RE: catching broken links?
Maybe it would be possible to do this with the vspider? Or run a scheduled httrack task? -- Hugo Ahlenius - Hugo Ahlenius E-Mail: [EMAIL PROTECTED] Project OfficerPhone: +46 8 412 1427 UNEP GRID-Arendal Fax:+46 8 723 0348 Stockholm Office Mobile: +46 733 467111 WWW: http://www.grida.no Skype:callto:fraxxinus - | -Original Message- | From: Ian Skinner [mailto:[EMAIL PROTECTED] | Sent: Monday, May 08, 2006 19:45 | To: CF-Talk | Subject: RE: catching broken links? | | We have clients who are entering broken links into their site, then | their bosses write to us and complain about the dead links. Of | course, we try to explain that this is not our doing, but it really | falls on deaf ears. I'd love a nice little app that could spider all | links on the site and email the broken ones to the site admin to be | fixed. | | | I would suspect it would not be too hard to link to one of the many | link checking sites with a scheduled task, have the output captured | and stored in some log directory for review by an admin type. | | | -- | Ian Skinner | Web Programmer | BloodSource | www.BloodSource.org | Sacramento, CA | | - | | 1 | | | - Binary Soduko | | | | | - | | "C code. C code run. Run code run. Please!" | - Cynthia Dunning | | Confidentiality Notice: This message including any | attachments is for the sole use of the intended | recipient(s) and may contain confidential and privileged | information. Any unauthorized review, use, disclosure or | distribution is prohibited. If you are not the intended | recipient, please contact the sender and delete any copies of | this message. | | | | | ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239878 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Test object type
[For some reason my original post didn't go through (I think because I digitally sign my email). It had a typo anyway, so apologies if the original finally comes through to the list.] Exactly Right Dave. Joelle, In your base class, add something like this: You can set the this.userType upon instantiation and it will know what type it is for the life of the object. Then you can also put in something like this in your base class to search your object hierachy for it's userType or whatever else you'd like to find down the line. var stObj = structNew(); if(len(trim(arguments.search)) GT 0) { for(it in this) { if(arguments.search IS it) { stObj[it] = this[it]; return stObj ; } } } else { for(it in this){ stObj[it] = this[it]; } } return stObj; Warmest Regards, Phillip B. Holmes http://phillipholmes.com ===> -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 12:22 PM To: CF-Talk Subject: RE: Test object type > So I assume that you use session.currentUser to hold EITHER a manager > object OR a worker object. > > This may be a stupid question since I don't have a lot of oop > experience, but is it bad form to use the same variable name to store > two different types of objects? That seems so create the problem you > have now, because you don't know what class you used to instantiate > that object. Actually, being able to use one variable to store different objects can be very useful, and is commonly done in OO languages. However, these tend not to be just any two different objects, but objects that either inherit from the same base class or implement the same interface. For example, you might have a bunch of objects that are sortable. You might write a single interface, ISortable, then write functionality in each class to implement how ISortable works for that specific object type. Then, if you have an array of objects, all of which implement ISortable, you could sort them without worrying about what kind of objects they are exactly. This is a big deal in C# now, with the addition of generics - type-safe collections of various kinds. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239877 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Parsing non-standard XML
Great idea Mike! Turned out to be a pretty elegant solution. Here's what I did to make it work... #myxml#")> >According to XMLSpy, this is a well-formed document until you add >multiple nodes. > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239876 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Parsing non-standard XML
According to XMLSpy, this is a well-formed document until you add multiple nodes. So, when you read this file into a variable, you should be able to just add a new top-level node that encompasses the multiple nodes. Then, you should be able to parse the XML file into an actual XML object in ColdFusion. That should make everything fine, from what I can tell. Two hints: 1. Always use CFDUMP when in doubt. 2. Multiple tags, at the same level, such as , will result in an array over which you can loop. (Again, refer to CFDUMP to see the structure.) M!ke -Original Message- From: Andrew Spear [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 8:43 PM To: CF-Talk Subject: Parsing non-standard XML I'm trying to parse a file for a school district that is supposed to be XML, but it's not well-formed. Does anyone here have experience parsing files like this? The format is something like this: xxx xxx Chapter 34 Reading Quiz 5 asdfasdf 6,5,14,38,5,5,15,38,5 89.9 B+ 12345 7,5,14,47,6,5,15,40,5 98.6 A+ And there are muliple top-level nodes in each file. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239875 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Parsing non-standard XML
I'm trying to parse a file for a school district that is supposed to be XML, but it's not well-formed. Does anyone here have experience parsing files like this? The format is something like this: xxx xxx Chapter 34 Reading Quiz 5 asdfasdf 6,5,14,38,5,5,15,38,5 89.9 B+ 12345 7,5,14,47,6,5,15,40,5 98.6 A+ And there are muliple top-level nodes in each file. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239874 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Looping through Fields
Brad Wood wrote: > The val() function returns an integer. Text cannot be converted to an > integer and will output a 0. Yup - that was the problem. I don't need to be working 16 hours straight, huh? I start to forget what I'm doing... ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239873 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
With sandboxing and no cfobject (java) tag, this can be done with reasonable safety. On 5/9/06, Bryan Stevenson <[EMAIL PROTECTED]> wrote: > > Especially as a lot of clients put their username/passwor dinto the > > DSN , which means everyone else on the server can get into their database > > anyway using CFQUERY. > 2) If a client puts their user/pass in the DSN, it's their own damn > faultnot > the ISP! (of course you'd still need the DSN to access anything via CFQUERY) -- CFAJAX docs and other useful articles: http://jr-holmes.coldfusionjournal.com/ ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239872 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Big SQL security hole at Crystaltech?
Hi Guys, The script you are after is http://support.microsoft.com/kb/889696/en-us (Run this script at your own risk, and pls test it on a dev server before running on a prod server) it only works on SQL 2000. I don't think they is one for 2005, haven't had much time to play with 2005 yet. By default guest is assigned to all the DB's hence everyone has access to all the DB on the server if you have access via EM, pls remove Guest from all DB's, now you will see only a list of DB's via EM and wont have access to them. I think they are two system DB's that you cant remove Guest from. Russ what side effects have you come across from running the MS script (hopefully I didn't read your post wrongly)? If anyone can share any info about 2005, that would be great. Joel -Original Message- From: Snake [mailto:[EMAIL PROTECTED] Sent: Tuesday, 9 May 2006 8:59 AM To: CF-Talk Subject: RE: Big SQL security hole at Crystaltech? It is nothing to do with guest user, databases do not have this by default, as stated, this is the known default behaviour of SQL server and EM and Microsoft released a stored proc to update themaster table to stop users seeing others users DB's. You can easily test this yourself, by creating a new DB with a new user, then open EM and conenct to the server as that user. Unless oyu have made efforts to modify your SQL server as mentioned, u will see all databases. Snake -Original Message- From: Stephen Hait [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 22:52 To: CF-Talk Subject: Re: Big SQL security hole at Crystaltech? I think this occurs when databases have a user with the name of guest. Databases without a user named guest should not have their objects or even their database names exposed. If you have a user in your database named guest, delete that user and your database should not be visible to others thru EM. That's my understanding, anyway. Regards, Stephen On 5/8/06, Matt Robertson <[EMAIL PROTECTED]> wrote: > After signing onto a new client's SQL Server account, first on one dedicated server and then another, I found I could not only see several other databases belonging to other customers... I could click on the Tables tab and see all of their tables. Taking it a step further, I could double-click on a table and pull up its table structure. All of this is in SQL Enterprise Manager. They have two separate accounts and I could see eight other databases that didn't belong to my client on one server and 9 on the other. > > I could not modify the tables or view the data (I didn't even try to Drop of course). > > Poking around a little more, I found I could view all of another db's stored procedures! > > This prompted me to load up a second customer of mine, who also has a SQL account at Crystaltech. Same freaking story! > > Before I completely blow a gasket I wanted to confirm this is as big of a screwup as I think it is. There is an easy fix for this right? I fired up another client and, while I can see other existing db's, if I try and click on anything I get a refusal (error 916. not an authorized user). > > Anyone else with a Crystaltech account... Can you chime in here? Do you see the same things I do? > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239871 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: ASP.Net book for CF programmer
Our Development/Staging/QA/whatever-you-want-to-call-it mirrors Production exactly. CF settings, JVM settings, OS settings, Apache settings. It has to. (OK you can get away with the odd discrepency). Now true, we won't have external users hitting this environment, but we still have to load test it by simulating X number of users, etc so we are still creating the millions of visitors and thousands of sessions etc that you're on about. And I'm assuming this is what Jochem is on about??? Of course, if we're all on about the workstation I develop on before it goes to Dev/Staging/whatever then fair enough, it is night and day. Andy On 08/05/06, Snake <[EMAIL PROTECTED]> wrote: > To tune the server and CF for high usage, multiple sites, large amounts of > traffic, lots of memory usage, security etc. > > A development server will happily run with CF installed with the default > settings as you will not be running hundreds of sites with millions of > visitors, nor will you be generating thousands of sessions or client > variables, or cached queries, nor will you be sharing the server with other > customer and have to restrict certain things. > Aside from CF there are of course the windows/IIS configuration differences, > the security policies... > > The difference is night and day > > Russ > > -Original Message- > From: Jochem van Dieten [mailto:[EMAIL PROTECTED] > Sent: 08 May 2006 19:14 > To: CF-Talk > Subject: Re: ASP.Net book for CF programmer > > Snake wrote: > > Like everything. > > There is a big difference to hosting a production server with hundreds > > of sites on it and millions of hits per day and running a development > > server with 1 developer on it and no traffic. > > There is indeed a big difference in what you must do (like make > backups) and especially in what you must not do (like run ET). > But you said there was a lot more to *learn* to run a server. > Isn't your development environment a close approximation of your production > environment? So what do you need to learn to run a server in production that > you do not need to learn in a development environment? > > Jochem > > > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239870 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
> Well as I have all our servers locked down I can't actually check to see how > far you can get with the default configuration. > I know you can see everyone elses databases, and I'm sure you can also open > the database and view the tables. > Just because you cannot do this at CFD, does not mean it is not the default, > it could simply mean that CFD have done something different. > If you want to know why CT haven't done the same, you will need to ask them, > but I would presume they wimply don't know how or don't care. > At the end of the day, a shared SQL server cannot be considered secure > anyway. Especially as a lot of clients put their username/passwor dinto the > DSN , which means everyone else on the server can get into their database > anyway using CFQUERY. 1) Going with the "default" is no excuse for an ISP when it comes to security (if that's what has happend) 2) If a client puts their user/pass in the DSN, it's their own damn faultnot the ISP! (of course you'd still need the DSN to access anything via CFQUERY) Bryan Stevenson B.Comm. VP & Director of E-Commerce Development Electric Edge Systems Group Inc. phone: 250.480.0642 fax: 250.480.1264 cell: 250.920.8830 e-mail: [EMAIL PROTECTED] web: www.electricedgesystems.com ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239869 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Big SQL security hole at Crystaltech?
It is nothing to do with guest user, databases do not have this by default, as stated, this is the known default behaviour of SQL server and EM and Microsoft released a stored proc to update themaster table to stop users seeing others users DB's. You can easily test this yourself, by creating a new DB with a new user, then open EM and conenct to the server as that user. Unless oyu have made efforts to modify your SQL server as mentioned, u will see all databases. Snake -Original Message- From: Stephen Hait [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 22:52 To: CF-Talk Subject: Re: Big SQL security hole at Crystaltech? I think this occurs when databases have a user with the name of guest. Databases without a user named guest should not have their objects or even their database names exposed. If you have a user in your database named guest, delete that user and your database should not be visible to others thru EM. That's my understanding, anyway. Regards, Stephen On 5/8/06, Matt Robertson <[EMAIL PROTECTED]> wrote: > After signing onto a new client's SQL Server account, first on one dedicated server and then another, I found I could not only see several other databases belonging to other customers... I could click on the Tables tab and see all of their tables. Taking it a step further, I could double-click on a table and pull up its table structure. All of this is in SQL Enterprise Manager. They have two separate accounts and I could see eight other databases that didn't belong to my client on one server and 9 on the other. > > I could not modify the tables or view the data (I didn't even try to Drop of course). > > Poking around a little more, I found I could view all of another db's stored procedures! > > This prompted me to load up a second customer of mine, who also has a SQL account at Crystaltech. Same freaking story! > > Before I completely blow a gasket I wanted to confirm this is as big of a screwup as I think it is. There is an easy fix for this right? I fired up another client and, while I can see other existing db's, if I try and click on anything I get a refusal (error 916. not an authorized user). > > Anyone else with a Crystaltech account... Can you chime in here? Do you see the same things I do? > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239868 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Big SQL security hole at Crystaltech?
Well as I have all our servers locked down I can't actually check to see how far you can get with the default configuration. I know you can see everyone elses databases, and I'm sure you can also open the database and view the tables. Just because you cannot do this at CFD, does not mean it is not the default, it could simply mean that CFD have done something different. If you want to know why CT haven't done the same, you will need to ask them, but I would presume they wimply don't know how or don't care. At the end of the day, a shared SQL server cannot be considered secure anyway. Especially as a lot of clients put their username/passwor dinto the DSN , which means everyone else on the server can get into their database anyway using CFQUERY. - snake -Original Message- From: Rey Bango [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 19:44 To: CF-Talk Subject: Re: Big SQL security hole at Crystaltech? Sorry Snake but this isn't correct. Seeing the DB names in EM is one thing. Being able to get down to the object level (tables, stored procs, or views) is not the norm. I just signed into my shared CFDynamics DB server and can see a boatload of other DBs but I can't see any of their tables or additional objects. If CFD can do it, then I don't see why CT can't. Rey... http://www.reybango.com Snake wrote: > This is not a security hole at crystatech, it is simply how enterprise > manager/sql server works. > It does not restrict you from viewing other databases, but you > cannot do anything with them if your user does not have access. > > There is a modfication you can make to the master database SP's to > change this behaviour, but CT obviously don't know about that, and it > has been known to cause other issues if you do it anyway. > > -- > Snake > > -Original Message- > From: Matt Robertson [mailto:[EMAIL PROTECTED] > Sent: 08 May 2006 17:58 > To: CF-Talk > Subject: Big SQL security hole at Crystaltech? > > After signing onto a new client's SQL Server account, first on one > dedicated server and then another, I found I could not only see > several other databases belonging to other customers... I could click > on the Tables tab and see all of their tables. Taking it a step > further, I could double-click on a table and pull up its table > structure. All of this is in SQL Enterprise Manager. They have two > separate accounts and I could see eight other databases that didn't > belong to my client on one server and 9 on the other. > > I could not modify the tables or view the data (I didn't even try to > Drop of course). > > Poking around a little more, I found I could view all of another db's > stored procedures! > > This prompted me to load up a second customer of mine, who also has a > SQL account at Crystaltech. Same freaking story! > > Before I completely blow a gasket I wanted to confirm this is as big > of a screwup as I think it is. There is an easy fix for this right? > I fired up another client and, while I can see other existing db's, if > I try and click on anything I get a refusal (error 916. not an authorized user). > > Anyone else with a Crystaltech account... Can you chime in here? Do > you see the same things I do? > > > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239867 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: ASP.Net book for CF programmer
To tune the server and CF for high usage, multiple sites, large amounts of traffic, lots of memory usage, security etc. A development server will happily run with CF installed with the default settings as you will not be running hundreds of sites with millions of visitors, nor will you be generating thousands of sessions or client variables, or cached queries, nor will you be sharing the server with other customer and have to restrict certain things. Aside from CF there are of course the windows/IIS configuration differences, the security policies... The difference is night and day Russ -Original Message- From: Jochem van Dieten [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 19:14 To: CF-Talk Subject: Re: ASP.Net book for CF programmer Snake wrote: > Like everything. > There is a big difference to hosting a production server with hundreds > of sites on it and millions of hits per day and running a development > server with 1 developer on it and no traffic. There is indeed a big difference in what you must do (like make backups) and especially in what you must not do (like run ET). But you said there was a lot more to *learn* to run a server. Isn't your development environment a close approximation of your production environment? So what do you need to learn to run a server in production that you do not need to learn in a development environment? Jochem ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239866 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Better Way to Query?
You may want to try GROUP BY client.id, client.company Instead of GROUP BY company -Original Message- From: Eric J. Hoffman [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 3:50 PM To: CF-Talk Subject: Better Way to Query? Not getting good results from this: SELECT COUNT (customer_orders.corder_id) as TOTOT, client.company FROM customer_orders JOIN customer_orders_prod on customer_orders.corder_id = customer_orders_prod.order_id JOIN inventory on customer_orders_prod.product_id = inventory.service_id JOIN client on inventory.client_id = client.id WHERE customer_orders.orderdate BETWEEN #createODBCDate(start9)# AND #createODBCDate(DateAdd('D', 1, end9))# and corder_active = 1 GROUP BY company Each inventory item is tagged with a client ID. There is the order table, which is the summary, and the orders_prod table which is all the line items of inventory. My need is a report of orders by client_id. This query seems to give me more than if I just ran the total of orders. I only need to get one item from the order items to determine the client company. This shows me maybe 14,000+ for one client, when I know the total orders to be 12,000+. Thanks!! Eric J. Hoffman Managing Partner 2081 Industrial Blvd StillwaterMN55082 mail: [EMAIL PROTECTED] www: http://www.ejhassociates.com tel: 651.717.4105 fax: 651.717.4115 mob: 651.245.2717 This message contains confidential information and is intended only for [EMAIL PROTECTED] If you are not cf-talk@houseoffusion.com you should not disseminate, distribute or copy this e-mail. Please notify [EMAIL PROTECTED] immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Eric J. Hoffman therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239865 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Looping through Fields
The val() function returns an integer. Text cannot be converted to an integer and will output a 0. ~Brad -Original Message- From: Les Mizzell [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 4:44 PM To: CF-Talk Subject: Looping through Fields When testing, form is sending... strNAME1, numCOST1 (test values Bob, 300) strNAME2, numCOST2 (test values John, 400) strNAME3, numCOST3 (test values Robert, 500) .and however many total there my be as defined by #form.intTravelerCount# I've done a cfdump and confirmed that the fields are getting to the processing page, but when I try to loop through them like: #Val(form["strName" & i])# - $#Val(form["numCost" & i])#.00 I'm getting: 0, 300 0, 400 0, 500 Why the heck am I getting "0" for the strName. Should be showing the contents of the field, strName1, which is correct in the cfdump. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239864 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
I think this occurs when databases have a user with the name of guest. Databases without a user named guest should not have their objects or even their database names exposed. If you have a user in your database named guest, delete that user and your database should not be visible to others thru EM. That's my understanding, anyway. Regards, Stephen On 5/8/06, Matt Robertson <[EMAIL PROTECTED]> wrote: > After signing onto a new client's SQL Server account, first on one dedicated > server and then another, I found I could not only see several other databases > belonging to other customers... I could click on the Tables tab and see all > of their tables. Taking it a step further, I could double-click on a table > and pull up its table structure. All of this is in SQL Enterprise Manager. > They have two separate accounts and I could see eight other databases that > didn't belong to my client on one server and 9 on the other. > > I could not modify the tables or view the data (I didn't even try to Drop of > course). > > Poking around a little more, I found I could view all of another db's stored > procedures! > > This prompted me to load up a second customer of mine, who also has a SQL > account at Crystaltech. Same freaking story! > > Before I completely blow a gasket I wanted to confirm this is as big of a > screwup as I think it is. There is an easy fix for this right? I fired up > another client and, while I can see other existing db's, if I try and click > on anything I get a refusal (error 916. not an authorized user). > > Anyone else with a Crystaltech account... Can you chime in here? Do you see > the same things I do? > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239863 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Looping through Fields
When testing, form is sending... strNAME1, numCOST1 (test values Bob, 300) strNAME2, numCOST2 (test values John, 400) strNAME3, numCOST3 (test values Robert, 500) and however many total there my be as defined by #form.intTravelerCount# I've done a cfdump and confirmed that the fields are getting to the processing page, but when I try to loop through them like: #Val(form["strName" & i])# - $#Val(form["numCost" & i])#.00 I'm getting: 0, 300 0, 400 0, 500 Why the heck am I getting "0" for the strName. Should be showing the contents of the field, strName1, which is correct in the cfdump. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239862 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: session vars and cookies
Crow T. Robot wrote: > Yea, other than that. :) > > That would be an interesting site, though. Boatloads of fun to maintain! Not hard at all, just do it client-side: write a small javascript function and hook it to the onclick event of every anchor. Won't catch those without Javascript, but it is surprisingly easy to reach 95% of your visitors with that. Jochem ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239861 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: session vars and cookies
Yea, other than that. :) That would be an interesting site, though. Boatloads of fun to maintain! Jochem van Dieten wrote: > Ray Champagne wrote: >> Is there any other way to use session variables without setting client >> cookies or passing the CFID/CFTOKEN in the URL for every page? > > Pass themn through a form :) > > Jochem > > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239860 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: session vars and cookies
Ray Champagne wrote: > Is there any other way to use session variables without setting client > cookies or passing the CFID/CFTOKEN in the URL for every page? Pass themn through a form :) Jochem ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239859 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: session vars and cookies
Yea, and I should mention that there is no chance of being able to use J2EE vars on the server, either. Charlie Griefer wrote: > i want to say no. > > but invariably somebody's going to come along with some hoity toity > java method that passes them thru the ether. > > we'll see :) > > On 5/8/06, Ray Champagne <[EMAIL PROTECTED]> wrote: >> Is there any other way to use session variables without setting client >> cookies or passing the CFID/CFTOKEN in the URL for every page? >> -- >> >> Ray >> >> >> > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239858 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: session vars and cookies
> Is there any other way to use session variables without > setting client cookies or passing the CFID/CFTOKEN in the URL > for every page? No, either one or the other is required. Well, theoretically, you could ensure that only forms are used for page navigation, and pass it via HTTP POST, but yecch. There has to be some way to associate the browser with the session, so the browser needs to pass a token to the server on each page request. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239857 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: session vars and cookies
i want to say no. but invariably somebody's going to come along with some hoity toity java method that passes them thru the ether. we'll see :) On 5/8/06, Ray Champagne <[EMAIL PROTECTED]> wrote: > Is there any other way to use session variables without setting client > cookies or passing the CFID/CFTOKEN in the URL for every page? > -- > > Ray > > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239856 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
session vars and cookies
Is there any other way to use session variables without setting client cookies or passing the CFID/CFTOKEN in the URL for every page? -- Ray ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239855 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
test ignore
test ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239854 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Simple Cart?
I need to setup a simple cart. Very similar to the cart cfmsource is using.. http://www.cfmsource.com/listitems.cfm?contentnbr=46 Mainly I'm looking for item list/quantity ordering. I don't need pictures. Category support is needed however. I'll probably integrate with authorize.net but I can integrate that if it's not supported. Anyone have any suggestions? I have to have it up by tomorrow. :) Emmet ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239853 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Better Way to Query?
Just throw a DISTINCT in the count, and you should be ok... > SELECT COUNT (DISTINCT customer_orders.corder_id) as TOTOT, > client.company -- Jim Wright Wright Business Solutions [EMAIL PROTECTED] 919-417-2257 ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239852 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Better Way to Query?
Not getting good results from this: SELECT COUNT (customer_orders.corder_id) as TOTOT, client.company FROM customer_orders JOIN customer_orders_prod on customer_orders.corder_id = customer_orders_prod.order_id JOIN inventory on customer_orders_prod.product_id = inventory.service_id JOIN client on inventory.client_id = client.id WHERE customer_orders.orderdate BETWEEN #createODBCDate(start9)# AND #createODBCDate(DateAdd('D', 1, end9))# and corder_active = 1 GROUP BY company Each inventory item is tagged with a client ID. There is the order table, which is the summary, and the orders_prod table which is all the line items of inventory. My need is a report of orders by client_id. This query seems to give me more than if I just ran the total of orders. I only need to get one item from the order items to determine the client company. This shows me maybe 14,000+ for one client, when I know the total orders to be 12,000+. Thanks!! Eric J. Hoffman Managing Partner 2081 Industrial Blvd StillwaterMN55082 mail: [EMAIL PROTECTED] www: http://www.ejhassociates.com tel: 651.717.4105 fax: 651.717.4115 mob: 651.245.2717 This message contains confidential information and is intended only for [EMAIL PROTECTED] If you are not cf-talk@houseoffusion.com you should not disseminate, distribute or copy this e-mail. Please notify [EMAIL PROTECTED] immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Eric J. Hoffman therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239851 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: URL Structure
The problem I have with this is I'm not the one putting these links on the page. There are users who uses a content management system that enters in the content for the website. I want to avoid making the users use ColdFusion code b/c they don't understand it and it will complicate things for them. I wanted to this in such a way that all the ColdFusion code is on the disclaimer page (which I control) and the referring page (content page w/ the link) is just plain html that is written for them thru the content management system they use. Is there another way of doing this? Thanks for your help though. > Ok, this is what you want to do. I ran this test code and I get all > your second level url variables. > > > > href="http:url.cfm?destination=#urlEncodedFormat('http://go.reuters. > com/newsArticle. jhtml> ?type=healthNews&storyID=12037965&src=eDialog/GetContent')#">Test jhtml> > I do not clearly understand your requirements. How is the sample link being built? For instance lets say a user clicked on a link on my page that went to: http://go.reuters.com/newsArticle.jhtml?type=healthNews&storyID=12037965&src=eDialog/GetContent My page would actually have this as the link http://someurlhere.com/disclaimer.cfm?destination=http://go.reuters.com/newsArticle.jhtml?type=healthNews&storyID=12037965&src=eDialog/GetContent http://www.houseoffusion.com/lists.cfm/link=i:4:239850 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Looping multiple dates...
That helped a ton. I was haveing SQL Writers Block lol. On 5/7/06, Jochem van Dieten <[EMAIL PROTECTED]> wrote: > > Richard Dillman wrote: > > > > Children are featured in various special publications at least 3 of > which i > > need to track their appearances. Ill need to output > > the publication and the month(s) they appeared > > Months willl probably not be sequential. > > Display 12 months in a row with the year at the end. > > CSS to show a Month green if it was a Feature Month. > > Loop through all years sence 2000 to the present Month. > > 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 2004 > > 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 2005 > > 1 | 2 | 3 | 4 | 5 | | 2006 > > > > > > How would you store this in SQL 2000 if each group of Month/years is to > be > > displayed per record and childrens records will reach 2000 this month? > > In SQL-2003: > > CREATE TABLE publications ( > publicationID INTEGER PRIMARY KEY, > publicationName VARCHAR > ); > CREATE TABLE children ( > childID INTEGER PRIMARY KEY, > childName VARCHAR, > etc); > CREATE TABLE features ( > featureID INTEGER PRIMARY KEY, > childID INTEGER REFERENCES children, > publicationID INTEGER REFERENCES publications, > featureDate DATE, > etc); > CREATE TABLE featurePeriod ( > featureYear INTEGER, > featureMonth INTEGER > ); > INSERT INTO featureMonths VALUES ((2000,1),(2000,2),(2000,3)etc.) > > > SELECT > fp.featureYear, > fp.featureMonth, > f.childID > FROM > featurePeriod fp Left JOIN > ( > SELECT featureDate, childID > FROM features > WHERE > childID = > AND > publicationID = > ) f ON > ( > EXTRACT(YEAR FROM f.featureDate) = fp.featureYear > AND > EXTRACT(MONTH FROM f.featureDate) = fp.featureMonth > ) > ORDER BY > fp.featureYear, > p.featureMonth > > Jochem > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239849 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Test object type
> Ok, that makes sense. So is there an instanceof method in CF > or something similar to tell you what class was used to > create your object. You can use GetMetaData() to find this out. > Also, can you create an interface with CFC's, and then > implement that interface with another class? (Like other OOP > languages) No, CF doesn't support interfaces. It does support inheritance, however, which can involve the same issues. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239848 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
Sorry Snake but this isn't correct. Seeing the DB names in EM is one thing. Being able to get down to the object level (tables, stored procs, or views) is not the norm. I just signed into my shared CFDynamics DB server and can see a boatload of other DBs but I can't see any of their tables or additional objects. If CFD can do it, then I don't see why CT can't. Rey... http://www.reybango.com Snake wrote: > This is not a security hole at crystatech, it is simply how enterprise > manager/sql server works. > It does not restrict you from viewing other databases, but you cannot do > anything with them if your user does not have access. > > There is a modfication you can make to the master database SP's to change > this behaviour, but CT obviously don't know about that, and it has been > known to cause other issues if you do it anyway. > > -- > Snake > > -Original Message- > From: Matt Robertson [mailto:[EMAIL PROTECTED] > Sent: 08 May 2006 17:58 > To: CF-Talk > Subject: Big SQL security hole at Crystaltech? > > After signing onto a new client's SQL Server account, first on one dedicated > server and then another, I found I could not only see several other > databases belonging to other customers... I could click on the Tables tab > and see all of their tables. Taking it a step further, I could double-click > on a table and pull up its table structure. All of this is in SQL > Enterprise Manager. They have two separate accounts and I could see eight > other databases that didn't belong to my client on one server and 9 on the > other. > > I could not modify the tables or view the data (I didn't even try to Drop of > course). > > Poking around a little more, I found I could view all of another db's stored > procedures! > > This prompted me to load up a second customer of mine, who also has a SQL > account at Crystaltech. Same freaking story! > > Before I completely blow a gasket I wanted to confirm this is as big of a > screwup as I think it is. There is an easy fix for this right? I fired up > another client and, while I can see other existing db's, if I try and click > on anything I get a refusal (error 916. not an authorized user). > > Anyone else with a Crystaltech account... Can you chime in here? Do you see > the same things I do? > > > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239847 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: URL Structure
The problem I have with this is I'm not the one putting these links on the page. There are users who uses a content managment system that enters in the content for the website. I want to avoid making the users use Coldfusion code b/c they don't understand it and it will complicate things for them. I wanted to this in such a way that all the coldfusion code is on the disclaimer page (which I control) and the referring page (content page w/ the link) is just plain html that is written for them thru the content managment system they use. Is there another way of doing this? Thanks for your help though. > Ok, this is what you want to do. I ran this test code and I get all > your second level url variables. > > > > http://go.reuters. > com/newsArticle. jhtml> ?type=healthNews&storyID=12037965&src=eDialog/GetContent')#">Test > > > > -- > Ian Skinner > Web Programmer > BloodSource > www.BloodSource.org > Sacramento, CA > > - > | 1 | | > - Binary Soduko > | | | > - > > "C code. C code run. Run code run. Please!" > - Cynthia Dunning > > Confidentiality Notice: This message including any > attachments is for the sole use of the intended > recipient(s) and may contain confidential and privileged > information. Any unauthorized review, use, disclosure or > distribution is prohibited. If you are not the > intended recipient, please contact the sender and > delete any copies of this message. > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239846 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: ASP.Net book for CF programmer
Snake wrote: > Like everything. > There is a big difference to hosting a production server with hundreds of > sites on it and millions of hits per day and running a development server > with 1 developer on it and no traffic. There is indeed a big difference in what you must do (like make backups) and especially in what you must not do (like run ET). But you said there was a lot more to *learn* to run a server. Isn't your development environment a close approximation of your production environment? So what do you need to learn to run a server in production that you do not need to learn in a development environment? Jochem ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239845 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
Dave Watts wrote: >that's >probably not the worst thing going on in a shared hosting environment. Agreed. Luckily these are both dedicated servers. Only the SQL server component is shared. I was already lobbying for a dedicated box with MSDE/SQL Express running on it. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239844 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: catching broken links?
I have a pure CF solution. email me if interested. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239843 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
Matt Robertson wrote: > > Before I completely blow a gasket I wanted to confirm this is as big of a > screwup as I think it is. There is an easy fix for this right? The fix should be under REVOKE in the manual. Jochem ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239842 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: catching broken links?
We have clients who are entering broken links into their site, then their bosses write to us and complain about the dead links. Of course, we try to explain that this is not our doing, but it really falls on deaf ears. I'd love a nice little app that could spider all links on the site and email the broken ones to the site admin to be fixed. I would suspect it would not be too hard to link to one of the many link checking sites with a scheduled task, have the output captured and stored in some log directory for review by an admin type. -- Ian Skinner Web Programmer BloodSource www.BloodSource.org Sacramento, CA - | 1 | | - Binary Soduko | | | - "C code. C code run. Run code run. Please!" - Cynthia Dunning Confidentiality Notice: This message including any attachments is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender and delete any copies of this message. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239841 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Test object type
Also, can you create an interface with CFC's, and then implement that interface with another class? (Like other OOP languages) ~Brad No not directly. See the writings of Hal Helms and others on why this is not so good for CF. -- Ian Skinner Web Programmer BloodSource www.BloodSource.org Sacramento, CA - | 1 | | - Binary Soduko | | | - "C code. C code run. Run code run. Please!" - Cynthia Dunning Confidentiality Notice: This message including any attachments is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender and delete any copies of this message. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239840 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Coldfusion with Godaddy
I think they probably never really got the point of my initial support request. I haven't tried cfstoredproc yet because none of my clients sites use it, but there is definitely a problem with cfqueryparam, and sql server on my account at least. but The following query SELECT * FROM tblSites WHERE intSiteID= Fails with the following error Error Executing Database Query. [Macromedia][SQLServer JDBC Driver][SQLServer]EXECUTE permission denied on object 'sp_prepexec', database 'master', owner 'dbo'. The error occurred in : line 34 32 :SELECT * 33 :FROM tblSites 34 :WHERE intSiteID= 35 : 36 : Its clearly a configuration issue on their end, but I am sure cfstoredproc will probably also fail. Like I said in an earlier message, I am going to submit another tech support request about it and reference this thread along with some of the other blogs about cfqueryparam, and Sean Cornfield's blog on their ColdFusion hosting in general. John -Original Message- From: Nathan Strutz [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 1:11 PM To: CF-Talk Subject: Re: Coldfusion with Godaddy They probably meant (or should have said) that GoDaddy don't support , which does run sp_prepexec for each result specified. It's pretty inefficient, but I think there is probably no other way to do multiple result sets through JDBC. This is the exact reason why I don't like and don't use cfstoredproc. It also seems like database storage client variables may do something like that... I don't exactly remember. -nathan strutz http://www.dopefly.com/ On 5/5/06, Mark A Kruger <[EMAIL PROTECTED]> wrote: > > I second that John, > > They are misinformed. I suspect their information came from a > misconfigured DSN setting. For example, If I set up a user "bob" and > didn't change "default database" for him, then I set up a JDBC > connection without specifying the database I wanted to connect to - it > would try to connect to > master (which is the default default database for any new user), but it > would fail because master doesn't allow direct manipulation of data. > Instead > it comes with a set of SP's (sort of a like an API) for making any > changes. > > I would be very surprised if their information was accurate. More to > the point, they are trading down when they deny cfqueryparam - not > trading up. A site that doesn't user cfqueryparam is going to be less > secure, slower, and > will not be able to leverage the DB like it should. > > -mark > > > -Original Message- > From: Snake [mailto:[EMAIL PROTECTED] > Sent: Friday, May 05, 2006 11:57 AM > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > That's interesting, we have no such problem on our SQL servers, > CFQUERYPARAM works fine, and every user only has access to their own > database. > > > -Original Message- > From: John Rossi [mailto:[EMAIL PROTECTED] > Sent: 05 May 2006 17:47 > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > That's not entirely true. They do not, at least they told me they > can't allow me to use cfqueryparam with sql server in shared hosting. > > Here's the final response I got from them. > > After further researching the issue(s) at hand, we have determined the > following: > > The line "EXECUTE permission denied on object 'sp_prepexec', database > 'master', owner 'dbo'." shows that the database is attempting to work > with the master database of the server. Due to this, the cfqueryparam > feature will not work within our shared hosting environment SQL > (though it should work with a locally controlled Access database). We > apologize for any inconvience this may cause in regards to your site > deployment. If you have absolute need of this feature, you may wish to > consider our Virtual Dedicated or Dedicated server solutions. Bear in > mind that these are not managed servers. Previous server > administration experience is recommended should you opt to move to one > of these solutions. > > Should you require further assistance on this or any other issue, > don't hesitate to contact us any time of the day or night at (480) > 505-8877. Or, if you prefer email, you can send your questions or > comments to [EMAIL PROTECTED] > > Sincerely, > Drew C. > Advanced Hosting Support > > -Original Message- > From: Brad Wood [mailto:[EMAIL PROTECTED] > Sent: Friday, May 05, 2006 12:37 PM > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > > They guy on the phone just told me that they support all tags out of > the box except cfexecute and cfregistry > > He also said that they will not install custom tags for you, but I can > still run it in my own directory, right? > > ~Brad > > -Original Message- > From: Andy Matthews [mailto:[EMAIL PROTECTED] > Sent: Friday, May 05, 2006 11:31 AM > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > I would think they would. They had a help section about Coldfusion > when they first released
RE: Test object type
Ok, that makes sense. So is there an instanceof method in CF or something similar to tell you what class was used to create your object. Also, can you create an interface with CFC's, and then implement that interface with another class? (Like other OOP languages) ~Brad -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 12:22 PM To: CF-Talk Subject: RE: Test object type > So I assume that you use session.currentUser to hold EITHER a > manager object OR a worker object. > > This may be a stupid question since I don't have a lot of oop > experience, but is it bad form to use the same variable name > to store two different types of objects? That seems so > create the problem you have now, because you don't know what > class you used to instantiate that object. Actually, being able to use one variable to store different objects can be very useful, and is commonly done in OO languages. However, these tend not to be just any two different objects, but objects that either inherit from the same base class or implement the same interface. For example, you might have a bunch of objects that are sortable. You might write a single interface, ISortable, then write functionality in each class to implement how ISortable works for that specific object type. Then, if you have an array of objects, all of which implement ISortable, you could sort them without worrying about what kind of objects they are exactly. This is a big deal in C# now, with the addition of generics - type-safe collections of various kinds. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239838 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
catching broken links?
Is there some automated way to report broken links in a client's site? It has to be automated, not like Xenu. It also has to be able to run on a shared server. We have clients who are entering broken links into their site, then their bosses write to us and complain about the dead links. Of course, we try to explain that this is not our doing, but it really falls on deaf ears. I'd love a nice little app that could spider all links on the site and email the broken ones to the site admin to be fixed. Thanks, Ray ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239837 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Big SQL security hole at Crystaltech?
Yep, we have done the modification so users cannot see others databases, but most don't. As I have mentioned b4, it's a tossup with shared hosting, if you want cheap hosting and to be able to do what you like on the server without restriction, then you have to accept the lack of security that comes with it. You can't have all tags enabled and open EM access to your databases, and cheap as chips hosting and expect it to all be secure. We (www.cfmxhosting.co.uk) opt for the secure route. No EM access unless you have a static IP, and we then allow you through the firewall. No access to unsecure tags without a security sandbox No CreateObject (java) You get what you pay for at the end of the day. -- Russ -Original Message- From: Bryan Stevenson [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 18:14 To: CF-Talk Subject: Re: Big SQL security hole at Crystaltech? Yes this can be solved (don't ask me how though).and yes that is a pretty SERIOUS screw-up on their part. The ISP I use does show you all other DBs on the shared server, but you cannot connect to any of themso no seeing the tables and so on...just DB namesso it is doable. Cheers Bryan Stevenson B.Comm. VP & Director of E-Commerce Development Electric Edge Systems Group Inc. phone: 250.480.0642 fax: 250.480.1264 cell: 250.920.8830 e-mail: [EMAIL PROTECTED] web: www.electricedgesystems.com ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239836 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Big SQL security hole at Crystaltech?
> When it comes to MSSQL and EM I am strictly a user. Don't > know much about the server's care and feeding. With that out > of the way: > > Are there any sort of consequences to doing this that might > make them not want to perform that action? I certainly don't > miss not having this functionality on the other servers I > have access to. Is this just a bonehead mistake or were they > trying to perserve some kind of functionality? Not that I'm aware of, but without knowing what they're doing exactly I can only speculate. If you can only view the database objects, though, that's probably not the worst thing going on in a shared hosting environment. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239835 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Big SQL security hole at Crystaltech?
This is not a security hole at crystatech, it is simply how enterprise manager/sql server works. It does not restrict you from viewing other databases, but you cannot do anything with them if your user does not have access. There is a modfication you can make to the master database SP's to change this behaviour, but CT obviously don't know about that, and it has been known to cause other issues if you do it anyway. -- Snake -Original Message- From: Matt Robertson [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 17:58 To: CF-Talk Subject: Big SQL security hole at Crystaltech? After signing onto a new client's SQL Server account, first on one dedicated server and then another, I found I could not only see several other databases belonging to other customers... I could click on the Tables tab and see all of their tables. Taking it a step further, I could double-click on a table and pull up its table structure. All of this is in SQL Enterprise Manager. They have two separate accounts and I could see eight other databases that didn't belong to my client on one server and 9 on the other. I could not modify the tables or view the data (I didn't even try to Drop of course). Poking around a little more, I found I could view all of another db's stored procedures! This prompted me to load up a second customer of mine, who also has a SQL account at Crystaltech. Same freaking story! Before I completely blow a gasket I wanted to confirm this is as big of a screwup as I think it is. There is an easy fix for this right? I fired up another client and, while I can see other existing db's, if I try and click on anything I get a refusal (error 916. not an authorized user). Anyone else with a Crystaltech account... Can you chime in here? Do you see the same things I do? ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239834 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
Dave Watts wrote: >This would require that their DBA revoke the "public" group >role throughout the server, if I recall correctly. When it comes to MSSQL and EM I am strictly a user. Don't know much about the server's care and feeding. With that out of the way: Are there any sort of consequences to doing this that might make them not want to perform that action? I certainly don't miss not having this functionality on the other servers I have access to. Is this just a bonehead mistake or were they trying to perserve some kind of functionality? ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239833 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Scheduled tasks
3rd post, new subject line, haven't seen the first two come through . . .. We have a request from someone who shares our server to create _80_ scheduled tasks for a reporting application. Each scheduled task would create a single report and save it as an htm file so it doesn't have to be created on the fly each time someone requests it. About 30 of these tasks would be daily, another 30 would be weekly (all on the same day), and the remaining 20 would be quarterly and yearly. Adding this many scheduled tasks is out of my comfort zone. What do you think? I've suggested that they combine the dailies, weeklies, monthlies and yearlies into four separate scheduled tasks. They don't like that idea. Also, are there best practices for scheduling tasks through CF Scheduler? Can you schedule multiple tasks to start at the same time and have them fire and execute reliably? Is the number of tasks that can be scheduled to start simultaneously limited only by the 'Limit simultaneous requests setting' in CF Administrator? We're still on CF5 on Win2K, migrating painfully slowly to CF7 on Solaris . . . Thanks! George ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239832 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
I have a client who uses Intermedia.net, and that is the way it works for them. You can see the other databases in the EM, but can't access the objects. I don't think this is entirely correct. You should be able to see a list of > other databases by default, but you should not be able to see objects > within > those databases. This would require that their DBA revoke the "public" > group > role throughout the server, if I recall correctly. > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > > -- v/r, Jeff Fleitz ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239831 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Test object type
> So I assume that you use session.currentUser to hold EITHER a > manager object OR a worker object. > > This may be a stupid question since I don't have a lot of oop > experience, but is it bad form to use the same variable name > to store two different types of objects? That seems so > create the problem you have now, because you don't know what > class you used to instantiate that object. Actually, being able to use one variable to store different objects can be very useful, and is commonly done in OO languages. However, these tend not to be just any two different objects, but objects that either inherit from the same base class or implement the same interface. For example, you might have a bunch of objects that are sortable. You might write a single interface, ISortable, then write functionality in each class to implement how ISortable works for that specific object type. Then, if you have an array of objects, all of which implement ISortable, you could sort them without worrying about what kind of objects they are exactly. This is a big deal in C# now, with the addition of generics - type-safe collections of various kinds. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239830 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Generic CF form handler
andy wrote: >But what if you have a raxio button or a checkbox? How do you indicate if a >field is required? How do you perform validation on fields of a certain type? OK I get it. Thats going to be fun. When I did something similar I used standard html form fields. Individual field validations/requirements and the accompanying error messages were fed in via a 2d array and validation was done against a regex server-side. The composite error page consisted of an unordered list put into a variable via cfsavecontent. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239829 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Big SQL security hole at Crystaltech?
> We've had this conversation on this list before, and yes what > you saw is true. If I remember right, it's a weakness of SQL > Server, not CrystalTech. Well, except for the fact that > Crystaltech allows remote connections using EM (a lot of > hosts don't allow this). I also think someone posted a > method to turn this off, but I think it's at the client level > not the server. So security wise, that's useless. "Excuse > me, Mr. hacker. Would you mind turning off the 'List all > servers' option?" I don't think this is entirely correct. You should be able to see a list of other databases by default, but you should not be able to see objects within those databases. This would require that their DBA revoke the "public" group role throughout the server, if I recall correctly. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239828 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Big SQL security hole at Crystaltech?
Yes this can be solved (don't ask me how though).and yes that is a pretty SERIOUS screw-up on their part. The ISP I use does show you all other DBs on the shared server, but you cannot connect to any of themso no seeing the tables and so on...just DB namesso it is doable. Cheers Bryan Stevenson B.Comm. VP & Director of E-Commerce Development Electric Edge Systems Group Inc. phone: 250.480.0642 fax: 250.480.1264 cell: 250.920.8830 e-mail: [EMAIL PROTECTED] web: www.electricedgesystems.com ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239827 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Coldfusion with Godaddy
They probably meant (or should have said) that GoDaddy don't support , which does run sp_prepexec for each result specified. It's pretty inefficient, but I think there is probably no other way to do multiple result sets through JDBC. This is the exact reason why I don't like and don't use cfstoredproc. It also seems like database storage client variables may do something like that... I don't exactly remember. -nathan strutz http://www.dopefly.com/ On 5/5/06, Mark A Kruger <[EMAIL PROTECTED]> wrote: > > I second that John, > > They are misinformed. I suspect their information came from a > misconfigured > DSN setting. For example, If I set up a user "bob" and didn't change > "default database" for him, then I set up a JDBC connection without > specifying the database I wanted to connect to - it would try to connect > to > master (which is the default default database for any new user), but it > would fail because master doesn't allow direct manipulation of data. > Instead > it comes with a set of SP's (sort of a like an API) for making any > changes. > > I would be very surprised if their information was accurate. More to the > point, they are trading down when they deny cfqueryparam - not trading up. > A > site that doesn't user cfqueryparam is going to be less secure, slower, > and > will not be able to leverage the DB like it should. > > -mark > > > -Original Message- > From: Snake [mailto:[EMAIL PROTECTED] > Sent: Friday, May 05, 2006 11:57 AM > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > That's interesting, we have no such problem on our SQL servers, > CFQUERYPARAM > works fine, and every user only has access to their own database. > > > -Original Message- > From: John Rossi [mailto:[EMAIL PROTECTED] > Sent: 05 May 2006 17:47 > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > That's not entirely true. They do not, at least they told me they can't > allow me to use cfqueryparam with sql server in shared hosting. > > Here's the final response I got from them. > > After further researching the issue(s) at hand, we have determined the > following: > > The line "EXECUTE permission denied on object 'sp_prepexec', database > 'master', owner 'dbo'." shows that the database is attempting to work with > the master database of the server. Due to this, the cfqueryparam feature > will not work within our shared hosting environment SQL (though it should > work with a locally controlled Access database). We apologize for any > inconvience this may cause in regards to your site deployment. If you have > absolute need of this feature, you may wish to consider our Virtual > Dedicated or Dedicated server solutions. Bear in mind that these are not > managed servers. Previous server administration experience is recommended > should you opt to move to one of these solutions. > > Should you require further assistance on this or any other issue, don't > hesitate to contact us any time of the day or night at (480) 505-8877. Or, > if you prefer email, you can send your questions or comments to > [EMAIL PROTECTED] > > Sincerely, > Drew C. > Advanced Hosting Support > > -Original Message- > From: Brad Wood [mailto:[EMAIL PROTECTED] > Sent: Friday, May 05, 2006 12:37 PM > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > > They guy on the phone just told me that they support all tags out of the > box > except cfexecute and cfregistry > > He also said that they will not install custom tags for you, but I can > still > run it in my own directory, right? > > ~Brad > > -Original Message- > From: Andy Matthews [mailto:[EMAIL PROTECTED] > Sent: Friday, May 05, 2006 11:31 AM > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > I would think they would. They had a help section about Coldfusion when > they > first released it. In fact, if you search this list on the website you > should be able to find my post with all of the direct links. > > andy matthews > web developer > certified advanced coldfusion programmer ICGLink, Inc. > [EMAIL PROTECTED] > 615.370.1530 x737 > --//-> > > -Original Message- > From: Brad Wood [mailto:[EMAIL PROTECTED] > Sent: Friday, May 05, 2006 11:23 AM > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > > I'm on the phone now trying to get a list of restricted tags from them.. > Does any one know if they publish that? > > ~Brad > > -Original Message- > From: Brad Wood > Sent: Friday, May 05, 2006 11:04 AM > To: CF-Talk > Subject: RE: Coldfusion with Godaddy > > Godaddy does CF now? That is cool. I have asked them several times if > they > plan on hosting CF sites and they have always told me no. > > My personal site is pretty basic and I have been looking around for some > cheap hosting to move it to. Since my domains are already registered with > godaddy, I might give their hosting a whirl... > > > > > > > > > > > > > ~| Message: http://
Re: Big SQL security hole at Crystaltech?
Yikes! This is true for my accounts also. Let us know what happens. Matt Robertson wrote: > After signing onto a new client's SQL Server account, first on one dedicated > server and then another, I found I could not only see several other databases > belonging to other customers... I could click on the Tables tab and see all > of their tables. Taking it a step further, I could double-click on a table > and pull up its table structure. All of this is in SQL Enterprise Manager. > They have two separate accounts and I could see eight other databases that > didn't belong to my client on one server and 9 on the other. > > I could not modify the tables or view the data (I didn't even try to Drop of > course). > > Poking around a little more, I found I could view all of another db's stored > procedures! > > This prompted me to load up a second customer of mine, who also has a SQL > account at Crystaltech. Same freaking story! > > Before I completely blow a gasket I wanted to confirm this is as big of a > screwup as I think it is. There is an easy fix for this right? I fired up > another client and, while I can see other existing db's, if I try and click > on anything I get a refusal (error 916. not an authorized user). > > Anyone else with a Crystaltech account... Can you chime in here? Do you see > the same things I do? > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239825 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Big SQL security hole at Crystaltech?
We've had this conversation on this list before, and yes what you saw is true. If I remember right, it's a weakness of SQL Server, not CrystalTech. Well, except for the fact that Crystaltech allows remote connections using EM (a lot of hosts don't allow this). I also think someone posted a method to turn this off, but I think it's at the client level not the server. So security wise, that's useless. "Excuse me, Mr. hacker. Would you mind turning off the 'List all servers' option?" ;) But these conversations always come down to one thing: It's a matter of customer service vs. security. Some companies prefer to risk the security problems to give their customers better options. Others prefer strict security. > -Original Message- > From: Matt Robertson [mailto:[EMAIL PROTECTED] > Sent: Monday, May 08, 2006 10:58 AM > > After signing onto a new client's SQL Server account, first > on one dedicated server and then another, I found I could not > only see several other databases belonging to other > customers... I could click on the Tables tab and see all of > their tables. Taking it a step further, I could double-click > on a table and pull up its table structure. All of this is > in SQL Enterprise Manager. They have two separate accounts > and I could see eight other databases that didn't belong to > my client on one server and 9 on the other. > > I could not modify the tables or view the data (I didn't even > try to Drop of course). > > Poking around a little more, I found I could view all of > another db's stored procedures! > > This prompted me to load up a second customer of mine, who > also has a SQL account at Crystaltech. Same freaking story! > > Before I completely blow a gasket I wanted to confirm this is > as big of a screwup as I think it is. There is an easy fix > for this right? I fired up another client and, while I can > see other existing db's, if I try and click on anything I get > a refusal (error 916. not an authorized user). > > Anyone else with a Crystaltech account... Can you chime in > here? Do you see the same things I do? This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. A1. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239824 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Test object type
So I assume that you use session.currentUser to hold EITHER a manager object OR a worker object. This may be a stupid question since I don't have a lot of oop experience, but is it bad form to use the same variable name to store two different types of objects? That seems so create the problem you have now, because you don't know what class you used to instantiate that object. ~Brad -Original Message- From: Joelle Tegwen [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 11:38 AM To: CF-Talk Subject: Test object type I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend User. I would like to be able to test whether an instantiated object is a Worker or a Manager. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239823 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Big SQL security hole at Crystaltech?
After signing onto a new client's SQL Server account, first on one dedicated server and then another, I found I could not only see several other databases belonging to other customers... I could click on the Tables tab and see all of their tables. Taking it a step further, I could double-click on a table and pull up its table structure. All of this is in SQL Enterprise Manager. They have two separate accounts and I could see eight other databases that didn't belong to my client on one server and 9 on the other. I could not modify the tables or view the data (I didn't even try to Drop of course). Poking around a little more, I found I could view all of another db's stored procedures! This prompted me to load up a second customer of mine, who also has a SQL account at Crystaltech. Same freaking story! Before I completely blow a gasket I wanted to confirm this is as big of a screwup as I think it is. There is an easy fix for this right? I fired up another client and, while I can see other existing db's, if I try and click on anything I get a refusal (error 916. not an authorized user). Anyone else with a Crystaltech account... Can you chime in here? Do you see the same things I do? ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239822 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Generic CF form handler
Quoting Mark Henderson <[EMAIL PROTECTED]>: Mark... That method works great if you have all text fields, or dropdowns, or textareas. But what if you have a raxio button or a checkbox? How do you indicate if a field is required? How do you perform validation on fields of a certain type? I'm writing something that is a point and shoot. Type out some lines of XML following the supplied pattern and it will build the form for you AND process it as well. andy > Andy Matthews wrote: > > CFMAIL is a form handler, but it does require a moderate amount of coding > to > > send the values of specific form fields to the recipient. What I'm talking > > about is something that you could use as a processing page for ANY form > you > > create. You'd never need to touch the processing script at all, just set > up > > the form and point it at the handler. > > Hi Andy > > I may be misunderstanding something here, so correct me if I'm wrong, > but can't you just loop over the form collection inside cfmail? As far > as the cfmail variables go, I usually have a globals file and set my > email variables in that: > > > > > > When you want to process a form that requires mailing, attach the > subject to the form submission url... > > > or if you're using a framework this can obviously be done elsewhere > (if it's fusebox, inside the fuseaction, for instance). > > Then the following should be able to hand most email submissions without > the need for hardcoding. > > > > > #formfield# : #form[formfield]# > > > > > Code not tested but this should give you the general idea. > > HTH > > Adieu > Mark > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239821 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Test object type
As far as I know, CF doesn't have a built in "instanceOf" operator or method. The way to get around this might be to have a public property for objects Ex.: SESSION.CurrentUser.InstanceOf() Which would return, as a string, something like "manager" or "worker". ... Ben Nadel www.bennadel.com -Original Message- From: Joelle Tegwen [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 12:38 PM To: CF-Talk Subject: Test object type I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend User. I would like to be able to test whether an instantiated object is a Worker or a Manager. Something like But I don't know what "isObjectType" is really called :) Can I do this or do I need isWorker and isManager functions in my classes? Thanks Joelle ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239820 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Test object type
listlast(getMetadata(obj).name,".") probably more efficient to have a getType() function in each cfc though. then perhaps a user.equals(anotherobj) function which utilises it e.g. return if(arguments.obj.getType() eq this.getType()) -Original Message- From: Joelle Tegwen [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 17:38 To: CF-Talk Subject: Test object type I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend User. I would like to be able to test whether an instantiated object is a Worker or a Manager. Something like But I don't know what "isObjectType" is really called :) Can I do this or do I need isWorker and isManager functions in my classes? Thanks Joelle ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239819 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Test object type
I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend User. I would like to be able to test whether an instantiated object is a Worker or a Manager. Something like But I don't know what "isObjectType" is really called :) Can I do this or do I need isWorker and isManager functions in my classes? Thanks Joelle ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239818 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: What is High-Performance in the statement High-Performance Reporting and Document Generation
Correct: Enterprise Edition takes out all all the stops...(and kicks butt compared to Crystal and other "Enterprise Class" Java-based reporting engine report generation, in our internal tests prior to CF7 ship). Standard Edition is effectively single-threaded for doc and report generation. Any more than a couple simultanous docs or reports and you start to feel it. HTH Damon >Thanks to: >http://www.dmxzone.com/showDetail.asp?TypeId=28&NewsId=8105&LinkFile=page2.htm > >where I found this: > >*cfdocument differences in ColdFusion MX 7 versions* > >There is a performance limitation with the cfdocument tag in the "CFMX 7 >Standard edition". It processes the cfdocument requests one at a time. The >Enterprise edition can publish multiple documents at the same time. > > >On 5/4/06, Paul Hastings <[EMAIL PROTECTED]> wrote: >> ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239817 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: Re[2]: supression of / and/or \
That's correct, and actually I simplified it a bit (removed one character from the regex): > -Original Message- > From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] > Sent: Monday, May 08, 2006 9:40 AM > To: CF-Talk > Subject: Re[2]: supression of / and/or \ > > Hi Jacob, thanks. (and thanks all the others, who replied !) > When I want a "?" to escape as well would it be like: > > > > ?? Uwe > > MJ> I get wanting to remove the "/", but you also want all > the back slashes from your path? Here's how to remove the > forward slashes: > MJ> > > MJ> If you what to remove both at the same time: > MJ> This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. A1. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239816 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re[2]: supression of / and/or \
Hi Jacob, thanks. (and thanks all the others, who replied !) When I want a "?" to escape as well would it be like: ?? Uwe MJ> I get wanting to remove the "/", but you also want all the back slashes from your path? Here's how to remove the forward slashes: MJ> MJ> If you what to remove both at the same time: MJ> >> -Original Message- >> From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] >> Sent: Monday, May 08, 2006 9:04 AM >> To: CF-Talk >> Subject: supression of / and/or \ >> >> Hi list, >> I want to supress >> a "/" or a "\" in an cfhttp.FileContent output like in: >> >> -- >> Error attempting to write data to target file >> 'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher >> Inschriften.htm'. >> - >> the "/" in >> "H. / Götter Herrscher Inschriften.htm" >> is driving me nuts. MJ> This transmission may contain information that is privileged, confidential and/or exempt from MJ> disclosure under applicable law. If you are not the intended recipient, you are hereby notified MJ> that any disclosure, copying, distribution, or use of the information contained herein MJ> (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in MJ> error, please immediately contact the sender and destroy the material in its entirety, whether MJ> in electronic or hard copy format. Thank you. A1. MJ> ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239815 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: supression of / and/or \
>>> On Mon, May 8, 2006 at 4:04 PM, in message <[EMAIL PROTECTED]>, [EMAIL PROTECTED] wrote: > Hi list, > I want to supress > a "/" or a "\" in an cfhttp.FileContent output like in: safeFile=rereplace('[/\/]','','ALL'); I think - whatch the escaping on the reg. exp :-) Tom Chiverton This email is sent for and on behalf of Halliwells LLP. Halliwells LLP is a limited liability partnership registered in England and Wales under registered number OC307980 whose registered office address is at St James's Court Brown Street Manchester M2 2JF. A list of members is available for inspection at the registered office. Any reference to a partner in relation to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law Society. CONFIDENTIALITY This email is intended only for the use of the addressee named above and may be confidential or legally privileged. If you are not the addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than Halliwells LLP or the addressee of its existence or contents. If you have received this email in error please delete it and notify Halliwells LLP IT Department on 0870 365 8008. For more information about Halliwells LLP visit www.halliwells.com. We are pleased to announce that Halliwells LLP has been voted AIM Lawyer of the Year at the 2005 Growth Company Awards ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239814 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: DEAD TOPIC - LEAVE IT ALONE: cf-talk is weird =)
Look at the date it was sent??? Jesus... I'm so done with this it's ridiculous. !k -Original Message- From: Todd Rafferty [mailto:[EMAIL PROTECTED] Sent: May 8, 2006 8:09 AM To: CF-Talk Subject: DEAD TOPIC - LEAVE IT ALONE: cf-talk is weird =) Kevin, As far as I'm concerned, my off-topic email that started this died last Friday until you bumped it that afternoon. Because the fact that you bumped it, it's now here, Monday morning, just as you left it. Maybe you should consider that. It was a one off conversation that was dying, until an angry troll came along and wanted to see justice served. ~Todd -Original Message- From: Kevin Aebig [mailto:[EMAIL PROTECTED] Sent: Saturday, May 06, 2006 3:25 PM To: CF-Talk Subject: RE: cf-talk is weird =) I only piped up because it's ignorant to assume that they have nothing better to do than watch over the list and make sure people follow the rules. I tried being polite about this, and though I don't have any authority to tell you what to do, I don't think I was out of line as this list largely moderates itself. CF-Community was put in place to avoid this situation and if you don't like it, take it up with them or leave. !k ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239813 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: supression of / and/or \
I get wanting to remove the "/", but you also want all the back slashes from your path? Here's how to remove the forward slashes: If you what to remove both at the same time: > -Original Message- > From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] > Sent: Monday, May 08, 2006 9:04 AM > To: CF-Talk > Subject: supression of / and/or \ > > Hi list, > I want to supress > a "/" or a "\" in an cfhttp.FileContent output like in: > > -- > Error attempting to write data to target file > 'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher > Inschriften.htm'. > - > the "/" in > "H. / Götter Herrscher Inschriften.htm" > is driving me nuts. This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. A1. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239812 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: supression of / and/or \
What kinds of problems are you having? Have you tried just replacing out the character? ... Ben Nadel www.bennadel.com -Original Message- From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 11:04 AM To: CF-Talk Subject: supression of / and/or \ Hi list, I want to supress a "/" or a "\" in an cfhttp.FileContent output like in: -- Error attempting to write data to target file 'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher Inschriften.htm'. - the "/" in "H. / Götter Herrscher Inschriften.htm" is driving me nuts. Uwe ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239811 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
supression of / and/or \
Hi list, I want to supress a "/" or a "\" in an cfhttp.FileContent output like in: -- Error attempting to write data to target file 'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher Inschriften.htm'. - the "/" in "H. / Götter Herrscher Inschriften.htm" is driving me nuts. Uwe ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239810 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
CFComet is alive
I see posts come up all the time about how to access Index Server. I wrote an article on this years ago back in CF 5 when COM objects worked pretty well. I'm not sure how well a lot of these will still work, but I found this by doing an Ego google search on my name. http://cfregex.com/cfcomet/ Bob ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239809 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Project not being returned as type project?
That was it. It didn't occur to me that I would need to reference the folder name. Thanks Joelle Matt Williams wrote: > What does the component that has newProjectCreated() have for an argument? > If its type is simply "Project", then it must be in the same directory as > the Project.cfc. Otherwise you may have to do "ttComponents.Project" for the > argument type. > > ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239808 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Test
Sorry for the test. Messages I send to cf-talk thru email aren't appearing so I'm trying through the HOF site . . . George ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239807 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
DEAD TOPIC - LEAVE IT ALONE: cf-talk is weird =)
Kevin, As far as I'm concerned, my off-topic email that started this died last Friday until you bumped it that afternoon. Because the fact that you bumped it, it's now here, Monday morning, just as you left it. Maybe you should consider that. It was a one off conversation that was dying, until an angry troll came along and wanted to see justice served. ~Todd -Original Message- From: Kevin Aebig [mailto:[EMAIL PROTECTED] Sent: Saturday, May 06, 2006 3:25 PM To: CF-Talk Subject: RE: cf-talk is weird =) I only piped up because it's ignorant to assume that they have nothing better to do than watch over the list and make sure people follow the rules. I tried being polite about this, and though I don't have any authority to tell you what to do, I don't think I was out of line as this list largely moderates itself. CF-Community was put in place to avoid this situation and if you don't like it, take it up with them or leave. !k ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239806 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: Form in Email
>> Sending out email as HTML with a Form. Form to pass variables >> to action file. Email form looks fine, but the submission >> doesn't pass the form fields to action file. > >Does the form's ACTION attribute contain a fully-qualified URL? > >Dave Watts, CTO, Fig Leaf Software >http://www.figleaf.com/ > >Fig Leaf Software provides the highest caliber vendor-authorized >instruction at our training centers in Washington DC, Atlanta, >Chicago, Baltimore, Northern Virginia, or on-site at your location. >Visit http://training.figleaf.com/ for more information! I believe it is a fully-qualified URL (that is, it is the action page is a full webpage address with http:// at the beginning. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239805 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: ASP.Net book for CF programmer
I think it is also dependant on what your doing on the server. Single site, prob no issues. Multiple sites (i.e. shared hosting), that's when u have more problems. -Original Message- From: Denny Valliant [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 12:34 To: CF-Talk Subject: Re: ASP.Net book for CF programmer On 5/8/06, Robertson-Ravo, Neil (RX) <[EMAIL PROTECTED]> wrote: > > I have to agree - I still think CF5 was more stable that MX. Java > certainly did add a few more oddities in terms of stability which > needs far more tweaking of the JVM. Oddly, 6.1 did much better for us, and 7 has been even better then 6.1. Didn't have to mess with the JVM much over here. A couple of things, like session timeouts for jrun or mailspool/thread settings came up eventually, but the solutions were all over the place, and editing the config wasn't too... ** Stability-wise. 4.5 was pretty solid, from what I remember. That's what I started on. *sniff* with my bud that's now gone. Alas. Eh, look at majordomo. That sucker lasted ferever. Solid. Solid as a rock. We built this city... Um... never mind. Got a little carried away. =-] Generally: Guess a lot depends on what you're trying to do, etc.., as to what problems you run into, etc.. Hmmm... well, that's all for me. ** Cheers Lev, wherever you may be. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239804 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
Re: ASP.Net book for CF programmer
On 5/8/06, Robertson-Ravo, Neil (RX) <[EMAIL PROTECTED]> wrote: > > I have to agree - I still think CF5 was more stable that MX. Java > certainly did add a few more oddities in terms of stability which needs > far > more tweaking of the JVM. Oddly, 6.1 did much better for us, and 7 has been even better then 6.1. Didn't have to mess with the JVM much over here. A couple of things, like session timeouts for jrun or mailspool/thread settings came up eventually, but the solutions were all over the place, and editing the config wasn't too... ** Stability-wise. 4.5 was pretty solid, from what I remember. That's what I started on. *sniff* with my bud that's now gone. Alas. Eh, look at majordomo. That sucker lasted ferever. Solid. Solid as a rock. We built this city... Um... never mind. Got a little carried away. =-] Generally: Guess a lot depends on what you're trying to do, etc.., as to what problems you run into, etc.. Hmmm... well, that's all for me. ** Cheers Lev, wherever you may be. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239803 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: ASP.Net book for CF programmer
Ok, well I assume your customers are all smallfry and wouldn't actually notice/care if u killed the server running some untested code that caused an infinite loop or somehting then. -Original Message- From: Rick Faircloth [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 10:00 To: CF-Talk Subject: RE: ASP.Net book for CF programmer Yep...no problem... Rick -Original Message- From: Snake [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 4:45 AM To: CF-Talk Subject: RE: ASP.Net book for CF programmer You develop directly on your live server !! :-O !!! Do I really need to say anything? Snake -Original Message- From: Rick Faircloth [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 00:48 To: CF-Talk Subject: RE: ASP.Net book for CF programmer Sounds like you got things set up well for your development without risk to your production setup. I used to develop locally, but now, since I'm developing for CF 4.5 which is all that's on the server, I just develop right on the server. I set up development sites for clients under my domain so they can view design work and test functions as I development. That way they can see progress, provide feedback on design, test functionality, and get their training on the app as I go. By the time I'm finished, they're already familiar with the app. If I setup a new version of CF, however, it definitely wouldn't be on the production server. Testing and development would be on a different server, hardware and software. I try to be as cautious as resources will allow... Rick -Original Message- From: Denny Valliant [mailto:[EMAIL PROTECTED] Sent: Sunday, May 07, 2006 6:58 PM To: CF-Talk Subject: Re: ASP.Net book for CF programmer > > You gotta swim at some point. > > Agreed...I'm just trying to decide what pool to swim in this time. I hear you. In a changing world, assessing what the future will bring is not as straight forward as one would wish. =-] I think it would be wise to add ASP.NET to my repertoire. > Especially if something should happen with CF, which I don't think it > will. But if it should, I could use ASP.NET for business continuity.. The only real gripe I have about ASP is it's dependence on MS. With mono you can get around that, sorta, I hear, so it's probably not too big a deal, but it bugs me how MS always has to have some "standard" that is standard only to their products. =-/ I wouldn't say I was living in fear of change, I've just gone through > enough upgrades with various products to know there are always issues. > But now that I have several server that I can test new products on > without having to touch my production server, testing becomes less > risky. For sure. A good development environment is essential to any endeavour of this nature. Really essential. That is one nice facet to the multiple instances of CF idea, you could have one server instance that is for development and one for production, so if you crash and burn the dev instance you don't get the production one (theoretically, and not always true). As for the mirroring of dev and server, for years I've been able to have a pretty close setup to what's on the production server, including a VMware install for added testing, on my laptop. Now that I've got gigs of data to copy back and forth tho, it's getting a little tedious, and I can see a future where it's impossible to have the same setup as on the server, locally. Thus, a real interest in test cases and small amounts of data. Still just getting my bearings, but I can see the usefulness. So far what's working good is a production server, a dev server, and my local workstation (running more servers than the servers are ;-). So long as the dev server is real real similar to the production one, the transitions aren't too bad. Main campus adds a 4th step, a QA server, that is exactly the same as the production one, but called "quality assurance" instead. That's a smart setup. Cuts down on the need to deploy your apps in the dead of night. I gotta ask... 'leetness? What in the world does that mean? Heh. Sorry, it's sorta shorthand for elite. And where in this world is home for you? I hail from Albuquerque, New Mexico. The Land of Enchantment. [-= It's a swell town, give a shout if you're ever in the hood. :den ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239802 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: ASP.Net book for CF programmer
Yep...no problem... Rick -Original Message- From: Snake [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 4:45 AM To: CF-Talk Subject: RE: ASP.Net book for CF programmer You develop directly on your live server !! :-O !!! Do I really need to say anything? Snake -Original Message- From: Rick Faircloth [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 00:48 To: CF-Talk Subject: RE: ASP.Net book for CF programmer Sounds like you got things set up well for your development without risk to your production setup. I used to develop locally, but now, since I'm developing for CF 4.5 which is all that's on the server, I just develop right on the server. I set up development sites for clients under my domain so they can view design work and test functions as I development. That way they can see progress, provide feedback on design, test functionality, and get their training on the app as I go. By the time I'm finished, they're already familiar with the app. If I setup a new version of CF, however, it definitely wouldn't be on the production server. Testing and development would be on a different server, hardware and software. I try to be as cautious as resources will allow... Rick -Original Message- From: Denny Valliant [mailto:[EMAIL PROTECTED] Sent: Sunday, May 07, 2006 6:58 PM To: CF-Talk Subject: Re: ASP.Net book for CF programmer > > You gotta swim at some point. > > Agreed...I'm just trying to decide what pool to swim in this time. I hear you. In a changing world, assessing what the future will bring is not as straight forward as one would wish. =-] I think it would be wise to add ASP.NET to my repertoire. > Especially if something should happen with CF, which I don't think it > will. But if it should, I could use ASP.NET for business continuity.. The only real gripe I have about ASP is it's dependence on MS. With mono you can get around that, sorta, I hear, so it's probably not too big a deal, but it bugs me how MS always has to have some "standard" that is standard only to their products. =-/ I wouldn't say I was living in fear of change, I've just gone through > enough upgrades with various products to know there are always > issues. But now that I have several server that I can test new > products on without having to touch my production server, > testing becomes less risky. For sure. A good development environment is essential to any endeavour of this nature. Really essential. That is one nice facet to the multiple instances of CF idea, you could have one server instance that is for development and one for production, so if you crash and burn the dev instance you don't get the production one (theoretically, and not always true). As for the mirroring of dev and server, for years I've been able to have a pretty close setup to what's on the production server, including a VMware install for added testing, on my laptop. Now that I've got gigs of data to copy back and forth tho, it's getting a little tedious, and I can see a future where it's impossible to have the same setup as on the server, locally. Thus, a real interest in test cases and small amounts of data. Still just getting my bearings, but I can see the usefulness. So far what's working good is a production server, a dev server, and my local workstation (running more servers than the servers are ;-). So long as the dev server is real real similar to the production one, the transitions aren't too bad. Main campus adds a 4th step, a QA server, that is exactly the same as the production one, but called "quality assurance" instead. That's a smart setup. Cuts down on the need to deploy your apps in the dead of night. I gotta ask... 'leetness? What in the world does that mean? Heh. Sorry, it's sorta shorthand for elite. And where in this world is home for you? I hail from Albuquerque, New Mexico. The Land of Enchantment. [-= It's a swell town, give a shout if you're ever in the hood. :den ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239801 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: ASP.Net book for CF programmer
You develop directly on your live server !! :-O !!! Do I really need to say anything? Snake -Original Message- From: Rick Faircloth [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 00:48 To: CF-Talk Subject: RE: ASP.Net book for CF programmer Sounds like you got things set up well for your development without risk to your production setup. I used to develop locally, but now, since I'm developing for CF 4.5 which is all that's on the server, I just develop right on the server. I set up development sites for clients under my domain so they can view design work and test functions as I development. That way they can see progress, provide feedback on design, test functionality, and get their training on the app as I go. By the time I'm finished, they're already familiar with the app. If I setup a new version of CF, however, it definitely wouldn't be on the production server. Testing and development would be on a different server, hardware and software. I try to be as cautious as resources will allow... Rick -Original Message- From: Denny Valliant [mailto:[EMAIL PROTECTED] Sent: Sunday, May 07, 2006 6:58 PM To: CF-Talk Subject: Re: ASP.Net book for CF programmer > > You gotta swim at some point. > > Agreed...I'm just trying to decide what pool to swim in this time. I hear you. In a changing world, assessing what the future will bring is not as straight forward as one would wish. =-] I think it would be wise to add ASP.NET to my repertoire. > Especially if something should happen with CF, which I don't think it > will. But if it should, I could use ASP.NET for business continuity.. The only real gripe I have about ASP is it's dependence on MS. With mono you can get around that, sorta, I hear, so it's probably not too big a deal, but it bugs me how MS always has to have some "standard" that is standard only to their products. =-/ I wouldn't say I was living in fear of change, I've just gone through > enough upgrades with various products to know there are always > issues. But now that I have several server that I can test new > products on without having to touch my production server, > testing becomes less risky. For sure. A good development environment is essential to any endeavour of this nature. Really essential. That is one nice facet to the multiple instances of CF idea, you could have one server instance that is for development and one for production, so if you crash and burn the dev instance you don't get the production one (theoretically, and not always true). As for the mirroring of dev and server, for years I've been able to have a pretty close setup to what's on the production server, including a VMware install for added testing, on my laptop. Now that I've got gigs of data to copy back and forth tho, it's getting a little tedious, and I can see a future where it's impossible to have the same setup as on the server, locally. Thus, a real interest in test cases and small amounts of data. Still just getting my bearings, but I can see the usefulness. So far what's working good is a production server, a dev server, and my local workstation (running more servers than the servers are ;-). So long as the dev server is real real similar to the production one, the transitions aren't too bad. Main campus adds a 4th step, a QA server, that is exactly the same as the production one, but called "quality assurance" instead. That's a smart setup. Cuts down on the need to deploy your apps in the dead of night. I gotta ask... 'leetness? What in the world does that mean? Heh. Sorry, it's sorta shorthand for elite. And where in this world is home for you? I hail from Albuquerque, New Mexico. The Land of Enchantment. [-= It's a swell town, give a shout if you're ever in the hood. :den ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239800 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
RE: ASP.Net book for CF programmer
I have to agree - I still think CF5 was more stable that MX. Java certainly did add a few more oddities in terms of stability which needs far more tweaking of the JVM. -Original Message- From: Snake [mailto:[EMAIL PROTECTED] Sent: 07 May 2006 00:29 To: CF-Talk Subject: RE: ASP.Net book for CF programmer Altho, all things considered with the improvements CFMX brings, I still find CF5 more stable than CFMX. The inclusion of JAVA to the equation increased the number of things that can go wrong on your server. Instead of just CF being the problem, you now have CF, JRUN and the JVM. An error on CF5 was a lot easier to diagnose too, whereas you have to know somehting about JAVA to decipher a JVM stacktrace. Snake -Original Message- From: Rick Faircloth [mailto:[EMAIL PROTECTED] Sent: 06 May 2006 22:26 To: CF-Talk Subject: RE: ASP.Net book for CF programmer Thanks for the perspective, Denny. I've haven't tried talking with Adobe about it, but should I decide to upgrade, I'll certainly talk to them. As far as the changes from 4.5 to the current version, I wasn't saying not much has changed, except from the standpoint of all the changes still end up performing add, update, delete, report as the basics of CF functionality. Of course, I'm speaking out of inexperience in actually using any of the later versions, especially the current one, but what would you say are the basic functionality advances in CF (or asp, jsp, or whatever) in the last decade? Sure, faster, more efficient ways of using code, faster execution, and... (I'm sure there are many other efficiencies I'm not aware of), but what basic purposes of CF have changed. One of the biggest changes I have been intrigued by is Flash remoting, and now Flex, but as one who builds sites that have to have search engine optimization as a major concern, Flash is totally disfunctional from that perspective compared with plain ole HTML. I guess I'm just looking at the very broad picture of dynamic data use, and not even just CF. Thanks everyone for sharing your thoughts. Rick -Original Message- From: Denny Valliant [mailto:[EMAIL PROTECTED] Sent: Saturday, May 06, 2006 4:04 PM To: CF-Talk Subject: Re: ASP.Net book for CF programmer Out of curiosity, has anyone called adobe and tried the old human element? I only dealt with MM via email, but they were pretty helpful. Some companies give their employees (i.e. sales department folks) more power than others, allowing them to make exceptions based on their judgement. It doesn't hurt to mention that you have several sites running 4.5, so they'd be getting more than a one time purchase. Sometimes future money is worth something, probably more than old money, but... I dunno. Depends on who you get, and how you handle it, etc.. Worth a try tho if you're serious about it. I know I mentioned this earlier, but I don't know if it happened, and if it did, I'd be interested in how helpful (or non-helpful) the sales reps are/were. Maybe Snake is correct, and they are only looking out for the big spenders, I haven't dealt with anyone personally in quite a while, so... Well, the human element is sooo hit and miss tho, I guess one's experience wouldn't reflect/help too much with an other's. Eh, worth a shot at least. I think Dave W. has the right idea, there has been a lot of work put into CF, and I disagree with the idea that not much has changed since 4.5. There are tons of areas with slick stuff that was never available before, clustering is easier than ever, etc.. For contrast, where I work we use an app that costs us $7000 a year, and they do about as much work as I do in a day that whole year. I'm exaggerating, but not by as much as I'd like to be. I agree, value is a concept like relation and plurals/singular(s), somewhat gray by nature. But Dave hit it on the head, your time is the factor you should consider above initial cost. Of course, your time is relative, so, it is a complicated formula (or is that equation? bah ;). Who knows what the future holds. Educated guesses are the best we can get. cfdump has saved me hours alone tho, seconded. Or thirded. :-) Good luck making up your mind, this is a decision that will continue to effect (or affect?) you for years to come, it looks like. :denny ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239799 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54