Re: cffile error

[Michael Lugassy]

Weird, I'm getting the same error when I ran out of ram or restart the
cf-server
(while trying to view a .cfm file), maybe the file you are uploading is very
big?
try uploading a simple 10Kb TXT file, see what happens.

also - try changing upload2.cfm to include only 1 task (file upload OR db
insert)
this way you can figure out what is maxing the server (or generating this
unique error).

make sure you have enough space on h:\ and that you have write/modify rights
on this directory - as the best practice, I suggest again to upload a 10kb
txt
file to c:\cfusion or somewhere easier.

Let me know,

Michael.


- Original Message -
From: "Parra, Fernando" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Saturday, July 07, 2001 1:58 AM
Subject: cffile error


> Can anyone help me?
>
> I am trying to set an upload form and I am getting the following error:
>
> Error Occurred While Processing Request
> Error Diagnostic Information Request canceled or ignored by serverServer
> busy or unable to fulfill request. The server is unable to fulfill your
> request due to extremely high traffic or an unexpected internal error.
> Please attempt your request again (if you are repeatedly unsuccessful you
> should notify the site administrator). (Location Code: 26)
> Please inform the site administrator  that this
error
> has occurred (be sure to include the contents of this page in your message
> to the administrator).
>
> Here is the code:
>
>

> FORM:
>
> 
>
> 
>  
> Please Choose a File to Upload name="NewFile" size="20">
> Name of Document
> 
> 
> 
> 
> 
> 
> Upload Date
>  
> 
> 
> 
>  size="10">
>  
> 
> 
> 
> 
> Author
> 
>
> 
> Document's Description name="doc_description" cols="45" rows="5" wrap="virtual">
> 
> 
>   type="Submit" value="Upload File">
> 
> 
> 
>
>
ACTION::
> ::
>
>  destination="h:\web\content" nameconflict="ERROR" accept="text/html">
> 
>  formfields="doc_title, doc_date, doc_author, doc_description,  doc_cat">
> 
>
>
> **
>
>
> Thanks,
>
>
> Fernando
>
>
>
>
> Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
> Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
>


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: GROUP BY gives an error?

[Darryl Lyons]

Should have been:

SELECT modelname, modeldescription, makename, year
FROM MODELS
WHERE rating = 'Very Compatible'
GROUP BY makename, modeldescription, modelname, year

-Original Message-
From: Darryl Lyons [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 10, 2001 9:18 AM
To: CF-Talk
Subject: RE: GROUP BY gives an error?


you need to include all of the columns in the SELECT in the GROUP BY also.

e.g.

SELECT modelname, modeldescription, makename, year
FROM MODELS
WHERE rating = 'Very Compatible'
GROUP BY makename, modeldescription, modelname, year

-Original Message-
From: Jeff Fongemie [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 10, 2001 9:31 AM
To: CF-Talk
Subject: GROUP BY gives an error?


Hello cf-Talk,

  I have a simple query.


SELECT modelname, modeldescription, makename, year
FROM MODELS
WHERE rating = 'Very Compatible'
GROUP BY makename 
  

It keeps giving me this error:ODBC Error Code = 37000 (Syntax error or
access violation)

[Microsoft][ODBC Microsoft Access Driver] You tried to execute a query
that does not include the specified expression 'modelname' as part of
an aggregate function.

 What the heck am I missing here?

The "makename" field is a lookup field in an Access database, would
this have anything to do with it? So far the lookup has worked fine in
queries.



Best regards,
 Jeff Fongemie  mailto:[EMAIL PROTECTED]
 
Internet Guns For Hire
(603) 356-0768
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Help needed with CFCONTENT

[Jochem van Dieten]

Bruce, Rodney wrote:

> The problem with using "application/octet-stream",  is that the user doesn't
> get the option to save the file.
> 
> I want the user to be able to save the file just not open it in the browser.
> The purpose is for the user to save as PowerPoint slide,  to be added to
> presentations later.  


Forgot to mention that you will also need a content-disposition header.



If this doesn't work, shoot the customer for using a browser that does 
not adhere to the suggestions made in RFC 2616, paragraph 19.5.1, which 
is still the formal definition of the HTTP protocol.

Jochem


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Word Document Generation

[David Shadovitz]

Chris,

I know of two ways to do this.

1. CFCONTENT and CFHEADER.
As per http://tech.irt.org/articles/js154/index.htm, you can create your MS 
Word template and put CFML placeholders in it, save it as an RTF file, edit the 
RTF file to get or accept data, and then serve that filled-in file to the user 
via CFHEADER and CFCONTENT.  The RTF code is ugly; Dave Watts has pointed out 
that WordPerfect-generated RTF is cleaner.

2. CFOBJECT.
If the server has MS Word installed, you can use code like that at CF Comet < 
http://www.cfcomet.com/cfcomet/word/ > to generate the doc on the server, and 
then let the users download it via a hyperlink.

-David


On Monday, July 09, 2001 7:11 AM, Chris Alvarado 
[SMTP:[EMAIL PROTECTED]] wrote:
> I have an application that needs to generate Word Documents and basically
> open them on the fly. Currently I am using CFCONTENT to do this, however I
> have run into a small problem. I need to be able to use a defined Word
> TEMPLATE.  The template contains a footer and whatnot that needs to be
> contained in the document. Is there a good reference somewhere for using
> CFCONTENT, or is there another way to do this?


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Print without bringing print dialogue?

[Christopher Olive, CIO]

actually, you can't.  it's a JS security feature.

chris olive, cio
cresco technologies
[EMAIL PROTECTED]
http://www.crescotech.com



-Original Message-
From: Nathan Chen [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 12:46 PM
To: CF-Talk
Subject: Print without bringing print dialogue?


Hi, All:

I posted this before the list went down a few weeks ago. I don't know if
it went though so I re-post it.

I need to know how to print a cfm page without bringing up the print
dialogue from the browser.  If I use window. print() method, the print
dialogue will popup. But what I need is to send the displayed
information to the printer directly without bringing this print dialogue
box.  Is this possible? Any hint or suggestion will be appreciated.

Nathan Chen
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

test

[Jeff Green]

test


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: GROUP BY gives an error?

[Rick Lamb]

A better question is what the heck are you trying to do. If you use a group
by clause in sql you either need to include each field you're selecting in
the group by clause or do some sort of aggregate function to them. If you
trying to group the query by makename, then just order by makename in the
sql code and use  to group it in your
output.

Rick

-Original Message-
From: Jeff Fongemie [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 6:31 PM
To: CF-Talk
Subject: GROUP BY gives an error?


Hello cf-Talk,

  I have a simple query.


SELECT modelname, modeldescription, makename, year
FROM MODELS
WHERE rating = 'Very Compatible'
GROUP BY makename


It keeps giving me this error:ODBC Error Code = 37000 (Syntax error or
access violation)

[Microsoft][ODBC Microsoft Access Driver] You tried to execute a query
that does not include the specified expression 'modelname' as part of
an aggregate function.

 What the heck am I missing here?

The "makename" field is a lookup field in an Access database, would
this have anything to do with it? So far the lookup has worked fine in
queries.



Best regards,
 Jeff Fongemie  mailto:[EMAIL PROTECTED]

Internet Guns For Hire
(603) 356-0768
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Sybase 12 on Solaris / CF5 failed db connection

[Robert Rusher]

I'm having a little trouble getting my db to verify.

I've set the environment variables in the coldfusion
start script:
CFUSER=root
SYBASE=
LD_LIBRARY_PATH=$SYBASE/lib: ...

I have a valid user to the db.

I'm able to connect to the db via ISQL. I've tried
both ODBC and Native drivers.

Some insight would be greatly appreciated.

Regards,
Rob
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: GROUP BY gives an error?

[Darryl Lyons]

you need to include all of the columns in the SELECT in the GROUP BY also.

e.g.

SELECT modelname, modeldescription, makename, year
FROM MODELS
WHERE rating = 'Very Compatible'
GROUP BY makename, modeldescription, makename, year

-Original Message-
From: Jeff Fongemie [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 10, 2001 9:31 AM
To: CF-Talk
Subject: GROUP BY gives an error?


Hello cf-Talk,

  I have a simple query.


SELECT modelname, modeldescription, makename, year
FROM MODELS
WHERE rating = 'Very Compatible'
GROUP BY makename 
  

It keeps giving me this error:ODBC Error Code = 37000 (Syntax error or
access violation)

[Microsoft][ODBC Microsoft Access Driver] You tried to execute a query
that does not include the specified expression 'modelname' as part of
an aggregate function.

 What the heck am I missing here?

The "makename" field is a lookup field in an Access database, would
this have anything to do with it? So far the lookup has worked fine in
queries.



Best regards,
 Jeff Fongemie  mailto:[EMAIL PROTECTED]
 
Internet Guns For Hire
(603) 356-0768
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: GROUP BY gives an error?

[Jann VanOver]

I think you've misunderstood "GROUP BY"  What is your intent for the GROUP
BY ?? 

If you change "GROUP BY" to "ORDER BY", you can then use the "GROUP"
attribute on  (or ) to group together records with one
field in common.

-Original Message-
From: Jeff Fongemie [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 4:31 PM
To: CF-Talk
Subject: GROUP BY gives an error?


Hello cf-Talk,

  I have a simple query.


SELECT modelname, modeldescription, makename, year
FROM MODELS
WHERE rating = 'Very Compatible'
GROUP BY makename 
  

It keeps giving me this error:ODBC Error Code = 37000 (Syntax error or
access violation)

[Microsoft][ODBC Microsoft Access Driver] You tried to execute a query
that does not include the specified expression 'modelname' as part of
an aggregate function.

 What the heck am I missing here?

The "makename" field is a lookup field in an Access database, would
this have anything to do with it? So far the lookup has worked fine in
queries.



Best regards,
 Jeff Fongemie  mailto:[EMAIL PROTECTED]
 
Internet Guns For Hire
(603) 356-0768
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

GROUP BY gives an error?

[Jeff Fongemie]

Hello cf-Talk,

  I have a simple query.


SELECT modelname, modeldescription, makename, year
FROM MODELS
WHERE rating = 'Very Compatible'
GROUP BY makename 
  

It keeps giving me this error:ODBC Error Code = 37000 (Syntax error or access 
violation)

[Microsoft][ODBC Microsoft Access Driver] You tried to execute a query
that does not include the specified expression 'modelname' as part of
an aggregate function.

 What the heck am I missing here?

The "makename" field is a lookup field in an Access database, would
this have anything to do with it? So far the lookup has worked fine in
queries.



Best regards,
 Jeff Fongemie  mailto:[EMAIL PROTECTED]
 
Internet Guns For Hire
(603) 356-0768



~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Update Statement

[David Clay]

Need help updating table1 PDFID value with table2 orderno value where primary key in 
table1 equals primary key in table2.

table1

primarykey=PDFID
field=country

Table2

primarykey=PDFID
field=orderno


Any help with the SQL statement or CF code would be appreciated.  Thank you



Dave Clay
Internet Facilitator
Trus Joist, A Weyerhaeuser Business
5995 Greenwood Plaza Blvd, Suite 100
Greenwood Village, CO 80111
303.770.8506
303.770.8506
   
   
   
   
   
   
   
   
   
   
   
   
   


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: URL Hacks - Solution

[Bruce, Rodney]

URL hacks I think are easier to handle than form.Variables.

I have limited to bare min, the number of variables passed by url and were I
have used them.
and were I have they are limited to a Number/Integer, so that the VAL(),
works well.  but with forms, there is such a wide range of information that
you are capturing, that it makes it a lot harder to control.

I have used , which seems to be working well.  But I like the
idea of adding the notification by email when an attempted hack is tried and
then kicking them off site.
and if anyone has seen a hack that bypasses  could you share the
information.
I know its not the end all for security.



-Original Message-
From: Chad Gray [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 3:11 PM
To: CF-Talk
Subject: RE: URL Hacks - Solution


Where is CF_Input?  I cant find it on the Developers exchange.

On a SQL database cant you specify that the user connected to the database 
cannot use the DROP command?  Wouldn't this be the first line of defense?







At 05:00 PM 7/9/2001 -0400, you wrote:
>Why not just use cf_input this tag works great, you can add words in there
>like delete drop and add so that you don't have people entering things into
>your database.
>
>Robert Everland III
>Dixon Ticonderoga
>Web Developer Extraordinaire
>
>-Original Message-
>From: Josh R [mailto:[EMAIL PROTECTED]]
>Sent: Monday, July 09, 2001 1:46 PM
>To: CF-Talk
>Subject: Re: URL Hacks - Solution
>
>
>I've been reading this thread since the beginning and came up with a pretty
>comfortable solution. I call it cf_antihack. It's a blanket script with a
>pretty quick run time. I haven't placed it on the Developers Exchange yet,
>but I might.
>
>I am offering it to you guys first so I can get some input on it.
>
>You can get the code at my site at http://www.rubak.com/cf-codes.cfm
>
>Don't forget to give me some feedback. If people like this solution, I plan
>to increase it's reach to cover other security issues.
>
>Disclaimer: I am by no means a security expert. I just came up with (what I
>think is) a good idea.
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Help needed with CFCONTENT

[Bruce, Rodney]

Dave

Don't know if you seen the original post.

I am using CFCONTENT to allow the user to save graphs (bar) as
PowerPoint slides.  If the user selects to save file and then later opens,
this works fine,  if the user selects to open from current location,  the
graph displays fine,  but when the scroll bar is moved or even just clicked
on it throws an error.   This is what I am looking to fix.  If you have any
idea I would greatly appreciate it.


Rodney  


-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 2:00 PM
To: CF-Talk
Subject: RE: Help needed with CFCONTENT


> The problem with using "application/octet-stream",  is that 
> the user doesn't get the option to save the file.
> 
> I want the user to be able to save the file just not open it 
> in the browser. The purpose is for the user to save as PowerPoint 
> slide, to be added to presentations later.

Unfortunately, you want two things that are in opposition to each other. You
want the user to be able to save the file, but you also want them not to be
able to view it in their browser if they so choose.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: URL Hacks - Solution

[Dave Watts]

> On a SQL database cant you specify that the user connected to 
> the database cannot use the DROP command? Wouldn't this be the 
> first line of defense?

Yes. You can specify in the datasource settings, in CF Administrator, that
only SQL-DML commands (SELECT, INSERT, UPDATE, DELETE) and/or stored
procedure calls are allowed. By itself, this isn't really enough, since you
can specify raw connect strings in CF 5, among other reasons.

In addition, when configuring your database, you can use rights within the
database. You can create a user with only the necessary rights to modify
data as desired, and use that username and password in your ODBC DSN.

Finally, you can use stored procedures and bind parameters to limit what
gets sent to the database.

You should be doing all of these things to secure database access whenever
possible. This is independent of input filtering. Unfortunately, these
things often get neglected.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Tab Char Code

[David E. Crawford]

CHR(9)

DC

- Original Message -
From: "Joshua Miller" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Monday, July 09, 2001 16:47
Subject: Tab Char Code


> Anyone know the #CHAR()# code for a TAB???
>
> Joshua Miller
> Web Development::Programming
> Eagle Technologies Group, Inc.
> www.eagletgi.com
> [EMAIL PROTECTED]
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: URL Hacks - Solution

[Chad Gray]

Where is CF_Input?  I cant find it on the Developers exchange.

On a SQL database cant you specify that the user connected to the database 
cannot use the DROP command?  Wouldn't this be the first line of defense?







At 05:00 PM 7/9/2001 -0400, you wrote:
>Why not just use cf_input this tag works great, you can add words in there
>like delete drop and add so that you don't have people entering things into
>your database.
>
>Robert Everland III
>Dixon Ticonderoga
>Web Developer Extraordinaire
>
>-Original Message-
>From: Josh R [mailto:[EMAIL PROTECTED]]
>Sent: Monday, July 09, 2001 1:46 PM
>To: CF-Talk
>Subject: Re: URL Hacks - Solution
>
>
>I've been reading this thread since the beginning and came up with a pretty
>comfortable solution. I call it cf_antihack. It's a blanket script with a
>pretty quick run time. I haven't placed it on the Developers Exchange yet,
>but I might.
>
>I am offering it to you guys first so I can get some input on it.
>
>You can get the code at my site at http://www.rubak.com/cf-codes.cfm
>
>Don't forget to give me some feedback. If people like this solution, I plan
>to increase it's reach to cover other security issues.
>
>Disclaimer: I am by no means a security expert. I just came up with (what I
>think is) a good idea.
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: F***edcompany.com report

[Ann Harrell]

But the layoff rumor is true? Glad I got it in the first round while there
was still severance money

Ann

> -Original Message-
> From: Raymond Camden [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 09, 2001 3:05 PM
> To: CF-Talk
> Subject: RE: F***edcompany.com report
>
>
>
> > doh ... JRun is going away?
>
> Nope.
>
> ===
> Raymond Camden, Principal Spectra Compliance Engineer for Macromedia
>
> Email   : [EMAIL PROTECTED]
> ICQ UIN : 3679482
>
> "My ally is the Force, and a powerful ally it is." - Yoda
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: URL Hacks - Solution

[Paris Lundis]

I think the script is a good first attempt and seems to address the URL 
hack threads previously that have gone around.

so programatically (SQL wise) what else might one post in the string to 
pickup further data???...  May the SQL gods speak...

My first level approach, having not experimented at all with this yet, 
would be people stacking SQL commands...  

Face it.. selecting the code won't display the result

could someone commit a write to a known table.. for instance, writing a 
user name, access level etc???

SQL isn't my thing, but I am always amazed at the power and 
creativity.. I think if we all chip in with some specifics this program 
could get furthered and cover perhaps other known hack arounds...

-paris

-Original Message-
From: Dave Watts <[EMAIL PROTECTED]>
Date: Mon, 09 Jul 2001 16:55:54 -0400
Subject: RE: URL Hacks - Solution

> > I've been reading this thread since the beginning and came up 
> > with a pretty comfortable solution. I call it cf_antihack. It's 
> > a blanket script with a pretty quick run time. I haven't placed 
> > it on the Developers Exchange yet, but I might.
> > 
> > I am offering it to you guys first so I can get some input on it.
> > 
> > You can get the code at my site at
> http://www.rubak.com/cf-codes.cfm
> > 
> > Don't forget to give me some feedback. If people like this 
> > solution, I plan to increase it's reach to cover other security 
> > issues.
> > 
> > Disclaimer: I am by no means a security expert. I just came 
> > up with (what I think is) a good idea.
> 
> I'm not a security expert either, but you did ask for feedback, so
> here
> goes.
> 
> The problem with your tag is that it only defends against a very
> small set
> of specific malicious attacks. However, in reality an attacker is
> usually
> not interested in purely destructive attacks (DROP TABLE, etc) but
> rather
> wants to get access to things that he shouldn't be able to access.
> For
> example, the attacker might want to obtain credit card numbers, or
> might
> want to install a rootkit on your server, or might simply want a
> location to
> stash files. Those sorts of attacks through strings sent to the
> database are
> still possible with your tag.
> 
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> voice: (202) 797-5496
> fax: (202) 797-5444
> 
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: F***edcompany.com report

[Massimo Foti]

"Michael Dinowitz" <[EMAIL PROTECTED]> wrote in message
news:066d01c108b3$d813f7c0
> JRun is not going away. It is used in both Macromedia generator as well as
> the next release of CF (neo). Whoever posted that threat is either lying
or
> totally misinformed.

The upcoming SiteSpring is based on JRun as well :-)

Massimo



~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: F***edcompany.com report

[Mark Warrick]

Well I see that as a bummer for the employees, but as a very good decision
for Macromedia.  Allaire should have stuck with their core competency
(ColdFusion) 2 years ago.

By the way, I think it's F***ed that we have to pay for the
F***edcompany.com now.  The fees are pretty steep for the average joe.  I
imagine those monthly fees would be no big deal for large companies though.
It's all valuable information.

---mark


Mark Warrick - Fusioneers.com
Personal Email: [EMAIL PROTECTED]
Business Email: [EMAIL PROTECTED]
Phone: 714-547-5386
Efax: 801-730-7289
Personal URL: http://www.warrick.net
Business URL: http://www.fusioneers.com
ICQ: 125160 / AIM: markwarric


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 09, 2001 12:35 PM
> To: CF-Talk
> Subject: SOT: F***edcompany.com report
>
>
> <<
> Rumor has it Macromedia is gonna start laying people off (up to
> 250 people)
> starting this week. They're doing it quietly in small groups over
> the next
> few weeks so that they don't have to issue a press release.
> Apparently the
> people being hit the hardest are employees that were acquired
> when Macromedia
> bought Allaire. They've already stopped development on the
> (Allaire) Spectra
> product line and now they are doing the same to Allaire's JRun.
> >>
>
> doh ... JRun is going away?
>
>
>
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: question marks and spiders, e-marketers...

[Eron Cohen]

Hi Folks,

I think eventually I'll be writing an article on this
topic.  I definitely think that Search Engine Safe
URLS work.  First, the good news is that some of the
search engines are starting to come around and allow
for indexing of standard dynamic URLs. Most notable is
google, which definitely has no problem indexing the
content that is only exposed by accessing the stuff
after the question mark.  Apparently many search
engine creators were afraid that someone would write
code to "trap" their spider in a site by generating
infinite new links for the spider to follow.  Now as
dynamic sites are becoming the norm, the engines are
starting to come around to the idea that they can't
disallow dynamic content.  They exclude too much
information by doing so.  

Do search engine safe URLs work.  My verdict is
yeah—pretty much they do.  Search engines have no idea
whether or not they are dealing with a “real” URL with
directories or a search engine safe one.  I usually
even add a fake “something.HTM” on the end of the URL,
for instance: 

http://www.mysite.com/index.cfm/state/33/mode/2/something.HTM.

Some things to note are that you may find you need to
write some code to pass and reset the Client tokens. 
And any time you do a CFLOCATION, you must set ADD
TOKEN to “no” or you’ll wind up with something like:

http://www.mysite.com/index.cfm/state/33/mode/2/something.HTM?CFID=1&CFTOKEN=22332.

Those of us who are using IIS can very easily switch
over to Search Engine Safe URLs.  If you are using
Apache, its possible, but not as easy to set up.  If
you are using fusebox, you’re in especially good shape
if you use the FORM2URLVARIABLES custom tag.  Its been
setup to do all the work that you might need in using
these URLs for you.

The only problem I haven’t really overcome yet is
generating Webtrends reports from Search Engine Safe
or dynamic URLs.  I should say that I have an old
version of Webtrends and I have heard this isn’t a
problem with the newer ones.

While we're on the topic, I point out that it’s
important to keep in mind that all the search engine
spiders have their own personalities.  Things like
meta tags are ignored by some, but required by others.
Some spiders give special weight to the first x number
of words on a page, while others do not.  I find that
a very high percentage of otherwise in-the-know
ColdFusion developers know very little about search
engine optimization.  If you are interested in
learning a lot about search engines, I suggest joining
the I-Search mailing list:
http://www.adventive.com/lists/isearch/summary.html.
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Tab Char Code

[Jann VanOver]

09


-Original Message-
From: Joshua Miller [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 1:48 PM
To: CF-Talk
Subject: Tab Char Code


Anyone know the #CHAR()# code for a TAB???

Joshua Miller
Web Development::Programming
Eagle Technologies Group, Inc.
www.eagletgi.com
[EMAIL PROTECTED]
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Tab Char Code

[Dylan Bromby]

#Asc("")#

put a TAB between the "".

-Original Message-
From: Joshua Miller [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 1:48 PM
To: CF-Talk
Subject: Tab Char Code


Anyone know the #CHAR()# code for a TAB???

Joshua Miller
Web Development::Programming
Eagle Technologies Group, Inc.
www.eagletgi.com
[EMAIL PROTECTED]
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: URL Hacks - Solution

[Robert Everland]

Why not just use cf_input this tag works great, you can add words in there
like delete drop and add so that you don't have people entering things into
your database.

Robert Everland III
Dixon Ticonderoga
Web Developer Extraordinaire

-Original Message-
From: Josh R [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 1:46 PM
To: CF-Talk
Subject: Re: URL Hacks - Solution


I've been reading this thread since the beginning and came up with a pretty 
comfortable solution. I call it cf_antihack. It's a blanket script with a 
pretty quick run time. I haven't placed it on the Developers Exchange yet, 
but I might.

I am offering it to you guys first so I can get some input on it.

You can get the code at my site at http://www.rubak.com/cf-codes.cfm

Don't forget to give me some feedback. If people like this solution, I plan 
to increase it's reach to cover other security issues.

Disclaimer: I am by no means a security expert. I just came up with (what I 
think is) a good idea.
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Oracle insert DateTime HELP

[Kevin Cundick]

Try using "sysdate" instead of trying to get the correctly formatted date (as
demonstrated below).  Then you can use CF functions to get the correct format
when you pull it out.

Thanks,

Kevin

-Original Message-
From: Greenberg, Lisa [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 12:44 PM
To: CF-Talk
Subject: Oracle insert DateTime HELP


I'm trying to insert both the date and time into an oracle table.  I can't
seem to get the syntax right.  Any suggestions?


INSERT INTO
temptable
(StartDate) VALUES
(sysdate)

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: URL Hacks - Solution

[Dave Watts]

> I've been reading this thread since the beginning and came up 
> with a pretty comfortable solution. I call it cf_antihack. It's 
> a blanket script with a pretty quick run time. I haven't placed 
> it on the Developers Exchange yet, but I might.
> 
> I am offering it to you guys first so I can get some input on it.
> 
> You can get the code at my site at http://www.rubak.com/cf-codes.cfm
> 
> Don't forget to give me some feedback. If people like this 
> solution, I plan to increase it's reach to cover other security 
> issues.
> 
> Disclaimer: I am by no means a security expert. I just came 
> up with (what I think is) a good idea.

I'm not a security expert either, but you did ask for feedback, so here
goes.

The problem with your tag is that it only defends against a very small set
of specific malicious attacks. However, in reality an attacker is usually
not interested in purely destructive attacks (DROP TABLE, etc) but rather
wants to get access to things that he shouldn't be able to access. For
example, the attacker might want to obtain credit card numbers, or might
want to install a rootkit on your server, or might simply want a location to
stash files. Those sorts of attacks through strings sent to the database are
still possible with your tag.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Help needed with CFCONTENT

[Dave Watts]

> The problem with using "application/octet-stream",  is that 
> the user doesn't get the option to save the file.
> 
> I want the user to be able to save the file just not open it 
> in the browser. The purpose is for the user to save as PowerPoint 
> slide, to be added to presentations later.

Unfortunately, you want two things that are in opposition to each other. You
want the user to be able to save the file, but you also want them not to be
able to view it in their browser if they so choose.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Tab Char Code

[Joshua Miller]

Anyone know the #CHAR()# code for a TAB???

Joshua Miller
Web Development::Programming
Eagle Technologies Group, Inc.
www.eagletgi.com
[EMAIL PROTECTED] 

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Imposing an ad hoc sort order on a SQL query

[Jim McAtee]

Thanks, but that's what I was trying avoid - storing the sort order within
the table.  Even though it's flexible enough to be updated, I might have
another page and query (perhaps pulling just a subset of the board members)
where I want to use a different ordering.

But now that I think about it, doing this so-called ad hoc sort in the way I
was proposing may not be the smartest idea, since it's not data driven.  It
would require me to hardcode the board position descriptions into the
template's SQL code.  I guess I'll do it the way you've described and then
add additional sort order fields as needed by the project.

Jim


- Original Message -
From: "Paris Lundis" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Monday, July 09, 2001 2:27 PM
Subject: Re: Imposing an ad hoc sort order on a SQL query


> I have had to do this in the past... I just added a USERSORT field and
> put numeric fields in it for display order (ie: PRESIDENT= 1
> VICEPRESIDENT=2, etc.)
>
> then I just create a forms based interface that lets you mod the
> numbers as need be...
>
> so you do a SORT BY USERSORT ASC in my example...
>
> -paris
> [finding the future in the past, passing the future in the present]
> [connecting people, places and things]
>
>
> -Original Message-
> From: "Jim McAtee" <[EMAIL PROTECTED]>
> Date: Mon, 09 Jul 2001 11:39:25 -0600
> Subject: Imposing an ad hoc sort order on a SQL query
>
> > Say I've got three tables for the members of an organization and its
> > Board
> > of Directors.  Let's say there are approximately ten board positions.
> >  I
> > want to be able to do a query and have an "ad hoc" ordering of the
> > positions
> > for display on a page.  For example:
> >
> > 1. President - John Doe
> > 2. Vice President - Jane Jones
> > 3. Secretary - Bob Smith
> > 4. Treasurer - Neil Jones
> > etc.
> >
> > Tables:
> >
> > Members
> > 
> > MemberID
> > Name
> >
> > BoardPositions
> > -
> > BoardPositionID
> > Description
> >
> > Board
> > -
> > BoardID
> > MemberID
> > BoardPositionID
> >
> >
> > I could add a 'sortorder' field to the Board table, but I don't think
> > this
> > should be in the data.  Rather, I'd like to be able to specify the
> > order
> > when I do the query in my CF template.  Is there any means in SQL to
> > do
> > something like:
> >
> > SELECT Members.Name, BoardPositions.Description
> > FROM Board b, BoardPositions p, Members m
> > WHERE b.MemberID = m.MemberID
> >   AND b.BoardPositionsID = p.BoardPositionsID
> > ORDER BY ('President','Vice President', ...)
> >
> >
> > Thanks,
> > Jim


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Oracle insert DateTime HELP

[Semrau, Steven L Mr SRA]

Here is what I normally use, granted the 'masks' are different but I think
you get the jist.


to_date('#DateFormat(Now(), "mm/dd/")# #TimeFormat(Now(), "h:mm:ss
tt")#', 'MM/DD/ HH:MI:SS AM')

Steven Semrau
SRA International, Inc.
Senior Member, Professional Staff
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Com:  (703) 805-1095
DSN:  (703) 655-1095


-Original Message-
From: Greenberg, Lisa [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 2:44 PM
To: CF-Talk
Subject: Oracle insert DateTime HELP


I'm trying to insert both the date and time into an oracle table.  I can't
seem to get the syntax right.  Any suggestions?


INSERT INTO
temptable
(StartDate) VALUES
(to_date(#DateFormat(SDate,'DD-MMM- HH MM SS')#,'DD-MON-
HH24:MI:SS'))

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: F***edcompany.com report

[Raymond Camden]

> doh ... JRun is going away? 

Nope. 

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email   : [EMAIL PROTECTED]
ICQ UIN : 3679482

"My ally is the Force, and a powerful ally it is." - Yoda 

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Is the max number of cachable queries still 100 in CF 5?

[Dave Watts]

> Assuming that I read correctly that the maximum number of 
> cached queries allowed at any given time in CF 4.5 is 100 
> (CFIDE), has that number increased on version 5? Will CFIDE 
> ignore any value that I enter that is over 100 and continue 
> to recycle the cache at 100?

You could use more than 100 cached queries in CF 4.5.x - 100 is the default
value specified in the CF Administrator as the ceiling, but you can change
it. While I haven't tested it, I'd guess that the behavior is the same in CF
5.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: maxrows and blockfactor

[Dave Watts]

> > Thanks for the tip; I didn't know this. Apparently, neither do 
> > the folks who write the CF documentation. You might want to share 
> > it with them.
> 
> Well, it is missing from the CF4.x docs, but it does exist in 
> the CF5 doc.

Right you are! It's nice to see the inexorable march of progress.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: F***edcompany.com report

[Michael Dinowitz]

JRun is not going away. It is used in both Macromedia generator as well as
the next release of CF (neo). Whoever posted that threat is either lying or
totally misinformed.


> <<
> Rumor has it Macromedia is gonna start laying people off (up to 250
people)
> starting this week. They're doing it quietly in small groups over the next
> few weeks so that they don't have to issue a press release. Apparently the
> people being hit the hardest are employees that were acquired when
Macromedia
> bought Allaire. They've already stopped development on the (Allaire)
Spectra
> product line and now they are doing the same to Allaire's JRun.
> >>
>
> doh ... JRun is going away?
>
>
>
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: SOT: F***edcompany.com report

[Paris Lundis]

as long as they keep COld FUsion :)

Actually, FLash is pretty nice and compatible with just about 
everything... have been seeing some interesting non graphic things out 
of that front for a while...

-paris

-Original Message-
From: [EMAIL PROTECTED]
Date: Mon, 09 Jul 2001 15:34:41 EDT
Subject: SOT: F***edcompany.com report

> <<
> Rumor has it Macromedia is gonna start laying people off (up to 250
> people) 
> starting this week. They're doing it quietly in small groups over the
> next 
> few weeks so that they don't have to issue a press release.
> Apparently the 
> people being hit the hardest are employees that were acquired when
> Macromedia 
> bought Allaire. They've already stopped development on the (Allaire)
> Spectra 
> product line and now they are doing the same to Allaire's JRun. 
> >>
> 
> doh ... JRun is going away? 
> 
> 
> 
> 
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Imposing an ad hoc sort order on a SQL query

[Paris Lundis]

I have had to do this in the past... I just added a USERSORT field and 
put numeric fields in it for display order (ie: PRESIDENT= 1 
VICEPRESIDENT=2, etc.)

then I just create a forms based interface that lets you mod the 
numbers as need be...

so you do a SORT BY USERSORT ASC in my example...

-paris
[finding the future in the past, passing the future in the present]
[connecting people, places and things]


-Original Message-
From: "Jim McAtee" <[EMAIL PROTECTED]>
Date: Mon, 09 Jul 2001 11:39:25 -0600
Subject: Imposing an ad hoc sort order on a SQL query

> Say I've got three tables for the members of an organization and its
> Board
> of Directors.  Let's say there are approximately ten board positions.
>  I
> want to be able to do a query and have an "ad hoc" ordering of the
> positions
> for display on a page.  For example:
> 
> 1. President - John Doe
> 2. Vice President - Jane Jones
> 3. Secretary - Bob Smith
> 4. Treasurer - Neil Jones
> etc.
> 
> Tables:
> 
> Members
> 
> MemberID
> Name
> 
> BoardPositions
> -
> BoardPositionID
> Description
> 
> Board
> -
> BoardID
> MemberID
> BoardPositionID
> 
> 
> I could add a 'sortorder' field to the Board table, but I don't think
> this
> should be in the data.  Rather, I'd like to be able to specify the
> order
> when I do the query in my CF template.  Is there any means in SQL to
> do
> something like:
> 
> SELECT Members.Name, BoardPositions.Description
> FROM Board b, BoardPositions p, Members m
> WHERE b.MemberID = m.MemberID
>   AND b.BoardPositionsID = p.BoardPositionsID
> ORDER BY ('President','Vice President', ...)
> 
> 
> Thanks,
> Jim
> 
> 
> 
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Dynamically changing TYPE attribute in CFMAIL

[Jamie Jackson]

I'm trying to do this sort of thing:


// Set some variables
bunchOfOtherVariables = "Values";
// Plain or HTML format?
formatType = "html"; // (html|plain)



 doesn't seem to like having variables or tags in it (
doesn't work in there either). You can, of course, put variables
within attributes (to="#myTO#"), but it doesn't seem to want them
outside of the attribute quotes.

Also, it doesn't seem to work to the following sort of thing, because
CF server seems to think that if a "Type" attribute is present, then
the email should be HTML-formatted:
Type="#IIF(formatType IS 'html, 'html', 'plain')#"

How do I dynamically change the email's format type?

Thanks,
Jamie




~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: maxrows and blockfactor

[Raymond Camden]

> Thanks for the tip; I didn't know this. Apparently, neither do 
> the folks who
> write the CF documentation. You might want to share it with them.

Well, it is missing from the CF4.x docs, but it does exist in the CF5 doc.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email   : [EMAIL PROTECTED]
ICQ UIN : 3679482

"My ally is the Force, and a powerful ally it is." - Yoda 

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Is the max number of cachable queries still 100 in CF 5?

[Andrew Peterson]

Hi

Assuming that I read correctly that the maximum number of cached queries
allowed at any given time in CF 4.5 is 100 (CFIDE), has that number
increased on version 5? Will CFIDE ignore any value that I enter that is
over 100 and continue to recycle the cache at 100?

Thanks,
Andrew


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Help needed with CFCONTENT

[Bruce, Rodney]

The problem with using "application/octet-stream",  is that the user doesn't
get the option to save the file.

I want the user to be able to save the file just not open it in the browser.
The purpose is for the user to save as PowerPoint slide,  to be added to
presentations later.  

Rodney



If you don't want to allow the "Open file from its current position" 
option specify the content-type "application/octet-stream".

Jochem
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: MSXML, XML, outputting attributes?

[Brett Suwyn]

You can access them directly with XPath or the GetNamedItem method
called on the node.

For example (using XPath):


iBookID = xmlDoc.selectSingleNode("//book/@id");



Brett Suwyn
mailto:[EMAIL PROTECTED]
http://forums.siteobjects.com

|>   -Original Message-
|>   From: Carl [mailto:[EMAIL PROTECTED]] 
|>   Sent: Monday, July 09, 2001 3:08 PM
|>   To: CF-Talk
|>   Subject: MSXML, XML, outputting attributes?
|>   
|>   
|>   Hi,
|>   How do I output attributes from an XML document? I have 
|>   tried using the following example on Microsofts website.
|>   
|>   MS EXAMPLE:
|>   var xmlDoc = new ActiveXObject("Msxml2.DOMDocument");
|>   var nodeBook, sIdValue;
|>   xmlDoc.async = false;
|>   xmlDoc.load("books.xml");
|>   nodeBook = xmlDoc.selectSingleNode("//book");
|>   sIdValue = nodeBook.getAttribute("id")
|>   alert(sIdValue);
|>   
|>   Thanks!!
|>   Carl
|>   


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Oracle insert DateTime HELP

[Greenberg, Lisa]

I'm trying to insert both the date and time into an oracle table.  I can't
seem to get the syntax right.  Any suggestions?


INSERT INTO
temptable
(StartDate) VALUES
(to_date(#DateFormat(SDate,'DD-MMM- HH MM SS')#,'DD-MON-
HH24:MI:SS'))
  


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Meta Tags for search engines and verity

[Robert Everland]

I am developing a pretty important site from scratch and was curious
to see what everyone out there recommends me with regards to meta tags so
that the search engines love them and verity doesn't choke on JavaScript
code.

Robert Everland III
Dixon Ticonderoga
Web Developer Extraordinaire

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Imposing an ad hoc sort order on a SQL query

[Jim McAtee]

Say I've got three tables for the members of an organization and its Board
of Directors.  Let's say there are approximately ten board positions.  I
want to be able to do a query and have an "ad hoc" ordering of the positions
for display on a page.  For example:

1. President - John Doe
2. Vice President - Jane Jones
3. Secretary - Bob Smith
4. Treasurer - Neil Jones
etc.

Tables:

Members

MemberID
Name

BoardPositions
-
BoardPositionID
Description

Board
-
BoardID
MemberID
BoardPositionID


I could add a 'sortorder' field to the Board table, but I don't think this
should be in the data.  Rather, I'd like to be able to specify the order
when I do the query in my CF template.  Is there any means in SQL to do
something like:

SELECT Members.Name, BoardPositions.Description
FROM Board b, BoardPositions p, Members m
WHERE b.MemberID = m.MemberID
  AND b.BoardPositionsID = p.BoardPositionsID
ORDER BY ('President','Vice President', ...)


Thanks,
Jim



~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: WOT (Kinda): Add users to Active Dir via Script?

[Lee Fuller]

Thanks Dave!

The first one looks quite nice.  Although.. Would you believe??... The
"dial-in" property is not one of the properties it will modify!  :(

We'll see if the other one does it.

Thanks again!

Lee


> -Original Message-
> From: Dave Watts [mailto:[EMAIL PROTECTED]] 
> Sent: Sunday, July 08, 2001 4:50 PM
> To: CF-Talk
> Subject: RE: WOT (Kinda): Add users to Active Dir via Script?
> 
> 
> > Can't for the life of me find the util (not Addusers.. It's not
> > what will work in this situation) that will add users to the 
> > active directory and make them part of a specific global group.  
> > I know I've seen it somewhere.. And even tested it. But now 
> > can't seem to find it. We do have W2K RK. So if it's in there, 
> > that will work.
> 
> There are a bunch of ADSI scripts that can be used to do this stuff:
> 
> CreateUsers.vbs
> UserGroup.vbs
> 
> and so on. Search your RK help file for "ADSI". In addition, 
> if you want to do these things from CF, you might look at 
> some of the CFXs and COM objects out there for doing this - 
> there are quite a few.
> 
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> voice: (202) 797-5496
> fax: (202) 797-5444
> 
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Is anyone using Unix Access Control Lists with ColdFusion?

[Larry W. Virden]

We have a need for a file that needs to able to be written by both
coldfusion and another user.  Normally one creates a group and puts both
users into that group.  

I was asked though whether there was a way to make use of ACLs for this
purpose.  I was wondering if anyone out there had any tips on making
use of ACLs under a Solaris web server environment (both positive and negative)

Thanks!
-- 
Never apply a Star Trek solution to a Babylon 5 problem.
Larry W. Virden  http://www.purl.org/NET/lvirden/>
Even if explicitly stated to the contrary, nothing in this posting should 
be construed as representing my employer's opinions.
-><-

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

SOT: F***edcompany.com report

[Wjreichard]

<<
Rumor has it Macromedia is gonna start laying people off (up to 250 people) 
starting this week. They're doing it quietly in small groups over the next 
few weeks so that they don't have to issue a press release. Apparently the 
people being hit the hardest are employees that were acquired when Macromedia 
bought Allaire. They've already stopped development on the (Allaire) Spectra 
product line and now they are doing the same to Allaire's JRun. 
>>

doh ... JRun is going away? 




~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: maxrows and blockfactor

[Chris Norloff]

maxrows is the maximum rows the query will return.  

blockfactor is how many rows are returned per database call. a query returning 100 
rows with a blockfactor=1 (default) will make 100 database calls.  with 
blockfactor=100 (the maximum) it will make one database call.

Chris Norloff

-- Original Message --
From: sebastian palmigiani <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Sat, 07 Jul 2001 16:28:06 -0500

>
>What is the difference between maxrows and blockfactor?
>
>Both are available with  but only blockfactor is available with
>. 
>
>Can you use blockfactor with a  the same way that you would
>use maxrows in ?
>
>
>Sebastian Palmigiani
>
>Cash Flow Club Charity
>http://www.cashflowclubonline.com/?SEB007883
>voice: 773.929.9256
>
>
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

cf-talk@houseoffusion.com

[Hamid Hossain]

I am wondering if any one of you have 
files. I need it as soon as possible.

Regards,
Hamid Hossain
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: URL Hacks - Solution

[Josh R]

I've been reading this thread since the beginning and came up with a pretty 
comfortable solution. I call it cf_antihack. It's a blanket script with a 
pretty quick run time. I haven't placed it on the Developers Exchange yet, 
but I might.

I am offering it to you guys first so I can get some input on it.

You can get the code at my site at http://www.rubak.com/cf-codes.cfm

Don't forget to give me some feedback. If people like this solution, I plan 
to increase it's reach to cover other security issues.

Disclaimer: I am by no means a security expert. I just came up with (what I 
think is) a good idea.


_
Get your FREE download of MSN Explorer at http://explorer.msn.com


Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: question marks and spiders, e-marketers...

[Greg . L . Gorman]

Picked this up off a CF tips page a few months back, haven't ever used
it though... 




search engine safe URLs


This is a modified version of a tip Ben Forta has brought up that 
basically "tricks" search engines into indexing your CF pages.
Since most search engines typically ignore dynamic sites that use 
querystrings in their URLs this code tricks them into seeing a 
directory structure rather than a querystring.

Implementing this should be rather painless if you call parameters 
in your code as #some_id# and not with the url as #url.some_id#.

So lets say you have a magazine site. And you have interviews on 
your site. To view an interview you would link to it with...

  http://yourdomain.com/interview.cfm?i_id=26

Search engines wont index that. However they will index...

  http://yourdomain.com/interview.cfm/i_id/26 
OR 
  http://yourdomain.com/interview.cfm/i_id/26.html 

(both of which will work with the supplied code).

Basically its replacing "?" and "&" and "=" with "/" in the URL. 
The code also lets you append .html or .htm to the end of the URL and 
just weeds it out on the way in.

In both situations above, calling #i_id# will product 26.

feel free to view saulgoodman.com for a working example of how the URLs 
look and act.

do note that this hasn't been tested on all webservers or all versions
of 
cf app server. I've only personally tested it on IIS5 (win2k) and 
cf app server 4.5.1 pro.

you can build your links as...

  /somepage.cfm/section/news/view/#query.column##url_suffix#

Associated Code :




  



  
  




  


  


  


  












  

Courtesy of : Owen Knapp 

---




-Original Message-
From: PLundis [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 11:16 AM
To: cf-talk
Cc: PLundis
Subject: Re: question marks and spiders, e-marketers...


Interested in hearing how anyone has worked the slash game in CF...

ANyone done this?... just looks and sounds much better for all the 
spiders, presentation, etc.

-paris


-Original Message-
From: Jamie Jackson <[EMAIL PROTECTED]>
Date: Mon, 09 Jul 2001 11:46:37 -0400
Subject: Re: question marks and spiders, e-marketers...

> The last that I heard was that some do, some don't.
> 
> Go to Google, and search on "ebags." The second item is a link with a
> question mark (this is a fusebox site). I think that's proof that
> *some do.*
> 
> I've heard of some people hacking their Web server (Apache) to
> understand slashes as a replacement to the query string, thus
> imitating directory structure. So instead of
> mydomain.com/index.cfm?key1=val1&key2=val2, you have *something* like
> mydomain.com/key1/val1/key2/val2
> 
> I'm certain I have the syntax messed up, but you get the point...
> dynamic links that look like regular directories.
> 
> I could have this all wrong, but someone wil correct me.
> 
> Jamie
> 
> On Tue, 03 Jul 2001 15:50:56 -0400, "Andrea Wasik"
> <[EMAIL PROTECTED]> wrote:
> 
> >Hello, 
> >
> >I was just told by an emarketing firm that came in to give us a
> >presentation that none of the search engines can spider links that
> >contain question marks. Since we have a site with over 200,000
> dynamic
> >pages, we have question marks EVERYWHERE as we are using CF. 
> >
> >Does anyone know about the validity of this claim? Has anyone dealt
> >w/this issue and if so, what did you do? I know one option presented
> to
> >us was making up "traffic" pages that have static links to
> accomodate
> >the search engines - but that are not "real" parts of our site -
> that is
> >another option but I am loathe to even begin to think about ways to
> get
> >rid of all question marks in our site.
> >
> >Thanks,
> >
> >Andrea
> >
> >
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

MSXML, XML, outputting attributes?

[Carl]

Hi,
How do I output attributes from an XML document? I have tried using the
following example on Microsofts website.

MS EXAMPLE:
var xmlDoc = new ActiveXObject("Msxml2.DOMDocument");
var nodeBook, sIdValue;
xmlDoc.async = false;
xmlDoc.load("books.xml");
nodeBook = xmlDoc.selectSingleNode("//book");
sIdValue = nodeBook.getAttribute("id")
alert(sIdValue);

Thanks!!
Carl


 MY CF CODE






   


  

  

i=0; 

  
 
 i=i+1;
 nodeOffer_Id = service.selectSingleNode("//Offer_Id");
 Offer_Id = nodeOffer_Id.text;
 Offer_Code = nodeOffer_Id.getAttribute("Offer_Code");
 

 
  #i#. #Offer_Code#
 



  XML DOC   **


http://server/dir/Non_State_Action_Response.dtd";>


061901-1

111


















































*  ERROR MESSAGE I GET   *
Error on Invoke for:

COM error 0x80020003. Member not found.

The error occurred while processing an element with a general identifier of
(CFSCRIPT), occupying document position (73:2) to (73:11) in the template
file C:\dsl_prequal.cfm.




~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

finding the "referer" after a redirect to an error page.

[Todd Ashworth]

Oh jeez .. let me see if I can explain this ...

We are setting up a site where people can come sign up and get their own web
site.  The trick is, we don't want to have to fool with making changes in
the registry, or IIS.  So, we came up with this "brilliant" idea of storing
a site name in the customer master database that is the name of the
subdirectory that their site would normaly sit in if we created a folder for
them and mapped it in IIS (www.oursite.com/theirsitename).  The idea is that
when someone comes looking for www.oursite.com/theirsitename, it won't
really exist and they will be shuffled off to the default error page.  We
have replaced the error page with a cf file that parses out "theirsitename"
and then performs a lookup in the database for information associate with
"theirsitename", sets some client variables, and then shoots them off to the
main application that everyone REALLY uses.  The client variables contain
folder paths and database file info that determines what data is displayed
to what users.

OK .. I hope that made sense.  Anyway .. when the visitor is redirected to
the 'default error' page, the URL that they were trying to get to gets lost.
I don't know enough about IIS or HTTP protocols to know if it's even
possible to keep track of this information.  Does anyone know how I could
accomplish this?

Thanks!

Todd



~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

SOLVED! finding the "referer" after a redirect to an error page.

[Todd Ashworth]

My bad.  I figured out the answer right after I sent the first message.
It's stored in the CGI.QUERY_STRING as
"404;http://www.oursite.com/theirsitename";

That's easy enough to handle :)

Thanks anyway.

Todd

- Original Message -
From: "Todd Ashworth" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 10, 2001 12:52 AM
Subject: finding the "referer" after a redirect to an error page.


| Oh jeez .. let me see if I can explain this ...
|
| We are setting up a site where people can come sign up and get their own
web
| site.  The trick is, we don't want to have to fool with making changes in
| the registry, or IIS.  So, we came up with this "brilliant" idea of
storing
| a site name in the customer master database that is the name of the
| subdirectory that their site would normaly sit in if we created a folder
for
| them and mapped it in IIS (www.oursite.com/theirsitename).  The idea is
that
| when someone comes looking for www.oursite.com/theirsitename, it won't
| really exist and they will be shuffled off to the default error page.  We
| have replaced the error page with a cf file that parses out
"theirsitename"
| and then performs a lookup in the database for information associate with
| "theirsitename", sets some client variables, and then shoots them off to
the
| main application that everyone REALLY uses.  The client variables contain
| folder paths and database file info that determines what data is displayed
| to what users.
|
| OK .. I hope that made sense.  Anyway .. when the visitor is redirected to
| the 'default error' page, the URL that they were trying to get to gets
lost.
| I don't know enough about IIS or HTTP protocols to know if it's even
| possible to keep track of this information.  Does anyone know how I could
| accomplish this?
|
| Thanks!
|
| Todd
|



~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: KILL THE COOK!

[Dave Watts]

> But I didn't understand what they put inside the cf_inputfilter 
> that deleted the cookie whenever I closed the browser (although 
> it was set to never). did you happen to take a look at it?

No, I didn't, and I don't immediately see why it would cause the deletion of
a cookie. In my previous message, my intent was simply to explain why you'd
want to filter the cookie scope just as you would form and URL variables.

> btw: I thought the data in the cookie is encrypted, how does 
> people suppose to change it?

No, by default, cookie data isn't encrypted. It's plaintext, like everything
else in HTTP.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: WOT (Kinda): Add users to Active Dir via Script?

[Dave Watts]

> Also, in searching the Dev Exchange.. I couldn't fine anything that
> would do what we're talking about here.  I did a search for "Active
> Directory", "create users" and "add users".  None turned up anything
> that was even close to what we're talking about here.  Can you tell me
> where you found those that you're talking about.

Here are some that you might try:

Internet Hosting Toolkit:
http://www.intrafoundation.com/

SA-Admin:
http://www.softwareartisans.com/saadmin.html

The first one is free, so you might start with that. It's a set of CFX
components. The second is a COM interface, usable from CF as well as other
COM clients.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Is it really POST? [SOLVED]

[Michael Lugassy]

Andddy,
That is definitly the best solution up to date.
I mark this thread as SOLVED!


Thanks,

Michael
- Original Message -
From: "Andrew Tyrone" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Monday, July 09, 2001 5:55 PM
Subject: RE: Is it really POST?


> -Original Message-
> From: Michael Lugassy [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, July 08, 2001 2:40 PM
> To: CF-Talk
> Subject: Is it really POST?
>
>
> How can I check if the .cfm file was submitted using POST and not GET?
> (I'm trying to prevent, as possible, people to submit the params using URL
and not form fields).
>
> Thanks,
>
> Michael Lugassy
>
>
> 
>
> Well this was interesting when I tested it.  I made two pages:
>
> 
>
> 
>
> Test Form:
> 
>
> 
>
> 
>
> 
>
>
>
> 
>
> 
>
> FORM is defined.
>
> 
> 
> #thisvar#
> 
>
> 
>
> FORM is not defined.
>
> 
>
>
> Now, if you run the first page and submit it, whether you keep the FORM
method as GET or change it to POST, the IsStruct() function will tell you
that FORM is indeed a structure.  This first led me to believe that even
though the form was submitted by GET, CF still knew a form had been
submitted.  Now, even though I didn't check (bad), I surmise that the called
page doesn't know a form has been submitted when method="GET" because if you
run the second page on it's own, FORM is STILL a structure.  I might be
wrong about that, but I still have a solution that I think will work for
you.  Since the FORM structure exists on every page, and is empty on some,
if you change the IsStruct() function to the StructIsEmpty() one, you will
be able to tell if a form was submitted by GET and not post.
>
> I figured this was a good alternative method since HTTP headers can be
faked.
>
>
> -Andy
>
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Is it really POST?

[Andrew Tyrone]

-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 12:25 PM
To: CF-Talk
Subject: RE: Is it really POST?


> Now, if you run the first page and submit it, whether you 
> keep the FORM method as GET or change it to POST, the 
> IsStruct() function will tell you that FORM is indeed a 
> structure.  This first led me to believe that even though the 
> form was submitted by GET, CF still knew a form had been 
> submitted.  Now, even though I didn't check (bad), I surmise 
> that the called page doesn't know a form has been submitted 
> when method="GET" because if you run the second page on it's 
> own, FORM is STILL a structure.  I might be wrong about that, 
> but I still have a solution that I think will work for you.  
> Since the FORM structure exists on every page, and is empty 
> on some, if you change the IsStruct() function to the 
> StructIsEmpty() one, you will be able to tell if a form was 
> submitted by GET and not post.
> 
> I figured this was a good alternative method since HTTP 
> headers can be faked.

> You're putting way too much thought into this. You can't fake the HTTP
> header for REQUEST_METHOD - whatever value you specify (GET, POST, HEAD,
> etc) is what you're doing. It's just like the URL you're actually requesting
> - if you "fake" the header specifying what you're "GETting", you'll get
> something else! So, just looking at the request method header is sufficient.

Actually I didn't put enough thought into that part!  That was kind of dumb, I admit.


> If you have a FORM tag with a METHOD of GET, when the form is submitted,
> there's no way for the server to tell that the data came from a form - that
> data will be embedded into the query string.

Okay, so I guessed right on this one, just wasn't sure.  Finding that the FORM 
structure was available on all pages but just empty if there weren't any FORM 
variables threw me off; I thought it was interesting :)

- Andy


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Print without bringing print dialogue?

[Nathan Chen]

Hi, All:

I posted this before the list went down a few weeks ago. I don't know if
it went though so I re-post it.

I need to know how to print a cfm page without bringing up the print
dialogue from the browser.  If I use window. print() method, the print
dialogue will popup. But what I need is to send the displayed
information to the printer directly without bringing this print dialogue
box.  Is this possible? Any hint or suggestion will be appreciated.

Nathan Chen


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Is it really POST?

[Jordan Saardchit]

interesting point, about "HTTP headers can be faked".  CF generates the
FORM scope furing a request from the HTTP request headers.  So if you
don't trust one, can't trust the other.

-Original Message-
From: Andrew Tyrone [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 8:55 AM
To: CF-Talk
Subject: RE: Is it really POST?


-Original Message-
From: Michael Lugassy [mailto:[EMAIL PROTECTED]]
Sent: Sunday, July 08, 2001 2:40 PM
To: CF-Talk
Subject: Is it really POST?


How can I check if the .cfm file was submitted using POST and not GET?
(I'm trying to prevent, as possible, people to submit the params using
URL and not form fields).

Thanks,

Michael Lugassy




Well this was interesting when I tested it.  I made two pages:





Test Form:














FORM is defined.



#thisvar#




FORM is not defined.




Now, if you run the first page and submit it, whether you keep the FORM
method as GET or change it to POST, the IsStruct() function will tell
you that FORM is indeed a structure.  This first led me to believe that
even though the form was submitted by GET, CF still knew a form had been
submitted.  Now, even though I didn't check (bad), I surmise that the
called page doesn't know a form has been submitted when method="GET"
because if you run the second page on it's own, FORM is STILL a
structure.  I might be wrong about that, but I still have a solution
that I think will work for you.  Since the FORM structure exists on
every page, and is empty on some, if you change the IsStruct() function
to the StructIsEmpty() one, you will be able to tell if a form was
submitted by GET and not post.

I figured this was a good alternative method since HTTP headers can be
faked.


-Andy
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: question marks and spiders, e-marketers...

[Jamie Jackson]

The last that I heard was that some do, some don't.

Go to Google, and search on "ebags." The second item is a link with a
question mark (this is a fusebox site). I think that's proof that
*some do.*

I've heard of some people hacking their Web server (Apache) to
understand slashes as a replacement to the query string, thus
imitating directory structure. So instead of
mydomain.com/index.cfm?key1=val1&key2=val2, you have *something* like
mydomain.com/key1/val1/key2/val2

I'm certain I have the syntax messed up, but you get the point...
dynamic links that look like regular directories.

I could have this all wrong, but someone wil correct me.

Jamie

On Tue, 03 Jul 2001 15:50:56 -0400, "Andrea Wasik"
<[EMAIL PROTECTED]> wrote:

>Hello, 
>
>I was just told by an emarketing firm that came in to give us a
>presentation that none of the search engines can spider links that
>contain question marks. Since we have a site with over 200,000 dynamic
>pages, we have question marks EVERYWHERE as we are using CF. 
>
>Does anyone know about the validity of this claim? Has anyone dealt
>w/this issue and if so, what did you do? I know one option presented to
>us was making up "traffic" pages that have static links to accomodate
>the search engines - but that are not "real" parts of our site - that is
>another option but I am loathe to even begin to think about ways to get
>rid of all question marks in our site.
>
>Thanks,
>
>Andrea
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: teeChart

[Costas Piliotis]

Well good luck =)  I'm spent...  It SHOULD work in either flavour.  When all
else fails, I'd stick with what works =)

Sorry I can't help you further...  Good luch =)


-Original Message-
From: Aidan Whitehall [mailto:[EMAIL PROTECTED]] 
Sent: Saturday, July 07, 2001 2:05 AM
To: CF-Talk
Subject: RE: teeChart


> From what it appears on their system, the processing of the
> report occurs
> AFTER asp/cf/whatever server scripts process;   This appears 
> to run as an
> activeX control on the client's browser.
> 
> From what I understand with ActiveX, the back end scripting technology 
> processes first, the browser gets the html handed off from cf/asp, 
> then ActiveX/Java begins to kick in.

AFAIK, the process is:

 - The TChart COM object is created in memory on the server by using
CFOBJECT ACTION="create".
 - CFSETs pass parameters to the TChart Object.
 - A TChart function is used to save the object to a .tee file on the
server.
 - The filename is then dynamically written to the .cfm page that is handed
back to the client.
 - The OBJECT tag in the HTML loads the ActiveX control which in turn loads
the .tee file via the command "LoadFromURL".

When an .asp file is used to create the object on the server, it works fine.
However, using this code



I get this

Error trying to create object specified in the tag. 
COM error 0x80010105. The server threw an exception. 
The error occurred while processing an element with a general identifier of
(CFOBJECT), occupying document position (2:1) to (6:17).

>From then on, refreshing the page just times out in IE5. CF Server (or is it
PWS?) seems to work OK but dies after about 5 page requests.


Thanks for any help you can give.

-- 
Aidan Whitehall <[EMAIL PROTECTED]>
Macromedia ColdFusion Developer
Fairbanks Environmental +44 (0)1695 51775
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Is it really POST?

[Andrew Tyrone]

-Original Message-
From: Michael Lugassy [mailto:[EMAIL PROTECTED]]
Sent: Sunday, July 08, 2001 2:40 PM
To: CF-Talk
Subject: Is it really POST?


How can I check if the .cfm file was submitted using POST and not GET?
(I'm trying to prevent, as possible, people to submit the params using URL and not 
form fields).

Thanks,

Michael Lugassy




Well this was interesting when I tested it.  I made two pages:





Test Form:














FORM is defined.



#thisvar#




FORM is not defined.




Now, if you run the first page and submit it, whether you keep the FORM method as GET 
or change it to POST, the IsStruct() function will tell you that FORM is indeed a 
structure.  This first led me to believe that even though the form was submitted by 
GET, CF still knew a form had been submitted.  Now, even though I didn't check (bad), 
I surmise that the called page doesn't know a form has been submitted when 
method="GET" because if you run the second page on it's own, FORM is STILL a 
structure.  I might be wrong about that, but I still have a solution that I think will 
work for you.  Since the FORM structure exists on every page, and is empty on some, if 
you change the IsStruct() function to the StructIsEmpty() one, you will be able to 
tell if a form was submitted by GET and not post.

I figured this was a good alternative method since HTTP headers can be faked.


-Andy


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Word Document Generation

[Chris Alvarado]

I have an application that needs to generate Word Documents and basically 
open them on the fly. Currently I am using CFCONTENT to do this, however I 
have run into a small problem. I need to be able to use a defined Word 
TEMPLATE.  The template contains a footer and whatnot that needs to be 
contained in the document. Is there a good reference somewhere for using 
CFCONTENT, or is there another way to do this?

thanks for the help,

-chris


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

BLOB

[Steven Dworman]

What's the ideal way to retrieve BLOBs from an Oracle database.  I've never 
worked with these before, when I tried a cfquery statement I got the 
ORA932: inconsistent datatypes error.

Any help is appreciated.


Steven D Dworman
-
Web Consultant
Systems Administrator

ComSpec International - http://www.comspec-intnl.com
phone: 248.647.8841
cell:  734.972.9676
-
EMPOWER-XL ***Software for Higher Education***
http://www.empower-xl.com


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Zipcode stored procedure

[Mike Nimer]

Here's the sp I use.

Hope this helps,
---nimer


==
CREATE PROCEDURE Zip_Nearest
@ZipCode int,
@Miles int
 AS
declare @cntZips int,
@iLat float,
@iLng float,
@vZip varchar(10)

select Distinct @vZip=ZipCode, @iLat=Lat, @iLng=Lng, @cntZips = count(*)
from ZipUsa
Where Convert(int, ZipCode) = @ZipCode
group by ZipCode,lat,lng

IF (@cntZips > 0 and isNull(@iLat, 0) > 0 AND isNull(@iLNG, 0) > 0)
BEGIN
 SELECT distinct zipcode
 FROM ZIPUSA
 Where (3963.192 * ACOS((SIN(Lat * 0.0174603) * 
  SIN(@iLAT * 0.0174603)) +
  (COS(LAT * 0.0174603) * 
  COS(@iLAT * 0.0174603)*
  COS((LNG * 0.0174603)-(@iLNG * 0.0174603)
 <= @miles
/*
 SELECT distinct ZIPCODE, Lat, LNG
 FROM ZIPUSA
 WHERE (3963.192 * ACOS((SIN(@iLat * 0.0174603) * 
  SIN(LAT * 0.0174603)) +
  (COS(@iLAT * 0.0174603) * 
  COS(LAT * 0.0174603)*
  COS((@iLNG * 0.0174603)-(LNG * 0.0174603)
 <= @miles
*/
END
ELSE
BEGIN
 select * from ZipUsa
 Where ZipCode = @ZipCode
END

GO
==

-Original Message-
From: Robert Everland [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 8:42 AM
To: CF-Talk
Subject: Zipcode stored procedure


I remember someone talking before about designing a stored procedure
to calculate zipcode radius, before I start coding it myself I was curious
if this person is still on the list and willing to share the code.

Robert Everland III
Dixon Ticonderoga
Web Developer Extraordinaire
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Whitespace

[Bill Killillay]

Being and interpreted language it will return it basically how it parses it.
If it where a compiled language, i.e. Java, etc you would not see the
spaces, or at least not as prevalent, there are also some settings in the CF
Server Admin that allow you to strip down some of the white space.  It does
cost you in the time to return game though...

-Original Message-
From: Aidan Whitehall [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 9:39 AM
To: CF-Talk
Subject: Whitespace


Another developer just asked me why ColdFusion returns the complete lines of
whitespace where ColdFusion tags have been removed and found I didn't really
have an adequete answer.

I know you can use CFSETTING and CF_StripWhitespace, but those are
workarounds. Why aren't blank lines just removed once the code's been
parsed?



-- 
Aidan Whitehall <[EMAIL PROTECTED]>
Macromedia ColdFusion Developer
Fairbanks Environmental +44 (0)1695 51775
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Whitespace

[Aidan Whitehall]

Another developer just asked me why ColdFusion returns the complete lines of
whitespace where ColdFusion tags have been removed and found I didn't really
have an adequete answer.

I know you can use CFSETTING and CF_StripWhitespace, but those are
workarounds. Why aren't blank lines just removed once the code's been
parsed?



-- 
Aidan Whitehall <[EMAIL PROTECTED]>
Macromedia ColdFusion Developer
Fairbanks Environmental +44 (0)1695 51775
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: single IP mode?

[Mike Townend]

When the CF Server goes into single IP mode then the first IP that
requests any data from CF will become the only IP that CF will send
information too without restarting the CFServer... So if you have 2
machines connecting to CF 200.1.1.1 and 200.1.1.2 if 200.1.1.1 connects
first to the server then when 200.1.1.2 tries to connect it will only
get an error page.

HTH

Mike

-Original Message-
From: Michael Lugassy [mailto:[EMAIL PROTECTED]] 
Sent: Friday, July 6, 2001 15:10
To: CF-Talk
Subject: single IP mode?


I've just installed the cf 5.0 evaluation.
what is that Single IP mode restriction after 30 days?

Thanks,

Michael Lugassy
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Zipcode stored procedure

[Robert Everland]

I have that tag, I was just hoping to be able to get the code for a stored
procedure to make it faster.

Robert Everland III
Dixon Ticonderoga
Web Developer Extraordinaire

-Original Message-
From: David E. Crawford [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 8:52 AM
To: CF-Talk
Subject: Re: Zipcode stored procedure


There is a tag called CF_ZIPRAD on the tag gallery.  I have a custom version
around here somewhere, that I can dig up.

DC

- Original Message -
From: "Robert Everland" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Monday, July 09, 2001 08:42
Subject: Zipcode stored procedure


> I remember someone talking before about designing a stored procedure
> to calculate zipcode radius, before I start coding it myself I was curious
> if this person is still on the list and willing to share the code.
>
> Robert Everland III
> Dixon Ticonderoga
> Web Developer Extraordinaire
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Zipcode stored procedure

[David E. Crawford]

There is a tag called CF_ZIPRAD on the tag gallery.  I have a custom version
around here somewhere, that I can dig up.

DC

- Original Message -
From: "Robert Everland" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Monday, July 09, 2001 08:42
Subject: Zipcode stored procedure


> I remember someone talking before about designing a stored procedure
> to calculate zipcode radius, before I start coding it myself I was curious
> if this person is still on the list and willing to share the code.
>
> Robert Everland III
> Dixon Ticonderoga
> Web Developer Extraordinaire
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Zipcode stored procedure

[Robert Everland]

I remember someone talking before about designing a stored procedure
to calculate zipcode radius, before I start coding it myself I was curious
if this person is still on the list and willing to share the code.

Robert Everland III
Dixon Ticonderoga
Web Developer Extraordinaire

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: maxrows and blockfactor

[Raymond Camden]

> MAXROWS allows you to define the maximum rows retrieved each query
> (eg: 10). If you leave out MAXROWS the query will return all records
> in the database matching your query. This could be thousands so
> maxrows can be handy.

By the way, did you know if you pass -1 to MAXROWS, it will return
everything? Why would you do that? Imagine a situation where MAXROWS was a
variable, like so:



...


What if you needed a way to go from a max of 100 to no max? Normally you
would use a CFIF and two CFQUERY blocks since CF tags that allow you to
dynamically pass attributes (unlike custom tags which can use
ATTRIBUTECOLLECTION), but by using MAX="-1" you could then support this type
of switch.

Hope that makes sense.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email   : [EMAIL PROTECTED]
ICQ UIN : 3679482

"My ally is the Force, and a powerful ally it is." - Yoda


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Duplicate Messages

[Michael Dinowitz]

Basically. :)


> Yep.  Looks like the list is back to normal after taking a two week
hiatus.
>
> Jim
>
>
> - Original Message -
> From: "David E. Crawford" <[EMAIL PROTECTED]>
> To: "CF-Talk" <[EMAIL PROTECTED]>
> Sent: Sunday, July 08, 2001 2:59 PM
> Subject: Duplicate Messages
>
>
> > It appears that the server is spitting out a substantial number of
> duplicate messages. Most of the messages I have received today are both
> several days old, and generally duplicates of messages received earlier.
> >
> > DC
> >
> > ---
> > David E. Crawford
> > ACTEK, Inc.
> > 2125 Data Office Park, Suite 109
> > Birmingham, AL 35244
> > Phone#:   704-846-9225 / Fax: 704-708-4990
> > Email:[EMAIL PROTECTED] / URL: www.acteksoft.com
> > I-Pager:  [EMAIL PROTECTED]
> > Pager#:   (877) 831-0787
>
>
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: maxrows and blockfactor

[Peter Tilbrook]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Both MAXROWS and BLOCKFACTOR are optional attributes for CFQUERY.

MAXROWS allows you to define the maximum rows retrieved each query
(eg: 10). If you leave out MAXROWS the query will return all records
in the database matching your query. This could be thousands so
maxrows can be handy.

BLOCKFACTOR specifies the maximum number of rows to fetch at a time
from the server. The range is 1 (default) to 100. This parameter
applies to ORACLE native database drivers and to ODBC drivers. Certain
ODBC drivers may dynamically reduce the block factor at runtime. As I
understand it blockfactor can be used to boost the performance of a
query (the database server does the work) but I'm not sure how.

- -Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of sebastian
palmigiani
Sent: Sunday, 8 July 2001 7:28 AM
To: CF-Talk
Subject: maxrows and blockfactor



What is the difference between maxrows and blockfactor?

Both are available with  but only blockfactor is available
with
. 

Can you use blockfactor with a  the same way that you
would
use maxrows in ?


Sebastian Palmigiani
- 
Cash Flow Club Charity
http://www.cashflowclubonline.com/?SEB007883
voice: 773.929.9256
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Server

[Stephen Galligan]

Kevin,

Addresses in the class A range 127.0.0.0 of network addresses have special
status, and are reserved for use as a loopback address (typically
127.0.0.1).  So if you are developing solely on your box then the only IP
address you will need is for the loopback interface, which is always
127.0.0.1.

However if your CFserver is located on a different box you should specify
the IP address of the server's NIC when you connect to it.  The version of
CFserver you are using does only accept one IP address connection.  I was
originally developing on the same box and when I tried connecting to that
box from a networked PC it gave the same error.  When this happened to me I
stopped coldfusion restarted it and then connected to CF using something
like http://194.168.0.1/CFIDE/administrator/ where the IP address is your
server's NIC address.
It then worked.  Hope that is of some help.

Regards
Stephen
-- 
Stephen Galligan 
Web Developer 
Thoughtbubble Ltd 
http://www.thoughtbubble.net 
-- 
United Kingdom 
http://www.thoughtbubble.co.uk/ 
Tel: +44 (0) 20 7387 8890 
-- 
New Zealand 
http://www.thoughtbubble.co.nz/ 
Tel: +64 (0) 9 488 9131 
-- 
The information in this email and in any attachments is confidential and
intended solely for the attention and use of the named addressee(s). Any
views or opinions presented are solely those of the author and do not
necessarily represent those of Thoughtbubble. This information may be
subject to legal, professional or other privilege and further distribution
of it is strictly prohibited without our authority. If you are not the
intended recipient, you are not authorised to disclose, copy, distribute, or
retain this message. Please notify us on +44 (0)207 387 8890.

- -Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Parker,
Kevin
Sent: Friday, 6 July 2001 4:01 PM
To: CF-Talk
Subject: Server


Can someone please point me in the right direction here not being a
network
administrator.

I've got CF Server (single user dev version) installed on a dev box
and have
tried to connect to it from my desktop PC. It says that 127.0.0.1 is
logged
on and will only accept a single IP address. Fair enough - I expected
this.
I can't fire it up from my box because CF services start
automatically. Fair
enough - I've turned all the services to manual start but still no
luck
starting it form here. IIS is running on the box - I can fire it up
from my
desktop PC. What am I doing wrong or not doing?

TIA




Kevin Parker
Web Services Manager
WorkCover Corporation

[EMAIL PROTECTED]

www.workcover.com

p: +61 8 82332548
f: +61 8 82332000
m: 0418 806 166








This e-mail is intended for the use of the addressee only. It may 
contain information that is protected by legislated confidentiality
and/or is legally privileged. If you are not the intended recipient
you
are prohibited from disseminating, distributing or copying this
e-mail.

Any opinion expressed in this e-mail may not necessarily be that of
the
WorkCover Corporation of South Australia. Although precautions have
been taken, the sender cannot warrant that this e-mail or any files
transmitted with it are free of viruses or any other defect.

If you have received this e-mail in error, please notify the sender
immediately by return e-mail and destroy the original e-mail and any
copies.


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: CFExecute

[Raymond Camden]

Use CFSAVECONTENT to wrap the output.

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email   : [EMAIL PROTECTED]
ICQ UIN : 3679482

"My ally is the Force, and a powerful ally it is." - Yoda 

> -Original Message-
> From: Michael S. Kimmett [mailto:[EMAIL PROTECTED]]
> Sent: Friday, July 06, 2001 1:42 PM
> To: CF-Talk
> Subject: CFExecute
> 
> 
> Does anyone know how to get CFExecute to return a value to a parameter?  
> 
> Thanks in advance!
> 
> --Michael


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: CF-Talk Archiver (1.04)

[Peter Tilbrook]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Peter,

nice app.

>>Thx.

was wondering if you have any new updates of the software to pull 
emails from a box where other emails might be and also delete the list

specific emails when done??

Seems to be my biggest problem/need, as the list likes to hit me 
suddenly with hundreds of emails in my general emailbox... requiring
me 
to cleanup before doing what I was doing before the deluge...

>>You should consider using a seperate email account for CF-Talk (or
using
some sort of rule to sort the messages automatically - as I do).
-BEGIN PGP SIGNATURE-
Version: PGP Personal Edition 6.0.2

iQA/AwUBO0ilV0UmflCFE8qcEQLLZACgrAD0fooGtNEccwPEeR8ZeOohq90An10q
XPt6zWw2k35Fp11j8eLA25Xi
=UPvm
-END PGP SIGNATURE-


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: A page call in any IMG tag???

[Daniel Lancelot]

Hi - this is an example with cf...

http://www.vboston.com/DepressedPress/Content/ColdFusion/Essays/GIFAsPipe/In
dex.cfm

HTH

Dan

-Original Message-
From: Jeff Green [mailto:[EMAIL PROTECTED]]
Sent: 09 July 2001 07:03
To: CF-Talk
Subject: A page call in any IMG tag???


Hi all,

I was looking at an email the other day and there was a .jsp page url in the
src attribute of an image tag.

example:


I figure that this is how they track if someone read the email, and would
like to do something similar.

Has anyone ever heard of, or done this?

Thanks for any info on the subject,
Jeff
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Is it really POST?

[Daniel Lancelot]

also - if you fully scope all your variables, (form.* url.* variables.*) it
prevents people from (easily) changing a variable they should not change...
(although the standard caveats about manually submitted http requests would
still apply)

-Original Message-
From: Jim McAtee [mailto:[EMAIL PROTECTED]]
Sent: 09 July 2001 08:30
To: CF-Talk
Subject: Re: Is it really POST?


Check the value of the cgi variable CGI.REQUEST_METHOD.

Jim


- Original Message -
From: "Michael Lugassy" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Sunday, July 08, 2001 12:40 PM
Subject: Is it really POST?


> How can I check if the .cfm file was submitted using POST and not GET?
> (I'm trying to prevent, as possible, people to submit the params using URL
and not form fields).
>
> Thanks,
>
> Michael Lugassy
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

HTML to JPEG?

[Michael Lugassy]

I need to create a thumbnail view of the front/home page of a given site.
that should be done automaticlly, ofcourse.

does anyone know such a program that will allow batch convert of html files
to jpegs (as if I would hire a peon to capture/grab the pages manually)?


Thanks,

Michael Lugassy


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

SCHEDULER STOPS AND STARTS FOR NO REASON

[cf . talk]

We are using a Virtual Hosting company to run our CF4.5.1 production 
sites.  CFSCHEDULE events work fine on our dev box, but on the rented 
production box they stop and start for no reason.

For example, we have a scheduled event which occurs ever 5 minutes, 24 
hours a day (a total of 288 times per day).  The event calls a short (3 
line) CFM file which updates a system variable (writes a copy of #Now()# to 
it) and that's all.

After the hosting company set the initial CFSCHEDULE event up using the 
Administrator, it began running as expected.  But after a few days we 
noticed that the system variable was not always being updated.

So we asked for the server log, and it showed that some days our scheduled 
event stops running about 9am and resumes about 5pm (an interval of about 8 
hours), others it stops earlier and resumes later (intervals up to about 13 
hours), and sometimes it just stops comparatively briefly at random and 
resumes at random (intervals of between 15 and 60 minutes).

Our suspicion is that the Virtual Hosting company have overloaded the CF 
Scheduler (either knowingly or unknowingly).  Is there a straightforward 
way we can examine the CFSCHEDULE queue to determine how heavily it is 
being loaded on the production box?


Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: Server

[Peter Tilbrook]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I believe 127.0.0.1 (or LOCALHOST) is YOUR box and not the server.

Try configuring IIS with an IP address and connect using that instead.

- -Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Parker,
Kevin
Sent: Friday, 6 July 2001 4:01 PM
To: CF-Talk
Subject: Server


Can someone please point me in the right direction here not being a
network
administrator.

I've got CF Server (single user dev version) installed on a dev box
and have
tried to connect to it from my desktop PC. It says that 127.0.0.1 is
logged
on and will only accept a single IP address. Fair enough - I expected
this.
I can't fire it up from my box because CF services start
automatically. Fair
enough - I've turned all the services to manual start but still no
luck
starting it form here. IIS is running on the box - I can fire it up
from my
desktop PC. What am I doing wrong or not doing?

TIA




Kevin Parker
Web Services Manager
WorkCover Corporation

[EMAIL PROTECTED]

www.workcover.com

p: +61 8 82332548
f: +61 8 82332000
m: 0418 806 166








This e-mail is intended for the use of the addressee only. It may 
contain information that is protected by legislated confidentiality
and/or is legally privileged. If you are not the intended recipient
you
are prohibited from disseminating, distributing or copying this
e-mail.

Any opinion expressed in this e-mail may not necessarily be that of
the
WorkCover Corporation of South Australia. Although precautions have
been taken, the sender cannot warrant that this e-mail or any files
transmitted with it are free of viruses or any other defect.

If you have received this e-mail in error, please notify the sender
immediately by return e-mail and destroy the original e-mail and any
copies.


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Is it really POST?

[Jim McAtee]

Check the value of the cgi variable CGI.REQUEST_METHOD.

Jim


- Original Message -
From: "Michael Lugassy" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Sunday, July 08, 2001 12:40 PM
Subject: Is it really POST?


> How can I check if the .cfm file was submitted using POST and not GET?
> (I'm trying to prevent, as possible, people to submit the params using URL
and not form fields).
>
> Thanks,
>
> Michael Lugassy


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Is it really POST?

[Scott Van Vliet]

Their is a header variable called REQUEST_METHOD that will tell how a page
was submitted.

So...





Hope this helps.


- Original Message -
From: "Michael Lugassy" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Sunday, July 08, 2001 11:40 AM
Subject: Is it really POST?


How can I check if the .cfm file was submitted using POST and not GET?
(I'm trying to prevent, as possible, people to submit the params using URL
and not form fields).

Thanks,

Michael Lugassy
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: WOT (Kinda): Add users to Active Dir via Script?

[Lee Fuller]

Hello Dave,

I did find the CreateUsers.vbs script.. Thanks!  It's not the one I used
before.. But it will do nicely for testing purposes.  I'm not sure,
however, where I would get a list of "property" values to set using this
script.  But I'll keep looking around.

Also, in searching the Dev Exchange.. I couldn't fine anything that
would do what we're talking about here.  I did a search for "Active
Directory", "create users" and "add users".  None turned up anything
that was even close to what we're talking about here.  Can you tell me
where you found those that you're talking about.

Thanks again!

Lee


> -Original Message-
> From: Dave Watts [mailto:[EMAIL PROTECTED]] 
> Sent: Sunday, July 08, 2001 4:50 PM
> To: CF-Talk
> Subject: RE: WOT (Kinda): Add users to Active Dir via Script?
> 
> 
> > Can't for the life of me find the util (not Addusers.. It's not
> > what will work in this situation) that will add users to the 
> > active directory and make them part of a specific global group.  
> > I know I've seen it somewhere.. And even tested it. But now 
> > can't seem to find it. We do have W2K RK. So if it's in there, 
> > that will work.
> 
> There are a bunch of ADSI scripts that can be used to do this stuff:
> 
> CreateUsers.vbs
> UserGroup.vbs
> 
> and so on. Search your RK help file for "ADSI". In addition, 
> if you want to do these things from CF, you might look at 
> some of the CFXs and COM objects out there for doing this - 
> there are quite a few.
> 
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> voice: (202) 797-5496
> fax: (202) 797-5444
> 
>
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

cf-talk@houseoffusion.com

[Scott Van Vliet]

Hello Folks:

I recently posted a message asking if anyone had experience with JavaBeans working 
inside of CF.  Since that post, I have developed a custom tag,  
that accepts a java.sql.ResultSet object and returns a CF Query Object.

If anyone wants to utilize this tag, just e-mail me.


--> scott van vliet
<-- senior web engingeer
juxt interactive
949<>752<>5898<>202
[EMAIL PROTECTED]
www.juxtinteractive.com

"In uniqueness is the preservation
 of mankind..." - Greg Graffin


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

A page call in any IMG tag???

[Jeff Green]

Hi all,

I was looking at an email the other day and there was a .jsp page url in the
src attribute of an image tag.

example:


I figure that this is how they track if someone read the email, and would
like to do something similar.

Has anyone ever heard of, or done this?

Thanks for any info on the subject,
Jeff




~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: cflocation kills my session

[Massimo Foti]

This one works as well without killing cookies:



Massimo



"Don Vawter" <[EMAIL PROTECTED]> wrote in message
news:00fc01c107e8$4d6e35c0
> If you use js to do redirection then browser should see cookies because
you
> are on client side.
> 
> location.replace(url);
> 
> That way it doesnt show up in history file




~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

CF 5.0 & Client Registry Environments

[Dan Blickensderfer]

Hello All,

We have a W2K server with CF 5.0 and by default the client variables was stored into 
the registry.  Since then the registry filled up and I switched the client variables 
to store within a database.  I was wondering if there is an easy way to remove all the 
old client variable registry entries from the server?  I tried to purge within 1 day 
and the entries are still in there.  

Thanks,

Dan Blickensderfer








~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

CFX_Doc2HTML

[Peter Tilbrook]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Looking to purchase this custom tag (if I can find it).

It was written by a fellow who used to work at www.gtriad.com.

Does anyone know where to get it?

Thx.

Peter Tilbrook
Chief Web Developer
Lunar Power Internet Technologies
Unit 1, 26-28 Winchcombe Court
Mitchell, ACT, 2911
AUSTRALIA

Phone: (02) 6242 
Mobile: 0401 973 415
Fax: (02) 6242 6655
Email: [EMAIL PROTECTED]
Web: http://www.lunarpower.com.au 
-BEGIN PGP SIGNATURE-
Version: PGP Personal Edition 6.0.2

iQA/AwUBO0jP0EUmflCFE8qcEQL6TACgjo4S1ZayQGaWKdc6BGD7tyjA2UcAnidO
KTbikueNYYRIVsSyqMhs4YyD
=nluS
-END PGP SIGNATURE-


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Re: Duplicate Messages

[Jim McAtee]

Yep.  Looks like the list is back to normal after taking a two week hiatus.

Jim


- Original Message -
From: "David E. Crawford" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Sunday, July 08, 2001 2:59 PM
Subject: Duplicate Messages


> It appears that the server is spitting out a substantial number of
duplicate messages. Most of the messages I have received today are both
several days old, and generally duplicates of messages received earlier.
>
> DC
>
> ---
> David E. Crawford
> ACTEK, Inc.
> 2125 Data Office Park, Suite 109
> Birmingham, AL 35244
> Phone#:   704-846-9225 / Fax: 704-708-4990
> Email:[EMAIL PROTECTED] / URL: www.acteksoft.com
> I-Pager:  [EMAIL PROTECTED]
> Pager#:   (877) 831-0787


~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

RE: CGI.variables list

[Stephen Kellogg]

Michael,
In admin under miscellaneous click on debugging, put a check in the third
box down which says Show variables. Add your ip and don't forget to hit
apply. Run a .cfm page in your browser and look at the bottom of the page.
You will see the following:

Parameters
CGI Variables:

AUTH_PASSWORD=
AUTH_TYPE=
AUTH_USER=
CERT_COOKIE=
CERT_FLAGS=
CERT_ISSUER=
CERT_KEYSIZE=
CERT_SECRETKEYSIZE=
CERT_SERIALNUMBER=
CERT_SERVER_ISSUER=
CERT_SERVER_SUBJECT=
CERT_SUBJECT=
CF_TEMPLATE_PATH=
CONTENT_LENGTH=
CONTENT_TYPE=
GATEWAY_INTERFACE=
HTTP_ACCEPT=
HTTP_ACCEPT_ENCODING=
HTTP_ACCEPT_LANGUAGE=
HTTP_CONNECTION=
HTTP_COOKIE=CFID= CFTOKEN=
HTTP_HOST=
HTTP_REFERER=
HTTP_USER_AGENT=
HTTPS=
HTTPS_KEYSIZE=
HTTPS_SECRETKEYSIZE=
HTTPS_SERVER_ISSUER=
HTTPS_SERVER_SUBJECT=
PATH_INFO=
PATH_TRANSLATED=
QUERY_STRING=
REMOTE_ADDR=
REMOTE_HOST=
REMOTE_USER=
REQUEST_METHOD=
SCRIPT_NAME=
SERVER_NAME=
SERVER_PORT=
SERVER_PORT_SECURE=
SERVER_PROTOCOL=
SERVER_SOFTWARE=
WEB_SERVER_API=

of course yours will have info after many of the ='s.

BTW the other debug info is useful as well ;-)

HTH

Stephen



-Original Message-
From: Michael Lugassy [mailto:[EMAIL PROTECTED]]
Sent: Sunday, July 08, 2001 10:16 AM
To: CF-Talk
Subject: CGI.variables list


Does someone has a full/partial list of CGI variables?
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists