Re: DSN Connection issue

2004-05-31 Thread Dirk De Bock - Listclient
you must set the MS SQL security to mixed mode, use the sql enterprise manager to verify/change this.
- Original Message - 
From: Eric Creese 
To: CF-Talk 
Sent: Sunday, May 30, 2004 10:31 PM
Subject: Re: DSN Connection issue

ok I did this but got the same results as a user connection.I I use SQL username/password it has an error with a trusted connection if I use WindowsNt default then it works. However in the CF Admin it wants a username/password o I try a SQL username password for that db and it fails.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: He3 community input (custom tag paths/mappings)

2004-05-31 Thread Roger Benningfield
First, it 
requires the developer to actually configure information in a project. 
I know DWMX's project configuration annoyed me when I was used to just 
pointing Studio at a file system directory

Matt,

The key in to ensure that I can can get a feel for functionality without slogging my way through a project setup. (Perhaps bundle a series of simple Hello, World! projects that can be used to get a feel for things.) Once I'm sold, the minor investment in setup time won't be a big deal.

Second, the project's 
settings could get out of sync with the target platform thus causing 
unexpected behavior.

Throwing out ideas:

- Let me tell the app which files contain vital settings (hopefully, there won't be more than a few per project), and optionally (by default?) remind me to check my project settings when changes are made to those files.

- Let me define the settings in the project info, and then automatically insert the values into my files wherever I enter something like [$He3.CFCpath$]. If I change the value, sweep through and update my code.

--
Roger Benningfield
work: http://journurl.com/
blog: http://admin.mxblogspace.journurl.com/
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Rookie Regex question

2004-05-31 Thread Pascal Peters
If you want to only accept uppercase: 
cfset variables.ThisRegex=^[A-Z]+$ 
If you want to only accept uppercase or empty string: 
cfset variables.ThisRegex=^[A-Z]*$ 
If you want to accept all characters except lowercase: 
cfset variables.ThisRegex=^[^a-z]+$ 

The thing is: you were matching a single character. In validation
regexps you generally have to match the entire string. That is why I use
^ (matches beginning of string) and $ (matches end of string).

And you don't need #variables.ThisRegex#, just do variables.ThisRegex
(the quotes and hashes cancel each other).

 -Original Message-
 From: Matt Robertson [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 4:18
 To: CF-Talk
 Subject: Rookie Regex question
 
 I want to be able to plug in a dynamic regex, like you see 
 below.Its part of a thing that lets someone specify 
 regex-based form field validation.
 
 Thing is, the code below passes and I want it to fail.I'm 
 sure the problem is my rudimentary regex skills.I'm doing 
 something stoopid here, but I can't find it.
 
 If I wanted the string below to accept only uppercase chars, 
 A to Z, what would I change here?
 
 cfset variables.ThisRegex=[A-Z]
 cfset form.FieldValue=HOLTSVILLEblah cfif 
 REFind(#variables.ThisRegex#,form.FieldValue)
 passedcfelsefailed/cfif
 cfset test=REFind(#variables.ThisRegex#,form.FieldValue)
 cfdump var=#variables#
 
 
Matt Robertson [EMAIL PROTECTED] 
MSB Designs, Inc.http://mysecretbase.com

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Pascal Peters
Jeff,

They have to die at sessiontimeout, but NOT when you close your browser
(if you are using CF sessions on CFMX or a lower version). If you use
J2EE sessions in CFMX, the session will end if you close all browser
windows. 

Without seeing code, I can't imagine why the session would persist after
the specified timeout. You could try and debug by doing a cfdump
var=#session# right after the cfapplication tag. This way you can see
if the session really exists, or if your code recreates it or something
of the kind.

Pascal 

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 2:11
 To: CF-Talk
 Subject: Application Security Confusion
 
 Ok, I must really be missing something obvious, because this 
 makes no sense.

 I have an application that has security setup and tracked via session
 variables.The cfapplication tag has the setClientCookies 
 attribute set to
 true, and the sessionTimeout attribute has a createTimeSpan 
 value of 0,0,15,0 which I thought was 15 minutes (I am 
 questioning most everything I
 knew now).At the beginning of each secure page, there is 
 an isDefined
 check to see if a session structure userAuth exists.If so, 
 then further checks are done to check for valid permissions - 
 if not, the user is sent to the login screen.

 When I first load the application, I get sent to the login screen as
 expected.However, if I leave my browser window open with 
 no activity for
 30 minutes, I find I can still navigate the secure pages 
 without having to
 log in again.What is even weirder is that I can close all 
 of my browser
 windows, load a new browser window and go directly to a 
 secure url in the site without having to log in again.

 I am beginning to question everything I knew about session 
 variables, but I thought they were supposed to time out and 
 die automatically based upon the sessionTimeout attribute of 
 the cfapplication tag and they always died immediately upon 
 closing the browser.

 My session variables won't die!

 Thanks for any pointers.
 -- Jeff
 
 
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Again Java CFX

2004-05-31 Thread Paul Vernon
Andrew,

 
It would appear that I never received the original of this mail
nevermind all is well now

 
Paul
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: How do I track

2004-05-31 Thread Pascal Peters
You are mixing _javascript_ (client side) and CF (server side) here. This
simply won't work.

On your original question. This is a hard thing to do. Why do you need
it? What do you mean by How long someone has viewed a coldfusion page?
Start when it loads in the browser? What is defined by page?

If you really need to do this, I would create a JS function to calculate
this: initialize the time in onload and calculate the difference in
onunload of the body. Then send a request through a popup or hidden
frame (or even an img src) to the server.

Pascal 

 -Original Message-
 From: JT [mailto:[EMAIL PROTECTED] 
 Sent: zondag 30 mei 2004 20:57
 To: CF-Talk
 Subject: RE: How do I track
 
 Hum...
 
 Why does this not work?
 
 cfset session.timeFirstView = Now()
 
 cfscript
 
 pagetime = structnew() == CF
 
 pagetime.FirstView = session.firstTimeView == CF
 
 pagetime. ExitTime = onunload(now()) == CF  JS
 
 pagetime.Visited = pagetime.Visited - pagetime.Firstview == CF
 
 alert(time.Visited) == JS
 
 /cfscript
 
 Any help preciated,
 
 JT
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: He3 community input (custom tag paths/mappings)

2004-05-31 Thread Raymond Camden
 For various types of features we would like to implement in 
 He3, we need the ability to locate files that are defined by 
 runtime information which won't be available. Examples of 
 this include resolving cfincludes, custom tag calls, and CFC 
 dot notation references. One way to solve this is for 
 projects in He3 to be configured with custom tag paths and 
 mappings that match the settings in the target platform. That 
 leads to a few implications. First, it requires the developer 
 to actually configure information in a project. 
 I know DWMX's project configuration annoyed me when I was 
 used to just pointing Studio at a file system directory. 
 Second, the project's settings could get out of sync with the 
 target platform thus causing unexpected behavior.
 
 Any thoughts on the proposed solution?

Do you see people's settings changing often? Normally (well, for my projects
anyway), the settings (DSN, mapping) are setup at the beginning and never
change. The main thing that _does_ change are the files. So if your
product's concept of projects would auto include all files in a folder, then
I think it would be fine. I'd have no issue setting up things like the DSN
and mapping since this would only need to be done once per project.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: How do I track

2004-05-31 Thread JT
Thanks,
I got it working yesterday using a image.

JT

-Original Message-
From: Pascal Peters [mailto:[EMAIL PROTECTED]
Sent: Monday, May 31, 2004 2:11 AM
To: CF-Talk
Subject: RE: How do I track

You are mixing _javascript_ (client side) and CF (server side) here. This
simply won't work.

On your original question. This is a hard thing to do. Why do you need
it? What do you mean by How long someone has viewed a coldfusion page?
Start when it loads in the browser? What is defined by page?

If you really need to do this, I would create a JS function to calculate
this: initialize the time in onload and calculate the difference in
onunload of the body. Then send a request through a popup or hidden
frame (or even an img src) to the server.

Pascal

 -Original Message-
 From: JT [mailto:[EMAIL PROTECTED]
 Sent: zondag 30 mei 2004 20:57
 To: CF-Talk
 Subject: RE: How do I track

 Hum...

 Why does this not work?

 cfset session.timeFirstView = Now()

 cfscript

 pagetime = structnew() == CF

 pagetime.FirstView = session.firstTimeView == CF

 pagetime. ExitTime = onunload(now()) == CF  JS

 pagetime.Visited = pagetime.Visited - pagetime.Firstview == CF

 alert(time.Visited) == JS

 /cfscript

 Any help preciated,

 JT
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: How do I track

2004-05-31 Thread Daniel Farmer
You are mixing _javascript_ (client side) and CF (server side) here. This
simply won't work.

I've mixed the two technologies before with no problems.

- Original Message - 
From: JT 
To: CF-Talk 
Sent: Monday, May 31, 2004 9:38 AM
Subject: RE: How do I track

Thanks,
I got it working yesterday using a image.

JT

 -Original Message-
 From: Pascal Peters [mailto:[EMAIL PROTECTED]
 Sent: Monday, May 31, 2004 2:11 AM
 To: CF-Talk
 Subject: RE: How do I track

 You are mixing _javascript_ (client side) and CF (server side) here. This
 simply won't work.

 On your original question. This is a hard thing to do. Why do you need
 it? What do you mean by How long someone has viewed a coldfusion page?
 Start when it loads in the browser? What is defined by page?

 If you really need to do this, I would create a JS function to calculate
 this: initialize the time in onload and calculate the difference in
 onunload of the body. Then send a request through a popup or hidden
 frame (or even an img src) to the server.

 Pascal

  -Original Message-
  From: JT [mailto:[EMAIL PROTECTED]
  Sent: zondag 30 mei 2004 20:57
  To: CF-Talk
  Subject: RE: How do I track
 
  Hum...
 
  Why does this not work?
 
  cfset session.timeFirstView = Now()
 
  cfscript
 
  pagetime = structnew() == CF
 
  pagetime.FirstView = session.firstTimeView == CF
 
  pagetime. ExitTime = onunload(now()) == CF  JS
 
  pagetime.Visited = pagetime.Visited - pagetime.Firstview == CF
 
  alert(time.Visited) == JS
 
  /cfscript
 
  Any help preciated,
 
  JT
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: How do I track

2004-05-31 Thread Pascal Peters
NOT in the same statement (as in JT's code). You can't set a CF var to
the value of a JS var without making a request. Due to the nature of the
web, this is impossible!

 -Original Message-
 From: Daniel Farmer [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 15:51
 To: CF-Talk
 Subject: Re: How do I track
 
You are mixing _javascript_ (client side) and CF (server 
 side) here. This
simply won't work.
 
 I've mixed the two technologies before with no problems.

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: the ever popular cflock best practice revisited

2004-05-31 Thread Don
Here's a quick summary or status on the best practice of cflock use for session variable for both preCFMX and CFMX based on this thread and the two articles from MM site (correct me anyone you have new finding):
*) Rule of thumb: use SCOPE attribue with value of session for the whole app(consistently) is safer than using NAME attribute in general or when in doubt.

*) Still no crystall clear/no definite answer as to When to use SCOPE and When to use NAME, a quote from one of MM's article on the subject, Using the name attribute is useful when you want a high level of granularity in your locking., it needs collaboration and case scenario.

And when it's determined that using NAME attribute is preferable to using SCOPE, then when to use static/same NAME for a lock content and when to use dynamic lock NAME becomes a question, quote from MM, Note that you should never ever use different names for locks on code that accesses the same data, implys that in most cases, use static/same lock name, but part of of quote, accesses the same data seem confusing, because normally, data within a lock may vary from users.
It would be a great value addition if MM clarify that.

 Hi,
 
 I've inherited an app that does not lock session variables.The app 
 runs under CF5.0.
 
 Have read cflock best practice for CF5.0. Here are a few questions:
 (A) CFLOCK
 1) heard that cf5 server and cfmx server handles cflock differently, 
 so, would cflock best pratice for cf5 applicable to cfmx if one day 
 the app upgraded to cfmx?
 2) what about this notion of the NAME attribute, that is, a different 
 lock name would differentiate data/value inside a lock (be it read and 
 write when applicable), the analog of gym's lock room. No? with a SAME 
 lock NAME, cf server (5.0/prior and cfmx) would treat each request as 
 students line up to try that SAME lock with each one having a 
 key/request in his/her hand?
 
 3) given the fact that SCOPE and NAME attributes are mutually 
 exclusive,
 use one of them would suffice, so, the question is when to use SCOPE 
 and when to use NAME (data integriy number one task, less memory usage 
 second for either preCFMX or CFMX)?
 
 (B) Single Threaded Sessions (CF Admin)
 Could we construe that Single Threaded Sessions mechanism is a way 
 that MM designed to overcome the lousy coding of not locking session 
 variables? By that, I mean, so, instead of going through tons of code 
 modification, just apply the Single Threaded Sessions to let CF 
 server to handle the locks for data integrity.How well does Single 
 Threaded Sessions does this job?
 
 Thank you.
 
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Jeff Chastain
Okay, Hal's tutorial fixed the browser close issue.

 
However, I still cannot get the session variables to timeout when the
browser is still open.I even set the seesionTimeout attribute to 15
seconds and I can still navigate the application all day long without being
required to re-login.

 
Any thoughts on what might cause this?

 
Thanks
-- Jeff

_

From: Pascal Peters [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 3:52 AM
To: CF-Talk
Subject: RE: Application Security Confusion

Jeff,

They have to die at sessiontimeout, but NOT when you close your browser
(if you are using CF sessions on CFMX or a lower version). If you use
J2EE sessions in CFMX, the session will end if you close all browser
windows. 

Without seeing code, I can't imagine why the session would persist after
the specified timeout. You could try and debug by doing a cfdump
var=#session# right after the cfapplication tag. This way you can see
if the session really exists, or if your code recreates it or something
of the kind.

Pascal 

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 2:11
 To: CF-Talk
 Subject: Application Security Confusion
 
 Ok, I must really be missing something obvious, because this 
 makes no sense.

 I have an application that has security setup and tracked via session
 variables.The cfapplication tag has the setClientCookies 
 attribute set to
 true, and the sessionTimeout attribute has a createTimeSpan 
 value of 0,0,15,0 which I thought was 15 minutes (I am 
 questioning most everything I
 knew now).At the beginning of each secure page, there is 
 an isDefined
 check to see if a session structure userAuth exists.If so, 
 then further checks are done to check for valid permissions - 
 if not, the user is sent to the login screen.

 When I first load the application, I get sent to the login screen as
 expected.However, if I leave my browser window open with 
 no activity for
 30 minutes, I find I can still navigate the secure pages 
 without having to
 log in again.What is even weirder is that I can close all 
 of my browser
 windows, load a new browser window and go directly to a 
 secure url in the site without having to log in again.

 I am beginning to question everything I knew about session 
 variables, but I thought they were supposed to time out and 
 die automatically based upon the sessionTimeout attribute of 
 the cfapplication tag and they always died immediately upon 
 closing the browser.

 My session variables won't die!

 Thanks for any pointers.
 -- Jeff
 
 
 
 
_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: How do I track

2004-05-31 Thread Daniel Farmer
True Enough... 
- Original Message - 
From: Pascal Peters 
To: CF-Talk 
Sent: Monday, May 31, 2004 9:59 AM
Subject: RE: How do I track

NOT in the same statement (as in JT's code). You can't set a CF var to
the value of a JS var without making a request. Due to the nature of the
web, this is impossible!

 -Original Message-
 From: Daniel Farmer [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 15:51
 To: CF-Talk
 Subject: Re: How do I track
 
You are mixing _javascript_ (client side) and CF (server 
 side) here. This
simply won't work.
 
 I've mixed the two technologies before with no problems.

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Pascal Peters
Your code? Did you try my suggestion and dump the session scope right
after the cfapplication tag? 

Do you have any other cfapplication tags with the same name? (change the
name maybe)

Is there some code in there that makes requests without you seeing it?

...

Pascal

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 16:08
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Okay, Hal's tutorial fixed the browser close issue.

 However, I still cannot get the session variables to timeout when the
 browser is still open.I even set the seesionTimeout attribute to 15
 seconds and I can still navigate the application all day long 
 without being required to re-login.

 Any thoughts on what might cause this?

 Thanks
 -- Jeff
 
_
 
 From: Pascal Peters [mailto:[EMAIL PROTECTED]
 Sent: Monday, May 31, 2004 3:52 AM
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 
 Jeff,
 
 They have to die at sessiontimeout, but NOT when you close 
 your browser
 (if you are using CF sessions on CFMX or a lower version). If you use
 J2EE sessions in CFMX, the session will end if you close all browser
 windows. 
 
 Without seeing code, I can't imagine why the session would 
 persist after
 the specified timeout. You could try and debug by doing a cfdump
 var=#session# right after the cfapplication tag. This way 
 you can see
 if the session really exists, or if your code recreates it or 
 something
 of the kind.
 
 Pascal 
 
  -Original Message-
  From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
  Sent: maandag 31 mei 2004 2:11
  To: CF-Talk
  Subject: Application Security Confusion
  
  Ok, I must really be missing something obvious, because this 
  makes no sense.
 
  I have an application that has security setup and tracked 
 via session
  variables.The cfapplication tag has the setClientCookies 
  attribute set to
  true, and the sessionTimeout attribute has a createTimeSpan 
  value of 0,0,15,0 which I thought was 15 minutes (I am 
  questioning most everything I
  knew now).At the beginning of each secure page, there is 
  an isDefined
  check to see if a session structure userAuth exists.If so, 
  then further checks are done to check for valid permissions - 
  if not, the user is sent to the login screen.
 
  When I first load the application, I get sent to the login screen as
  expected.However, if I leave my browser window open with 
  no activity for
  30 minutes, I find I can still navigate the secure pages 
  without having to
  log in again.What is even weirder is that I can close all 
  of my browser
  windows, load a new browser window and go directly to a 
  secure url in the site without having to log in again.
 
  I am beginning to question everything I knew about session 
  variables, but I thought they were supposed to time out and 
  die automatically based upon the sessionTimeout attribute of 
  the cfapplication tag and they always died immediately upon 
  closing the browser.
 
  My session variables won't die!
 
  Thanks for any pointers.
  -- Jeff
  
  
  
  
_
 
 
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Pascal Peters
Your code? Did you try my suggestion and dump the session scope right
after the cfapplication tag? 

Do you have any other cfapplication tags with the same name? (change the
name maybe)

Is there some code in there that makes requests without you seeing it?

...

Pascal

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 16:08
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Okay, Hal's tutorial fixed the browser close issue.

 However, I still cannot get the session variables to timeout when the
 browser is still open.I even set the seesionTimeout attribute to 15
 seconds and I can still navigate the application all day long 
 without being required to re-login.

 Any thoughts on what might cause this?

 Thanks
 -- Jeff
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Jeff Chastain
The code is a complete FB4 application, so I am not sure how to post it
here.

 
I stripped out the cfapplication tags etc from the application.cfm file, put
them in a stand alone app and the variables timeout as expected.There is
only one cfapplication tag in this application, so what could possibly cause
the session to be retained?

 
There is no code in the application that refreshes the page if that is what
you are asking.All pages are just a simple request.

 
Thanks
-- Jeff

_

From: Pascal Peters [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 9:17 AM
To: CF-Talk
Subject: RE: Application Security Confusion

Your code? Did you try my suggestion and dump the session scope right
after the cfapplication tag? 

Do you have any other cfapplication tags with the same name? (change the
name maybe)

Is there some code in there that makes requests without you seeing it?

...

Pascal

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 16:08
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Okay, Hal's tutorial fixed the browser close issue.

 However, I still cannot get the session variables to timeout when the
 browser is still open.I even set the seesionTimeout attribute to 15
 seconds and I can still navigate the application all day long 
 without being required to re-login.

 Any thoughts on what might cause this?

 Thanks
 -- Jeff 
_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: He3 community input (custom tag paths/mappings)

2004-05-31 Thread Dan G. Switzer, II
Do you see people's settings changing often? Normally (well, for my
projects
anyway), the settings (DSN, mapping) are setup at the beginning and never
change. The main thing that _does_ change are the files. So if your
product's concept of projects would auto include all files in a folder,
then
I think it would be fine. I'd have no issue setting up things like the DSN
and mapping since this would only need to be done once per project.

I'd also point out, that there are times when I want to use full featured
editor, but don't necessarily need/want to set up a project just to edit a
couple of rogue files.

So, I want both a project view and a normal o/s file view--depending on how
I'm working at the moment.

- Dan
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: He3 community input (custom tag paths/mappings)

2004-05-31 Thread Raymond Camden
 I'd also point out, that there are times when I want to use 
 full featured editor, but don't necessarily need/want to set 
 up a project just to edit a couple of rogue files.
 
 So, I want both a project view and a normal o/s file 
 view--depending on how I'm working at the moment.
 

A huge +1 on this. I hate editors that make me jump through hoops just to do
quick edits. Projects should _not_ be required, period. If it means I lose
features (like maybe right clicking on a cfinclude and loading the file it
loads), thats fine.

-Ray
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Maybe OT: Recommendation of CF/sql server hosting in Europe

2004-05-31 Thread Don
Hi,

Does anyone knows/uses some cf server(5 or cfmx) and MS SQL Server hosting service in Europe?Client is a small company, so, moderately priced or cheap would be desirable.

TIA.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Rookie Regex question

2004-05-31 Thread Matt Robertson
Matthew and Pascal,

You guys cleared up a lot for me.Thanks!


 Matt Robertson [EMAIL PROTECTED]
 MSB Designs, Inc.http://mysecretbase.com

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Need to maintain session state after leaving and returning to site

2004-05-31 Thread Paul Jones
I have a cold fusion application that has been working for the last couple of years.It's a system that gathers airline reservation information, stores them in session variables, and then populate a database with the relevant reservation and ticketing information AFTER the authorized user has been authenticated by a login form.

We are now in the process of extending the system to accept credit cards and serve the general public.Our credit card validating bank gave us a form to be included in our application.That form encrypts the data, posts the information to a page on their site, and returns an authentication code to a specific page on our page.Based on a valid authentication code, we'd continue our processing or abort the process.Everything works fine up to this point.However, we have found that all our session information is lost when we receive a response from the bank.

I've since confirmed this behavior by submitting a form to an offsite page and then have it return to my site.

I'm thinking that Cold fusion treats this as a new session since the request is effectively coming from another client.I need all the information that was previously captured but I would rather not start storing anything in my database until I can validate the credit card information.What are my options? Is there anyway around the session information being reset?

 The following is the CFForm section of the posting form.The address on my machine is 192.168.26.220.

cfform action="">
method=POST
name=frmPayment

The following is the complete TicketPaymentRedirector.cfm template.All is does is redirect back to my machine

cflocation url="">

At the top of PaymentConfirm.cfm,I check the session variables I had set in previous pages and they are all gone.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: Maybe OT: Recommendation of CF/sql server hosting in Europe

2004-05-31 Thread Don
Additional info: for English application/site.

 Hi,
 
 Does anyone knows/uses some cf server(5 or cfmx) and MS SQL Server 
 hosting service in Europe?Client is a small company, so, moderately 
 priced or cheap would be desirable.
 
 TIA.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: Maybe OT: Recommendation of CF/sql server hosting in Europe

2004-05-31 Thread Doug White
Must be in Europe?

==
Our Anti-spam solution works!!
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
http://www.forta.com/cf/isp/isp.cfm?isp_id=1069
==

- Original Message - 
From: Chunshen (Don) Li
To: CF-Talk
Sent: Monday, May 31, 2004 9:48 AM
Subject: Maybe OT: Recommendation of CF/sql server hosting in Europe

Hi,

Does anyone knows/uses some cf server(5 or cfmx) and MS SQL Server hosting
service in Europe?Client is a small company, so, moderately priced or cheap
would be desirable.

TIA.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: Maybe OT: Recommendation of CF/sql server hosting in Europe

2004-05-31 Thread Don
Must be in Europe?

The client is in Europe, thought he might feel more comfortable when hosting his app in a European environment.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: calling on Flash to create a file

2004-05-31 Thread Frank Dewey
That's a valid reason to consider...

 
I will be thinking about the best route to go then.Thank you -
Frank



From: John Dowdell [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 28, 2004 7:30 PM
To: CF-Talk
Subject: Re: calling on Flash to create a file

At 3:22 PM 5/28/4, Frank Dewey wrote:
I am using Flash (although I should be going home!) to talk to
ColdFusion that connects to a database. All works well as far as
updates
and inserts, ...). However I would like for my application to also be
able to create a file.

Think about where the thing actually lives. If you've got in-browser
SWF,
then you're asking a plugin to write to (presumably) a known location on
the hard drive, which is a safety risk. If you're running in a
standalone
then you've got to ask what your standalone shell can do... if it's in
the
Central shell you've got a different situation... you might even be
trying
to run a SWF on a server, can't be sure.

Generally, for Does [some form] of SWF play write to disk? the answer
would be no. You may be able to achieve your goal, though, depending
on
exactly what it is.

jd 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: calling on Flash to create a file

2004-05-31 Thread Daniel Farmer
What about calling a custom VB application or using WSH ( running on the server ) to create your file?

- Original Message - 
From: Frank Dewey 
To: CF-Talk 
Sent: Monday, May 31, 2004 12:26 PM
Subject: RE: calling on Flash to create a file

That's a valid reason to consider...

I will be thinking about the best route to go then.Thank you -
 Frank



From: John Dowdell [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 28, 2004 7:30 PM
To: CF-Talk
Subject: Re: calling on Flash to create a file

At 3:22 PM 5/28/4, Frank Dewey wrote:
I am using Flash (although I should be going home!) to talk to
ColdFusion that connects to a database. All works well as far as
updates
and inserts, ...). However I would like for my application to also be
able to create a file.

Think about where the thing actually lives. If you've got in-browser
SWF,
then you're asking a plugin to write to (presumably) a known location on
the hard drive, which is a safety risk. If you're running in a
standalone
then you've got to ask what your standalone shell can do... if it's in
the
Central shell you've got a different situation... you might even be
trying
to run a SWF on a server, can't be sure.

Generally, for Does [some form] of SWF play write to disk? the answer
would be no. You may be able to achieve your goal, though, depending
on
exactly what it is.

jd 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Maybe OT: Recommendation of CF/sql server hosting in Europe

2004-05-31 Thread Paul Vernon
We co-lo with a european ISP (UK based) and they have a couple of rooms in
Telehouse europe (London UK) and some other hosting capabilities in
Leicester UK. They also have a range of servers with CF 5 and MX on. I have
never used their hosted services as we have always co-located our own
equipment but you should be OK with them.

 
Their site doesn't really cover hosting CF specifically so it may be worth
giving them a call All the contact details should be on the site
http://www.pipemedia.net

 
Paul
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: calling on Flash to create a file

2004-05-31 Thread Frank Dewey
Daniel,

 
My index.cfm contains two frames.One frame contains the flash file
while the other contains some text.Once you click on a particular
movie clip in Flash, then the text frame on the right should display the
proper text.I was going about this the hard way so that each time a
new file would be created (if one didn't exist) then the file would grab
the text from the database.

 
Instead, I have the same set up (index.cfm containing two frames) but
instead of creating a new file each time, I will just have one file
(text.cfm) that grabs the data from the database.This way I will not
have to create a lot of different files.

 
I am having trouble getting getURL() in Flash to display the text in the
sibling frame.I am using:
getURL(text.cfm?id=+dragID,_top.text)

 
Do you know what I am doing wrong?

 
thanx -
Frank



From: Daniel Farmer [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 11:32 AM
To: CF-Talk
Subject: Re: calling on Flash to create a file

What about calling a custom VB application or using WSH ( running on the
server ) to create your file?

- Original Message - 
From: Frank Dewey 
To: CF-Talk 
Sent: Monday, May 31, 2004 12:26 PM
Subject: RE: calling on Flash to create a file

That's a valid reason to consider...

I will be thinking about the best route to go then.Thank you -
 Frank



From: John Dowdell [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 28, 2004 7:30 PM
To: CF-Talk
Subject: Re: calling on Flash to create a file

At 3:22 PM 5/28/4, Frank Dewey wrote:
I am using Flash (although I should be going home!) to talk to
ColdFusion that connects to a database. All works well as far as
updates
and inserts, ...). However I would like for my application to also be
able to create a file.

Think about where the thing actually lives. If you've got in-browser
SWF,
then you're asking a plugin to write to (presumably) a known location
on
the hard drive, which is a safety risk. If you're running in a
standalone
then you've got to ask what your standalone shell can do... if it's in
the
Central shell you've got a different situation... you might even be
trying
to run a SWF on a server, can't be sure.

Generally, for Does [some form] of SWF play write to disk? the
answer
would be no. You may be able to achieve your goal, though, depending
on
exactly what it is.

jd 
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: He3 community input (custom tag paths/mappings)

2004-05-31 Thread Matt Liotta
I guess I don't need to point out my +1 here. Anyway, my thinking is 
that if you don't provide the information needed the editor will 
continue to function, but what offer the same functionality.

-Matt

On May 31, 2004, at 10:46 AM, Raymond Camden wrote:

  I'd also point out, that there are times when I want to use
 full featured editor, but don't necessarily need/want to set
 up a project just to edit a couple of rogue files.

 So, I want both a project view and a normal o/s file
 view--depending on how I'm working at the moment.


A huge +1 on this. I hate editors that make me jump through hoops 
 just to do
quick edits. Projects should _not_ be required, period. If it means I 
 lose
features (like maybe right clicking on a cfinclude and loading the 
 file it
loads), thats fine.

-Ray

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




cfcookie and hotmail

2004-05-31 Thread Dave Francis
My company sends out email newsletters containing links to articles on our
site. When a reader clicks on the link, the requested page writes a cookie.

All is well except for clients with Hotmail accounts. It seems that Hotmail
opens up our pages in a frame, and that prevents our cookie.

Is this a problem with cfcookie, or a generic browser/internet restriction,
and is there anything I can do about it?

	TIA
	Dave
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: cfcookie and hotmail

2004-05-31 Thread Bryan Stevenson
I ran into something similar with Hotmail recently.Some users with IE6 would get our Cookies Disabled page when they used a link from within Hotmail (depending on their privacy settings) and others would not have this happen (even with the same settings).

The solution was to have ANYONE hitting ANY PAGE on our site break out of frames using this little script:

!--- break out of frames ---
script language=_javascript_
 !--
 if (parent.frames.length  0) 
 {
 parent.location.href = "">
 }
 --
/script

Works like a charm...and Damn you Hotmail...and Ask Jeeves...and anyone else loading our site inside of frames!!

Cheers

Bryan Stevenson B.Comm.
VP  Director of E-Commerce Development
Electric Edge Systems Group Inc.
t. 250.920.8830
e. [EMAIL PROTECTED]

-
Macromedia Associate Partner
www.macromedia.com
-
Vancouver Island ColdFusion Users Group
Founder  Director
www.cfug-vancouverisland.com
- Original Message - 
From: Dave Francis 
To: CF-Talk 
Sent: Monday, May 31, 2004 10:02 AM
Subject: cfcookie and hotmail

My company sends out email newsletters containing links to articles on our
site. When a reader clicks on the link, the requested page writes a cookie.

All is well except for clients with Hotmail accounts. It seems that Hotmail
opens up our pages in a frame, and that prevents our cookie.

Is this a problem with cfcookie, or a generic browser/internet restriction,
and is there anything I can do about it?

TIA
Dave
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: calling on Flash to create a file

2004-05-31 Thread Daniel Farmer
Frank,

Sorry I don't know any ActionScript. :( 
- Original Message - 
From: Frank Dewey 
To: CF-Talk 
Sent: Monday, May 31, 2004 12:47 PM
Subject: RE: calling on Flash to create a file

Daniel,

My index.cfm contains two frames.One frame contains the flash file
while the other contains some text.Once you click on a particular
movie clip in Flash, then the text frame on the right should display the
proper text.I was going about this the hard way so that each time a
new file would be created (if one didn't exist) then the file would grab
the text from the database.

Instead, I have the same set up (index.cfm containing two frames) but
instead of creating a new file each time, I will just have one file
(text.cfm) that grabs the data from the database.This way I will not
have to create a lot of different files.

I am having trouble getting getURL() in Flash to display the text in the
sibling frame.I am using:
getURL(text.cfm?id=+dragID,_top.text)

Do you know what I am doing wrong?

thanx -
 Frank



From: Daniel Farmer [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 11:32 AM
To: CF-Talk
Subject: Re: calling on Flash to create a file

What about calling a custom VB application or using WSH ( running on the
server ) to create your file?

 - Original Message - 
 From: Frank Dewey 
 To: CF-Talk 
 Sent: Monday, May 31, 2004 12:26 PM
 Subject: RE: calling on Flash to create a file

 That's a valid reason to consider...

 I will be thinking about the best route to go then.Thank you -
Frank

 

 From: John Dowdell [mailto:[EMAIL PROTECTED] 
 Sent: Friday, May 28, 2004 7:30 PM
 To: CF-Talk
 Subject: Re: calling on Flash to create a file

 At 3:22 PM 5/28/4, Frank Dewey wrote:
 I am using Flash (although I should be going home!) to talk to
 ColdFusion that connects to a database. All works well as far as
 updates
 and inserts, ...). However I would like for my application to also be
 able to create a file.

 Think about where the thing actually lives. If you've got in-browser
 SWF,
 then you're asking a plugin to write to (presumably) a known location
on
 the hard drive, which is a safety risk. If you're running in a
 standalone
 then you've got to ask what your standalone shell can do... if it's in
 the
 Central shell you've got a different situation... you might even be
 trying
 to run a SWF on a server, can't be sure.

 Generally, for Does [some form] of SWF play write to disk? the
answer
 would be no. You may be able to achieve your goal, though, depending
 on
 exactly what it is.

 jd 
  

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: calling on Flash to create a file

2004-05-31 Thread Frank Dewey
Daniel,

 
No problem.Thanx for your help -
Frank



From: Daniel Farmer [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 12:11 PM
To: CF-Talk
Subject: Re: calling on Flash to create a file

Frank,

Sorry I don't know any ActionScript. :( 
- Original Message - 
From: Frank Dewey 
To: CF-Talk 
Sent: Monday, May 31, 2004 12:47 PM
Subject: RE: calling on Flash to create a file

Daniel,

My index.cfm contains two frames.One frame contains the flash file
while the other contains some text.Once you click on a particular
movie clip in Flash, then the text frame on the right should display
the
proper text.I was going about this the hard way so that each time a
new file would be created (if one didn't exist) then the file would
grab
the text from the database.

Instead, I have the same set up (index.cfm containing two frames) but
instead of creating a new file each time, I will just have one file
(text.cfm) that grabs the data from the database.This way I will not
have to create a lot of different files.

I am having trouble getting getURL() in Flash to display the text in
the
sibling frame.I am using:
getURL(text.cfm?id=+dragID,_top.text)

Do you know what I am doing wrong?

thanx -
 Frank



From: Daniel Farmer [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 11:32 AM
To: CF-Talk
Subject: Re: calling on Flash to create a file

What about calling a custom VB application or using WSH ( running on
the
server ) to create your file?

 - Original Message - 
 From: Frank Dewey 
 To: CF-Talk 
 Sent: Monday, May 31, 2004 12:26 PM
 Subject: RE: calling on Flash to create a file

 That's a valid reason to consider...

 I will be thinking about the best route to go then.Thank you -
Frank

 

 From: John Dowdell [mailto:[EMAIL PROTECTED] 
 Sent: Friday, May 28, 2004 7:30 PM
 To: CF-Talk
 Subject: Re: calling on Flash to create a file

 At 3:22 PM 5/28/4, Frank Dewey wrote:
 I am using Flash (although I should be going home!) to talk to
 ColdFusion that connects to a database. All works well as far as
 updates
 and inserts, ...). However I would like for my application to also
be
 able to create a file.

 Think about where the thing actually lives. If you've got in-browser
 SWF,
 then you're asking a plugin to write to (presumably) a known
location
on
 the hard drive, which is a safety risk. If you're running in a
 standalone
 then you've got to ask what your standalone shell can do... if it's
in
 the
 Central shell you've got a different situation... you might even be
 trying
 to run a SWF on a server, can't be sure.

 Generally, for Does [some form] of SWF play write to disk? the
answer
 would be no. You may be able to achieve your goal, though,
depending
 on
 exactly what it is.

 jd 
  
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Jeff Chastain
Okay, from more tests, it appears the problem is in the code somewhere.I
have run a separate small test of the session variables on this server and
they expire as expected.So, to take this question from a different
direction.

 
Suppose for some reason that I wanted to have session variables not ever
expire.How would I go about attempting to do that with code only - no
changes to the administrator or anything else?

 
Thanks for any pointers.
-- Jeff

_

From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 9:32 AM
To: CF-Talk
Subject: RE: Application Security Confusion

The code is a complete FB4 application, so I am not sure how to post it
here.

I stripped out the cfapplication tags etc from the application.cfm file, put
them in a stand alone app and the variables timeout as expected.There is
only one cfapplication tag in this application, so what could possibly cause
the session to be retained?

There is no code in the application that refreshes the page if that is what
you are asking.All pages are just a simple request.

Thanks
-- Jeff

_

From: Pascal Peters [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 9:17 AM
To: CF-Talk
Subject: RE: Application Security Confusion

Your code? Did you try my suggestion and dump the session scope right
after the cfapplication tag? 

Do you have any other cfapplication tags with the same name? (change the
name maybe)

Is there some code in there that makes requests without you seeing it?

...

Pascal

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 16:08
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Okay, Hal's tutorial fixed the browser close issue.

 However, I still cannot get the session variables to timeout when the
 browser is still open.I even set the seesionTimeout attribute to 15
 seconds and I can still navigate the application all day long 
 without being required to re-login.

 Any thoughts on what might cause this?

 Thanks
 -- Jeff 
_ 
_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: He3 community input (custom tag paths/mappings)

2004-05-31 Thread Dan G. Switzer, II
Matt,

I guess I don't need to point out my +1 here. Anyway, my thinking is
that if you don't provide the information needed the editor will
continue to function, but what offer the same functionality.

I figured that's the way you were doing things, but I figured I might as
well re-iterate my preference.

Also, one thing I'd like to see in a CF IDE is for the pounded variables to
be color coded--I think not color coding variables in CF Studio was a big
oversight. (i.e #variables.someVar# should be something that's color coded.)

- Dan
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Need to maintain session state after leaving and returning to site

2004-05-31 Thread Pascal Peters
Can't you post to a page on your site and on that page use cfhttp to
post to the CC validation and have them return the validation in that
request. This way, you keep session info. 

Pascal

 -Original Message-
 From: Paul Jones [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 17:33
 To: CF-Talk
 Subject: Need to maintain session state after leaving and 
 returning to site
 
 I have a cold fusion application that has been working for 
 the last couple of years.It's a system that gathers airline 
 reservation information, stores them in session variables, 
 and then populate a database with the relevant reservation 
 and ticketing information AFTER the authorized user has been 
 authenticated by a login form.
 
 We are now in the process of extending the system to accept 
 credit cards and serve the general public.Our credit card 
 validating bank gave us a form to be included in our 
 application.That form encrypts the data, posts the 
 information to a page on their site, and returns an 
 authentication code to a specific page on our page.Based on 
 a valid authentication code, we'd continue our processing or 
 abort the process.Everything works fine up to this point.
 However, we have found that all our session information is 
 lost when we receive a response from the bank.
 
 I've since confirmed this behavior by submitting a form to an 
 offsite page and then have it return to my site.
 
 I'm thinking that Cold fusion treats this as a new session 
 since the request is effectively coming from another client.
 I need all the information that was previously captured but I 
 would rather not start storing anything in my database until 
 I can validate the credit card information.What are my 
 options? Is there anyway around the session information being reset?
 
The following is the CFForm section of the posting form.
 The address on my machine is 192.168.26.220.
 
 cfform action="">
method=POST
name=frmPayment
 
 
 The following is the complete TicketPaymentRedirector.cfm 
 template.All is does is redirect back to my machine
 
 cflocation 
 url="">
 6778TN=456
 
 
 At the top of PaymentConfirm.cfm,I check the session 
 variables I had set in previous pages and they are all gone.
 
 
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Pascal Peters
Not really possible, but you could put your app in a frameset with a
hidden frame that posts regularly to the app. This way, session will not
time out as long as the app is loaded in the browser. 

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 19:59
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Okay, from more tests, it appears the problem is in the code 
 somewhere.I have run a separate small test of the session 
 variables on this server and
 they expire as expected.So, to take this question from a different
 direction.

 Suppose for some reason that I wanted to have session 
 variables not ever
 expire.How would I go about attempting to do that with 
 code only - no
 changes to the administrator or anything else?

 Thanks for any pointers.
 -- Jeff
 
_
 
 From: Jeff Chastain [mailto:[EMAIL PROTECTED]
 Sent: Monday, May 31, 2004 9:32 AM
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 
 The code is a complete FB4 application, so I am not sure how 
 to post it
 here.
 
 
 I stripped out the cfapplication tags etc from the 
 application.cfm file, put
 them in a stand alone app and the variables timeout as 
 expected.There is
 only one cfapplication tag in this application, so what could 
 possibly cause
 the session to be retained?
 
 
 There is no code in the application that refreshes the page 
 if that is what
 you are asking.All pages are just a simple request.
 
 
 Thanks
 -- Jeff
 
_
 
 From: Pascal Peters [mailto:[EMAIL PROTECTED] 
 Sent: Monday, May 31, 2004 9:17 AM
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Your code? Did you try my suggestion and dump the session scope right
 after the cfapplication tag? 
 
 Do you have any other cfapplication tags with the same name? 
 (change the
 name maybe)
 
 Is there some code in there that makes requests without you seeing it?
 
 ...
 
 Pascal
 
  -Original Message-
  From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
  Sent: maandag 31 mei 2004 16:08
  To: CF-Talk
  Subject: RE: Application Security Confusion
  
  Okay, Hal's tutorial fixed the browser close issue.
 
  However, I still cannot get the session variables to 
 timeout when the
  browser is still open.I even set the seesionTimeout 
 attribute to 15
  seconds and I can still navigate the application all day long 
  without being required to re-login.
 
  Any thoughts on what might cause this?
 
  Thanks
  -- Jeff 
_ 
_
 
 
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Jeff Chastain
Nope, no frames at all in this app, and there are no automatic page
refreshes.

 
The not possible answer was what I was coming up with, except for the fact
that it is happening.

_

From: Pascal Peters [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 2:07 PM
To: CF-Talk
Subject: RE: Application Security Confusion

Not really possible, but you could put your app in a frameset with a
hidden frame that posts regularly to the app. This way, session will not
time out as long as the app is loaded in the browser. 

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 19:59
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Okay, from more tests, it appears the problem is in the code 
 somewhere.I have run a separate small test of the session 
 variables on this server and
 they expire as expected.So, to take this question from a different
 direction.

 Suppose for some reason that I wanted to have session 
 variables not ever
 expire.How would I go about attempting to do that with 
 code only - no
 changes to the administrator or anything else?

 Thanks for any pointers.
 -- Jeff
 
_
 
 From: Jeff Chastain [mailto:[EMAIL PROTECTED]
 Sent: Monday, May 31, 2004 9:32 AM
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 
 The code is a complete FB4 application, so I am not sure how 
 to post it
 here.
 
 
 I stripped out the cfapplication tags etc from the 
 application.cfm file, put
 them in a stand alone app and the variables timeout as 
 expected.There is
 only one cfapplication tag in this application, so what could 
 possibly cause
 the session to be retained?
 
 
 There is no code in the application that refreshes the page 
 if that is what
 you are asking.All pages are just a simple request.
 
 
 Thanks
 -- Jeff
 
_
 
 From: Pascal Peters [mailto:[EMAIL PROTECTED] 
 Sent: Monday, May 31, 2004 9:17 AM
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Your code? Did you try my suggestion and dump the session scope right
 after the cfapplication tag? 
 
 Do you have any other cfapplication tags with the same name? 
 (change the
 name maybe)
 
 Is there some code in there that makes requests without you seeing it?
 
 ...
 
 Pascal
 
  -Original Message-
  From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
  Sent: maandag 31 mei 2004 16:08
  To: CF-Talk
  Subject: RE: Application Security Confusion
  
  Okay, Hal's tutorial fixed the browser close issue.
 
  However, I still cannot get the session variables to 
 timeout when the
  browser is still open.I even set the seesionTimeout 
 attribute to 15
  seconds and I can still navigate the application all day long 
  without being required to re-login.
 
  Any thoughts on what might cause this?
 
  Thanks
  -- Jeff 
_ 
_
 
 
 
 
_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Pascal Peters
Sorry, I'm out of ideas 

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 21:40
 To: CF-Talk
 Subject: RE: Application Security Confusion
 
 Nope, no frames at all in this app, and there are no 
 automatic page refreshes.

 The not possible answer was what I was coming up with, except 
 for the fact that it is happening.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: Maybe OT: Recommendation of CF/sql server hosting in Europe

2004-05-31 Thread Don
Their site doesn't really cover hosting CF specifically so it may be worth
giving them a call All the contact details should be on the site
http://www.pipemedia.net

Thanks, I'll keep it in mind when talking to my client.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Need to maintain session state after leaving and returning to site

2004-05-31 Thread Paul Jones
The problem is that I don't have enough control over
the form that is being sent out.The provider of the
CC validation gave us an encryption program that is
called upon the submission of the form and that sends
out the information to their site.We receive the
responses using the #form.varname# variables from
them.
--- Pascal Peters [EMAIL PROTECTED] wrote:
 Can't you post to a page on your site and on that
 page use cfhttp to
 post to the CC validation and have them return the
 validation in that
 request. This way, you keep session info. 
 
 Pascal
 
  -Original Message-
  From: Paul Jones [mailto:[EMAIL PROTECTED] 
  Sent: maandag 31 mei 2004 17:33
  To: CF-Talk
  Subject: Need to maintain session state after
 leaving and 
  returning to site
  
  I have a cold fusion application that has been
 working for 
  the last couple of years.It's a system that
 gathers airline 
  reservation information, stores them in session
 variables, 
  and then populate a database with the relevant
 reservation 
  and ticketing information AFTER the authorized
 user has been 
  authenticated by a login form.
  
  We are now in the process of extending the system
 to accept 
  credit cards and serve the general public.Our
 credit card 
  validating bank gave us a form to be included in
 our 
  application.That form encrypts the data, posts
 the 
  information to a page on their site, and returns
 an 
  authentication code to a specific page on our
 page.Based on 
  a valid authentication code, we'd continue our
 processing or 
  abort the process.Everything works fine up to
 this point.
  However, we have found that all our session
 information is 
  lost when we receive a response from the bank.
  
  I've since confirmed this behavior by submitting a
 form to an 
  offsite page and then have it return to my site.
  
  I'm thinking that Cold fusion treats this as a new
 session 
  since the request is effectively coming from
 another client.
  I need all the information that was previously
 captured but I 
  would rather not start storing anything in my
 database until 
  I can validate the credit card information.What
 are my 
  options? Is there anyway around the session
 information being reset?
  
 The following is the CFForm section of the
 posting form.
  The address on my machine is 192.168.26.220.
  
  cfform

action="">
 method=POST
 name=frmPayment
  
  
  The following is the complete
 TicketPaymentRedirector.cfm 
  template.All is does is redirect back to my
 machine
  
  cflocation 
 

url="">
  6778TN=456
  
  
  At the top of PaymentConfirm.cfm,I check the
 session 
  variables I had set in previous pages and they are
 all gone.
  
  
  
  
 

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Anyone using Coral?

2004-05-31 Thread Daniel Farmer
if anyone is or has used this technology I would be interested in hearing what you used it for, and your experience with it.

Thanks.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: Anyone using Coral?

2004-05-31 Thread Bryan Stevenson
search the archives...asked and answered not too long ago ;-)

Cheers

Bryan Stevenson B.Comm.
VP  Director of E-Commerce Development
Electric Edge Systems Group Inc.
t. 250.920.8830
e. [EMAIL PROTECTED]

-
Macromedia Associate Partner
www.macromedia.com
-
Vancouver Island ColdFusion Users Group
Founder  Director
www.cfug-vancouverisland.com
- Original Message - 
From: Daniel Farmer 
To: CF-Talk 
Sent: Monday, May 31, 2004 2:37 PM
Subject: Anyone using Coral?

if anyone is or has used this technology I would be interested in hearing what you used it for, and your experience with it.

Thanks.
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




OT: about MS SQL Server 7 and 2000

2004-05-31 Thread Don
Hi,

If your shop or your clients run SQL Server 7 or 2000, what additional features/functions (possibly substantial) that you think would be very helpful to your organization or your client and why?

Thank you.

Don
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: OT: about MS SQL Server 7 and 2000

2004-05-31 Thread Simon Horwith
SQL Server 2000 made some improvements to the English Query, Full Text 
Indexing, OLAP, security, and web access functionality.It has some IDE 
improvements - most notable is the Object Viewer. Personally, as far as 
I'm concerned the XML support that was added is what I consider most 
significant.Before placing any weight on that, keep in mind that only 
a small number of people take advantage of this feature.On the other 
hand, if you look at the list of features slated for SQL Server 2005 
(Longhorn), many of themare XML-centric... Microsoft is obviously very 
interested in making working with XML easier and more appealling from a 
performance point of view 
(http://www.microsoft.com/sql/yukon/productinfo/default.asp).This 
functionality really was introduced to SQL Server in version 2000.

~Simon

Simon Horwith
CTO, eTRILOGY ltd.
Member of Team Macromedia
Macromedia Certified Master Instructor
http://www.cfstandards.org

Chunshen (Don) Li wrote:

 Hi,

 If your shop or your clients run SQL Server 7 or 2000, what additional 
 features/functions (possibly substantial) that you think would be very 
 helpful to your organization or your client and why?

 Thank you.

 Don

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




variable as a string

2004-05-31 Thread JT
Hi Gang,

I have a variable as a string 

Tuesday, June 1, 2004

What I am Trying to figure out is how can I change it to 

06-01-2004

Any one can tell me if it can be done and how?

JT
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: variable as a string

2004-05-31 Thread Aaron DC
DateFormat(yourvar, mm-dd-)

Aaron

- Original Message - 
From: JT 
To: CF-Talk 
Sent: Tuesday, June 01, 2004 9:32 AM
Subject: variable as a string 

Hi Gang,

I have a variable as a string 

Tuesday, June 1, 2004

What I am Trying to figure out is how can I change it to 

06-01-2004

Any one can tell me if it can be done and how?

JT
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




creating reusable primary keys

2004-05-31 Thread Nick Cabell
I guess this is more a DB question, but I'm thinking there is some
wisdom on how to create PKs in CF that I don't have.

I am being space conscious and have declared a PK for a table
with a data type of TINYINT because I will never have more than
255 records. My records don't have suitable unique values so I wanted to
use the IDENTITY attribute in SQL Svr to automatically create the
primary keys. Trouble is that once I delete one of the records, 
that PK value will never be used again. 

Is there a clever way in CF to create the PK yourself and be
able to reuse the value when it is deleted.

Nick Cabell
451 Learning Systems
(650) 823-1858
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: creating reusable primary keys

2004-05-31 Thread Dick Applebaum
Yes, don't delete the records -- just flag them as deleted (have a 
column in the db to indicate the the record is deleted)

Dick

On May 31, 2004, at 4:53 PM, Nick Cabell wrote:

 I guess this is more a DB question, but I'm thinking there is some
wisdom on how to create PKs in CF that I don't have.

I am being space conscious and have declared a PK for a table
with a data type of TINYINT because I will never have more than
255 records. My records don't have suitable unique values so I wanted 
 to
use the IDENTITY attribute in SQL Svr to automatically create the
primary keys. Trouble is that once I delete one of the records,
that PK value will never be used again.

Is there a clever way in CF to create the PK yourself and be
able to reuse the value when it is deleted.

Nick Cabell
451 Learning Systems
(650) 823-1858

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: creating reusable primary keys

2004-05-31 Thread Dave Watts
 I am being space conscious and have declared a PK for a table 
 with a data type of TINYINT because I will never have more 
 than 255 records. My records don't have suitable unique values 
 so I wanted to use the IDENTITY attribute in SQL Svr to 
 automatically create the primary keys. Trouble is that once 
 I delete one of the records, that PK value will never be used 
 again. 
 
 Is there a clever way in CF to create the PK yourself and be 
 able to reuse the value when it is deleted.

I would strongly recommend that you simply use a regular INT column that
will let you use IDENTITY values normally. Your desire to be
space-conscious will cost you more than it's worth. In addition, I would
strongly recommend that you not attempt to reuse surrogate primary key
values. This may add significant complexity to the database, and won't
provide any benefit.

Can you explain what exactly you're concerned about, with regard to space?

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Dave Watts
 Suppose for some reason that I wanted to have session 
 variables not ever expire. How would I go about attempting 
 to do that with code only - no changes to the administrator
 or anything else?

You would need to ensure that the browser always requests another page
before the inactivity timeout kicks in. There are several ways you could do
this - META tags or _javascript_ timers placed within frames, separate
windows, or GIF pipes.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: creating reusable primary keys

2004-05-31 Thread Tom Kitta
That would defeat the original purpose of saving space in the DB. Besides,
integers aren't that big and space is cheap these days. Why go through the
trouble of doing all that to save less than 1kb? Anyone remembers win2k? How
did it happen - some space saving issue, wasn't it?
[Tom Kitta]
My philosophy is to make things as simple as possible (but not simpler) if
at the same time I can get some free goodies like performance or extra free
space than I go for it. But KISS rules most of the time, if not all of the
time. Just my .02c.

TK
http://www.tomkitta.com

-Original Message-
From: Dick Applebaum [mailto:[EMAIL PROTECTED]
Sent: Monday, May 31, 2004 8:01 PM
To: CF-Talk
Subject: Re: creating reusable primary keys

Yes, don't delete the records -- just flag them as deleted (have a
column in the db to indicate the the record is deleted)

Dick

On May 31, 2004, at 4:53 PM, Nick Cabell wrote:

 I guess this is more a DB question, but I'm thinking there is some
wisdom on how to create PKs in CF that I don't have.

I am being space conscious and have declared a PK for a table
with a data type of TINYINT because I will never have more than
255 records. My records don't have suitable unique values so I wanted
 to
use the IDENTITY attribute in SQL Svr to automatically create the
primary keys. Trouble is that once I delete one of the records,
that PK value will never be used again.

Is there a clever way in CF to create the PK yourself and be
able to reuse the value when it is deleted.

Nick Cabell
451 Learning Systems
(650) 823-1858

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Jeff Chastain
And if I said none of the above?

 
This application has plain old static templates ... no frames, meta tags, or
_javascript_ refreshes.Once a page is loaded, that page remains until a
user manually clicks on a link to go to the next page.

 
This is why this is so weird.

 
Thanks
-- Jeff

_

From: Dave Watts [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 7:14 PM
To: CF-Talk
Subject: RE: Application Security Confusion

 Suppose for some reason that I wanted to have session 
 variables not ever expire. How would I go about attempting 
 to do that with code only - no changes to the administrator
 or anything else?

You would need to ensure that the browser always requests another page
before the inactivity timeout kicks in. There are several ways you could do
this - META tags or _javascript_ timers placed within frames, separate
windows, or GIF pipes.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444 
_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: CF-Talk: Digest every 4 hours

2004-05-31 Thread Jeffry Houser
I have to wonder what application you are creating that is so space 
conscious that you have to re-use identity values.

That said, search your SQL Server documentation for SET IDENTITY_INSERT, 
which will allow you to insert values into an identity column.

As an alternate, you may consiuder using all columns in the row to be 
your PK.This is usually only done in intersection / linking tables, but 
can be done anywhere.I may meet your need.

At 09:01 PM 5/31/2004, you wrote:
Subject: creating reusable primary keys
From: Nick Cabell [EMAIL PROTECTED]
Date: Mon, 31 May 2004 16:53:18 -0700
Thread: 
http://www.houseoffusion.com/cf_lists/index.cfm/method=messagesthreadid=32900forumid=4#165087

I guess this is more a DB question, but I'm thinking there is some
wisdom on how to create PKs in CF that I don't have.

I am being space conscious and have declared a PK for a table
with a data type of TINYINT because I will never have more than
255 records. My records don't have suitable unique values so I wanted to
use the IDENTITY attribute in SQL Svr to automatically create the
primary keys. Trouble is that once I delete one of the records,
that PK value will never be used again.

Is there a clever way in CF to create the PK yourself and be
able to reuse the value when it is deleted.


Nick Cabell
451 Learning Systems
(650) 823-1858

--
Jeffry Houser, Web Developer, Writer, Songwriter, Recording Engineer
mailto:[EMAIL PROTECTED]
--
AIM: Reboog711| Phone: 1-203-379-0773
--
My Books: http://www.instantcoldfusion.com
Recording Music: http://www.fcfstudios.com
Original Energetic Acoustic Rock: http://www.farcryfly.com
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: variable as a string

2004-05-31 Thread JT
When I do that I get

this Error

The value Tuesday, June 1, 2004 could not be converted to a date.

JT

-Original Message-
From: Aaron DC [mailto:[EMAIL PROTECTED]
Sent: Monday, May 31, 2004 4:54 PM
To: CF-Talk
Subject: Re: variable as a string

DateFormat(yourvar, mm-dd-)

Aaron

- Original Message -
From: JT
To: CF-Talk
Sent: Tuesday, June 01, 2004 9:32 AM
Subject: variable as a string

Hi Gang,

I have a variable as a string

Tuesday, June 1, 2004

What I am Trying to figure out is how can I change it to

06-01-2004

Any one can tell me if it can be done and how?

JT
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: variable as a string

2004-05-31 Thread Matthew Walker
Have you tried parseDateTime() or lsParseDateTime()? (That's an L not an I)

_

From: JT [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 1 June 2004 12:34 p.m.
To: CF-Talk
Subject: RE: variable as a string 

When I do that I get

this Error

The value Tuesday, June 1, 2004 could not be converted to a date.

JT

-Original Message-
From: Aaron DC [mailto:[EMAIL PROTECTED]
Sent: Monday, May 31, 2004 4:54 PM
To: CF-Talk
Subject: Re: variable as a string

DateFormat(yourvar, mm-dd-)

Aaron

- Original Message -
From: JT
To: CF-Talk
Sent: Tuesday, June 01, 2004 9:32 AM
Subject: variable as a string

Hi Gang,

I have a variable as a string

Tuesday, June 1, 2004

What I am Trying to figure out is how can I change it to

06-01-2004

Any one can tell me if it can be done and how?

JT

_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: variable as a string

2004-05-31 Thread JT
Thanks Matthew,
Just What I was Looking For.
JT

-Original Message-
From: Matthew Walker [mailto:[EMAIL PROTECTED]
Sent: Monday, May 31, 2004 5:43 PM
To: CF-Talk
Subject: RE: variable as a string

Have you tried parseDateTime() or lsParseDateTime()? (That's an L not an
I)

 _

From: JT [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 1 June 2004 12:34 p.m.
To: CF-Talk
Subject: RE: variable as a string

When I do that I get

this Error

The value Tuesday, June 1, 2004 could not be converted to a date.

JT

-Original Message-
From: Aaron DC [mailto:[EMAIL PROTECTED]
Sent: Monday, May 31, 2004 4:54 PM
To: CF-Talk
Subject: Re: variable as a string

 DateFormat(yourvar, mm-dd-)

 Aaron

 - Original Message -
 From: JT
 To: CF-Talk
 Sent: Tuesday, June 01, 2004 9:32 AM
 Subject: variable as a string

 Hi Gang,

 I have a variable as a string

 Tuesday, June 1, 2004

 What I am Trying to figure out is how can I change it to

 06-01-2004

 Any one can tell me if it can be done and how?

 JT

 _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: Application Security Confusion

2004-05-31 Thread Frank Mamone
Jeff,

What happens if you set the Timeout to 0? Do they timeout then?

-Frank
- Original Message - 
From: Jeff Chastain 
To: CF-Talk 
Sent: Monday, May 31, 2004 10:08 AM
Subject: RE: Application Security Confusion

Okay, Hal's tutorial fixed the browser close issue.

However, I still cannot get the session variables to timeout when the
browser is still open.I even set the seesionTimeout attribute to 15
seconds and I can still navigate the application all day long without being
required to re-login.

Any thoughts on what might cause this?

Thanks
-- Jeff

 _

From: Pascal Peters [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 3:52 AM
To: CF-Talk
Subject: RE: Application Security Confusion

Jeff,

They have to die at sessiontimeout, but NOT when you close your browser
(if you are using CF sessions on CFMX or a lower version). If you use
J2EE sessions in CFMX, the session will end if you close all browser
windows. 

Without seeing code, I can't imagine why the session would persist after
the specified timeout. You could try and debug by doing a cfdump
var=#session# right after the cfapplication tag. This way you can see
if the session really exists, or if your code recreates it or something
of the kind.

Pascal 

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 2:11
 To: CF-Talk
 Subject: Application Security Confusion
 
 Ok, I must really be missing something obvious, because this 
 makes no sense.

 I have an application that has security setup and tracked via session
 variables.The cfapplication tag has the setClientCookies 
 attribute set to
 true, and the sessionTimeout attribute has a createTimeSpan 
 value of 0,0,15,0 which I thought was 15 minutes (I am 
 questioning most everything I
 knew now).At the beginning of each secure page, there is 
 an isDefined
 check to see if a session structure userAuth exists.If so, 
 then further checks are done to check for valid permissions - 
 if not, the user is sent to the login screen.

 When I first load the application, I get sent to the login screen as
 expected.However, if I leave my browser window open with 
 no activity for
 30 minutes, I find I can still navigate the secure pages 
 without having to
 log in again.What is even weirder is that I can close all 
 of my browser
 windows, load a new browser window and go directly to a 
 secure url in the site without having to log in again.

 I am beginning to question everything I knew about session 
 variables, but I thought they were supposed to time out and 
 die automatically based upon the sessionTimeout attribute of 
 the cfapplication tag and they always died immediately upon 
 closing the browser.

 My session variables won't die!

 Thanks for any pointers.
 -- Jeff
 
 
 
 
 _
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Application Security Confusion

2004-05-31 Thread Jeff Chastain
Nope  no matter what I set the timeout to, I never get prompted to log
in after the first time.

 
Thanks
-- Jeff

_

From: Frank Mamone [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 8:23 PM
To: CF-Talk
Subject: Re: Application Security Confusion

Jeff,

What happens if you set the Timeout to 0? Do they timeout then?

-Frank
- Original Message - 
From: Jeff Chastain 
To: CF-Talk 
Sent: Monday, May 31, 2004 10:08 AM
Subject: RE: Application Security Confusion

Okay, Hal's tutorial fixed the browser close issue.

However, I still cannot get the session variables to timeout when the
browser is still open.I even set the seesionTimeout attribute to 15
seconds and I can still navigate the application all day long without
being
required to re-login.

Any thoughts on what might cause this?

Thanks
-- Jeff

 _

From: Pascal Peters [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 31, 2004 3:52 AM
To: CF-Talk
Subject: RE: Application Security Confusion

Jeff,

They have to die at sessiontimeout, but NOT when you close your browser
(if you are using CF sessions on CFMX or a lower version). If you use
J2EE sessions in CFMX, the session will end if you close all browser
windows. 

Without seeing code, I can't imagine why the session would persist after
the specified timeout. You could try and debug by doing a cfdump
var=#session# right after the cfapplication tag. This way you can see
if the session really exists, or if your code recreates it or something
of the kind.

Pascal 

 -Original Message-
 From: Jeff Chastain [mailto:[EMAIL PROTECTED] 
 Sent: maandag 31 mei 2004 2:11
 To: CF-Talk
 Subject: Application Security Confusion
 
 Ok, I must really be missing something obvious, because this 
 makes no sense.

 I have an application that has security setup and tracked via session
 variables.The cfapplication tag has the setClientCookies 
 attribute set to
 true, and the sessionTimeout attribute has a createTimeSpan 
 value of 0,0,15,0 which I thought was 15 minutes (I am 
 questioning most everything I
 knew now).At the beginning of each secure page, there is 
 an isDefined
 check to see if a session structure userAuth exists.If so, 
 then further checks are done to check for valid permissions - 
 if not, the user is sent to the login screen.

 When I first load the application, I get sent to the login screen as
 expected.However, if I leave my browser window open with 
 no activity for
 30 minutes, I find I can still navigate the secure pages 
 without having to
 log in again.What is even weirder is that I can close all 
 of my browser
 windows, load a new browser window and go directly to a 
 secure url in the site without having to log in again.

 I am beginning to question everything I knew about session 
 variables, but I thought they were supposed to time out and 
 die automatically based upon the sessionTimeout attribute of 
 the cfapplication tag and they always died immediately upon 
 closing the browser.

 My session variables won't die!

 Thanks for any pointers.
 -- Jeff
 
 
 
 
 _ 
_
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Java and Coldfusion help (Repost)

2004-05-31 Thread Andrew Scott
Anyone tried to set an array to a coldfusion template using java in a cfx
before.

 
I have tried response.setVariable(StringVariable,Variable); but this will
only return strings, so with this I was able to create a structure.

 
However I would like to set an array for CF to use, but can't figure out how
to do this...

Regards
Andrew Scott
Technical Consultant

NuSphere Pty Ltd
Level 2/33 Bank Street
South Melbourne, Victoria, 3205

Phone: 03 9686 0485-Fax: 03 9699 7976
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]