> I'm pretty sure you can't use network pathing in cffile.
Sure you can, as long as the ColdFusion Application service is running as a
user with rights to access the network share you want to use it shouldn't be
a problem.
-Justin Scott, http://www.tlson.com/
~~
> I need to get rid of the column headers in the first line,
> and then get rid of any linefeeds after the last piece of data.
> This seemed fairly straightforward when I started...
and it should still be fairly straightforward:
-Justin Scott, http://www.tlson.com/
~
> Bobby is right. The userid and password in the code
> will override the DSN. Just put in a dummy user name
> and password.in the DSN if you must have one.
> The DSN won't verify but so what?
Without sandboxing, this can actually be worse than having the DSN available
to anyone on the server (
> However, I can't get any results except a timeout when I use
> to run the batch file.
>
> timeout="60">
Based on the file sized that you're likely dealing with, the timeout is too
low. I run my CDEXECUTE with a timeout of 10800 for IDX downloads...
FTPBatch.cmd is in the same
> What I have to do is click on a link in my email,
> which takes to to an web page that uses an ftp url
> (ftp://datalink.interealty.com/)
MLXchange certainly allow direct access to their FTP server. I wrote a
routine that downloads IDX feeds daily and it's fully automated. I can't
send yo
> Any ideas?
Probably a SQL injection attack. See the previous discussion on this topic:
http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:57241
-Justin Scott
~|
Adobe® ColdFusion® 8 software 8 is the most impo
> I have the password and can unzip a file manually, but
> is there a way to use the password with cfzip
> action="unzip" ?
Hi Rick, I haven't actually used the new CFZIP tag yet, but I don't see
anything in the documentation that indicates support for password protection
in saving or opening ZIP
> The files would follow this format:
> II20080830_033219_ACR.log
If you're downloading via FTP then you can get a list of the remote files,
then loop through the resulting query object to look for the files you want.
>From the filenames it looks like you're downloading images from MLXchange.
I'm
> How would the "one folder" method be more risky than the "one
> file" method?
If they're still clicking and selecting then it isn't more risk per se, but
creates issues in usability for the user. If they're not careful they could
theoretically upload their entire My Documents folder without re
> Does anyone use a tag by that name? If you do, could you
> please send it to me? I lost mine and need it back...
CFX_ImageCR is published by Efflare (www.efflare.com) if that's what you're
looking for.
-Justin Scott
~|
Adob
> Filtering means "allow unless it matches". A security
> measure should be "deny unless it matches".
I believe that depends on the proportion of wanted vs. unwanted items. On a
firewall, this is the best approach because there are far more ports that
you don't want to have available than there a
> The admin API was introduced in CF7. Previous,
> unsupported functionality using ServiceFactory
> may well have changed between versions, but
> that's just another example of why you'd want
> to use the admin API instead of unsupported
> functionality.
Ah, that is probably what was in use then.
> my webhost have too restart the cfapplication in
> order to unlock the files.
I've found that some of these "file in use" situations can be averted by
renaming the file just before deleting it. Set a variable with a UUID,
rename the file, then delete. I've not run into this problem on CF8 and
> Now this is real bad for shared hosting customers.
> Cause even if we protect our sites, that SQL simply
> queries all tables in the SQL server. So, if you
> found your data compromise, the leak may have been
> caused by other sites that are using the same SQL
> machine, duh!
On SQL Server the
> Anyway, whatever solves the Michael's problem I feel sure
> is going to be a combination of things, not just the one.
Actually, with this particular SQL injection attack it's really easy to
stop. We created a SQL filter that is called from application.cfm. It
loops through the URL structure an
> I was wondering if there are any legal issues
> saving the last 4 digits and expiry dates of a
> CC as part of a transaction? Should they be
> encrypted?
See the PCI-DSS (Payment Card Industry Data Security Standards). There are
a lot of contractual regulations that have to be met if you're pr
> I've always just used WebDrive to map my FTP
> servers to a local drive.
Second you on Webdrive, I still use HomeSite+ on Windows and found WebDrive
gave me better FTP control and performance over the FTP/RDS shell extension.
Eliminated that nasty "ftp timeout and it zero-bytes the file and lock
I am looking for a new home for one of my web sites, ZonkBoard.com. We have
not done much with it over the last couple of years due to time constraints,
but it has potential. It's all ColdFusion and MSSQL-based, and pretty low
maintenance. If anyone is interested in taking over this web site and
> Performance counters? I haven't heard that term in
> relation to CF before...can you elaborate?
Load the performance monitor in Windows, then add counters. There should be
a ColdFusion entry in the selector list, then you can add the individual
counters (avg page time, avg db time, queued page
> This is just s quick note to look for some possibilities...
Have you checked the performance counters to see if pages are getting queued
up?
-Justin Scott | GravityFree
Senior Programmer / Product Engineer
1960 Stickney Point Road, Second Floor
Sarasota | FL | 34231 | 800.207.4431
941.927.7
It sounds like a session variable containing an array of checkboxes and
their selected values might be in order. Assuming the user has cookies
enabled (or if you pass the session tokens on the URLs) this should be
fairly simple to implement.
-Justin
> -Original Message-
> From: Christop
> Has anyone else experienced this issue and what do
> you recommend as a solution. Does it pay to persue
> finding a host running cf server 5 and does anyone
> know of one?
Personally, I would try to track down the issue and update the code if you
can run on a newer version of CF. If anyone has
> ...there is a DNS record called an MBX record but
> it's seldom used these days - something left over
> from the dark ages of DNS
I believe it was actually MB, defined in RFC 1035 as an experimental type.
There were also MD, MF, MG and MR (some obsolete, some experimental) which
performed variou
> Was wanting to confirm the existance of an email address
Check out EmailVerifier from ActivSoftware. It will do everything you want
and more.
http://www.activsoftware.com/email/verify/
-Justin Scott
~|
Message: http://www.
> I was wondering if there was a way to detect the
> email delivery status of an email programmatically?
Once an e-mail has been sent, there is no way to "track" its delivery like
you can with a package sent via FedEx.
You can, however, test to see if the mail servers configured for a domain
will
around, but won't help in this
> scenario...if the possible values really are 1-9, then you could use
> charindex...otherwise you might look at using patindex.
>
> On 2/6/06, Justin D. Scott <[EMAIL PROTECTED]> wrote:
> > > Where table.sites HAS session.variable ...
> Where table.sites HAS session.variable I know
> has isn't the right term, but this is the english of it.
I believe with SQL Server that you can use a comma-delimited field as the
target of an IN function as below. It's been a while since I've used code
like this, so I could be remembering w
> I'd like some recommendations on web log analyzer software.
I'm a little late on the discussion, so apologies if someone has already
mentioned this. I personally prefer SmarterStats. It has a clean
interface, scales well, and supports auto-login from client site admin
consoles and such. It's
> When using numeric values as queryparams an error is thrown,
> (eg where fld_id= value="#url.v#">
> when v=abc)
This is easy to get around by wrapping the url variable in a val() function.
That will guarantee that whole number will be passed in.
-Justin
~~~
I had a similar issue a week or so ago with the installer opening, and then
vanishing. Resetting the DEP setting corrected the issue for me, so I
wouldn't discount it so lightly.
-Justin
> -Original Message-
> From: Andy Allan [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 25, 2
esultset for
> 'Portugal'.
> Then user3 comes along (while the sessions for user1 and
> user2 are still on)
> and searches for 'Argentina'. What happens to the cache for
> 'getResults'
> while all this is happening? How does CFMX 7 (which I am o
Assuming your query pulls all of the results and you use the startrow and
maxrows attributes when outputting, you could just use the cachedwithin
attribute of cfquery itself to store the results in memory without all the
fuss of session variables. This will also have the benefit of using the
same
> cgi.Auth_User will be populated with the username
I had seen that listed in the debugging output, but it was always blank.
Turns out there was an error in our IIS setup that was causing the
authentication to not work properly. I also see now that if it's
authenticating against a domain, it also
I'm wondering if there is a way in ColdFusion 4.5 (or CFMX7) to determine if
the user has been authenticated by IIS or not, and if so, what the username
is that they are logged in with?
-Justin Scott
~|
Message: http://www.hous
> I have a perl script that prints directly to a printer
> when a user submits a form. Is there a way that ColdFusion
> can do this through Java? Has anyone done this before.
> The printer will be attached to my network locally.
We ran into this a couple of months ago with an intranet application
> Anyone have any good links for setting up (securely)
> the MS SMTP server for sending CFMail. I'm setting
> up a dedicated CFMX server and need to set this up
> so I can route CFMail through it - that's all it will
> be used for - with everything on the same machine.
This is so easy you shouldn
> customer ID to store and use for future Txs.they
> spend all the $$ on security and liability insurance
> why should you ;-)
I have seen many instances where a site will collect all of the order
information (including CC details), and then store it for manual processing
later. They do not h
> has anyone tried using the free DNS management
> from godaddy?
One of my sites, www.dtdns.com, offers DNS hosting. It's not free, but I
can do special deals for fellow CF developers. I've never used GoDaddy's
DNS service (obviously) but I'll have to check it out.
-Justin
~~
> 1) Is it possible to run on that F:\ drive
> on Server 2? If so what would the code
> line look like?
Use CFFILE, but don't use a drive mapping, use the UNC path to the server
share directly. Depending on the permissions of the share, you may need to
run the ColdFusion Application service as
> We have a file upload process here where a user needs to
> upload a file, the file then needs to be parsed through to
> get data out of it and inserted into a database. The file is
> 1.4mb long. I'm having issues just reading and looping
> through the file. Is there a better way to do somethi
> No but you can help and thats the point, its pretty
> pathic when there are thousands of ppl on the list
> and there are like 3 ppl who volunteered to help.
I watched in horror when the initial discussions about this were popping up
a few months ago. In my experience, trying to START a project
We're having an issue with one of our CFMX 6.1 servers where it will
seemingly randomly throw up a "JAR Launcher" crash message through the
Windows error reporting utility. This is CFMX 6.1 with the Sun JVM version
1.4.2. Any thoughts on why this would be happening or how it can be
avoided? Than
What is the latest version of the Sun JVM that is stable with MX6.1 and/or
7? Thanks!
-Justin Scott
~|
Find out how CFTicket can increase your company's customer support
efficiency by 100%
http://www.houseoffusion.com/banners
Anything special I should be aware of if I need to have CF5 and MX7 on the
same box?
-Justin Scott
~|
Logware (www.logware.us): a new and convenient web-based time tracking
application. Start tracking and documenting hours spe
> Client.userId=123456
>
> Now, the user has no way to change that... Now, lets
> say I store it in the cookie...
If your site is running on any kind of traffic, you should probably be using
session variables for this kind of thing anyway.
>
>
> Now, the user can examine their cookies and kno
Error Pages
>
> If this setting is enabled it breaks cfcharting.
>
> -----Original Message-
> From: Justin D. Scott [mailto:[EMAIL PROTECTED]
> Sent: 28 November 2005 12:59
> To: CF-Talk
> Subject: RE: Custom Error Pages
>
> Also remember that you can set IIS
Also remember that you can set IIS to "check if file exists" before passing
the request off to ColdFusion so that IIS would handle 404's on cfm files as
well. It would depend on your host as to how that was set.
-Justin Scott
> -Original Message-
> From: Snake [mailto:[EMAIL PROTECTED]
Hi Will, if you add an ORDER BY to your query on the field(s) you want to
group on it will usually take care of this problem.
-Justin
> -Original Message-
> From: Will Tomlinson [mailto:[EMAIL PROTECTED]
> Sent: Sunday, November 20, 2005 12:44 PM
> To: CF-Talk
> Subject: Grouping proble
> I don't agree with this because CNAME records pointed
> to A records make it easier to change IP addresses
> for said A records. One scenario would be 10 A records
For people manually managing zone files, I suppose this could make life
easier. I run my own DNS hosting service that uses variabl
> > CNAME records should only be used when aliasing a host
> > that is not within the same zone, otherwise, use A
> > records.
>
> I'm not a DNS expert, but my understanding is that this
> is simply incorrect. There's nothing wrong with using
> CNAME records to alias hosts within a zone.
You CAN
CNAME records should only be used when aliasing a host that is not within
the same zone, otherwise, use A records.
-Justin Scott
> -Original Message-
> From: Mark A Kruger [mailto:[EMAIL PROTECTED]
> Sent: Friday, November 18, 2005 1:39 PM
> To: CF-Talk
> Subject: RE: Multiple sites in
Thanks Ali, I should have adjusted the subject line as we were discussing
printing from the command line, not faxing (I hijacked a thread).
-Justin
> -Original Message-
> From: Ali Awan [mailto:[EMAIL PROTECTED]
> Sent: Thursday, November 17, 2005 4:45 PM
> To: CF-Talk
> Subject: Re: Se
> If you can convert the HTML to PDF (see iText or fop) you
> can install acrobat reader on the server and print the
> pdf by running:
>
> cmd.exe start /C acrord32 /p /h FILE.pdf
Apparently Adobe has changed the command line for newer releases of Reader
and it no longer supports these switches.
> Google HTMLDOC. If I remember correctly it's free
> and does everything you are looking for.
Thanks Terry, the only thing I could find with that was a utility to convert
pages to PDF, but I didn't see anything about it sending them to the
printer. My ideal solution would be a tool that would si
> If you can convert the HTML to PDF (see iText or fop)
> you can install acrobat reader on the server and print
> the pdf by running:
>
> cmd.exe start /C acrord32 /p /h FILE.pdf
We're running CFMX 7, so wrapping our HTML reports with CFDOCUMENT might
make this a viable solution assuming we can
> I wrote a small app in Visual Basic a few years ago that
> did exactly that. I might still have that kicking around
> somewhere.
If you still have a copy of that and wouldn't mind sending one over, my
fellow coders and I would be very appreciative.
-Justin Scott
> Does it have to be a fax? What about sending the data
> to a locally installed printer?
I'd love to know if there is a simple way to do that. I'm in a situation
where I need to run several reports (generated in HTML) and they need to be
printed on whatever the default printer is on the server (
Or it could be so long since I've tried to do this (include a non-relative
path) that it could have changed the way it handles includes since 4.0.
-Justin Scott
> -Original Message-
> From: Justin D. Scott [mailto:[EMAIL PROTECTED]
> Sent: Friday, November 11, 2005 11:
> "/" is (and has always been) a built-in CF mapping
> (defined in the CF Admin) that goes to the root of
> the site.
ColdFusion has no concept of your "site" like IIS does. If my root folder
is c:\http\mysite and I try to include "/folder/file.cfm" ColdFusion
wouldn't know where to begin looking
I'll second the fax by e-mail method... Works like a charm!
-Justin
> -Original Message-
> From: John C. Bland II [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, November 09, 2005 9:38 PM
> To: CF-Talk
> Subject: Re: Sending Faxes through Cold Fusion
>
> If you grab an fax service where
I don't know about street addresses, but there are many commercial zip code
databases that have lan/lot data included that could be joined against in
queries.
-Justin
> -Original Message-
> From: Troy Montour [mailto:[EMAIL PROTECTED]
> Sent: Friday, November 04, 2005 4:20 PM
> To: CF
I think that likely has more to do with the database drivers than CF itself.
If a site is getting so much traffic that its access DB is causing problems,
it may be time to move up to MSDE or SQL Server.
-Justin
> -Original Message-
> From: Snake [mailto:[EMAIL PROTECTED]
> Sent: Friday
And here I was hoping MOD would be next on the list. I find that to be
fairly useful in regular coding for all sorts of things.
-Justin
> -Original Message-
> From: Michael Dinowitz [mailto:[EMAIL PROTECTED]
> Sent: Thursday, November 03, 2005 5:32 PM
> To: CF-Talk
> Subject: Re: XOR
> clause1 XOR clause2
I suppose in dating there could only be so much tolerance. I could tolerate
a smoker, or blue hair, but not both because that would be too much.
Winner!
Not practical really. I don't think I've ever actually seen anyone use XOR
in my 6+ years of CF coding. I'm
> Why does it matter if someone already viewed
> the article?
I actually think that tracking page views and having time limits on counters
is a good approach if you have the time. I run a link database that tracks
clicks on the links. If someone clicks the same link more than once within
six hou
> Since getting help on my last problem which was finding
> records of users (from user table) which have events in
> the events table I am now trying to list all the users
> in the users table which don't have any rows which match
> in the events table.
>
>
> SELECT
> u.userID,
> u.f
> Sorry, that's what I get for suggestion code without testing
> it. If one uses array notation, they must note complete,
> column and row. This works as test on 6.1. Should also work
> on 7, but I have not upgrade my workstation yet. All three
> methods output the same value from my test q
the column
> names and evaluate them, and by the same token I cant use query="qry">#columnName#. Beside, I don't even
> know what the
> column names will be as they are subject to change.
>
> Thanks for your help
>
>
> -Original Message-
> From
> OR to remove the evaluate function call.
>
>
> #qry[listGetAt(qry.columnlist,2)]#
>
That would be great, if it worked. Query objects cannot be accessed like
structures. Query columns can (qry.col[row]), but not the query itself.
Throws a "Complex object types cannot be converted to si
> How can I refer to a column in my query by it's
> position in the query, or an index number, rather
> than the name of the column? For example
Each query includes a variable called columnList that you can look at.
#evaluate("qry." & listGetAt(qry.columnList, 2))#
-Justin
> There's no reason you can't get the exact same result
> using exception handling as you're doing now using
> conditional logic.
I like to think of it as pre-exception handling :)
-Justin Scott
~|
Find out how CFTicket can
> I guess I don't see the time spent to write a CFQUERYPARAM
> tag as a significant addition of expense.
It's not, and at this point I do use them pretty much by default in addition
to input scrubbing.
> Also, if you pass an invalid data value to a CFQUERYPARAM
> tag, CF will prevent the query fr
> Since CFQUERYPARAM also generally provides a performance
> benefit, why wouldn't you just use that? What do you see
> as the advantage of your data scrubbing?
It depends on the project. If the variables are scrubbed from the
beginning, some basic error checking can be run that would act before
> but that threw a nonspecified error, and the CFSET
> tag would only be processed if I enclosed the portion
> after the EQUAL sign within quotes (which obviously
> converted it to a string). Any ideas on how to code
> this part so that it works?
The code looks fine as far as I can tell. Perh
If you do it the way you're doing it, you're comparing strings, not date
objects. You should take the fields you get from the DB and use
createDateTime() to create a CF datetime object, then compare that to now()
instead of comparing strings.
-Justin Scott
> I'm trying to implement that solut
> i cant quite figure this out
> what would be the best way to do this
There are a couple of options off the top of my head.
One would be to create a checkSubscription() method that would return a
boolean value depending on whether the e-mail address was subscribed. If it
is, call the unsubscrib
> > the CF page response time went down significantly
> > because it no longer had to wait so long for the
> > SQL server to process the queries.
After re-reading this line I think it may have been confusing. What I meant
was that the response time in ms went down, so the pages got a lot faster.
> What do you mean "in memory"?
SQL Server will hold as much of the most accessed data pages as it can in
memory once it's loaded from previous queries. This table gets hit like
crazy, so my guess is that the entire thing is loaded in memory after a
couple of hours.
> And was your DB running on
> I do agree it depends on situation and I' be curious
> to see how it performed in ASP or .NET or some other
> language as opposed to CF.
Given how much more difficult is it to pass a query from those languages
compared to ColdFusion, I think I would be more inclined to call a SP
anyway.
-Jus
> You mention SP's will give greater performance. I
> think that may be a myth these days. Google around
> and you will find all sorts of debates on it. I was
> shocked myself after spending a good bit of day
> taking some queries from a CF page and dumping them
> into a shiny new stored proc an
> Hi. I trying create a function in this format:
> IsBlockedTime(startdayofweek,starthour, startminute,
> enddayofweek, endhour,endminute)
This should be simple... Once you have the values, create datetime objects
using createDateTime() and then use the DateDiff() function against those
and now()
> I may sound stupid: spiders bots can detect whether
> or not session/client variables has been set.
By default, ColdFusion uses cookies to store the tokens used to track
sessions, so unless you specifically put them on the URL strings (or forget
to tell CFLOCATION not to include them) the searc
> When a function is called and the result outputted
> directly, an extra space is prepended!
It looks like the space isn't being prepended to the return value, but
ColdFusion is outputting whitespace from within the CFFUNCTION tag when it
is called. Even more interesting, it's only outputting wh
> Just wondering if anyone knows a good way to recognise
> when all the characters are capitalised? Some users
> love putting text in CAPS and it just looks awful when
> it's displayed on screen.
Ben's regexp should work, or you can compare...
is all caps
-Justin Scott
> and we can't get it back up till we talk to
> people in Florida. Guess what's in Florida
> now. :)
For Sarasota County, a day off. We had slight winds through the night with
occasional power outages (which are now all corrected) but no damage to
speak of. As a precaution, everyone pretty much
> Is there a way to force CF 6.1 to update a cached
> query programatically.
There are a couple of potential options off the top of my head. If the
times that the query is run are set, you could use a cachedwithin attribute
to force it to expire after a certain period. If you want to force a flu
> Out of interest, how are people getting on with
> MSDE? I've more or less ignored it up until today.
IIRC, GoDaddy's "SQL Server" offering for their hosting plans uses MSDE for
those databases, and not actually SQL Server. For your own use, it depends
on what you want to do with it. Keep in mi
If you download the eval for SQL Server 2000 from Microsoft it includes the
client tools.
-Justin
> -Original Message-
> From: Adrian Lynch [mailto:[EMAIL PROTECTED]
> Sent: Saturday, October 22, 2005 7:49 PM
> To: CF-Talk
> Subject: OT - MSDE - EM/QA Tools
>
> I've just installed MSD
> > There are cases where a try/catch block is
> > warranted, so long as it's used properly
>
> What is the proper use and does it exclude catching
> errors that might be thrown by a cffile or cfquery?
A proper use would be what you described, where you have a file coming in to
be imported and th
"foo" would also be available to custom tags and templates included using
CFMODULE in the caller scope (caller.foo).
Another scope not mentioned yet is "request" in which variables are
available throughout the life of a single request as "request.varname"
regardless if it's called from the same pa
> I'm wrapping some cftry/catchs around my cffiles
> and cfquerys. It works pretty sweet if I use
> just an empty catch.
Hi Will, what is sweet about it, exactly? If your code is generating an
error, it means one of several things:
1. Your code has errors.
2. Your user is giving your code input
> a referral initiative to build their database
> for marketing. it goes like this...
One thing that comes to mind is that I could find a list of e-mail addresses
somewhere and spam people hoping a few will be interested and sign up. I
would suggest limiting the number of submissions a single per
> I need to maintain the url of the referer if the
> current page is reloaded seral times. Whats the
> best method of acheiving this?
You could toss the value into a session variable, a cookie, a database, a
structure in an application variable... There are a lot of options for
keeping a value ar
> Is it possible to suppress the content of CFMAIL?
> I am sending pages to end-users, and they don't need to
> see "From:[EMAIL PROTECTED]", "Subject:", something that
> kinds of known stuff.
I'm not sure I understand the question? If you don't include a from
address, your mail isn't going to g
> Ah..I just went ahead and created another query in the
> cfinclude page to
> pull the data out and will just use that query to populate
> instead. It
> works and that's all that matters :) thanks!
So you were pulling data out, then running an update query, and expecting
that update query to
ColdFusion waits until all of the included code has run before it moves on.
It sounds like your database isn't updating the tables fast enough before
you run the query to re-pull that data for display (why you would need to
re-query the database right after updating it is beyond me to begin with,
b
> in this application a couple extra MS does count.
> for a faster way to use a combination of a varchar
> data type with compression in the application level
> to shave off a couple more MS.
Don't you think that running a compress/decompress routine on the data is
going to negate those few m
> the calendar linkware. Is this too much? We're not
> asking users to link to the main vivio site or
> anything commercial. We're simply asking for a
> link back to the main calendar site. Is this sort
> of licensing too restrictive to the very liberal
> MIT license to be useful?
Personally I wou
> Really? Where did you find that information Charlie?
I checked their FAQ and they do have a bit more information in there. I'm
surprised that the object tags is all they disabled, but they're probably
sandboxing the accounts. If you have a database plan you can even create a
DSN and hook up wi
> Godaddy now has it as an add on for $1.95 to
> their already ridiculously low $3.95 a month
All I could find on their site was a checkbox on the order form with a small
pop-up window telling you what ColdFusion is. There is no mention of any
kind of database access, what tags/functions are enab
1 - 100 of 189 matches
Mail list logo
