be directed to the webhost. What should I be looking
for when i'm inquiring about their setup? will your idea work with one db?
thanks for all the help!
Steve
At 03:39 PM 10/3/2002 -0400, you wrote:
> A more secure solutions for reoccurring billing is to only have
long
>term storage of CC number on a backend (separate secure location
preferable)
>system that is not directly accessible. This second system stores all the
>CC numbers that will have reoccurring billing preferable encrypted. The CC
>number can be transferred from the primary systems to backend server on a
>scheduled basis passing an encrypted file or passing data packages
>(wddx,xml, etc.) over SSL. With this process working properly you greatly
>limit the number of CC's that are on your public system. Those number are
>encrypted and the key to decrypt them is not on the server. I would
>recommend PGP or other encryption code. I know there was a few years ago a
>cfx_pgp. This plus locking down security on your both servers should make
>you fairly secure. If you are on a shared box you also have to worry about
>everyone else on the box. See if advanced security sandboxes can be set up
>and if not be sure that CFfile and like functions are turned off so that
>others can't modify or see your code.
>
>If you have question on this set up let me know
>Daniel D.
>
>-----Original Message-----
>From: Barney Boisvert [mailto:[EMAIL PROTECTED]]
>Sent: Thursday, October 03, 2002 2:58 PM
>To: [EMAIL PROTECTED]
>Subject: RE: online cc billing systems
>
>
>I though PayPal was only client initiated transactions, so you couldn't use
>it for periodic billing and such without the client reinitiating the
>transaction.
>
>I was looking at them at the beginning of the year, so they could well have
>expanded functionality by now.
>
>barneyb
>
>-----Original Message-----
>From: clickdoug [mailto:[EMAIL PROTECTED]]
>Sent: Thursday, October 03, 2002 11:54 AM
>To: [EMAIL PROTECTED]
>Subject: Re: online cc billing systems
>
>
>I use PayPal, who provides you a complete secure package hosted on their
>servers and all for free.
>
>They furnish you a complete configurable tool kit also for free. You do not
>have to store or worry
>about Credit card information.
>
>PayPal is owned by ebay now.
>
>It saves your client from having to have a merchant account and saves them
>the associated fees for
>CC processing, and payment transfers, or monthly fees.
>
>I recommend them highly for accuracy. security and reliability.
>
>
>
>======================================
>Got DSL? Check it out!
>For hosting solutions http://www.clickdoug.com
>ISP rated: http://www.forta.com/cf/isp/isp.cfm?isp_id=772
>======================================
>If you are not satisfied with my service, my job isn't done!
>
>----- Original Message -----
>From: "Steven Au" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Thursday, October 03, 2002 1:08 PM
>Subject: online cc billing systems
>
>
>| Hi All
>|
>| I was wondering if anybody could recommend a good online cc billing
system
>| other than Verisign. I'm looking for a system that will do recurring
>| billing without storing CC numbers on our server. Verisign's package is
in
>| the works, but will not be out for a few months.
>|
>| If you think that storing the CC numbers is OK, what are someways to go
>| about this? My site is being hosted with a web hosting company on a SQL
>| Server DB. For starters, I would like to encrypt the CC number if I go
>this
>| route. Any thoughts are appreciate.
>|
>| Thanks
>|
>| Steve
>|
>|
>| __________________________________________/Fusebox Conference!
>|
>| Sign up for the Fusebox Conference today!
>| October 26th & 27th: Orlando, FL, just before MACR DevCon.
>| 2 jam-packed days, 15 speakers in three tracks, World Fuseball
>| Championship
>| http://www.fusebox.org/index.cfm?fuseaction=conference.main
>|
>|
>|
>
>
>__________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>
>---
>Outgoing mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.391 / Virus Database: 222 - Release Date: 9/19/2002
>
>
>__________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>__________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
------------------------------
Date: Thu, 3 Oct 2002 19:22:58 -0500
From: Chris Montgomery <[EMAIL PROTECTED]>
Subject: Re: Hal's "Scope Creep" on AListApart.com
Monday, September 30, 2002, 2:38:54 PM, Erki Esken wrote:
EE> Just noticed that latest "A List Apart" edition has Hal's
EE> "Scope Creep" article in it:
EE> http://www.alistapart.com/stories/scopecreep/
It also got excerpted in Project Management World Today here:
http://www.pmforum.org/pmwt02/practices02-10.htm
Congrats, "Al"! :)
Chris Montgomery monty @ airtightweb.com
--
Airtight Web Services http://www.airtightweb.com
Web Development, Web Project Management, Software Sales
210-490-3249/888-745-7603
------------------------------
Date: Fri, 4 Oct 2002 12:39:11 +0800
From: "Kay Smoljak" <[EMAIL PROTECTED]>
Subject: RE: online cc billing systems
Hi Steven,
We solved that exact same problem for a client of ours by writing a CFX
tag which uses RSA asymmetic encryption (ie public key/private key). The
public key is stored on the server. The private key is stored offline by
the client. The client has to log in to a secured page every time they
want to batch credit card payments (monthly, weekly, daily, however
their system works), and paste in their private key (a 300 character
string). The stored numbers are then decrypted, sent to the payment
gateway for processing, and the results stored. The decrypted credit
card numbers and private key are never stored anywhere except in the
server's memory and the whole thing runs through SSL so it's pretty
secure. The keys can be 512bit, 1024 bit or 2048 bit - we use 1024 bit
cos 2048 bit can be pretty slow.
Oh, and did I mention we sell the tag? US$49...
http://www.developer.perthweb.com.au ;)
Oh, but don't try to use it on CFMX, as I have recently found out it
don't work too well...
______________________________________________________
Kay Smoljak Web Developer PerthWeb Pty Ltd
Level 9/105 St George's Tc - Perth - Western Australia
Ph: (08) 9226 1366 Fax: (08) 9226 1375
www.perthweb.com.au developer.perthweb.com.au
> -----Original Message-----
> From: Steven Au [mailto:[EMAIL PROTECTED]]
> Sent: Friday, 4 October 2002 2:09 AM
> To: [EMAIL PROTECTED]
> Subject: online cc billing systems
>
>
> Hi All
>
> I was wondering if anybody could recommend a good online cc
> billing system
> other than Verisign. I'm looking for a system that will do recurring
> billing without storing CC numbers on our server. Verisign's
> package is in
> the works, but will not be out for a few months.
>
> If you think that storing the CC numbers is OK, what are
> someways to go
> about this? My site is being hosted with a web hosting
> company on a SQL
> Server DB. For starters, I would like to encrypt the CC
> number if I go this
> route. Any thoughts are appreciate.
>
> Thanks
>
> Steve
>
>
> __________________________________________/Fusebox Conference!
>
> Sign up for the Fusebox Conference today!
> October 26th & 27th: Orlando, FL, just before MACR DevCon.
> 2 jam-packed days, 15 speakers in three tracks, World Fuseball
> Championship
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
------------------------------
Date: Thu, 03 Oct 2002 23:53:00 -0500
From: "Chris Brinker" <[EMAIL PROTECTED]>
Subject: SOT: MM CFMX Ball dropped?
>Oh, but don't try to use it on CFMX, as I have recently found out it
>don't work too well...
>
>______________________________________________________
>Kay Smoljak Web Developer PerthWeb Pty Ltd
>
>Level 9/105 St George's Tc - Perth - Western Australia
>Ph: (08) 9226 1366 Fax: (08) 9226 1375
>
>www.perthweb.com.au developer.perthweb.com.au
Speaking of MX...
We recently upgraded our system to CFMX on a Win2K server and things are
looking pretty ugly, Code is broke, and overall things aren't working too
well, all in all its a bad time here in the 'O.K. Coral.'
I was just wondering does anyone else feel like Macromedia dropped the ball
on this release? I have yet to hear many 'Everything is fine, we upgraded
and its all OK.' kinda statements
Just asking,
Chris Brinker
_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com
------------------------------
Date: Thu, 3 Oct 2002 22:36:12 -0700 (PDT)
From: Rownak Hasan <[EMAIL PROTECTED]>
Subject: Re: Stopping Layout Inheritance in Fusebox.
--0-1656495298-1033709772=:33779
Content-Type: text/plain; charset=us-ascii
Though it is late but I am giving another answer. A slight modification of the
following code may work properly.
<cfif isDefined("fuseaction")>
<!----------------Add following line--------------------->
<cfset circuitFuseaction = #fusebox.targetCircuit#&"."&#fusebox.fuseaction#>
<!------------------------Modify Following Line------------------->
<cfswitch expression="#circuitFuseaction#">
<!--------------------End of Modification-------------------------->
<cfcase value="chiodo.home">
<cfset fusebox.layoutFile = "defaultLayout.cfm">
<cfset fusebox.layoutDir = "">
</cfcase> .......................
Others line will be as usual
--- hamid <[EMAIL PROTECTED]> wrote:
> in fbx_Layouts.cfm add the following to your switch:
>
> <cfcase value="yourCircuit.yourFuse">
> <cfset fusebox.layoutFile = "">
> <cfset fusebox.layoutDir = "">
> </cfcase>
>
> Example of one of my fbx_Layouts.cfm files:
>
> <cfif isDefined("fuseaction")>
> <cfswitch expression="#fuseaction#">
> <cfcase value="chiodo.home">
> <cfset fusebox.layoutFile = "defaultLayout.cfm">
> <cfset fusebox.layoutDir = "">
> </cfcase>
>
> <!---a nested circuit with it's own fbx_Layouts.cfm
> and
> defaultLayout.cfm--->
>
> <cfcase value="portfolio.imageDetail">
> <cfset fusebox.layoutFile = "">
> <cfset fusebox.layoutDir = "">
> </cfcase>
>
>
> <cfdefaultcase>
> <cfset fusebox.layoutFile = "defaultLayout.cfm">
> <cfset fusebox.layoutDir = "">
> </cfdefaultcase>
> </cfswitch>
>
> <cfelse>
> <cfset fusebox.layoutFile = "defaultLayout.cfm">
> <cfset fusebox.layoutDir = "">
> </cfif>
>
>
> ----- Original Message -----
> From: "Russell Mohn" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, October 02, 2002 2:37 PM
> Subject: Stopping Layout Inheritance in Fusebox.
>
>
> > At a lower level of my Fusebox application I want
> to dump some reports
> > output to Excel. I can not figure out how to turn
> off the headers, footer
> > and cascading style sheets defined at the top
> level. How does one do this?
> I
> > just want to report dumped to excel without all
> the visual fluff of the
> web
> > ui. I have created a nested circuit and copied the
> fbx files trying to
> > eliminate these but with no success.
> >
> > Russell E. Mohn
> > Office of Vice-President for Research and Economic
> Affairs
> > Arizona State University
> > Box 873503
> > ADMB160R
> > Tempe, AZ 85287-3503
> > Email: [EMAIL PROTECTED]
> > Phone: 480-965-4736 - Fax: 480-965-2455
> > Web: http://ovprhelpdesk.vprc.asu.edu/
> >
> >
> > __________________________________________/Fusebox
> Conference!
> >
> > Sign up for the Fusebox Conference today!
> > October 26th & 27th: Orlando, FL, just before
> MACR DevCon.
> > 2 jam-packed days, 15 speakers in three tracks,
> World Fuseball
> > Championship
> >
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
> >
> >
>
>
> __________________________________________/Fusebox
> Conference!
>
> Sign up for the Fusebox Conference today!
>
> October 26th & 27th: Orlando, FL, just before MACR
> DevCon.
> 2 jam-packed days, 15 speakers in three tracks,
> World Fuseball
> Championship
>
>
> http://www.fusebox.org/index.cfm?fuseaction=conference.main
>
>
>
---------------------------------
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
--0-1656495298-1033709772=:33779
Content-Type: text/html; charset=us-ascii
<P>Though it is late but I am giving another answer. A slight modification of the
following code may work properly. <BR><BR><BR><cfif isDefined("fuseaction")>
<BR><!----------------Add following
line---------------------><BR><STRONG><cfset circuitFuseaction =
#fusebox.targetCircuit#&"."&#fusebox.fuseaction#></STRONG></P>
<P><!------------------------Modify Following Line-------------------></P>
<P><cfswitch expression="#<STRONG>circuitFuseaction</STRONG>#"> </P>
<P><!--------------------End of
Modification--------------------------><BR><cfcase value="chiodo.home">
<BR><cfset fusebox.layoutFile = "defaultLayout.cfm"> <BR><cfset
fusebox.layoutDir = ""> <BR></cfcase> .......................</P>
New <a href="http://rd.yahoo.com/evt=1207/*http://sbc.yahoo.com/";>DSL Internet
Access</a> from SBC & Yahoo!</a>
--0-1656495298-1033709772=:33779--
------------------------------
Date: Fri, 04 Oct 2002 10:15:13 +0300
From: Nicholas Milas <[EMAIL PROTECTED]>
Subject: Re: SOT: MM CFMX Ball dropped?
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type"
content="text/html;charset=windows-1253">
<title></title>
</head>
<body>
Here is one success story from the MM CF forums (<a class="moz-txt-link-freetext"
href="http://webforums.macromedia.com/coldfusion/messageview.cfm?catid=2&threadid=430245&STARTPAGE=1";>http://webforums.macromedia.com/coldfusion/messageview.cfm?catid=2&threadid=430245&STARTPAGE=1</a>):
<br>
<br>
<i><font class="ftalternatingbartextsmall">October 01, 2002 7:28 AM</font><br>
<br>
<font class="ftalternatingbartextlarge">
I read this thread with real interest, and am
responding to the call for successful implementations of CFMX in a production
server. My company just purchased its own server, purchased ColdFusionMX
(enjoyed the new price), and moved our sites from our ISP's server (which
was running CF 5.0).<br>
<br>
I am relieved to find that ALL issues reported here was NOT part of our experience.
The installation went fine, and the custom components we had on our ISP's
server moved to our CFMX server without issue. <br>
<br>
What a serious relief. If I had read this thread before having done the
deed, I might have made a different decision. However, after having already
made the move, I am now glad we did go with CFMX, based solely on our experience
(its now been over a week and we haven't had a problem).<br>
<br>
I am afraid the picture hasn't been all rosey. There were problems with
porting our code (which was written back with cf4.0-cf4.5). Most changes
were as simple as adding a "height" parameter to cf_textinput (because the
default values changed), and some was because of slightly stricter rules
in laying out code. This was actually pointing out some bad organizing of
our logic :(<br>
<br>
There was one bug which had me stumped for a while. The cfinput tag, when
using it in the 'creditcard' mode, would not verify valid American Express
numbers. After searching through some forums, I found a posting in the forum
indicating a simple rem-out of the section that needs a credit card to be
16 characters in length in the cfform file in your cfide\scripts folder successfully
solved the issue.<br>
<br>
The one current issue I have with ColdFusionMX is with the CFTREE tag. We
use CFTREE as an integral part of our member's section. If you add tree
items in the cftree area with the use of a cfloop, you end up with the word
"YES" above the tree control, for each successful rotation of the loop.
The "YES" is added directly to the html code, and cannot be eliminated without
eliminating the loop sequence, which is how the cftree needs to be populated
in our case. Any knowledge on this topic would be great.<br>
<br>
To reproduce, simply create a CFTREE control, and instead of populating it
manually, with one tag for each element, populate it using a cfloop (say
five times) which rotates over the same CFTREEITEM tag. You will end up
with a successful implementation of the tree, but with five "YES" words,
taking up space and destroying the visual appeal of the control.<br>
<br>
The crazy thing, is I was on the Flash forums today, looking to see what
that community is like. I haven't done anything with Flash, and being a
devoted CF user, thought that it would be a nice addition to our set of sites
(especially now that it looks like it is on many browsers, and works well
with CF, which is our first love).<br>
<br>
I was horrified at how the folks appeared to be angry at the MX version.
It was resembling this thread--an angry discussion based on a set of errors
that I thankfully never had a single experience with. I had written off
the search for knowledge on FlashMX at that point, deciding to wait for it
to mature. But now I have to relook at that decision wondering if it is
just the experience of a select few (probably caused by some crazy type of
generic computer component in their system that just isn't compatible with
the rest) lol :)). <br>
<br>
ColdFusion is a great tool, and CFMX has been successful for us, and incredibly
stable on our server. Once I'm able to get the CFTREE issue resolved (which
was why I was visiting the forum) it will have been a very successful move
on our part.<br>
<br>
Marc Grenier<br>
Success Studios Corp</font></i><br>
<br>
Chris Brinker wrote:<br>
<blockquote type="cite"
cite="[EMAIL PROTECTED]">
<blockquote type="cite">Oh, but don't try to use it on CFMX, as I have
recently found out it <br>
don't work too well... <br>
<br>
______________________________________________________ <br>
Kay Smoljak�������� Web Developer������� PerthWeb Pty Ltd <br>
<br>
Level 9/105 St George's Tc - Perth - Western Australia <br>
Ph: (08) 9226 1366 Fax: (08) 9226 1375 <br>
<br>
<a class="moz-txt-link-abbreviated"
href="http://www.perthweb.com.au���������";>www.perthweb.com.au���������</a>
developer.perthweb.com.au <br>
</blockquote>
<br>
<br>
Speaking of MX... <br>
<br>
We recently upgraded our system to CFMX on a Win2K server and things are
looking pretty ugly, Code is broke, and overall things aren't working too
well, all in all its a bad time here in the 'O.K. Coral.' <br>
<br>
I was just wondering does anyone else feel like Macromedia dropped the ball
on this release? I have yet to hear many 'Everything is fine, we upgraded
and its all OK.' kinda statements <br>
<br>
Just asking, <br>
Chris Brinker <br>
<br>
<br>
<br>
<br>
_________________________________________________________________ <br>
Chat with friends online, try MSN Messenger: <a class="moz-txt-link-freetext"
href="http://messenger.msn.com";>http://messenger.msn.com</a> <br>
<br>
<br>
__________________________________________/Fusebox Conference! <br>
<br>
Sign up for the Fusebox Conference today!������������������������ October
26th & 27th: Orlando, FL, just before MACR DevCon.������ 2 jam-packed
days, 15 speakers in three tracks, World Fuseball��
Championship��������������������������������������������������
<a class="moz-txt-link-freetext"
href="http://www.fusebox.org/index.cfm?fuseaction=conference.main��";>http://www.fusebox.org/index.cfm?fuseaction=conference.main��</a>
<br>
<br>
<br>
<br>
</blockquote>
<br>
</body>
</html>
------------------------------
Date: Fri, 4 Oct 2002 10:17:10 +0100
From: [EMAIL PROTECTED]
Subject: fa_files (was Re: Question re core file performance)
Hi Barney
Yes, I think a lot of people like fact that the big switch gives you a
complete map of the circuit, although it's a very detailed map which, as you
say, you'll need to scroll through in most cases.
FAs provide a simpler map in the form of the Studio file browser which will
list all the fuseactions (the files prefixed "fa_") in the circuit in
alphabetical order. I personally like having this simple "inventory" list
(usually no need to scroll) of what the circuit does and then being able to
"home in" on the detail of a specific fuseaction by opening the fa_file.
I used to use the Studio collapse feature to get a similarly simple map of
the switch file, but found it a bit awkward (and memory-hungry) in
comparison.
Julian.
----- Original Message -----
From: "Barney Boisvert" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 03, 2002 4:21 PM
Subject: RE: Question re core file performance
> I'm not condemning FA files, but i used them for a while back in FB2/XFB
and
> didn't like them. It totally eliminated the ability for you to look over
> your switch file and get an idea about how the app flowed. With a stock
> fbx_Switch, you can see all your exits and includes in a single file,
> whereas with FA files, you have to open a bunch of indivudual files.
>
> The app I wroting using them has been mostly migrated to FB3, and still
uses
> FA files, because it made sense for that application. If I see another
> project that will really benefit from FA files, I'll certainly use them,
but
> I'll also make a strong effort to get around it if I can, for the simple
> summary quality of the fbx_Switch file.
>
> barneyb
------------------------------
__________________________________________/Fusebox Conference!
Sign up for the Fusebox Conference today!
October 26th & 27th: Orlando, FL, just before MACR DevCon.
2 jam-packed days, 15 speakers in three tracks, World Fuseball
Championship
http://www.fusebox.org/index.cfm?fuseaction=conference.main
End of [EMAIL PROTECTED] digest, issue 959
