RE: catching broken links?

2006-05-08 Thread Hugo Ahlenius
Maybe it would be possible to do this with the vspider? Or run a
scheduled httrack task?


--
Hugo Ahlenius

-
Hugo Ahlenius  E-Mail: [EMAIL PROTECTED]
Project OfficerPhone:  +46 8 412 1427
UNEP GRID-Arendal  Fax:+46 8 723 0348
Stockholm Office   Mobile: +46 733 467111
   WWW:   http://www.grida.no
   Skype:callto:fraxxinus
- 








 

| -Original Message-
| From: Ian Skinner [mailto:[EMAIL PROTECTED]
| Sent: Monday, May 08, 2006 19:45
| To: CF-Talk
| Subject: RE: catching broken links?
| 
| We have clients who are entering broken links into their site, then 
| their bosses write to us and complain about the dead links.  Of 
| course, we try to explain that this is not our doing, but it really 
| falls on deaf ears.  I'd love a nice little app that could spider all 
| links on the site and email the broken ones to the site admin to be 
| fixed.
| 
| 
| I would suspect it would not be too hard to link to one of the many 
| link checking sites with a scheduled task, have the output captured 
| and stored in some log directory for review by an admin type.
| 
| 
| --
| Ian Skinner
| Web Programmer
| BloodSource
| www.BloodSource.org
| Sacramento, CA
| 
| -
| | 1 |   |
| -  Binary Soduko
| |   |   |
| -
|  
| "C code. C code run. Run code run. Please!"
| - Cynthia Dunning
| 
| Confidentiality Notice:  This message including any 
| attachments is for the sole use of the intended
| recipient(s) and may contain confidential and privileged 
| information. Any unauthorized review, use, disclosure or 
| distribution is prohibited. If you are not the intended 
| recipient, please contact the sender and delete any copies of 
| this message. 
| 
| 
| 
| 
| 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239878
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Test object type

2006-05-08 Thread Phillip Holmes
[For some reason my original post didn't go through (I think because I
digitally sign my email). It had a typo anyway, so apologies if the original
finally comes through to the list.]

Exactly Right Dave.

Joelle,

In your base class, add something like this:




You can set the this.userType upon instantiation and it will know what type
it is for the life of the object.

Then you can also put in something like this in your base class to search
your object hierachy 
for it's userType or whatever else you'd like to find down the line.




var stObj = structNew();
if(len(trim(arguments.search)) GT 0) {
for(it in this) {
if(arguments.search IS it) {
stObj[it] = this[it];
return stObj ;
}
}
} else {
for(it in this){
stObj[it] = this[it];
}
}
return stObj;

 


Warmest Regards,
 
Phillip B. Holmes
http://phillipholmes.com

===>




-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 12:22 PM
To: CF-Talk
Subject: RE: Test object type

> So I assume that you use session.currentUser to hold EITHER a manager 
> object OR a worker object.
> 
> This may be a stupid question since I don't have a lot of oop 
> experience, but is it bad form to use the same variable name to store 
> two different types of objects?  That seems so create the problem you 
> have now, because you don't know what class you used to instantiate 
> that object.

Actually, being able to use one variable to store different objects can be
very useful, and is commonly done in OO languages. However, these tend not
to be just any two different objects, but objects that either inherit from
the same base class or implement the same interface. For example, you might
have a bunch of objects that are sortable. You might write a single
interface, ISortable, then write functionality in each class to implement
how ISortable works for that specific object type. Then, if you have an
array of objects, all of which implement ISortable, you could sort them
without worrying about what kind of objects they are exactly.

This is a big deal in C# now, with the addition of generics - type-safe
collections of various kinds.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized instruction
at our training centers in Washington DC, Atlanta, Chicago, Baltimore,
Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239877
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Parsing non-standard XML

2006-05-08 Thread Andrew Spear
Great idea Mike! Turned out to be a pretty elegant solution. Here's what I did 
to make it work...

#myxml#")>





>According to XMLSpy, this is a well-formed document until you add
>multiple  nodes.
>

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239876
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Parsing non-standard XML

2006-05-08 Thread Dawson, Michael
According to XMLSpy, this is a well-formed document until you add
multiple  nodes.

So, when you read this file into a variable, you should be able to just
add a new top-level node that encompasses the multiple  nodes.
Then, you should be able to parse the XML file into an actual XML object
in ColdFusion.

That should make everything fine, from what I can tell.

Two hints:
1. Always use CFDUMP when in doubt.
2. Multiple tags, at the same level, such as , will result in
an array over which you can loop.  (Again, refer to CFDUMP to see the
structure.)

M!ke 

-Original Message-
From: Andrew Spear [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 8:43 PM
To: CF-Talk
Subject: Parsing non-standard XML

I'm trying to parse a file for a school district that is supposed to be
XML, but it's not well-formed.  Does anyone here have experience parsing
files like this?  The format is something like this:



 xxx 
 xxx 
  
  


 Chapter 34 Reading Quiz   5  
asdfasdf  
6,5,14,38,5,5,15,38,5   89.9   B+
12345  
7,5,14,47,6,5,15,40,5   98.6   A+
  

And there are muliple top-level  nodes in each file.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239875
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Parsing non-standard XML

2006-05-08 Thread Andrew Spear
I'm trying to parse a file for a school district that is supposed to be XML, 
but it's not well-formed.  Does anyone here have experience parsing files like 
this?  The format is something like this:



 xxx 
 xxx 
  
  


 Chapter 34 Reading Quiz 
 5 
  


 asdfasdf 
 6,5,14,38,5,5,15,38,5 
 89.9 
 B+ 


 12345 
 7,5,14,47,6,5,15,40,5 
 98.6 
 A+ 



And there are muliple top-level  nodes in each file.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239874
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Looping through Fields

2006-05-08 Thread Les Mizzell
Brad Wood wrote:
> The val() function returns an integer. Text cannot be converted to an
> integer and will output a 0.

Yup - that was the problem.

I don't need to be working 16 hours straight, huh? I start to forget 
what I'm doing...

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239873
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread James Holmes
With sandboxing and no cfobject (java) tag, this can be done with
reasonable safety.

On 5/9/06, Bryan Stevenson <[EMAIL PROTECTED]> wrote:

> > Especially as a lot of clients put their username/passwor dinto the
> > DSN , which means everyone else on the server can get into their database
> > anyway using CFQUERY.

> 2) If a client puts their user/pass in the DSN, it's their own damn 
> faultnot
> the ISP! (of course you'd still need the DSN to access anything via CFQUERY)

--
CFAJAX docs and other useful articles:
http://jr-holmes.coldfusionjournal.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239872
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Joel
Hi Guys,

The script you are after is
http://support.microsoft.com/kb/889696/en-us
(Run this script at your own risk, and pls test it on a dev server before
running on a prod server)

it only works on SQL 2000.

I don't think they is one for 2005, haven't had much time to play with 2005
yet.

By default guest is assigned to all the DB's hence everyone has access to
all the DB on the server if you have access via EM, pls remove Guest from
all DB's, now you will see only a list of DB's via EM and wont have access
to them.

I think they are two system DB's that you cant remove Guest from.

Russ what side effects have you come across from running the MS script
(hopefully I didn't read your post wrongly)?

If anyone can share any info about 2005, that would be great.

Joel

-Original Message-
From: Snake [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 9 May 2006 8:59 AM
To: CF-Talk
Subject: RE: Big SQL security hole at Crystaltech?

It is nothing to do with guest user, databases do not have this by default,
as stated, this is the known default behaviour of SQL server and EM and
Microsoft released a stored proc to update themaster table to stop users
seeing others users DB's. You can easily test this yourself, by creating a
new DB with a new user, then open EM and conenct to the server as that user.
Unless oyu have made efforts to modify your SQL server as mentioned, u will
see all databases.

Snake 

-Original Message-
From: Stephen Hait [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 22:52
To: CF-Talk
Subject: Re: Big SQL security hole at Crystaltech?

I think this occurs when databases have a user with the name of guest.
Databases without a user named guest should not have their objects or even
their database names exposed. If you have a user in your database named
guest, delete that user and your database should not be visible to others
thru EM. That's my understanding, anyway.

Regards,
Stephen

On 5/8/06, Matt Robertson <[EMAIL PROTECTED]> wrote:
> After signing onto a new client's SQL Server account, first on one
dedicated server and then another, I found I could not only see several
other databases belonging to other customers... I could click on the Tables
tab and see all of their tables.  Taking it a step further, I could
double-click on a table and pull up its table structure.  All of this is in
SQL Enterprise Manager.  They have two separate accounts and I could see
eight other databases that didn't belong to my client on one server and 9 on
the other.
>
> I could not modify the tables or view the data (I didn't even try to Drop
of course).
>
> Poking around a little more, I found I could view all of another db's
stored procedures!
>
> This prompted me to load up a second customer of mine, who also has a SQL
account at Crystaltech.  Same freaking story!
>
> Before I completely blow a gasket I wanted to confirm this is as big of a
screwup as I think it is.  There is an easy fix for this right?  I fired up
another client and, while I can see other existing db's, if I try and click
on anything I get a refusal (error 916.  not an authorized user).
>
> Anyone else with a Crystaltech account... Can you chime in here?  Do you
see the same things I do?
>
> 





~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239871
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: ASP.Net book for CF programmer

2006-05-08 Thread Andy Allan
Our Development/Staging/QA/whatever-you-want-to-call-it mirrors
Production exactly.

CF settings, JVM settings, OS settings, Apache settings. It has to.
(OK you can get away with the odd discrepency).

Now true, we won't have external users hitting this environment, but
we still have to load test it by simulating X number of users, etc so
we are still creating the millions of visitors and thousands of
sessions etc that you're on about. And I'm assuming this is what
Jochem is on about???

Of course, if we're all on about the workstation I develop on before
it goes to Dev/Staging/whatever then fair enough, it is night and day.

Andy

On 08/05/06, Snake <[EMAIL PROTECTED]> wrote:
> To tune the server and CF for high usage, multiple sites, large amounts of
> traffic, lots of memory usage, security etc.
>
> A development server will happily run with CF installed with the default
> settings as you will not be running hundreds of sites with millions of
> visitors, nor will you be generating thousands of sessions or client
> variables, or cached queries, nor will you be sharing the server with other
> customer and have to restrict certain things.
> Aside from CF there are of course the windows/IIS configuration differences,
> the security policies...
>
> The difference is night and day
>
> Russ
>
> -Original Message-
> From: Jochem van Dieten [mailto:[EMAIL PROTECTED]
> Sent: 08 May 2006 19:14
> To: CF-Talk
> Subject: Re: ASP.Net book for CF programmer
>
> Snake wrote:
> > Like everything.
> > There is a big difference to hosting a production server with hundreds
> > of sites on it and millions of hits per day and running a development
> > server with 1 developer on it and no traffic.
>
> There is indeed a big difference in what you must do (like make
> backups) and especially in what you must not do (like run ET).
> But you said there was a lot more to *learn* to run a server.
> Isn't your development environment a close approximation of your production
> environment? So what do you need to learn to run a server in production that
> you do not need to learn in a development environment?
>
> Jochem
>
>
>
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239870
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Bryan Stevenson
> Well as I have all our servers locked down I can't actually check to see how
> far you can get with the default configuration.
> I know you can see everyone elses databases, and I'm sure you can also open
> the database and view the tables.
> Just because you cannot do this at CFD, does not mean it is not the default,
> it could simply mean that CFD have done something different.
> If you want to know why CT haven't done the same, you will need to ask them,
> but I would presume they wimply don't know how or don't care.
> At the end of the day, a shared SQL server cannot be considered secure
> anyway. Especially as a lot of clients put their username/passwor dinto the
> DSN , which means everyone else on the server can get into their database
> anyway using CFQUERY.

1) Going with the "default" is no excuse for an ISP when it comes to security 
(if that's what has happend)

2) If a client puts their user/pass in the DSN, it's their own damn 
faultnot 
the ISP! (of course you'd still need the DSN to access anything via CFQUERY)

Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
phone: 250.480.0642
fax: 250.480.1264
cell: 250.920.8830
e-mail: [EMAIL PROTECTED]
web: www.electricedgesystems.com 


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239869
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Snake
It is nothing to do with guest user, databases do not have this by default,
as stated, this is the known default behaviour of SQL server and EM and
Microsoft released a stored proc to update themaster table to stop users
seeing others users DB's. You can easily test this yourself, by creating a
new DB with a new user, then open EM and conenct to the server as that user.
Unless oyu have made efforts to modify your SQL server as mentioned, u will
see all databases.

Snake 

-Original Message-
From: Stephen Hait [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 22:52
To: CF-Talk
Subject: Re: Big SQL security hole at Crystaltech?

I think this occurs when databases have a user with the name of guest.
Databases without a user named guest should not have their objects or even
their database names exposed. If you have a user in your database named
guest, delete that user and your database should not be visible to others
thru EM. That's my understanding, anyway.

Regards,
Stephen

On 5/8/06, Matt Robertson <[EMAIL PROTECTED]> wrote:
> After signing onto a new client's SQL Server account, first on one
dedicated server and then another, I found I could not only see several
other databases belonging to other customers... I could click on the Tables
tab and see all of their tables.  Taking it a step further, I could
double-click on a table and pull up its table structure.  All of this is in
SQL Enterprise Manager.  They have two separate accounts and I could see
eight other databases that didn't belong to my client on one server and 9 on
the other.
>
> I could not modify the tables or view the data (I didn't even try to Drop
of course).
>
> Poking around a little more, I found I could view all of another db's
stored procedures!
>
> This prompted me to load up a second customer of mine, who also has a SQL
account at Crystaltech.  Same freaking story!
>
> Before I completely blow a gasket I wanted to confirm this is as big of a
screwup as I think it is.  There is an easy fix for this right?  I fired up
another client and, while I can see other existing db's, if I try and click
on anything I get a refusal (error 916.  not an authorized user).
>
> Anyone else with a Crystaltech account... Can you chime in here?  Do you
see the same things I do?
>
> 



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239868
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Snake
Well as I have all our servers locked down I can't actually check to see how
far you can get with the default configuration.
I know you can see everyone elses databases, and I'm sure you can also open
the database and view the tables. 
Just because you cannot do this at CFD, does not mean it is not the default,
it could simply mean that CFD have done something different.
If you want to know why CT haven't done the same, you will need to ask them,
but I would presume they wimply don't know how or don't care.
At the end of the day, a shared SQL server cannot be considered secure
anyway. Especially as a lot of clients put their username/passwor dinto the
DSN , which means everyone else on the server can get into their database
anyway using CFQUERY.

-
snake
-Original Message-
From: Rey Bango [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 19:44
To: CF-Talk
Subject: Re: Big SQL security hole at Crystaltech?

Sorry Snake but this isn't correct. Seeing the DB names in EM is one thing.
Being able to get down to the object level (tables, stored procs, or views)
is not the norm. I just signed into my shared CFDynamics DB server and can
see a boatload of other DBs but I can't see any of their tables or
additional objects. If CFD can do it, then I don't see why CT can't.

Rey...
http://www.reybango.com

Snake wrote:
> This is not a security hole at crystatech, it is simply how enterprise 
> manager/sql server works.
> It does not restrict you from  viewing  other databases, but you 
> cannot do anything with them if your user does not have access.
> 
> There is a modfication you can make to the master database SP's to 
> change this behaviour, but CT obviously don't know about that, and it 
> has been known to cause other issues if you do it anyway.
> 
> --
> Snake
> 
> -Original Message-
> From: Matt Robertson [mailto:[EMAIL PROTECTED]
> Sent: 08 May 2006 17:58
> To: CF-Talk
> Subject: Big SQL security hole at Crystaltech?
> 
> After signing onto a new client's SQL Server account, first on one 
> dedicated server and then another, I found I could not only see 
> several other databases belonging to other customers... I could click 
> on the Tables tab and see all of their tables.  Taking it a step 
> further, I could double-click on a table and pull up its table 
> structure.  All of this is in SQL Enterprise Manager.  They have two 
> separate accounts and I could see eight other databases that didn't 
> belong to my client on one server and 9 on the other.
> 
> I could not modify the tables or view the data (I didn't even try to 
> Drop of course).
> 
> Poking around a little more, I found I could view all of another db's 
> stored procedures!
> 
> This prompted me to load up a second customer of mine, who also has a 
> SQL account at Crystaltech.  Same freaking story!
> 
> Before I completely blow a gasket I wanted to confirm this is as big 
> of a screwup as I think it is.  There is an easy fix for this right?  
> I fired up another client and, while I can see other existing db's, if 
> I try and click on anything I get a refusal (error 916.  not an authorized
user).
> 
> Anyone else with a Crystaltech account... Can you chime in here?  Do 
> you see the same things I do?
> 
> 
> 
> 



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239867
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ASP.Net book for CF programmer

2006-05-08 Thread Snake
To tune the server and CF for high usage, multiple sites, large amounts of
traffic, lots of memory usage, security etc.

A development server will happily run with CF installed with the default
settings as you will not be running hundreds of sites with millions of
visitors, nor will you be generating thousands of sessions or client
variables, or cached queries, nor will you be sharing the server with other
customer and have to restrict certain things.
Aside from CF there are of course the windows/IIS configuration differences,
the security policies...

The difference is night and day

Russ

-Original Message-
From: Jochem van Dieten [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 19:14
To: CF-Talk
Subject: Re: ASP.Net book for CF programmer

Snake wrote:
> Like everything.
> There is a big difference to hosting a production server with hundreds 
> of sites on it and millions of hits per day and running a development 
> server with 1 developer on it and no traffic.

There is indeed a big difference in what you must do (like make
backups) and especially in what you must not do (like run ET). 
But you said there was a lot more to *learn* to run a server. 
Isn't your development environment a close approximation of your production
environment? So what do you need to learn to run a server in production that
you do not need to learn in a development environment?

Jochem



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239866
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Better Way to Query?

2006-05-08 Thread Hua Wei
You may want to try
GROUP BY client.id, client.company 
Instead of GROUP BY company

-Original Message-
From: Eric J. Hoffman [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 3:50 PM
To: CF-Talk
Subject: Better Way to Query?

Not getting good results from this:

SELECT COUNT (customer_orders.corder_id) as TOTOT,
client.company
FROM 
customer_orders 
JOIN
customer_orders_prod on customer_orders.corder_id = 
customer_orders_prod.order_id
JOIN
inventory on customer_orders_prod.product_id = 
inventory.service_id 
JOIN client on inventory.client_id = client.id

WHERE customer_orders.orderdate BETWEEN #createODBCDate(start9)# AND 
#createODBCDate(DateAdd('D', 1, end9))#
and corder_active = 1
GROUP BY company


Each inventory item is tagged with a client ID.  There is the order table, 
which is the summary, and the orders_prod table which is all the line items of 
inventory.

My need is a report of orders by client_id.

This query seems to give me more than if I just ran the total of orders.
I only need to get one item from the order items to determine the client 
company.

This shows me maybe 14,000+ for one client, when I know the total orders to be 
12,000+.

Thanks!!



Eric J. Hoffman
Managing Partner
2081 Industrial Blvd
StillwaterMN55082
mail: [EMAIL PROTECTED]
www: http://www.ejhassociates.com
tel: 651.717.4105
fax: 651.717.4115
mob: 651.245.2717



This message contains confidential information and is intended only for [EMAIL 
PROTECTED] If you are not cf-talk@houseoffusion.com you should not disseminate, 
distribute or copy this e-mail. Please notify [EMAIL PROTECTED] immediately by 
e-mail if you have received this e-mail by mistake and delete this e-mail from 
your system. E-mail transmission cannot be guaranteed to be secure or 
error-free as information could be intercepted, corrupted, lost, destroyed, 
arrive late or incomplete, or contain viruses. Eric J. Hoffman therefore does 
not accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required please request a hard-copy version.




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239865
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Looping through Fields

2006-05-08 Thread Brad Wood
The val() function returns an integer. Text cannot be converted to an
integer and will output a 0.

~Brad

-Original Message-
From: Les Mizzell [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 4:44 PM
To: CF-Talk
Subject: Looping through Fields

When testing, form is sending...
strNAME1, numCOST1 (test values Bob, 300)
strNAME2, numCOST2 (test values John, 400)
strNAME3, numCOST3 (test values Robert, 500)
.and however many total there my be as defined by
#form.intTravelerCount#

I've done a cfdump and confirmed that the fields are getting to the 
processing page, but when I try to loop through them like:



#Val(form["strName" & i])#  - $#Val(form["numCost" & i])#.00


I'm getting:

0, 300
0, 400
0, 500

Why the heck am I getting "0" for the strName. Should be showing the 
contents of the field, strName1, which is correct in the cfdump.



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239864
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Stephen Hait
I think this occurs when databases have a user with the name of guest.
Databases without a user named guest should not have their objects or
even their database names exposed. If you have a user in your database
named guest, delete that user and your database should not be visible
to others thru EM. That's my understanding, anyway.

Regards,
Stephen

On 5/8/06, Matt Robertson <[EMAIL PROTECTED]> wrote:
> After signing onto a new client's SQL Server account, first on one dedicated 
> server and then another, I found I could not only see several other databases 
> belonging to other customers... I could click on the Tables tab and see all 
> of their tables.  Taking it a step further, I could double-click on a table 
> and pull up its table structure.  All of this is in SQL Enterprise Manager.  
> They have two separate accounts and I could see eight other databases that 
> didn't belong to my client on one server and 9 on the other.
>
> I could not modify the tables or view the data (I didn't even try to Drop of 
> course).
>
> Poking around a little more, I found I could view all of another db's stored 
> procedures!
>
> This prompted me to load up a second customer of mine, who also has a SQL 
> account at Crystaltech.  Same freaking story!
>
> Before I completely blow a gasket I wanted to confirm this is as big of a 
> screwup as I think it is.  There is an easy fix for this right?  I fired up 
> another client and, while I can see other existing db's, if I try and click 
> on anything I get a refusal (error 916.  not an authorized user).
>
> Anyone else with a Crystaltech account... Can you chime in here?  Do you see 
> the same things I do?
>
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239863
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Looping through Fields

2006-05-08 Thread Les Mizzell
When testing, form is sending...
strNAME1, numCOST1 (test values Bob, 300)
strNAME2, numCOST2 (test values John, 400)
strNAME3, numCOST3 (test values Robert, 500)
and however many total there my be as defined by #form.intTravelerCount#

I've done a cfdump and confirmed that the fields are getting to the 
processing page, but when I try to loop through them like:



#Val(form["strName" & i])#  - $#Val(form["numCost" & i])#.00


I'm getting:

0, 300
0, 400
0, 500

Why the heck am I getting "0" for the strName. Should be showing the 
contents of the field, strName1, which is correct in the cfdump.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239862
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: session vars and cookies

2006-05-08 Thread Jochem van Dieten
Crow T. Robot wrote:
> Yea, other than that.  :)
> 
> That would be an interesting site, though.  Boatloads of fun to maintain!

Not hard at all, just do it client-side: write a small javascript 
function and hook it to the onclick event of every anchor. Won't 
catch those without Javascript, but it is surprisingly easy to 
reach 95% of your visitors with that.

Jochem


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239861
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: session vars and cookies

2006-05-08 Thread Crow T. Robot
Yea, other than that.  :)

That would be an interesting site, though.  Boatloads of fun to maintain!

Jochem van Dieten wrote:
> Ray Champagne wrote:
>> Is there any other way to use session variables without setting client 
>> cookies or passing the CFID/CFTOKEN in the URL for every page?
> 
> Pass themn through a form :)
> 
> Jochem
> 
> 
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239860
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: session vars and cookies

2006-05-08 Thread Jochem van Dieten
Ray Champagne wrote:
> Is there any other way to use session variables without setting client 
> cookies or passing the CFID/CFTOKEN in the URL for every page?

Pass themn through a form :)

Jochem


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239859
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: session vars and cookies

2006-05-08 Thread Crow T. Robot
Yea, and I should mention that there is no chance of being able to use 
J2EE vars on the server, either.

Charlie Griefer wrote:
> i want to say no.
> 
> but invariably somebody's going to come along with some hoity toity
> java method that passes them thru the ether.
> 
> we'll see :)
> 
> On 5/8/06, Ray Champagne <[EMAIL PROTECTED]> wrote:
>> Is there any other way to use session variables without setting client
>> cookies or passing the CFID/CFTOKEN in the URL for every page?
>> --
>>
>> Ray
>>
>>
>>
> 
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239858
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: session vars and cookies

2006-05-08 Thread Dave Watts
> Is there any other way to use session variables without 
> setting client cookies or passing the CFID/CFTOKEN in the URL 
> for every page?

No, either one or the other is required. Well, theoretically, you could
ensure that only forms are used for page navigation, and pass it via HTTP
POST, but yecch. There has to be some way to associate the browser with the
session, so the browser needs to pass a token to the server on each page
request.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239857
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: session vars and cookies

2006-05-08 Thread Charlie Griefer
i want to say no.

but invariably somebody's going to come along with some hoity toity
java method that passes them thru the ether.

we'll see :)

On 5/8/06, Ray Champagne <[EMAIL PROTECTED]> wrote:
> Is there any other way to use session variables without setting client
> cookies or passing the CFID/CFTOKEN in the URL for every page?
> --
>
> Ray
>
>
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239856
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


session vars and cookies

2006-05-08 Thread Ray Champagne
Is there any other way to use session variables without setting client 
cookies or passing the CFID/CFTOKEN in the URL for every page?
-- 

Ray


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239855
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


test ignore

2006-05-08 Thread Christopher . Lomvardias
test

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239854
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Simple Cart?

2006-05-08 Thread Emmet McGovern
I need to setup a simple cart.  Very similar to the cart cfmsource is
using.. http://www.cfmsource.com/listitems.cfm?contentnbr=46 

Mainly I'm looking for item list/quantity ordering.  I don't need pictures.
Category support is needed however.  I'll probably integrate with
authorize.net but I can integrate that if it's not supported.

Anyone have any suggestions?   I have to have it up by tomorrow.  :)

Emmet



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239853
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Better Way to Query?

2006-05-08 Thread Jim Wright
Just throw a DISTINCT in the count, and you should be ok...

> SELECT COUNT (DISTINCT customer_orders.corder_id) as TOTOT,
> client.company


--
Jim Wright
Wright Business Solutions
[EMAIL PROTECTED]
919-417-2257

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239852
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Better Way to Query?

2006-05-08 Thread Eric J. Hoffman
Not getting good results from this:

SELECT COUNT (customer_orders.corder_id) as TOTOT,
client.company
FROM 
customer_orders 
JOIN
customer_orders_prod on customer_orders.corder_id =
customer_orders_prod.order_id
JOIN
inventory on customer_orders_prod.product_id =
inventory.service_id 
JOIN client on inventory.client_id = client.id

WHERE customer_orders.orderdate BETWEEN #createODBCDate(start9)#
AND #createODBCDate(DateAdd('D', 1, end9))#
and corder_active = 1
GROUP BY company


Each inventory item is tagged with a client ID.  There is the order
table, which is the summary, and the orders_prod table which is all the
line items of inventory.

My need is a report of orders by client_id.

This query seems to give me more than if I just ran the total of orders.
I only need to get one item from the order items to determine the client
company.

This shows me maybe 14,000+ for one client, when I know the total orders
to be 12,000+.

Thanks!!



Eric J. Hoffman
Managing Partner
2081 Industrial Blvd
StillwaterMN55082
mail: [EMAIL PROTECTED]
www: http://www.ejhassociates.com
tel: 651.717.4105
fax: 651.717.4115
mob: 651.245.2717



This message contains confidential information and is intended only for [EMAIL 
PROTECTED] If you are not cf-talk@houseoffusion.com you should not disseminate, 
distribute or copy this e-mail. Please notify [EMAIL PROTECTED] immediately by 
e-mail if you have received this e-mail by mistake and delete this e-mail from 
your system. E-mail transmission cannot be guaranteed to be secure or 
error-free as information could be intercepted, corrupted, lost, destroyed, 
arrive late or incomplete, or contain viruses. Eric J. Hoffman therefore does 
not accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required please request a hard-copy version.


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239851
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: URL Structure

2006-05-08 Thread Ian Skinner
The problem I have with this is I'm not the one putting these links on the 
page.  There are users who uses a content management system that enters in the 
content for the website.  I want to avoid making the users use ColdFusion code 
b/c they don't understand it and it will complicate things for them.  I wanted 
to this in such a way that all the ColdFusion code is on the disclaimer page 
(which I control) and the referring page (content page w/ the link) is just 
plain html that is written for them thru the content management system they 
use.  Is there another way of doing this?  Thanks for your help though.

> Ok, this is what you want to do.  I ran this test code and I get all
> your second level url variables.
> 
> 
> 
>  href="http:url.cfm?destination=#urlEncodedFormat('http://go.reuters.
> com/newsArticle.
jhtml> ?type=healthNews&storyID=12037965&src=eDialog/GetContent')#">Test
jhtml> 
> 


I do not clearly understand your requirements.  How is the sample link being 
built?


For instance lets say a user clicked on a link on my page that went to: 

http://go.reuters.com/newsArticle.jhtml?type=healthNews&storyID=12037965&src=eDialog/GetContent

My page would actually have this as the link 
http://someurlhere.com/disclaimer.cfm?destination=http://go.reuters.com/newsArticle.jhtml?type=healthNews&storyID=12037965&src=eDialog/GetContent
http://www.houseoffusion.com/lists.cfm/link=i:4:239850
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Looping multiple dates...

2006-05-08 Thread Richard Dillman
That helped a ton.  I was haveing SQL Writers Block  lol.

On 5/7/06, Jochem van Dieten <[EMAIL PROTECTED]> wrote:
>
> Richard Dillman wrote:
> >
> > Children are featured in various special publications at least 3 of
> which i
> > need to track their appearances.  Ill need to output
> > the publication and the month(s) they appeared
> > Months willl probably not be sequential.
> > Display 12 months in a row with the year at the end.
> > CSS to show a Month green if it was a Feature Month.
> > Loop through all years sence 2000 to the present Month.
> >  1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 |  2004
> > 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 |  2005
> > 1 | 2 | 3 | 4 | 5 |   | 2006
> > 
> >
> > How would you store this in SQL 2000 if each group of Month/years is to
> be
> > displayed per record and childrens records will reach 2000 this month?
>
> In SQL-2003:
>
> CREATE TABLE publications (
>   publicationID INTEGER PRIMARY KEY,
>   publicationName VARCHAR
>   );
> CREATE TABLE children (
>   childID INTEGER PRIMARY KEY,
>   childName VARCHAR,
>   etc);
> CREATE TABLE features (
>   featureID INTEGER PRIMARY KEY,
>   childID INTEGER REFERENCES children,
>   publicationID INTEGER REFERENCES publications,
>   featureDate DATE,
>   etc);
> CREATE TABLE featurePeriod (
>   featureYear INTEGER,
>   featureMonth INTEGER
>   );
> INSERT INTO featureMonths VALUES ((2000,1),(2000,2),(2000,3)etc.)
>
>
> SELECT
>   fp.featureYear,
>   fp.featureMonth,
>   f.childID
> FROM
>   featurePeriod fp Left JOIN
>   (
> SELECT featureDate, childID
> FROM features
> WHERE
>   childID = 
>   AND
>   publicationID = 
>   ) f ON
>   (
> EXTRACT(YEAR FROM f.featureDate) = fp.featureYear
> AND
> EXTRACT(MONTH FROM f.featureDate) = fp.featureMonth
>   )
> ORDER BY
>   fp.featureYear,
>   p.featureMonth
>
> Jochem
>
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239849
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Test object type

2006-05-08 Thread Dave Watts
> Ok, that makes sense. So is there an instanceof method in CF 
> or something similar to tell you what class was used to 
> create your object.

You can use GetMetaData() to find this out.

> Also, can you create an interface with CFC's, and then 
> implement that interface with another class? (Like other OOP 
> languages)

No, CF doesn't support interfaces. It does support inheritance, however,
which can involve the same issues.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239848
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Rey Bango
Sorry Snake but this isn't correct. Seeing the DB names in EM is one 
thing. Being able to get down to the object level (tables, stored procs, 
or views) is not the norm. I just signed into my shared CFDynamics DB 
server and can see a boatload of other DBs but I can't see any of their 
tables or additional objects. If CFD can do it, then I don't see why CT 
can't.

Rey...
http://www.reybango.com

Snake wrote:
> This is not a security hole at crystatech, it is simply how enterprise
> manager/sql server works.
> It does not restrict you from  viewing  other databases, but you cannot do
> anything with them if your user does not have access.
> 
> There is a modfication you can make to the master database SP's to change
> this behaviour, but CT obviously don't know about that, and it has been
> known to cause other issues if you do it anyway.
> 
> --
> Snake
> 
> -Original Message-
> From: Matt Robertson [mailto:[EMAIL PROTECTED] 
> Sent: 08 May 2006 17:58
> To: CF-Talk
> Subject: Big SQL security hole at Crystaltech?
> 
> After signing onto a new client's SQL Server account, first on one dedicated
> server and then another, I found I could not only see several other
> databases belonging to other customers... I could click on the Tables tab
> and see all of their tables.  Taking it a step further, I could double-click
> on a table and pull up its table structure.  All of this is in SQL
> Enterprise Manager.  They have two separate accounts and I could see eight
> other databases that didn't belong to my client on one server and 9 on the
> other.
> 
> I could not modify the tables or view the data (I didn't even try to Drop of
> course).
> 
> Poking around a little more, I found I could view all of another db's stored
> procedures!
> 
> This prompted me to load up a second customer of mine, who also has a SQL
> account at Crystaltech.  Same freaking story!
> 
> Before I completely blow a gasket I wanted to confirm this is as big of a
> screwup as I think it is.  There is an easy fix for this right?  I fired up
> another client and, while I can see other existing db's, if I try and click
> on anything I get a refusal (error 916.  not an authorized user).
> 
> Anyone else with a Crystaltech account... Can you chime in here?  Do you see
> the same things I do?
> 
> 
> 
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239847
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: URL Structure

2006-05-08 Thread Tuan Tran
The problem I have with this is I'm not the one putting these links on the 
page.  There are users who uses a content managment system that enters in the 
content for the website.  I want to avoid making the users use Coldfusion code 
b/c they don't understand it and it will complicate things for them.  I wanted 
to this in such a way that all the coldfusion code is on the disclaimer page 
(which I control) and the referring page (content page w/ the link) is just 
plain html that is written for them thru the content managment system they use. 
 Is there another way of doing this?  Thanks for your help though.

> Ok, this is what you want to do.  I ran this test code and I get all 
> your second level url variables.
> 
> 
> 
> http://go.reuters.
> com/newsArticle.
jhtml> ?type=healthNews&storyID=12037965&src=eDialog/GetContent')#">Test
> 
> 
> 
> --
> Ian Skinner
> Web Programmer
> BloodSource
> www.BloodSource.org
> Sacramento, CA
> 
> -
> | 1 |   |
> -  Binary Soduko
> |   |   |
> -
 
> 
> "C code. C code run. Run code run. Please!"
> - Cynthia Dunning
> 
> Confidentiality Notice:  This message including any
> attachments is for the sole use of the intended
> recipient(s) and may contain confidential and privileged
> information. Any unauthorized review, use, disclosure or
> distribution is prohibited. If you are not the
> intended recipient, please contact the sender and
> delete any copies of this message. 
> 
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239846
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: ASP.Net book for CF programmer

2006-05-08 Thread Jochem van Dieten
Snake wrote:
> Like everything.
> There is a big difference to hosting a production server with hundreds of
> sites on it and millions of hits per day and running a development server
> with 1 developer on it and no traffic.

There is indeed a big difference in what you must do (like make 
backups) and especially in what you must not do (like run ET). 
But you said there was a lot more to *learn* to run a server. 
Isn't your development environment a close approximation of your 
production environment? So what do you need to learn to run a 
server in production that you do not need to learn in a 
development environment?

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239845
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Matt Robertson
Dave Watts wrote:
>that's
>probably not the worst thing going on in a shared hosting environment.

Agreed.  Luckily these are both dedicated servers.  Only the SQL server 
component is shared.  I was already lobbying for a dedicated box with MSDE/SQL 
Express running on it.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239844
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54



Re: catching broken links?

2006-05-08 Thread One User
I have a pure CF solution. email me if interested.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239843
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Jochem van Dieten
Matt Robertson wrote:
> 
> Before I completely blow a gasket I wanted to confirm this is as big of a 
> screwup as I think it is.  There is an easy fix for this right?

The fix should be under REVOKE in the manual.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239842
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: catching broken links?

2006-05-08 Thread Ian Skinner
We have clients who are entering broken links into their site, then 
their bosses write to us and complain about the dead links.  Of course, 
we try to explain that this is not our doing, but it really falls on 
deaf ears.  I'd love a nice little app that could spider all links on 
the site and email the broken ones to the site admin to be fixed.


I would suspect it would not be too hard to link to one of the many link 
checking sites with a scheduled task, have the output captured and stored in 
some log directory for review by an admin type.


--
Ian Skinner
Web Programmer
BloodSource
www.BloodSource.org
Sacramento, CA

-
| 1 |   |
-  Binary Soduko
|   |   |
-
 
"C code. C code run. Run code run. Please!"
- Cynthia Dunning

Confidentiality Notice:  This message including any
attachments is for the sole use of the intended
recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the
intended recipient, please contact the sender and
delete any copies of this message. 




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239841
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Test object type

2006-05-08 Thread Ian Skinner
Also, can you create an interface with CFC's, and then implement that interface 
with another class?  (Like other OOP languages)

~Brad

No not directly.  See the writings of Hal Helms and others on why this is not 
so good for CF.


--
Ian Skinner
Web Programmer
BloodSource
www.BloodSource.org
Sacramento, CA

-
| 1 |   |
-  Binary Soduko
|   |   |
-
 
"C code. C code run. Run code run. Please!"
- Cynthia Dunning

Confidentiality Notice:  This message including any
attachments is for the sole use of the intended
recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the
intended recipient, please contact the sender and
delete any copies of this message. 




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239840
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Coldfusion with Godaddy

2006-05-08 Thread John Rossi
I think they probably never really got the point of my initial support
request. I haven't tried cfstoredproc yet because none of my clients sites
use it, but there is definitely a problem with cfqueryparam, and sql server
on my account at least. but The following query


SELECT *
FROM tblSites
WHERE intSiteID=


Fails with the following error

Error Executing Database Query.  
[Macromedia][SQLServer JDBC Driver][SQLServer]EXECUTE permission denied on
object 'sp_prepexec', database 'master', owner 'dbo'.  
  
The error occurred in : line 34
 
32 :SELECT *
33 :FROM tblSites
34 :WHERE intSiteID=
35 : 
36 : 
 
Its clearly a configuration issue on their end, but I am sure cfstoredproc
will probably also fail. Like I said in an earlier message, I am going to
submit another tech support request about it and reference this thread along
with some of the other blogs about cfqueryparam, and Sean Cornfield's blog
on their ColdFusion hosting in general. 

John


-Original Message-
From: Nathan Strutz [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 1:11 PM
To: CF-Talk
Subject: Re: Coldfusion with Godaddy


They probably meant (or should have said) that GoDaddy don't support
, which does run sp_prepexec for each result specified. It's
pretty inefficient, but I think there is probably no other way to do
multiple result sets through JDBC. This is the exact reason why I don't like
and don't use cfstoredproc. It also seems like database storage client
variables may do something like that... I don't exactly remember.

-nathan strutz
http://www.dopefly.com/


On 5/5/06, Mark A Kruger <[EMAIL PROTECTED]> wrote:
>
> I second that John,
>
> They are misinformed. I suspect their information came from a 
> misconfigured DSN setting. For example, If I set up a user "bob" and 
> didn't change "default database"  for him, then I set up a JDBC 
> connection without specifying the database I wanted to connect to - it 
> would try to connect to
> master (which is the default default database for any new user), but it
> would fail because master doesn't allow direct manipulation of data.
> Instead
> it comes with a set of SP's (sort of a like an API) for making any
> changes.
>
> I would be very surprised if their information was accurate. More to 
> the point, they are trading down when they deny cfqueryparam - not 
> trading up. A site that doesn't user cfqueryparam is going to be less 
> secure, slower, and
> will not be able to leverage the DB like it should.
>
> -mark
>
>
> -Original Message-
> From: Snake [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 05, 2006 11:57 AM
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
> That's interesting, we have no such problem on our SQL servers, 
> CFQUERYPARAM works fine, and every user only has access to their own 
> database.
>
>
> -Original Message-
> From: John Rossi [mailto:[EMAIL PROTECTED]
> Sent: 05 May 2006 17:47
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
> That's not entirely true. They do not, at least they told me they 
> can't allow me to use cfqueryparam with sql server in shared hosting.
>
> Here's the final response I got from them.
>
> After further researching the issue(s) at hand, we have determined the
> following:
>
> The line "EXECUTE permission denied on object 'sp_prepexec', database 
> 'master', owner 'dbo'." shows that the database is attempting to work 
> with the master database of the server. Due to this, the cfqueryparam 
> feature will not work within our shared hosting environment SQL 
> (though it should work with a locally controlled Access database). We 
> apologize for any inconvience this may cause in regards to your site 
> deployment. If you have absolute need of this feature, you may wish to 
> consider our Virtual Dedicated or Dedicated server solutions. Bear in 
> mind that these are not managed servers. Previous server 
> administration experience is recommended should you opt to move to one 
> of these solutions.
>
> Should you require further assistance on this or any other issue, 
> don't hesitate to contact us any time of the day or night at (480) 
> 505-8877. Or, if you prefer email, you can send your questions or 
> comments to [EMAIL PROTECTED]
>
> Sincerely,
> Drew C.
> Advanced Hosting Support
>
> -Original Message-
> From: Brad Wood [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 05, 2006 12:37 PM
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
>
> They guy on the phone just told me that they support all tags out of 
> the box except cfexecute and cfregistry
>
> He also said that they will not install custom tags for you, but I can 
> still run it in my own directory, right?
>
> ~Brad
>
> -Original Message-
> From: Andy Matthews [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 05, 2006 11:31 AM
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
> I would think they would. They had a help section about Coldfusion 
> when they first released 

RE: Test object type

2006-05-08 Thread Brad Wood
Ok, that makes sense.  So is there an instanceof method in CF or
something similar to tell you what class was used to create your object.

Also, can you create an interface with CFC's, and then implement that
interface with another class?  (Like other OOP languages)

~Brad

-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 12:22 PM
To: CF-Talk
Subject: RE: Test object type

> So I assume that you use session.currentUser to hold EITHER a 
> manager object OR a worker object.  
> 
> This may be a stupid question since I don't have a lot of oop 
> experience, but is it bad form to use the same variable name 
> to store two different types of objects?  That seems so 
> create the problem you have now, because you don't know what 
> class you used to instantiate that object.

Actually, being able to use one variable to store different objects can
be
very useful, and is commonly done in OO languages. However, these tend
not
to be just any two different objects, but objects that either inherit
from
the same base class or implement the same interface. For example, you
might
have a bunch of objects that are sortable. You might write a single
interface, ISortable, then write functionality in each class to
implement
how ISortable works for that specific object type. Then, if you have an
array of objects, all of which implement ISortable, you could sort them
without worrying about what kind of objects they are exactly.

This is a big deal in C# now, with the addition of generics - type-safe
collections of various kinds. 


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239838
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


catching broken links?

2006-05-08 Thread Ray Champagne
Is there some automated way to report broken links in a client's site? 
It has to be automated, not like Xenu.  It also has to be able to run on 
a shared server.

We have clients who are entering broken links into their site, then 
their bosses write to us and complain about the dead links.  Of course, 
we try to explain that this is not our doing, but it really falls on 
deaf ears.  I'd love a nice little app that could spider all links on 
the site and email the broken ones to the site admin to be fixed.

Thanks,

Ray


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239837
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Snake
Yep, we have done the modification  so users cannot see others databases,
but most don't.

As I have mentioned b4, it's a tossup with shared hosting, if you want cheap
hosting and to be able to do what you like on the server without
restriction, then you have to accept the lack of security that comes with
it.
You can't have all tags enabled and open EM access to your databases, and
cheap as chips hosting and expect it to all be secure.

We (www.cfmxhosting.co.uk) opt for the secure route.
No EM access unless you have a static IP, and we then allow you through the
firewall.
No access to unsecure tags without a security sandbox
No CreateObject (java)

You get what you pay for at the end of the day.

--
Russ

 

-Original Message-
From: Bryan Stevenson [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 18:14
To: CF-Talk
Subject: Re: Big SQL security hole at Crystaltech?

Yes this can be solved (don't ask me how though).and yes that is a
pretty SERIOUS screw-up on their part.

The ISP I use does show you all other DBs on the shared server, but you
cannot connect to any of themso no seeing the tables and so on...just DB
namesso it is doable.

Cheers

Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
phone: 250.480.0642
fax: 250.480.1264
cell: 250.920.8830
e-mail: [EMAIL PROTECTED]
web: www.electricedgesystems.com 




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239836
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Dave Watts
> When it comes to MSSQL and EM I am strictly a user.  Don't 
> know much about the server's care and feeding.  With that out 
> of the way:
> 
> Are there any sort of consequences to doing this that might 
> make them not want to perform that action?  I certainly don't 
> miss not having this functionality on the other servers I 
> have access to.  Is this just a bonehead mistake or were they 
> trying to perserve some kind of functionality?

Not that I'm aware of, but without knowing what they're doing exactly I can
only speculate. If you can only view the database objects, though, that's
probably not the worst thing going on in a shared hosting environment.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239835
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Snake
This is not a security hole at crystatech, it is simply how enterprise
manager/sql server works.
It does not restrict you from  viewing  other databases, but you cannot do
anything with them if your user does not have access.

There is a modfication you can make to the master database SP's to change
this behaviour, but CT obviously don't know about that, and it has been
known to cause other issues if you do it anyway.

--
Snake

-Original Message-
From: Matt Robertson [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 17:58
To: CF-Talk
Subject: Big SQL security hole at Crystaltech?

After signing onto a new client's SQL Server account, first on one dedicated
server and then another, I found I could not only see several other
databases belonging to other customers... I could click on the Tables tab
and see all of their tables.  Taking it a step further, I could double-click
on a table and pull up its table structure.  All of this is in SQL
Enterprise Manager.  They have two separate accounts and I could see eight
other databases that didn't belong to my client on one server and 9 on the
other.

I could not modify the tables or view the data (I didn't even try to Drop of
course).

Poking around a little more, I found I could view all of another db's stored
procedures!

This prompted me to load up a second customer of mine, who also has a SQL
account at Crystaltech.  Same freaking story!

Before I completely blow a gasket I wanted to confirm this is as big of a
screwup as I think it is.  There is an easy fix for this right?  I fired up
another client and, while I can see other existing db's, if I try and click
on anything I get a refusal (error 916.  not an authorized user).

Anyone else with a Crystaltech account... Can you chime in here?  Do you see
the same things I do?



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239834
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Matt Robertson
Dave Watts wrote:
>This would require that their DBA revoke the "public" group
>role throughout the server, if I recall correctly.

When it comes to MSSQL and EM I am strictly a user.  Don't know much about the 
server's care and feeding.  With that out of the way:

Are there any sort of consequences to doing this that might make them not want 
to perform that action?  I certainly don't miss not having this functionality 
on the other servers I have access to.  Is this just a bonehead mistake or were 
they trying to perserve some kind of functionality?

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239833
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Scheduled tasks

2006-05-08 Thread Earl, George
3rd post, new subject line, haven't seen the first two come through . .
..

We have a request from someone who shares our server to create _80_
scheduled tasks for a reporting application. Each scheduled task would
create a single report and save it as an htm file so it doesn't have to
be created on the fly each time someone requests it. About 30 of these
tasks would be daily, another 30 would be weekly (all on the same day),
and the remaining 20 would be quarterly and yearly. 

Adding this many scheduled tasks is out of my comfort zone. 

What do you think?

I've suggested that they combine the dailies, weeklies, monthlies and
yearlies into four separate scheduled tasks. They don't like that idea.

Also, are there best practices for scheduling tasks through CF
Scheduler? 

Can you schedule multiple tasks to start at the same time and have them
fire and execute reliably? 

Is the number of tasks that can be scheduled to start simultaneously
limited only by the 'Limit simultaneous requests setting' in CF
Administrator?

We're still on CF5 on Win2K, migrating painfully slowly to CF7 on
Solaris . . .

Thanks!

George

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239832
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Jeff Fleitz
I have a client who uses Intermedia.net, and that is the way it works for
them. You can see the other databases in the EM, but can't access the
objects.

I don't think this is entirely correct. You should be able to see a list of
> other databases by default, but you should not be able to see objects
> within
> those databases. This would require that their DBA revoke the "public"
> group
> role throughout the server, if I recall correctly.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
>
>
--
v/r,

Jeff Fleitz


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239831
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Test object type

2006-05-08 Thread Dave Watts
> So I assume that you use session.currentUser to hold EITHER a 
> manager object OR a worker object.  
> 
> This may be a stupid question since I don't have a lot of oop 
> experience, but is it bad form to use the same variable name 
> to store two different types of objects?  That seems so 
> create the problem you have now, because you don't know what 
> class you used to instantiate that object.

Actually, being able to use one variable to store different objects can be
very useful, and is commonly done in OO languages. However, these tend not
to be just any two different objects, but objects that either inherit from
the same base class or implement the same interface. For example, you might
have a bunch of objects that are sortable. You might write a single
interface, ISortable, then write functionality in each class to implement
how ISortable works for that specific object type. Then, if you have an
array of objects, all of which implement ISortable, you could sort them
without worrying about what kind of objects they are exactly.

This is a big deal in C# now, with the addition of generics - type-safe
collections of various kinds.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239830
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Generic CF form handler

2006-05-08 Thread Matt Robertson
andy wrote:
>But what if you have a raxio button or a checkbox? How do you indicate if a
>field is required? How do you perform validation on fields of a certain type?

OK I get it.  Thats going to be fun.  When I did something similar I used 
standard html form fields.  Individual field validations/requirements and the 
accompanying error messages were fed in via a 2d array and validation was done 
against a regex server-side.  The composite error page consisted of an 
unordered list put into a variable via cfsavecontent.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239829
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Dave Watts
> We've had this conversation on this list before, and yes what 
> you saw is true. If I remember right, it's a weakness of SQL 
> Server, not CrystalTech.  Well, except for the fact that 
> Crystaltech allows remote connections using EM (a lot of 
> hosts don't allow this).  I also think someone posted a 
> method to turn this off, but I think it's at the client level 
> not the server.  So security wise, that's useless.  "Excuse 
> me, Mr. hacker.  Would you mind turning off the 'List all 
> servers' option?"

I don't think this is entirely correct. You should be able to see a list of
other databases by default, but you should not be able to see objects within
those databases. This would require that their DBA revoke the "public" group
role throughout the server, if I recall correctly.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239828
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Bryan Stevenson
Yes this can be solved (don't ask me how though).and yes that is a pretty 
SERIOUS screw-up on their part.

The ISP I use does show you all other DBs on the shared server, but you cannot 
connect to any of themso no seeing the tables and so on...just DB 
namesso it is doable.

Cheers

Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
phone: 250.480.0642
fax: 250.480.1264
cell: 250.920.8830
e-mail: [EMAIL PROTECTED]
web: www.electricedgesystems.com 


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239827
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Coldfusion with Godaddy

2006-05-08 Thread Nathan Strutz
They probably meant (or should have said) that GoDaddy don't support
, which does run sp_prepexec for each result specified. It's
pretty inefficient, but I think there is probably no other way to do
multiple result sets through JDBC. This is the exact reason why I don't like
and don't use cfstoredproc. It also seems like database storage client
variables may do something like that... I don't exactly remember.

-nathan strutz
http://www.dopefly.com/


On 5/5/06, Mark A Kruger <[EMAIL PROTECTED]> wrote:
>
> I second that John,
>
> They are misinformed. I suspect their information came from a
> misconfigured
> DSN setting. For example, If I set up a user "bob" and didn't change
> "default database"  for him, then I set up a JDBC connection without
> specifying the database I wanted to connect to - it would try to connect
> to
> master (which is the default default database for any new user), but it
> would fail because master doesn't allow direct manipulation of data.
> Instead
> it comes with a set of SP's (sort of a like an API) for making any
> changes.
>
> I would be very surprised if their information was accurate. More to the
> point, they are trading down when they deny cfqueryparam - not trading up.
> A
> site that doesn't user cfqueryparam is going to be less secure, slower,
> and
> will not be able to leverage the DB like it should.
>
> -mark
>
>
> -Original Message-
> From: Snake [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 05, 2006 11:57 AM
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
> That's interesting, we have no such problem on our SQL servers,
> CFQUERYPARAM
> works fine, and every user only has access to their own database.
>
>
> -Original Message-
> From: John Rossi [mailto:[EMAIL PROTECTED]
> Sent: 05 May 2006 17:47
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
> That's not entirely true. They do not, at least they told me they can't
> allow me to use cfqueryparam with sql server in shared hosting.
>
> Here's the final response I got from them.
>
> After further researching the issue(s) at hand, we have determined the
> following:
>
> The line "EXECUTE permission denied on object 'sp_prepexec', database
> 'master', owner 'dbo'." shows that the database is attempting to work with
> the master database of the server. Due to this, the cfqueryparam feature
> will not work within our shared hosting environment SQL (though it should
> work with a locally controlled Access database). We apologize for any
> inconvience this may cause in regards to your site deployment. If you have
> absolute need of this feature, you may wish to consider our Virtual
> Dedicated or Dedicated server solutions. Bear in mind that these are not
> managed servers. Previous server administration experience is recommended
> should you opt to move to one of these solutions.
>
> Should you require further assistance on this or any other issue, don't
> hesitate to contact us any time of the day or night at (480) 505-8877. Or,
> if you prefer email, you can send your questions or comments to
> [EMAIL PROTECTED]
>
> Sincerely,
> Drew C.
> Advanced Hosting Support
>
> -Original Message-
> From: Brad Wood [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 05, 2006 12:37 PM
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
>
> They guy on the phone just told me that they support all tags out of the
> box
> except cfexecute and cfregistry
>
> He also said that they will not install custom tags for you, but I can
> still
> run it in my own directory, right?
>
> ~Brad
>
> -Original Message-
> From: Andy Matthews [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 05, 2006 11:31 AM
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
> I would think they would. They had a help section about Coldfusion when
> they
> first released it. In fact, if you search this list on the website you
> should be able to find my post with all of the direct links.
>
>  andy matthews
> web developer
> certified advanced coldfusion programmer ICGLink, Inc.
> [EMAIL PROTECTED]
> 615.370.1530 x737
> --//->
>
> -Original Message-
> From: Brad Wood [mailto:[EMAIL PROTECTED]
> Sent: Friday, May 05, 2006 11:23 AM
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
>
> I'm on the phone now trying to get a list of restricted tags from them..
> Does any one know if they publish that?
>
> ~Brad
>
> -Original Message-
> From: Brad Wood
> Sent: Friday, May 05, 2006 11:04 AM
> To: CF-Talk
> Subject: RE: Coldfusion with Godaddy
>
> Godaddy does CF now?  That is cool.  I have asked them several times if
> they
> plan on hosting CF sites and they have always told me no.
>
> My personal site is pretty basic and I have been looking around for some
> cheap hosting to move it to.  Since my domains are already registered with
> godaddy, I might give their hosting a whirl...
>
>
>
>
>
>
>
>
>
>
>
>
> 

~|
Message: http://

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Crow T. Robot
Yikes!  This is true for my accounts also.

Let us know what happens.

Matt Robertson wrote:
> After signing onto a new client's SQL Server account, first on one dedicated 
> server and then another, I found I could not only see several other databases 
> belonging to other customers... I could click on the Tables tab and see all 
> of their tables.  Taking it a step further, I could double-click on a table 
> and pull up its table structure.  All of this is in SQL Enterprise Manager.  
> They have two separate accounts and I could see eight other databases that 
> didn't belong to my client on one server and 9 on the other.
> 
> I could not modify the tables or view the data (I didn't even try to Drop of 
> course).
> 
> Poking around a little more, I found I could view all of another db's stored 
> procedures!
> 
> This prompted me to load up a second customer of mine, who also has a SQL 
> account at Crystaltech.  Same freaking story!
> 
> Before I completely blow a gasket I wanted to confirm this is as big of a 
> screwup as I think it is.  There is an easy fix for this right?  I fired up 
> another client and, while I can see other existing db's, if I try and click 
> on anything I get a refusal (error 916.  not an authorized user).
> 
> Anyone else with a Crystaltech account... Can you chime in here?  Do you see 
> the same things I do?
> 
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239825
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Munson, Jacob
We've had this conversation on this list before, and yes what you saw is
true. If I remember right, it's a weakness of SQL Server, not
CrystalTech.  Well, except for the fact that Crystaltech allows remote
connections using EM (a lot of hosts don't allow this).  I also think
someone posted a method to turn this off, but I think it's at the client
level not the server.  So security wise, that's useless.  "Excuse me,
Mr. hacker.  Would you mind turning off the 'List all servers' option?"
;) 

But these conversations always come down to one thing: It's a matter of
customer service vs. security.  Some companies prefer to risk the
security problems to give their customers better options.  Others prefer
strict security.

> -Original Message-
> From: Matt Robertson [mailto:[EMAIL PROTECTED] 
> Sent: Monday, May 08, 2006 10:58 AM
> 
> After signing onto a new client's SQL Server account, first 
> on one dedicated server and then another, I found I could not 
> only see several other databases belonging to other 
> customers... I could click on the Tables tab and see all of 
> their tables.  Taking it a step further, I could double-click 
> on a table and pull up its table structure.  All of this is 
> in SQL Enterprise Manager.  They have two separate accounts 
> and I could see eight other databases that didn't belong to 
> my client on one server and 9 on the other.
> 
> I could not modify the tables or view the data (I didn't even 
> try to Drop of course).
> 
> Poking around a little more, I found I could view all of 
> another db's stored procedures!
> 
> This prompted me to load up a second customer of mine, who 
> also has a SQL account at Crystaltech.  Same freaking story!
> 
> Before I completely blow a gasket I wanted to confirm this is 
> as big of a screwup as I think it is.  There is an easy fix 
> for this right?  I fired up another client and, while I can 
> see other existing db's, if I try and click on anything I get 
> a refusal (error 916.  not an authorized user).
> 
> Anyone else with a Crystaltech account... Can you chime in 
> here?  Do you see the same things I do?

This transmission may contain information that is privileged, confidential 
and/or exempt from disclosure under applicable law. If you are not the intended 
recipient, you are hereby notified that any disclosure, copying, distribution, 
or use of the information contained herein (including any reliance thereon) is 
STRICTLY PROHIBITED. If you received this transmission in error, please 
immediately contact the sender and destroy the material in its entirety, 
whether in electronic or hard copy format. Thank you. A1.



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239824
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Test object type

2006-05-08 Thread Brad Wood
So I assume that you use session.currentUser to hold EITHER a manager
object OR a worker object.  

This may be a stupid question since I don't have a lot of oop
experience, but is it bad form to use the same variable name to store
two different types of objects?  That seems so create the problem you
have now, because you don't know what class you used to instantiate that
object.

~Brad

-Original Message-
From: Joelle Tegwen [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 11:38 AM
To: CF-Talk
Subject: Test object type

I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend

User.

I would like to be able to test whether an instantiated object is a 
Worker or a Manager.



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239823
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Big SQL security hole at Crystaltech?

2006-05-08 Thread Matt Robertson
After signing onto a new client's SQL Server account, first on one dedicated 
server and then another, I found I could not only see several other databases 
belonging to other customers... I could click on the Tables tab and see all of 
their tables.  Taking it a step further, I could double-click on a table and 
pull up its table structure.  All of this is in SQL Enterprise Manager.  They 
have two separate accounts and I could see eight other databases that didn't 
belong to my client on one server and 9 on the other.

I could not modify the tables or view the data (I didn't even try to Drop of 
course).

Poking around a little more, I found I could view all of another db's stored 
procedures!

This prompted me to load up a second customer of mine, who also has a SQL 
account at Crystaltech.  Same freaking story!

Before I completely blow a gasket I wanted to confirm this is as big of a 
screwup as I think it is.  There is an easy fix for this right?  I fired up 
another client and, while I can see other existing db's, if I try and click on 
anything I get a refusal (error 916.  not an authorized user).

Anyone else with a Crystaltech account... Can you chime in here?  Do you see 
the same things I do?

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239822
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Generic CF form handler

2006-05-08 Thread andy
Quoting Mark Henderson <[EMAIL PROTECTED]>:

Mark...

That method works great if you have all text fields, or dropdowns, or textareas.
But what if you have a raxio button or a checkbox? How do you indicate if a
field is required? How do you perform validation on fields of a certain type?

I'm writing something that is a point and shoot. Type out some lines of XML
following the supplied pattern and it will build the form for you AND process
it as well.



andy

> Andy Matthews wrote:
> > CFMAIL is a form handler, but it does require a moderate amount of coding
> to
> > send the values of specific form fields to the recipient. What I'm talking



> > about is something that you could use as a processing page for ANY form
> you
> > create. You'd never need to touch the processing script at all, just set
> up
> > the form and point it at the handler.
> 
> Hi Andy
> 
> I may be misunderstanding something here, so correct me if I'm wrong, 
> but can't you just loop over the form collection inside cfmail? As far 
> as the cfmail variables go, I usually have a globals file and set my 
> email variables in that:
> 
> 
> 
> 
> 
> When you want to process a form that requires mailing, attach the 
> subject to the form submission url...
> 
> 
>   or if you're using a framework this can obviously be done elsewhere 
> (if it's fusebox, inside the fuseaction, for instance).
> 
> Then the following should be able to hand most email submissions without 
> the need for hardcoding.
> 
> 
>
>
>  #formfield# :  #form[formfield]#
>
>
> 
> 
> Code not tested but this should give you the general idea.
> 
> HTH
> 
> Adieu
> Mark
> 
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239821
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Test object type

2006-05-08 Thread Ben Nadel
As far as I know, CF doesn't have a built in "instanceOf" operator or
method. The way to get around this might be to have a public property for
objects Ex.:

SESSION.CurrentUser.InstanceOf()

Which would return, as a string, something like "manager" or "worker".

...
Ben Nadel 
www.bennadel.com
-Original Message-
From: Joelle Tegwen [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 12:38 PM
To: CF-Talk
Subject: Test object type

I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend
User.

I would like to be able to test whether an instantiated object is a Worker
or a Manager.

Something like 

But I don't know what "isObjectType" is really called :)

Can I do this or do I need isWorker and isManager functions in my classes?

Thanks
Joelle



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239820
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Test object type

2006-05-08 Thread Jim
listlast(getMetadata(obj).name,".")

probably more efficient to have a getType() function in each cfc though.
then perhaps a user.equals(anotherobj) function which utilises it e.g.

return if(arguments.obj.getType() eq this.getType())



-Original Message-
From: Joelle Tegwen [mailto:[EMAIL PROTECTED]
Sent: 08 May 2006 17:38
To: CF-Talk
Subject: Test object type


I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend
User.

I would like to be able to test whether an instantiated object is a
Worker or a Manager.

Something like 

But I don't know what "isObjectType" is really called :)

Can I do this or do I need isWorker and isManager functions in my classes?

Thanks
Joelle



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239819
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Test object type

2006-05-08 Thread Joelle Tegwen
I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend 
User.

I would like to be able to test whether an instantiated object is a 
Worker or a Manager.

Something like 

But I don't know what "isObjectType" is really called :)

Can I do this or do I need isWorker and isManager functions in my classes?

Thanks
Joelle

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239818
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: What is High-Performance in the statement High-Performance Reporting and Document Generation

2006-05-08 Thread dcooper
Correct: Enterprise Edition takes out all all the stops...(and kicks butt 
compared to Crystal and other "Enterprise Class" Java-based reporting engine 
report generation, in our internal tests prior to CF7 ship).

Standard Edition is effectively single-threaded for doc and report generation.  
Any more than a couple simultanous docs or reports and you start to feel it.

HTH 

Damon


>Thanks to:
>http://www.dmxzone.com/showDetail.asp?TypeId=28&NewsId=8105&LinkFile=page2.htm
>
>where I found this:
>
>*cfdocument differences in ColdFusion MX 7 versions*
>
>There is a performance limitation with the cfdocument tag in the "CFMX 7
>Standard edition". It processes the cfdocument requests one at a time. The
>Enterprise edition can publish multiple documents at the same time.
>
>
>On 5/4/06, Paul Hastings <[EMAIL PROTECTED]> wrote:
>>

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239817
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Re[2]: supression of / and/or \

2006-05-08 Thread Munson, Jacob
That's correct, and actually I simplified it a bit (removed one
character from the regex):
 

> -Original Message-
> From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] 
> Sent: Monday, May 08, 2006 9:40 AM
> To: CF-Talk
> Subject: Re[2]: supression of / and/or \
> 
> Hi Jacob, thanks. (and thanks all the others, who replied !)
> When I want a "?" to escape as well would it be like:
> 
> 
> 
> ?? Uwe
> 
> MJ> I get wanting to remove the "/", but you also want all 
> the back slashes from your path?  Here's how to remove the 
> forward slashes:
> MJ> 
> 
> MJ> If you what to remove both at the same time:
> MJ> 

This transmission may contain information that is privileged, confidential 
and/or exempt from disclosure under applicable law. If you are not the intended 
recipient, you are hereby notified that any disclosure, copying, distribution, 
or use of the information contained herein (including any reliance thereon) is 
STRICTLY PROHIBITED. If you received this transmission in error, please 
immediately contact the sender and destroy the material in its entirety, 
whether in electronic or hard copy format. Thank you. A1.



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239816
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re[2]: supression of / and/or \

2006-05-08 Thread Uwe Degenhardt
Hi Jacob, thanks. (and thanks all the others, who replied !)
When I want a "?" to escape as well would it be like:



?? Uwe

MJ> I get wanting to remove the "/", but you also want all the back slashes 
from your path?  Here's how to remove the forward slashes:
MJ> 

MJ> If you what to remove both at the same time:
MJ> 

>> -Original Message-
>> From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] 
>> Sent: Monday, May 08, 2006 9:04 AM
>> To: CF-Talk
>> Subject: supression of / and/or \
>> 
>> Hi list,
>> I want to supress
>> a "/" or a "\" in an cfhttp.FileContent output like in:
>> 
>> --
>> Error attempting to write data to target file 
>> 'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher 
>> Inschriften.htm'.
>> -
>> the "/" in
>> "H. / Götter Herrscher Inschriften.htm"
>> is driving me nuts.

MJ> This transmission may contain information that is privileged, confidential 
and/or exempt from
MJ> disclosure under applicable law. If you are not the intended recipient, you 
are hereby notified
MJ> that any disclosure, copying, distribution, or use of the information 
contained herein
MJ> (including any reliance thereon) is STRICTLY PROHIBITED. If you received 
this transmission in
MJ> error, please immediately contact the sender and destroy the material in 
its entirety, whether
MJ> in electronic or hard copy format. Thank you. A1.



MJ> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239815
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: supression of / and/or \

2006-05-08 Thread Tom Chiverton
>>> On Mon, May 8, 2006 at  4:04 PM, in message
<[EMAIL PROTECTED]>, [EMAIL PROTECTED] wrote: 
> Hi list,
> I want to supress
> a "/" or a "\" in an cfhttp.FileContent output like in:

safeFile=rereplace('[/\/]','','ALL');

I think - whatch the escaping on the reg. exp :-)


Tom Chiverton




This email is sent for and on behalf of Halliwells LLP.

Halliwells LLP is a limited liability partnership registered in England and 
Wales under registered number OC307980 whose registered office address is at St 
James's Court Brown Street Manchester M2 2JF.  A list of members is available 
for inspection at the registered office. Any reference to a partner in relation 
to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law 
Society.

CONFIDENTIALITY

This email is intended only for the use of the addressee named above and may be 
confidential or legally privileged.  If you are not the addressee you must not 
read it and must not use any information contained in nor copy it nor inform 
any person other than Halliwells LLP or the addressee of its existence or 
contents.  If you have received this email in error please delete it and notify 
Halliwells LLP IT Department on 0870 365 8008.

For more information about Halliwells LLP visit www.halliwells.com.

We are pleased to announce that Halliwells LLP has been voted AIM Lawyer of the 
Year at the 2005 Growth Company Awards


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239814
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: DEAD TOPIC - LEAVE IT ALONE: cf-talk is weird =)

2006-05-08 Thread Kevin Aebig


Look at the date it was sent???

Jesus... I'm so done with this it's ridiculous.

!k

-Original Message-
From: Todd Rafferty [mailto:[EMAIL PROTECTED] 
Sent: May 8, 2006 8:09 AM
To: CF-Talk
Subject: DEAD TOPIC - LEAVE IT ALONE: cf-talk is weird =)

Kevin,

As far as I'm concerned, my off-topic email that started this died last
Friday until you bumped it that afternoon.  Because the fact that you bumped
it, it's now here, Monday morning, just as you left it.  Maybe you should
consider that.  It was a one off conversation that was dying, until an angry
troll came along and wanted to see justice served.

~Todd

-Original Message-
From: Kevin Aebig [mailto:[EMAIL PROTECTED] 
Sent: Saturday, May 06, 2006 3:25 PM
To: CF-Talk
Subject: RE: cf-talk is weird =)

I only piped up because it's ignorant to assume that they have nothing
better to do than watch over the list and make sure people follow the rules.


I tried being polite about this, and though I don't have any authority to
tell you what to do, I don't think I was out of line as this list largely
moderates itself. 

CF-Community was put in place to avoid this situation and if you don't like
it, take it up with them or leave.

!k




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239813
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: supression of / and/or \

2006-05-08 Thread Munson, Jacob
I get wanting to remove the "/", but you also want all the back slashes from 
your path?  Here's how to remove the forward slashes:


If you what to remove both at the same time:


> -Original Message-
> From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] 
> Sent: Monday, May 08, 2006 9:04 AM
> To: CF-Talk
> Subject: supression of / and/or \
> 
> Hi list,
> I want to supress
> a "/" or a "\" in an cfhttp.FileContent output like in:
> 
> --
> Error attempting to write data to target file 
> 'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher 
> Inschriften.htm'.
> -
> the "/" in
> "H. / Götter Herrscher Inschriften.htm"
> is driving me nuts.

This transmission may contain information that is privileged, confidential 
and/or exempt from disclosure under applicable law. If you are not the intended 
recipient, you are hereby notified that any disclosure, copying, distribution, 
or use of the information contained herein (including any reliance thereon) is 
STRICTLY PROHIBITED. If you received this transmission in error, please 
immediately contact the sender and destroy the material in its entirety, 
whether in electronic or hard copy format. Thank you. A1.



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239812
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: supression of / and/or \

2006-05-08 Thread Ben Nadel
What kinds of problems are you having? Have you tried just replacing out the
character?  

...
Ben Nadel 
www.bennadel.com
-Original Message-
From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 08, 2006 11:04 AM
To: CF-Talk
Subject: supression of / and/or \

Hi list,
I want to supress
a "/" or a "\" in an cfhttp.FileContent output like in:

--
Error attempting to write data to target file
'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher
Inschriften.htm'.
-
the "/" in
"H. / Götter Herrscher Inschriften.htm"
is driving me nuts.

Uwe





~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239811
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


supression of / and/or \

2006-05-08 Thread Uwe Degenhardt
Hi list,
I want to supress
a "/" or a "\" in an cfhttp.FileContent output like in:

--
Error attempting to write data to target file 
'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher Inschriften.htm'.
-
the "/" in
"H. / Götter Herrscher Inschriften.htm"
is driving me nuts.

Uwe



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239810
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


CFComet is alive

2006-05-08 Thread Robert Everland III
I see posts come up all the time about how to access Index Server. I wrote an 
article on this years ago back in CF 5 when COM objects worked pretty well. I'm 
not sure how well a lot of these will still work, but I found this by doing an 
Ego google search on my name. http://cfregex.com/cfcomet/


Bob

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239809
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Project not being returned as type project?

2006-05-08 Thread Joelle Tegwen
That was it. It didn't occur to me that I would need to reference the 
folder name.

Thanks
Joelle

Matt Williams wrote:
> What does the component that has newProjectCreated() have for an argument?
> If its type is simply "Project", then it must be in the same directory as
> the Project.cfc. Otherwise you may have to do "ttComponents.Project" for the
> argument type.
>
>   

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239808
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Test

2006-05-08 Thread george . earl
Sorry for the test. Messages I send to cf-talk thru email aren't appearing so 
I'm trying through the HOF site . . .

George

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239807
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


DEAD TOPIC - LEAVE IT ALONE: cf-talk is weird =)

2006-05-08 Thread Todd Rafferty
Kevin,

As far as I'm concerned, my off-topic email that started this died last
Friday until you bumped it that afternoon.  Because the fact that you bumped
it, it's now here, Monday morning, just as you left it.  Maybe you should
consider that.  It was a one off conversation that was dying, until an angry
troll came along and wanted to see justice served.

~Todd

-Original Message-
From: Kevin Aebig [mailto:[EMAIL PROTECTED] 
Sent: Saturday, May 06, 2006 3:25 PM
To: CF-Talk
Subject: RE: cf-talk is weird =)

I only piped up because it's ignorant to assume that they have nothing
better to do than watch over the list and make sure people follow the rules.


I tried being polite about this, and though I don't have any authority to
tell you what to do, I don't think I was out of line as this list largely
moderates itself. 

CF-Community was put in place to avoid this situation and if you don't like
it, take it up with them or leave.

!k


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239806
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Form in Email

2006-05-08 Thread Randy Messer
>> Sending out email as HTML with a Form. Form to pass variables 
>> to action file. Email form looks fine, but the submission 
>> doesn't pass the form fields to action file.
>
>Does the form's ACTION attribute contain a fully-qualified URL?
>
>Dave Watts, CTO, Fig Leaf Software
>http://www.figleaf.com/
>
>Fig Leaf Software provides the highest caliber vendor-authorized
>instruction at our training centers in Washington DC, Atlanta,
>Chicago, Baltimore, Northern Virginia, or on-site at your location.
>Visit http://training.figleaf.com/ for more information!

I believe it is a fully-qualified URL (that is, it is the action page is a full 
webpage address with http:// at the beginning.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239805
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ASP.Net book for CF programmer

2006-05-08 Thread Snake
I think it is also dependant on what your doing on the server.
Single site, prob no issues.
Multiple sites (i.e. shared hosting), that's when u have more problems.
 

-Original Message-
From: Denny Valliant [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 12:34
To: CF-Talk
Subject: Re: ASP.Net book for CF programmer

On 5/8/06, Robertson-Ravo, Neil (RX) <[EMAIL PROTECTED]>
wrote:
>
> I have to agree - I still think CF5 was more stable that MX.   Java
> certainly did add a few more oddities in terms of stability which 
> needs far more tweaking of the JVM.


Oddly, 6.1 did much better for us, and 7 has been even better then 6.1.

Didn't have to mess with the JVM much over here.  A couple of things, like
session timeouts for jrun or mailspool/thread settings came up eventually,
but the solutions were all over the place, and editing the config wasn't
too...
**
Stability-wise.  4.5 was pretty solid, from what I remember.  That's what I
started on. *sniff* with my bud that's now gone. Alas.

Eh, look at majordomo. That sucker lasted ferever. Solid. Solid as a rock.
We built this city... Um... never mind. Got a little carried away. =-]

Generally: Guess a lot depends on what you're trying to do, etc.., as to
what problems you run into, etc..

Hmmm... well, that's all for me.
**
Cheers Lev, wherever you may be.




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239804
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: ASP.Net book for CF programmer

2006-05-08 Thread Denny Valliant
On 5/8/06, Robertson-Ravo, Neil (RX) <[EMAIL PROTECTED]>
wrote:
>
> I have to agree - I still think CF5 was more stable that MX.   Java
> certainly did add a few more oddities in terms of stability which needs
> far
> more tweaking of the JVM.


Oddly, 6.1 did much better for us, and 7 has been even better then 6.1.

Didn't have to mess with the JVM much over here.  A couple of things, like
session timeouts for jrun or mailspool/thread settings came up eventually,
but the solutions were all over the place, and editing the config wasn't
too...
**
Stability-wise.  4.5 was pretty solid, from what I remember.  That's what I
started on. *sniff* with my bud that's now gone. Alas.

Eh, look at majordomo. That sucker lasted ferever. Solid. Solid as a rock.
We built this city... Um... never mind. Got a little carried away. =-]

Generally: Guess a lot depends on what you're trying to do, etc.., as to
what problems you run into, etc..

Hmmm... well, that's all for me.
**
Cheers Lev, wherever you may be.


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239803
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ASP.Net book for CF programmer

2006-05-08 Thread Snake
Ok, well I assume your customers are all smallfry and wouldn't actually
notice/care if u killed the server running some untested code that caused an
infinite loop or somehting then.


-Original Message-
From: Rick Faircloth [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 10:00
To: CF-Talk
Subject: RE: ASP.Net book for CF programmer

Yep...no problem...

Rick

-Original Message-
From: Snake [mailto:[EMAIL PROTECTED]
Sent: Monday, May 08, 2006 4:45 AM
To: CF-Talk
Subject: RE: ASP.Net book for CF programmer


You develop directly on your live server !! :-O !!!

Do I really need to say anything?

Snake

-Original Message-
From: Rick Faircloth [mailto:[EMAIL PROTECTED]
Sent: 08 May 2006 00:48
To: CF-Talk
Subject: RE: ASP.Net book for CF programmer

Sounds like you got things set up well for your development without risk to
your production setup.

I used to develop locally, but now, since I'm developing for CF 4.5 which is
all that's on the server, I just develop right on the server.  I set up
development sites for clients under my domain so they can view design work
and test functions as I development.

That way they can see progress, provide feedback on design, test
functionality, and get their training on the app as I go.
By the time I'm finished, they're already familiar with the app.

If I setup a new version of CF, however, it definitely wouldn't be on the
production server.  Testing and development would be on a different server,
hardware and software.

I try to be as cautious as resources will allow...

Rick

-Original Message-
From: Denny Valliant [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 07, 2006 6:58 PM
To: CF-Talk
Subject: Re: ASP.Net book for CF programmer


> > You gotta swim at some point.
>
> Agreed...I'm just trying to decide what pool to swim in this time.


I hear you.  In a changing world, assessing what the future will bring is
not as straight forward as one would wish. =-]

I think it would be wise to add ASP.NET to my repertoire.
> Especially if something should happen with CF, which I don't think it 
> will.  But if it should, I could use ASP.NET for business continuity..


The only real gripe I have about ASP is it's dependence on MS.
With mono you can get around that, sorta, I hear, so it's probably not too
big a deal, but it bugs me how MS always has to have some "standard" that is
standard only to their products. =-/

I wouldn't say I was living in fear of change, I've just gone through
> enough upgrades with various products to know there are always issues.  
> But now that I have several server that I can test new products on 
> without having to touch my production server, testing becomes less 
> risky.


For sure.  A good development environment is essential to any endeavour of
this nature.  Really essential.  That is one nice facet to the multiple
instances of CF idea, you could have one server instance that is for
development and one for production, so if you crash and burn the dev
instance you don't get the production one (theoretically, and not always
true).

As for the mirroring of dev and server, for years I've been able to have a
pretty close setup to what's on the production server, including a VMware
install for added testing, on my laptop.

Now that I've got gigs of data to copy back and forth tho, it's getting a
little tedious, and I can see a future where it's impossible to have the
same setup as on the server, locally.

Thus, a real interest in test cases and small amounts of data.
Still just getting my bearings, but I can see the usefulness.

So far what's working good is a production server, a dev server, and my
local workstation (running more servers than the servers are ;-).  So long
as the dev server is real real similar to the production one, the
transitions aren't too bad.

Main campus adds a 4th step, a QA server, that is exactly the same as the
production one, but called "quality assurance"
instead.  That's a smart setup.  Cuts down on the need to deploy your apps
in the dead of night.

I gotta ask... 'leetness?  What in the world does that mean?


Heh. Sorry, it's sorta shorthand for elite.

And where in this world is home for you?


I hail from Albuquerque, New Mexico. The Land of Enchantment. [-= It's a
swell town, give a shout if you're ever in the hood.
:den










~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239802
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ASP.Net book for CF programmer

2006-05-08 Thread Rick Faircloth
Yep...no problem...

Rick

-Original Message-
From: Snake [mailto:[EMAIL PROTECTED]
Sent: Monday, May 08, 2006 4:45 AM
To: CF-Talk
Subject: RE: ASP.Net book for CF programmer


You develop directly on your live server !! :-O !!!

Do I really need to say anything?

Snake

-Original Message-
From: Rick Faircloth [mailto:[EMAIL PROTECTED]
Sent: 08 May 2006 00:48
To: CF-Talk
Subject: RE: ASP.Net book for CF programmer

Sounds like you got things set up well for your development without risk to
your production setup.

I used to develop locally, but now, since I'm developing for CF 4.5 which is
all that's on the server, I just develop right on the server.  I set up
development sites for clients under my domain so they can view design work
and test functions as I development.

That way they can see progress, provide feedback on design, test
functionality, and get their training on the app as I go.
By the time I'm finished, they're already familiar with the app.

If I setup a new version of CF, however, it definitely wouldn't be on the
production server.  Testing and development would be on a different server,
hardware and software.

I try to be as cautious as resources will allow...

Rick

-Original Message-
From: Denny Valliant [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 07, 2006 6:58 PM
To: CF-Talk
Subject: Re: ASP.Net book for CF programmer


> > You gotta swim at some point.
>
> Agreed...I'm just trying to decide what pool to swim in this time.


I hear you.  In a changing world, assessing what the future will bring is
not as straight forward as one would wish. =-]

I think it would be wise to add ASP.NET to my repertoire.
> Especially if something should happen with CF, which I don't think it
> will.  But if it should, I could use ASP.NET for business continuity..


The only real gripe I have about ASP is it's dependence on MS.
With mono you can get around that, sorta, I hear, so it's probably
not too big a deal, but it bugs me how MS always has to have
some "standard" that is standard only to their products. =-/

I wouldn't say I was living in fear of change, I've just gone through
> enough upgrades with various products to know there are always
> issues.  But now that I have several server that I can test new
> products on without having to touch my production server,
> testing becomes less risky.


For sure.  A good development environment is essential to any
endeavour of this nature.  Really essential.  That is one nice
facet to the multiple instances of CF idea, you could have one
server instance that is for development and one for production,
so if you crash and burn the dev instance you don't get the
production one (theoretically, and not always true).

As for the mirroring of dev and server, for years I've been able
to have a pretty close setup to what's on the production server,
including a VMware install for added testing, on my laptop.

Now that I've got gigs of data to copy back and forth tho, it's
getting a little tedious, and I can see a future where it's
impossible to have the same setup as on the server, locally.

Thus, a real interest in test cases and small amounts of data.
Still just getting my bearings, but I can see the usefulness.

So far what's working good is a production server, a dev server,
and my local workstation (running more servers than the servers
are ;-).  So long as the dev server is real real similar to the
production one, the transitions aren't too bad.

Main campus adds a 4th step, a QA server, that is exactly the
same as the production one, but called "quality assurance"
instead.  That's a smart setup.  Cuts down on the need to
deploy your apps in the dead of night.

I gotta ask... 'leetness?  What in the world does that mean?


Heh. Sorry, it's sorta shorthand for elite.

And where in this world is home for you?


I hail from Albuquerque, New Mexico. The Land of Enchantment. [-=
It's a swell town, give a shout if you're ever in the hood.
:den








~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239801
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ASP.Net book for CF programmer

2006-05-08 Thread Snake
You develop directly on your live server !! :-O !!!

Do I really need to say anything?

Snake 

-Original Message-
From: Rick Faircloth [mailto:[EMAIL PROTECTED] 
Sent: 08 May 2006 00:48
To: CF-Talk
Subject: RE: ASP.Net book for CF programmer

Sounds like you got things set up well for your development without risk to
your production setup.

I used to develop locally, but now, since I'm developing for CF 4.5 which is
all that's on the server, I just develop right on the server.  I set up
development sites for clients under my domain so they can view design work
and test functions as I development.

That way they can see progress, provide feedback on design, test
functionality, and get their training on the app as I go.
By the time I'm finished, they're already familiar with the app.

If I setup a new version of CF, however, it definitely wouldn't be on the
production server.  Testing and development would be on a different server,
hardware and software.

I try to be as cautious as resources will allow...

Rick

-Original Message-
From: Denny Valliant [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 07, 2006 6:58 PM
To: CF-Talk
Subject: Re: ASP.Net book for CF programmer


> > You gotta swim at some point.
>
> Agreed...I'm just trying to decide what pool to swim in this time.


I hear you.  In a changing world, assessing what the future will bring is
not as straight forward as one would wish. =-]

I think it would be wise to add ASP.NET to my repertoire.
> Especially if something should happen with CF, which I don't think it 
> will.  But if it should, I could use ASP.NET for business continuity..


The only real gripe I have about ASP is it's dependence on MS.
With mono you can get around that, sorta, I hear, so it's probably
not too big a deal, but it bugs me how MS always has to have
some "standard" that is standard only to their products. =-/

I wouldn't say I was living in fear of change, I've just gone through
> enough upgrades with various products to know there are always
> issues.  But now that I have several server that I can test new
> products on without having to touch my production server,
> testing becomes less risky.


For sure.  A good development environment is essential to any
endeavour of this nature.  Really essential.  That is one nice
facet to the multiple instances of CF idea, you could have one
server instance that is for development and one for production,
so if you crash and burn the dev instance you don't get the
production one (theoretically, and not always true).

As for the mirroring of dev and server, for years I've been able
to have a pretty close setup to what's on the production server,
including a VMware install for added testing, on my laptop.

Now that I've got gigs of data to copy back and forth tho, it's
getting a little tedious, and I can see a future where it's
impossible to have the same setup as on the server, locally.

Thus, a real interest in test cases and small amounts of data.
Still just getting my bearings, but I can see the usefulness.

So far what's working good is a production server, a dev server,
and my local workstation (running more servers than the servers
are ;-).  So long as the dev server is real real similar to the
production one, the transitions aren't too bad.

Main campus adds a 4th step, a QA server, that is exactly the
same as the production one, but called "quality assurance"
instead.  That's a smart setup.  Cuts down on the need to
deploy your apps in the dead of night.

I gotta ask... 'leetness?  What in the world does that mean?


Heh. Sorry, it's sorta shorthand for elite.

And where in this world is home for you?


I hail from Albuquerque, New Mexico. The Land of Enchantment. [-=
It's a swell town, give a shout if you're ever in the hood.
:den






~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239800
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ASP.Net book for CF programmer

2006-05-08 Thread Robertson-Ravo, Neil (RX)
I have to agree - I still think CF5 was more stable that MX.   Java
certainly did add a few more oddities in terms of stability which needs far
more tweaking of the JVM.





-Original Message-
From: Snake [mailto:[EMAIL PROTECTED] 
Sent: 07 May 2006 00:29
To: CF-Talk
Subject: RE: ASP.Net book for CF programmer

Altho, all things considered with the improvements CFMX brings, I still find
CF5 more stable than CFMX. The inclusion of JAVA to the equation increased
the number of things that can go wrong on your server.
Instead of just CF being the problem, you now have CF, JRUN and the JVM.
An error on CF5 was a lot easier to diagnose too, whereas you have to know
somehting about JAVA to decipher a JVM stacktrace.

Snake


-Original Message-
From: Rick Faircloth [mailto:[EMAIL PROTECTED] 
Sent: 06 May 2006 22:26
To: CF-Talk
Subject: RE: ASP.Net book for CF programmer

Thanks for the perspective, Denny.

I've haven't tried talking with Adobe about it, but should I decide to
upgrade, I'll certainly talk to them.

As far as the changes from 4.5 to the current version, I wasn't saying not
much has changed, except from the standpoint of all the changes still end up
performing add, update, delete, report as the basics of CF functionality.

Of course, I'm speaking out of inexperience in actually using any of the
later versions, especially the current one, but what would you say are the
basic functionality advances in CF (or asp, jsp, or whatever) in the last
decade?

Sure, faster, more efficient ways of using code, faster execution, and...
(I'm sure there are many other efficiencies I'm not aware of), but what
basic purposes of CF have changed.

One of the biggest changes I have been intrigued by is Flash remoting, and
now Flex, but as one who builds sites that have to have search engine
optimization as a major concern, Flash is totally disfunctional from that
perspective compared with plain ole HTML.

I guess I'm just looking at the very broad picture of dynamic data use, and
not even just CF.

Thanks everyone for sharing your thoughts.

Rick




-Original Message-
From: Denny Valliant [mailto:[EMAIL PROTECTED]
Sent: Saturday, May 06, 2006 4:04 PM
To: CF-Talk
Subject: Re: ASP.Net book for CF programmer


Out of curiosity, has anyone called adobe and tried the old human element?

I only dealt with MM via email, but they were pretty helpful.  Some
companies give their employees (i.e. sales department folks) more power than
others, allowing them to make exceptions based on their judgement.

It doesn't hurt to mention that you have several sites running 4.5, so
they'd be getting more than a one time purchase.  Sometimes future money is
worth something, probably more than old money, but...

I dunno. Depends on who you get, and how you handle it, etc.. Worth a try
tho if you're serious about it.

I know I mentioned this earlier, but I don't know if it happened, and if it
did, I'd be interested in how helpful (or non-helpful) the sales reps
are/were.

Maybe Snake is correct, and they are only looking out for the big spenders,
I haven't dealt with anyone personally in quite a while, so...

Well, the human element is sooo hit and miss tho, I guess one's experience
wouldn't reflect/help too much with an other's. Eh, worth a shot at least.

I think Dave W. has the right idea, there has been a lot of work put into
CF, and I disagree with the idea that not much has changed since 4.5.
There are tons of areas with slick stuff that was never available before,
clustering is easier than ever, etc..

For contrast, where I work we use an app that costs us $7000 a year, and
they do about as much work as I do in a day that whole year. I'm
exaggerating, but not by as much as I'd like to be.

I agree, value is a concept like relation and plurals/singular(s), somewhat
gray by nature. But Dave hit it on the head, your time is the factor you
should consider above initial cost.  Of course, your time is relative, so,
it is a complicated formula (or is that equation? bah ;).  Who knows what
the future holds. Educated guesses are the best we can get.

cfdump has saved me hours alone tho, seconded. Or thirded. :-)

Good luck making up your mind, this is a decision that will continue to
effect (or affect?) you for years to come, it looks like.

:denny








~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239799
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54