RE: Preventing URL Variables from being changed

2002-01-18 Thread Carlisle, Eric

I have to agree with Ben.  
If possible in your application, use variable scopes that do not have 
to be
sent to the client (session and client variables work very nicely for 
this).
Using URL and FORM vars, while being great tools, are sometimes risky 
and
take time to write extra code to prevent exploitation.

EC


-Original Message-
From: BEN MORRIS [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 18, 2002 1:25 PM
To: CF-Talk
Subject: Re: Preventing URL Variables from being changed


When they login, set session.UserID

Whenever a record is accessed do a check to make sure that 
record.UserID 
= session.UserID, and if not then give them some "unauthorized" 
message 
or whatever.

>>> David Douglas <[EMAIL PROTECTED]> 01/18/02 01:25PM >>>
Hello,

I setup a view query where it only displays records on the user's ID.  
I
notice that if I change the
ID name in the URL it will show the other records for that ID, I am 
sure
there is a simple way to prevent this.

Any help is greatly appreciated.

Thanks

Dave


__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: hierarchical database.....

2002-01-18 Thread Bryan Stevenson

If the DB is Oracle then I know you can quite easily do the recursive queries using 
that model.  If
it's Transact SQL then the recursion is quite a pain in the arse.

I've looked at the nested set model, but decided against it for some reason which 
completely escapes
me at the moment ;-)

Bryan Stevenson
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
p. 250.920.8830
e. [EMAIL PROTECTED]
-
Macromedia Associate Partner
www.macromedia.com

- Original Message -
From: "Richard Meredith-Hardy" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, January 18, 2002 11:05 AM
Subject: Re: hierarchical database.


> Bryan
>
>
> Yes I have used this structure before but it's this looping that you
> have to do which I was trying to avoid...
>
>
>
>
>
> Bryan Stevenson wrote:
> >
> > the setup from the hierarchical table should be something like this..
> >
> > Parent_ID, ID, Any other fields you need
> >
> > I set Parent_ID to zero if it is the top level.  All the children of the parent 
>have the
Parent_IDs
> > "ID" value as their Parent_ID...so...
> >
> > Parent:
> > ID 1 Parent_ID 0
> > Children:
> > ID 2 Parent_ID 1
> > ID 3 Parent_ID 1
> > Childs Children:
> > ID 4 Parent_ID 2
> > ID 5 Parent_ID 2
> > ID 6 Parent_ID 3
> > etc. to infinity and beyond!
> >
> > but of course you're stuck with recursive queries or looping over queries etc.
>
>
>
>
>
> >
> > HTH
> >
> > Bryan Stevenson
> > VP & Director of E-Commerce Development
> > Electric Edge Systems Group Inc.
> > p. 250.920.8830
> > e. [EMAIL PROTECTED]
> > -
> > Macromedia Associate Partner
> > www.macromedia.com
> >
> > - Original Message -
> > From: "Richard Meredith-Hardy" <[EMAIL PROTECTED]>
> > To: "CF-Talk" <[EMAIL PROTECTED]>
> > Sent: Friday, January 18, 2002 10:33 AM
> > Subject: hierarchical database.
> >
> > > I'm having a job getting my head around this one.
> > >
> > > Essentially I am trying to establish a hierarchical structure in a
> > > database in such a way one is not having to do loads of recursive
> > > queries to return the path between one item and another in the tree...
> > > is this even possible?
> > >
> > > One idea someone threw at me was XML well I understand WDDX, but I
> > > don't understand the principles of using XML as an actual database.
> > > Could this solve my problem?
> > >
> > > All ideas & suggestions welcome!
> > >
> > > --
> > > Regards;
> > >
> > > Richard Meredith-Hardy
> > > -
> > > [EMAIL PROTECTED]
> > >
> >
> 
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: hierarchical database.....

2002-01-18 Thread Richard Meredith-Hardy

Bryan


Yes I have used this structure before but it's this looping that you
have to do which I was trying to avoid...

  



Bryan Stevenson wrote:
> 
> the setup from the hierarchical table should be something like this..
> 
> Parent_ID, ID, Any other fields you need
> 
> I set Parent_ID to zero if it is the top level.  All the children of the parent have 
>the Parent_IDs
> "ID" value as their Parent_ID...so...
> 
> Parent:
> ID 1 Parent_ID 0
> Children:
> ID 2 Parent_ID 1
> ID 3 Parent_ID 1
> Childs Children:
> ID 4 Parent_ID 2
> ID 5 Parent_ID 2
> ID 6 Parent_ID 3
> etc. to infinity and beyond!
> 
> but of course you're stuck with recursive queries or looping over queries etc.





> 
> HTH
> 
> Bryan Stevenson
> VP & Director of E-Commerce Development
> Electric Edge Systems Group Inc.
> p. 250.920.8830
> e. [EMAIL PROTECTED]
> -
> Macromedia Associate Partner
> www.macromedia.com
> 
> - Original Message -
> From: "Richard Meredith-Hardy" <[EMAIL PROTECTED]>
> To: "CF-Talk" <[EMAIL PROTECTED]>
> Sent: Friday, January 18, 2002 10:33 AM
> Subject: hierarchical database.
> 
> > I'm having a job getting my head around this one.
> >
> > Essentially I am trying to establish a hierarchical structure in a
> > database in such a way one is not having to do loads of recursive
> > queries to return the path between one item and another in the tree...
> > is this even possible?
> >
> > One idea someone threw at me was XML well I understand WDDX, but I
> > don't understand the principles of using XML as an actual database.
> > Could this solve my problem?
> >
> > All ideas & suggestions welcome!
> >
> > --
> > Regards;
> >
> > Richard Meredith-Hardy
> > -
> > [EMAIL PROTECTED]
> >
> 
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: hierarchical database.....

2002-01-18 Thread Dave Watts

> Essentially I am trying to establish a hierarchical structure 
> in a database in such a way one is not having to do loads of 
> recursive queries to return the path between one item and 
> another in the tree... is this even possible?  
> 
> One idea someone threw at me was XML well I understand 
> WDDX, but I don't understand the principles of using XML as 
> an actual database. Could this solve my problem?

Unfortunately, "use XML" isn't much of an answer. It's analogous to
answering "how can I drive to the store" by saying "use gasoline". In fact,
XML isn't especially useful for answering questions like this; it's not
suited to modeling relational data, but is useful as a transport mechanism
for denormalized data.

There is a good, useful model for hierarchies in SQL that provides
functionality beyond simply relating a parent and child. It's called the
nested set model. There's information on it from Joe Celko, a highly
respected database guy, here:
http://www.intelligententerprise.com/001020/celko.shtml

Better yet, there's an implementation of it by David Medinets here:
http://www.codebits.com/ntm/

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: hierarchical database.....

2002-01-18 Thread Dan G. Switzer, II

Richard,

There's an excellent method for handling hierarchical trees in Joe
Celko's SQL for Smarties which he refers to as the "Nested Set Model."
There are some excellent tutorials on using the Nested Set Model w/CF on
SecretAgents.com:

http://www.secretagents.com/index.cfm?fuseaction=freeviewlets.viewlet&vi
ewlet_id=45&CFID=492326&CFTOKEN=88407308

The only thing the Nested Set Model doesn't do very well, is dynamic
sorting of each branch--because the logic it uses, sets a predefined
ordinal value to all the nodes. There are ways to work around this of
course, and you can even combine Nested Set Model w/the traditional
parent_id/child node relationship.

Hope this helps!
-Dan

> -Original Message-
> From: Richard Meredith-Hardy [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 18, 2002 1:33 PM
> To: CF-Talk
> Subject: hierarchical database.
> 
> I'm having a job getting my head around this one.
> 
> Essentially I am trying to establish a hierarchical structure in a
> database in such a way one is not having to do loads of recursive
> queries to return the path between one item and another in the tree...
> is this even possible?
> 
> One idea someone threw at me was XML well I understand WDDX, but I
> don't understand the principles of using XML as an actual database.
> Could this solve my problem?
> 
> All ideas & suggestions welcome!
> 
> --
> Regards;
> 
> Richard Meredith-Hardy
> -
> [EMAIL PROTECTED]
> 
__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: html standards

2002-01-18 Thread Billy Cravens

There's actually a custom tag (by Steve Nelson) called cf_HTMLHead that does
this - I use it on most of my applications:

http://www.fusebox.org//download/tags/htmlhead.zip

- Original Message -
From: "Kevin Bridges" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, January 18, 2002 12:19 PM
Subject: RE: html standards


> That cfhtmlhead tag is pretty sweet ... However, can someone please
> pass on
> to Macromedia that it makes zero sense to call it like so:
> 
> It should be called like this:
> 
>
> Now if we want to start using cfhtmlhead we have to go through all of
> our js
> code and make sure the quotes are escaped and don't conflict with the
> type
> of quote you use in "".
>
> ::: -Original Message-
> ::: From: Dave Watts [mailto:[EMAIL PROTECTED]]
> ::: Sent: Friday, January 18, 2002 10:36 AM
> ::: To: CF-Talk
> ::: Subject: RE: html standards
> :::
> :::
> ::: > Were developing a rather large applciation/intranet where
> ::: > there is a fair bit of code in application.cfm and in header
> ::: > files and such. The  blah blah 
> ::: > section is in a file called dsp_header. In some pages, much
> ::: > of the javascript gets included with the form as a simple
> ::: > script block outside the  tags. Also, we've
> ::: > recently put some javascript code in the application.cfm
> ::: > file.
> :::
> ::: The short answer is, no, current browsers don't care where
> ::: your JavaScript
> ::: is, as long as functions and objects are defined before
> ::: they're referenced.
> ::: However, standards compliance is a good thing, all other
> ::: things being equal,
> ::: and future browsers may care.
> :::
> ::: Fortunately, you can deal with this using the CFHTMLHEAD
> ::: tag, which writes a
> ::: string to the HTML HEAD of the document. By itself, it's
> ::: difficult to use
> ::: with strings containing JavaScript, so you can build
> ::: yourself a little
> ::: four-line custom tag to automatically escape the strings:
> :::
> ::: 
> ::: 
> ::: 
> ::: 
> :::
> ::: Dave Watts, CTO, Fig Leaf Software
> ::: http://www.figleaf.com/
> ::: voice: (202) 797-5496
> ::: fax: (202) 797-5444
> ::: 
> ::: __
> ::: Dedicated Windows 2000 Server
> :::   PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
> :::   Instant Activation · $99/Month · Free Setup
> :::   http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
> ::: FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
> ::: Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
> ::: Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
> 
__
Why Share?
  Dedicated Win 2000 Server · PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Capture Output from CFINCLUDE?

2002-01-18 Thread Raymond Camden

Are you sure? I ran the exact same code and it ran just fine. Are you
saying that cfsavecontent is being ignored and the output is showing up
anyway? 

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

"My ally is the Force, and a powerful ally it is." - Yoda 

> -Original Message-
> From: James Ang [mailto:[EMAIL PROTECTED]] 
> Sent: Friday, January 18, 2002 1:57 PM
> To: CF-Talk
> Subject: RE: Capture Output from CFINCLUDE?
> 
> 
> Sorry that I wasn't clear.
> 
> I want the generated output produced by whatever code that was in the
> cfinclude. I am trying to perform a CFSAVECONTENT-like operation on
> CFINCLUDE files. Doesn't work with CFSAVECONTENT right now
> 
> I.e.
> 
> 
> 
> 
> 
> Does not work.
> 
> I want to be able to capture the output and do some nifty stuff to it.
> CFHTTP is not something I would want to try for what I want to do. ;)
> 
> James.
> 
> -Original Message-
> From: Bryan Stevenson [mailto:[EMAIL PROTECTED]] 
> Sent: Friday, January 18, 2002 10:50 AM
> To: CF-Talk
> Subject: Re: Capture Output from CFINCLUDE?
> 
> 
> more info plz
> 
> What do you mean by "capture"?  If you are doing some processing in an
> included file all the variables that are created should be 
> available to
> the calling template.
> 
> Bryan Stevenson
> VP & Director of E-Commerce Development
> Electric Edge Systems Group Inc.
> p. 250.920.8830
> e. [EMAIL PROTECTED]
> -
> Macromedia Associate Partner
> www.macromedia.com
> 
> - Original Message -
> From: "James Ang" <[EMAIL PROTECTED]>
> To: "CF-Talk" <[EMAIL PROTECTED]>
> Sent: Friday, January 18, 2002 10:42 AM
> Subject: Capture Output from CFINCLUDE?
> 
> 
> > Is it possible to capture the output from an included template?
> >
> > I have tried CFSAVECONTENT and also tried to wrap the 
> cfinclude within
> 
> > a custom tag and use ThisTag.GeneratedContent but to no avail.
> >
> > It is not an option to modify the cfincluded file. Nor is 
> it an option
> 
> > to convert it into a cf module. So, all suggestions are welcomed. :)
> >
> > If it is not possible, please let me know too! :)
> >
> > Thanks.
> >
> > James Ang
> > [EMAIL PROTECTED]
> >
> > 
> 
> 
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Capture Output from CFINCLUDE?

2002-01-18 Thread Billy Cravens

Use CFHTTP

- Original Message -
From: "James Ang" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, January 18, 2002 12:42 PM
Subject: Capture Output from CFINCLUDE?


> Is it possible to capture the output from an included template?
>
> I have tried CFSAVECONTENT and also tried to wrap the cfinclude within a
> custom tag and use ThisTag.GeneratedContent but to no avail.
>
> It is not an option to modify the cfincluded file. Nor is it an option
> to convert it into a cf module. So, all suggestions are welcomed. :)
>
> If it is not possible, please let me know too! :)
>
> Thanks.
>
> James Ang
> [EMAIL PROTECTED]
>
> 
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Capture Output from CFINCLUDE?

2002-01-18 Thread Bryan Stevenson

OK..well like I said the output that is created in the included  file is available to 
the calling
template, so just reference the vars created in the included file and do your nifty 
stuff to them.
It looks like you're making this process more complicated than it needs to bebut 
mabye I'm
missing something ;-)

Bryan Stevenson
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
p. 250.920.8830
e. [EMAIL PROTECTED]
-
Macromedia Associate Partner
www.macromedia.com

- Original Message -
From: "James Ang" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, January 18, 2002 10:56 AM
Subject: RE: Capture Output from CFINCLUDE?


> Sorry that I wasn't clear.
>
> I want the generated output produced by whatever code that was in the
> cfinclude. I am trying to perform a CFSAVECONTENT-like operation on
> CFINCLUDE files. Doesn't work with CFSAVECONTENT right now
>
> I.e.
>
> 
> 
> 
>
> Does not work.
>
> I want to be able to capture the output and do some nifty stuff to it.
> CFHTTP is not something I would want to try for what I want to do. ;)
>
> James.
>
> -Original Message-
> From: Bryan Stevenson [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 18, 2002 10:50 AM
> To: CF-Talk
> Subject: Re: Capture Output from CFINCLUDE?
>
>
> more info plz
>
> What do you mean by "capture"?  If you are doing some processing in an
> included file all the variables that are created should be available to
> the calling template.
>
> Bryan Stevenson
> VP & Director of E-Commerce Development
> Electric Edge Systems Group Inc.
> p. 250.920.8830
> e. [EMAIL PROTECTED]
> -
> Macromedia Associate Partner
> www.macromedia.com
>
> - Original Message -
> From: "James Ang" <[EMAIL PROTECTED]>
> To: "CF-Talk" <[EMAIL PROTECTED]>
> Sent: Friday, January 18, 2002 10:42 AM
> Subject: Capture Output from CFINCLUDE?
>
>
> > Is it possible to capture the output from an included template?
> >
> > I have tried CFSAVECONTENT and also tried to wrap the cfinclude within
>
> > a custom tag and use ThisTag.GeneratedContent but to no avail.
> >
> > It is not an option to modify the cfincluded file. Nor is it an option
>
> > to convert it into a cf module. So, all suggestions are welcomed. :)
> >
> > If it is not possible, please let me know too! :)
> >
> > Thanks.
> >
> > James Ang
> > [EMAIL PROTECTED]
> >
> >
>
> 
__
Why Share?
  Dedicated Win 2000 Server · PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Capture Output from CFINCLUDE?

2002-01-18 Thread James Ang

Sorry that I wasn't clear.

I want the generated output produced by whatever code that was in the
cfinclude. I am trying to perform a CFSAVECONTENT-like operation on
CFINCLUDE files. Doesn't work with CFSAVECONTENT right now

I.e.





Does not work.

I want to be able to capture the output and do some nifty stuff to it.
CFHTTP is not something I would want to try for what I want to do. ;)

James.

-Original Message-
From: Bryan Stevenson [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 18, 2002 10:50 AM
To: CF-Talk
Subject: Re: Capture Output from CFINCLUDE?


more info plz

What do you mean by "capture"?  If you are doing some processing in an
included file all the variables that are created should be available to
the calling template.

Bryan Stevenson
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
p. 250.920.8830
e. [EMAIL PROTECTED]
-
Macromedia Associate Partner
www.macromedia.com

- Original Message -
From: "James Ang" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, January 18, 2002 10:42 AM
Subject: Capture Output from CFINCLUDE?


> Is it possible to capture the output from an included template?
>
> I have tried CFSAVECONTENT and also tried to wrap the cfinclude within

> a custom tag and use ThisTag.GeneratedContent but to no avail.
>
> It is not an option to modify the cfincluded file. Nor is it an option

> to convert it into a cf module. So, all suggestions are welcomed. :)
>
> If it is not possible, please let me know too! :)
>
> Thanks.
>
> James Ang
> [EMAIL PROTECTED]
>
> 

__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: hierarchical database.....

2002-01-18 Thread Bryan Stevenson

the setup from the hierarchical table should be something like this..

Parent_ID, ID, Any other fields you need

I set Parent_ID to zero if it is the top level.  All the children of the parent have 
the Parent_IDs
"ID" value as their Parent_ID...so...

Parent:
ID 1 Parent_ID 0
Children:
ID 2 Parent_ID 1
ID 3 Parent_ID 1
Childs Children:
ID 4 Parent_ID 2
ID 5 Parent_ID 2
ID 6 Parent_ID 3
etc. to infinity and beyond!

but of course you're stuck with recursive queries or looping over queries etc.

HTH

Bryan Stevenson
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
p. 250.920.8830
e. [EMAIL PROTECTED]
-
Macromedia Associate Partner
www.macromedia.com

- Original Message -
From: "Richard Meredith-Hardy" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, January 18, 2002 10:33 AM
Subject: hierarchical database.


> I'm having a job getting my head around this one.
>
> Essentially I am trying to establish a hierarchical structure in a
> database in such a way one is not having to do loads of recursive
> queries to return the path between one item and another in the tree...
> is this even possible?
>
> One idea someone threw at me was XML well I understand WDDX, but I
> don't understand the principles of using XML as an actual database.
> Could this solve my problem?
>
> All ideas & suggestions welcome!
>
> --
> Regards;
>
> Richard Meredith-Hardy
> -
> [EMAIL PROTECTED]
> 
__
Why Share?
  Dedicated Win 2000 Server · PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Capture Output from CFINCLUDE?

2002-01-18 Thread Bryan Stevenson

more info plz

What do you mean by "capture"?  If you are doing some processing in an included file 
all the
variables that are created should be available to the calling template.

Bryan Stevenson
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
p. 250.920.8830
e. [EMAIL PROTECTED]
-
Macromedia Associate Partner
www.macromedia.com

- Original Message -
From: "James Ang" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, January 18, 2002 10:42 AM
Subject: Capture Output from CFINCLUDE?


> Is it possible to capture the output from an included template?
>
> I have tried CFSAVECONTENT and also tried to wrap the cfinclude within a
> custom tag and use ThisTag.GeneratedContent but to no avail.
>
> It is not an option to modify the cfincluded file. Nor is it an option
> to convert it into a cf module. So, all suggestions are welcomed. :)
>
> If it is not possible, please let me know too! :)
>
> Thanks.
>
> James Ang
> [EMAIL PROTECTED]
>
> 
__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



hierarchical database.....

2002-01-18 Thread Richard Meredith-Hardy

I'm having a job getting my head around this one.  

Essentially I am trying to establish a hierarchical structure in a
database in such a way one is not having to do loads of recursive
queries to return the path between one item and another in the tree...
is this even possible?  

One idea someone threw at me was XML well I understand WDDX, but I
don't understand the principles of using XML as an actual database. 
Could this solve my problem?

All ideas & suggestions welcome!

--
Regards;

Richard Meredith-Hardy
-
[EMAIL PROTECTED]
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Capture Output from CFINCLUDE?

2002-01-18 Thread James Ang

Is it possible to capture the output from an included template?

I have tried CFSAVECONTENT and also tried to wrap the cfinclude within a
custom tag and use ThisTag.GeneratedContent but to no avail.

It is not an option to modify the cfincluded file. Nor is it an option
to convert it into a cf module. So, all suggestions are welcomed. :)

If it is not possible, please let me know too! :)

Thanks.

James Ang
[EMAIL PROTECTED]

__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Preventing URL Variables from being changed

2002-01-18 Thread Raymond Camden

The other solutions provided work nice. You may also want to consider
URLHash from cflib.org. 

===
Raymond Camden, Principal Spectra Compliance Engineer for Macromedia

Email: [EMAIL PROTECTED]
Yahoo IM : morpheus

"My ally is the Force, and a powerful ally it is." - Yoda 

> -Original Message-
> From: David Douglas [mailto:[EMAIL PROTECTED]] 
> Sent: Friday, January 18, 2002 1:26 PM
> To: CF-Talk
> Subject: Preventing URL Variables from being changed
> 
> 
> Hello,
> 
> I setup a view query where it only displays records on the 
> user's ID.  I
> notice that if I change the
> ID name in the URL it will show the other records for that 
> ID, I am sure
> there is a simple way to prevent this.
> 
> Any help is greatly appreciated.
> 
> Thanks
> 
> Dave
> 
__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Preventing URL Variables from being changed

2002-01-18 Thread BEN MORRIS

When they login, set session.UserID

Whenever a record is accessed do a check to make sure that record.UserID 
= session.UserID, and if not then give them some "unauthorized" message 
or whatever.

>>> David Douglas <[EMAIL PROTECTED]> 01/18/02 01:25PM >>>
Hello,

I setup a view query where it only displays records on the user's ID.  I
notice that if I change the
ID name in the URL it will show the other records for that ID, I am sure
there is a simple way to prevent this.

Any help is greatly appreciated.

Thanks

Dave

__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: html standards

2002-01-18 Thread Kevin Bridges

That cfhtmlhead tag is pretty sweet ... However, can someone please 
pass on
to Macromedia that it makes zero sense to call it like so:

It should be called like this:


Now if we want to start using cfhtmlhead we have to go through all of 
our js
code and make sure the quotes are escaped and don't conflict with the 
type
of quote you use in "".

::: -Original Message-
::: From: Dave Watts [mailto:[EMAIL PROTECTED]]
::: Sent: Friday, January 18, 2002 10:36 AM
::: To: CF-Talk
::: Subject: RE: html standards
::: 
::: 
::: > Were developing a rather large applciation/intranet where 
::: > there is a fair bit of code in application.cfm and in header 
::: > files and such. The  blah blah  
::: > section is in a file called dsp_header. In some pages, much 
::: > of the javascript gets included with the form as a simple 
::: > script block outside the  tags. Also, we've 
::: > recently put some javascript code in the application.cfm 
::: > file.
::: 
::: The short answer is, no, current browsers don't care where 
::: your JavaScript
::: is, as long as functions and objects are defined before 
::: they're referenced.
::: However, standards compliance is a good thing, all other 
::: things being equal,
::: and future browsers may care.
::: 
::: Fortunately, you can deal with this using the CFHTMLHEAD 
::: tag, which writes a
::: string to the HTML HEAD of the document. By itself, it's 
::: difficult to use
::: with strings containing JavaScript, so you can build 
::: yourself a little
::: four-line custom tag to automatically escape the strings:
::: 
::: 
::: 
::: 
::: 
::: 
::: Dave Watts, CTO, Fig Leaf Software
::: http://www.figleaf.com/
::: voice: (202) 797-5496
::: fax: (202) 797-5444
::: 
::: __
::: Dedicated Windows 2000 Server
:::   PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
:::   Instant Activation · $99/Month · Free Setup
:::   http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
::: FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
::: Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
::: Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Preventing URL Variables from being changed

2002-01-18 Thread Kevin Bridges

Yeah ... you should try variations of drop:table as the ID number 
(actually
you might not want to do that).  First of all make sure you are using
 in your queries.  Because you can't control what people 
do to
the urls consider using form variables ... but that is a security risk 
as
well.

So we did this to try and counter it:

http://sourceforge.net/projects/cfurlencrypt/

::: -Original Message-
::: From: David Douglas [mailto:[EMAIL PROTECTED]]
::: Sent: Friday, January 18, 2002 11:26 AM
::: To: CF-Talk
::: Subject: Preventing URL Variables from being changed
::: 
::: 
::: Hello,
::: 
::: I setup a view query where it only displays records on the 
::: user's ID.  I
::: notice that if I change the
::: ID name in the URL it will show the other records for that 
::: ID, I am sure
::: there is a simple way to prevent this.
::: 
::: Any help is greatly appreciated.
::: 
::: Thanks
::: 
::: Dave
::: 
::: __
::: Why Share?
:::   Dedicated Win 2000 Server · PIII 800 / 256 MB RAM / 40 GB 
::: HD / 20 GB MO/XFER
:::   Instant Activation · $99/Month · Free Setup
:::   http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc
::: FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
::: Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
::: Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Caller Problem

2002-01-18 Thread Double Down

I have a custom tag that deals with uploading images to the server. The
tag also checks to make sure that the images do not have a zero value as
well as the proper type (gif or jpg). When an error does occur the
caller tag is not being displayed on the action page and the custom tag
continues to process.
 
If anyone can help, I need to find out why the caller message is not
being displayed.
 
THANKS
 
 

__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Preventing URL Variables from being changed

2002-01-18 Thread David Douglas

Hello,

I setup a view query where it only displays records on the user's ID.  I
notice that if I change the
ID name in the URL it will show the other records for that ID, I am sure
there is a simple way to prevent this.

Any help is greatly appreciated.

Thanks

Dave
__
Why Share?
  Dedicated Win 2000 Server · PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Advanced Coldfusion - Generating Preview Pages ???

2002-01-18 Thread Carlisle, Eric

The form action page is a sure-fire way of getting those form variables to
the preview page.  The only other way I can think of is by doing some client
side JS code to transfer the form values to the preview page.  I'd advise
against that, as I prefer to keep that kind of application code server side
(especially since you have regular expression code to consider as well). 

Consider this.  You could have a preview page with the options "Commit"
(which does teh db insert) or "Go Back" (which goes back to the populated
form).  

Another idea.  When I do thing like this, I like to combine the editor and
the actual display as much as possible.  For an editor that allows
add/edit/delete on a page of links, I would have one page with the editor on
top and the display (as the users see it) on the bottom.  Doing it this way,
I can place the display section on as an include (the include will have the
intelligence to determine if it's in "display public" or "display admin"
mode.  This way, I only have to write the display code once and don't have
to worry about syncing changes to multiple versions of the same file.

Admittingly, a links page is a pretty simple animal.  Not all templates are
going to accomodate this design.  if you can find a way to make an editor
that displays the data as seen in the public section, sometimes you can
avoid having preview pages.

Good luck!

EC



-Original Message-
From: Ian Vaughan [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 18, 2002 9:28 AM
To: CF-Talk
Subject: Re: Advanced Coldfusion - Generating Preview Pages ???


Eric

 does it have to be in the form action page ???

Could it not be a seperate template and when they click on the preview pa
ge
button it opens a new broswer window with the preview template with the d
ata
conatined in the form variables displayed as if it was viewed through CF 
in
a web browser as an end user/


Also in my processing (action page) there are some regular expressions su
ch
as




]*>", "", "ALL")>
]*>", "", "ALL")>

So how would my preview page actually look like to display the form
variables ?

Ian



- Original Message -
From: "Carlisle, Eric" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, January 18, 2002 1:59 PM
Subject: RE: Advanced Coldfusion - Generating Preview Pages ???


> Sure...
> In the template that processes the form entries-->
>
> 
> 
>
> ** code to preview **
> (you could include the template that outputs to end users - just
> modify it to also handle FORM variables when applicable).
>
> 
>
> ** code to insert record to database **
>
> 
>
> 
>
>
>
>
> -Original Message-
> From: Ian Vaughan [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 18, 2002 8:48 AM
> To: CF-Talk
> Subject: Advanced Coldfusion - Generating Preview Pages ???
>
>
> I am using standard html forms in a browser to allow admin users to
> add/modify entries to an oracle database via Coldfusion.
>
> When the form is submitted these changes are then sent to the relevant
> fields in the database table.
>
> And a seperate coldfusion template displays the output to end web
> users.
>
> At present this is all done automatically when the user submits the
> form.
>
> What I would like to do, is offer the administration user (who
> adds/modifies
> stories) a preview option of how the page would look in the web
> browser,
> before they actually submit their details to the database, so they have
> an
> idea of how the information they have just entered in the relevant form
> fields would look when generated from coldfusion and viewed by an end
> user
> in their browser.
>
>
> Is this process viable with Coldfusion , if so have any list members
> achieved anything like this?
>
> Ian
>
>
> 

__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: html standards

2002-01-18 Thread Kreig Zimmerman

Andre,

The main difference in the placement of the  tags is this...

..you place JS functions in the  which are called from within the
document/by other functions.

When you place