Re: OT: Free WIKI web services?

2005-02-01 Thread Kay Smoljak
On Thu, 27 Jan 2005 14:16:49 -0600, Jake McKee [EMAIL PROTECTED] wrote:
 Does anyone know of a good, free, and password-protectable WIKI?

I use OpenWiki - sorry, it's ASP - it's generally considered one of
the best, I think. It has passwords and it's standards-compliant, too.

http://openwiki.com/

-- 
Kay Smoljak
http://kay.smoljak.com/

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192520
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Restart CFMX with CFML?

2005-02-01 Thread Martin Parry
This isn't the correct use of the product but it's a possibility.

I wrote, a long time ago, a utility to monitor CF servers and if an
error occurred (Anyone remember Location Code 25 or 26 errors ?) it
would take a certain course of action.

Now, it's possible to customise the app so it will detect certain text
in a web page. So, what you could do is if you want to restart your CF
service remotely is run a template which then alters the output on a web
page to say something like Reboot me! - it'd be something like
http://myserver.com/spuriousurl.cfm - Server Medic will detect that in
its next cycle (User defined timescale) and restart whichever services
you want.. You could even have the message on the page to say Restart
SQL which would restart SQL Server.

Server Medic is Free and is a standalone app that doesn't rely on CF.
Get it from http://www.beetrootstreet.com/products/servermedic/index.cfm

Martin Parry
Macromedia Certified Developer
http://www.BeetrootStreet.co.uk


~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192521
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Calculating lead time

2005-02-01 Thread Keith Gaughan
Chris Kavanagh wrote:

 Dear List,
 
 So tasks in my task management system include these fields:
 
 deadline  (date - MySQL date)
 leadtime  (number - MySQL tinyint)
 leadtime_type (minutes, hours, days, weeks - MySQL varchar)
 
 On the task list view (an html table), I'd like the table rows to 
 change colour based on how close the deadline is.

Oh, and alternatively you could use an INTEGER UNSIGNED column in
leadtime and get rid of leadtime_type instead, and normalise all the
values to minutes. The bonuses would be that you'd be able to store
values of greater magnitude than your current scheme (it stores 32-bit
numbers), and each of the rows would take up less space.

Also, this simplifies implementing your task list. It's just a matter of
getting the difference between deadline and Now() in minutes, and
comparing that to the value in leadtime. If you want all the work done
in SQL, you could use as CASE statement for deciding how the table rows
should be denoted.

K.


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192524
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Calculating lead time

2005-02-01 Thread Keith Gaughan
Chris Kavanagh wrote:
 Dear List,
 
 So tasks in my task management system include these fields:
 
 deadline  (date - MySQL date)
 leadtime  (number - MySQL tinyint)
 leadtime_type (minutes, hours, days, weeks - MySQL varchar)

Slight aside: if you're using MySQL, why not use an ENUM column for
leadtime_type? It'd take up less space, be just as readable, constrain
the data that can be put in that column (a good thing), and, if all the
other columns in the row are fixed width, allow the DBMS to search the
table faster by letting it use fixed size tuples.

K.


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192524
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: better way to code?

2005-02-01 Thread Keith Gaughan
Johnny Le wrote:

 There is a discussion right now in CF-Jobs-Talk called Indian Code.  It says
  I mentioned to the client that the code looked like it was done by a 
first
 month CF programmer. You know the type, pound signs everywhere, lots of CFIFs,
 etc. Didn't say the code sucked or anything, just that it looked amaturish.
 I tend to agree with this statement.  Somehow beginners tends to use more 
 CFIFs
 than the experts.  Have you attend any of Hal Helm's or some of the experts'
 presentations?  Their code seems to have a lot less CFIFs and more CFSET.  
 They
 just seem to organize things better.  I don't want to turn this into a big
 discussion here.  If you have some tricks or tips to help me code better, make
 good/better code, I'll greatly appreciate it.

Avoid special cases.

That's all it is.

That's the only reason why code with lots of conditional statements
look's amateurish. For some reason, rather than trying to find the
underlying logical flow of data, amateurs tend to treat things as a
set of special cases. One of my favourite exampes is from the book
Writing Solid Code. It's in C, but you should be able to understand
it. It's a little simplified, but it gets the point across.

The code is meant to control a type of checkbox. The checkbox can be
either two-state or three-state. Two-state ones store their states as
0 and 1, whereas the three-state ones use 2, 3, and 4.

Here's the (reasonable) amateur attempt:

unsigned GetNextCheckboxState(unsigned crnt)
{
 assert(crnt = 0  crnt = 4);

 /* Deal with two-state. */
 if (crnt == 0)
 return 1;
 if (crnt == 1)
 return 0;

 /* Deal with three-state. */
 if (crnt == 4)
 return 2;
 /* Or if the value's 2 or 3 */
 return crnt + 1;
}

But this handles a lot of special cases, making it error-prone.
Experienced developers learn to get rid of special cases, and try
to find the underlying general case. For the above problem, here are
a few ways of solving it.

Wraparound as the only special cases:

 if (crnt == 1)
 return 0;
 if (crnt == 4)
 return 2;
 return crnt + 1;

Data-driven, use a static array storing the next values:

 static unsigned nextVals = { 1, 0, 3, 4, 2 };
 return nextVals[crnt];

This last one is the best: no special cases and it's logic simple. All
it does is look up an array mapping a value onto the one that follows
it.

Buy some good books. Code Complete and Writing Solid Code are excellent.
So are Programming Pearls and The Pragmatic Programmer. These are books
every developer should have.

K.


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192524
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: javascript insert problem in BD

2005-02-01 Thread Keith Gaughan
CFDEV wrote:
 Hi,
   
 This works in ColdFusion but i'm not able to make it work in BlueDragon. 
   
 script type=text/javascript language=JavaScript1.2
 src=cfoutput#path#wwwlib/fonction.js/cfoutput
 /script
  
 Also if I copy the content of fonction.js in the cfm file it works.. ??? 

It's one of tho things: either you've got the wrong name there for the
JS file, or the value in your path variable is wrong. It could be
something as simple as a missing slash at the end.

Try just writing the full string out, and check it's correct.

K.

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192525
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: grabbing the id of a newly created item..

2005-02-01 Thread Calvin Ward
Just for those that aren't keeping track (or had their head in the sand the
last few years), BlueDragon is not CFMX and only comes into play as a
consideration if you wish to use a 3rd party copy or 'emulator' of the CF
engine.

Since BlueDragon isn't 100% compatible (nor do they intend to be), writing
for both CFMX (or Blackstone) and BlueDragon can be a more costly process
that may result in not leveraging all of the strengths of CFMX (or
Blackstone).

Okay, enough on that sidebar.

- Calvin

-Original Message-
From: Barney Boisvert [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 2:18 AM
To: CF-Talk
Subject: Re: grabbing the id of a newly created item..

That's something you should know about your DB.  There are reasons to
use transactions even if your DB doesn't support them.  For instance,
if you need 100% assurance that a series of statements will be
executed on a single connection, and no other statements will be
interspersed between them.  If you have a driver that understands
transactions (which the MySQL JDBC driver does) , and a
transaction-aware connection pool, you can use transactions for
exactly this effect, regardless of whether the DB actually supports
transactional logic (which MYISAM tables don't).  This allows you to
effectively use table locks and LAST_INSERT_ID() on MYISAM tables,
where you otherwise wouldn't be able to reliably do so, because of
connection pooling.

CFMX happens to single thread access to connections from the pool at a
request level, but BlueDragon doesn't do this.  On BD, every query
pulls a connection from the pool, runs the query, and then releases
the connection back to the pool.  (Whether that's efficient or not is
another discussion.)  Therefore if you want to use table locks, you
MUST use CFTRANSACTION.  If MySQL threw an error, then BD's pooling
mechanism would effectively prevent you from using MYISAM tables in
any sort of efficient way.

I'm willing to trust my knowledge of the DB for the ability to use the
database in these scenarios.

cheers,
barneyb

On Mon, 31 Jan 2005 21:14:57 +0100, Jochem van Dieten
[EMAIL PROTECTED] wrote:
 Barney Boisvert wrote:
  MyISAM tables don't support transactions.
 
 Exactly. But if you try to use a cftransaction on them, no error
 is thrown. So you only find out much later that rollbacks didn't
 work etc.
 
 Jochem
 

-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 6 invites.



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192526
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How do you change the color of each row?

2005-02-01 Thread Calvin Ward
This functionality only works on Internet Explorer correct? 

- Calvin

-Original Message-
From: Adam Haskell [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 31, 2005 10:09 PM
To: CF-Talk
Subject: Re: How do you change the color of each row?

The website with info is  http://www.xs4all.nl/~peterned/csshover.html

The htc is can be downloaded at
http://www.xs4all.nl/~peterned/htc/csshover.htc

To load the hover htc put this in a style or in your .CSS:

body {
behavior:url(../htc/csshover.htc);
}

then to use it all you do is use :hover

So say we had 
odd {
 background-color: #fff
}

even {
  background-color: #CC
} 

for the hover affect all you do is 

odd:hover, even:hover {
background-color: #FcFcFc
}

Those colors are completely random off the top of my head

If'b ya need more help let me know I'll see what I can do :)


Adam H
   


On Tue, 1Feb 2005 10:18:22 +1100, Mike Kear [EMAIL PROTECTED] wrote:
 Adam, could you please post the CSS for this functionality please?
 I'm interested in having the hover thing working, but never managed to
 get the htc hack part right.
 
 Cheers
 Mike Kear
 Windsor, NSW, Australia
 Certified Advanced ColdFusion Developer
 AFP Webworks
 http://afpwebworks.com
 ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month
 
 
 On Mon, 31 Jan 2005 16:13:10 -0500, Adam Haskell [EMAIL PROTECTED]
wrote:
  EEKS! why would you not want to use CSS?  do it one better with CSS
  give them both a hover psudoclass with a background like yellow. Then
  when the mouse is over a row it will be highlighted! If you want this
  to work in IE you, need the htc hack, everythinghover or something
  like that. We've reacently started using it here and no problems yet.
 
  Adam H
 
 
 



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192527
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: proper locking techniques : Access

2005-02-01 Thread Calvin Ward
Wouldn't that defeat the purpose of the lock then? As Sean pointed out,
you'd only be protecting that file access for that one user.

Using the MD5 of the filename is a pretty solid solution in this case as
that would only protect that file and would protect it from any other user
also accessing that file. If the technique is used consistently across apps,
it would also protect that resource regardless of app. Which seems to be a
good thing.

- Calvin

-Original Message-
From: Matt Robertson [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 31, 2005 8:03 PM
To: CF-Talk
Subject: Re: proper locking techniques : Access

Jochem wrote:
 I like the idea of using named locks whenever I use cffile. But
 since I use the MD5 of the filename as the lock name that
 shouldn't conflict very often :-)

ah clever.  Salt the hash with the user id and they'll never conflict,
assuming that doesn't screw something else up  :D

-- 
--mattRobertson--
Janitor, MSB Web Systems
mysecretbase.com



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192528
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: How do you change the color of each row?

2005-02-01 Thread Jochem van Dieten
Calvin Ward wrote:
 This functionality only works on Internet Explorer correct? 

:hover works in any browser but Internet Explorer. The workaround 
to make Inetrnet Explorer support :hover obviously only works in 
Internet Explorer.

Jochem

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192529
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How do you change the color of each row?

2005-02-01 Thread Calvin Ward
I'm missing something here.

On this site: http://www.jaxfusion.org/ there is the following in the CSS:

#mainMenu a:hover {
color: #FCD031;
text-decoration: underline; 
}

And it seems to work in both IE 6.x and FireFox.

- Calvin

-Original Message-
From: Jochem van Dieten [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 6:51 AM
To: CF-Talk
Subject: Re: How do you change the color of each row?

Calvin Ward wrote:
 This functionality only works on Internet Explorer correct? 

:hover works in any browser but Internet Explorer. The workaround 
to make Inetrnet Explorer support :hover obviously only works in 
Internet Explorer.

Jochem



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192531
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Block a Spyder / DOS Attack?

2005-02-01 Thread Jochem van Dieten
Paul Smith wrote:
 This guy (64.242.88.50) is back again.  14,702 times and counting since 
 last midnight.  He apparently ignors robots.txt  I asked my ISP to block 
 him at the firewall early this morning, but he apparently did 
 not.

You should not complain with your ISP, but with his ISP:
http://www.dnsstuff.com/tools/whois.ch?ip=!NET-64-242-88-0-1server=whois.arin.net


 208.27.31.145 www.smarteryellowpages.com - [31/Jan/2005:11:35:46 -0800] 
 GET /MSOffice/cltreq.asp?UL=1ACT=4BUILD=5606STRMVER=4CAPREQ=0 
 HTTP/1.1 302 233  Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; 
 .NET CLR 1.1.4322)
 
 and then did
 
 208.27.31.145 www.smarteryellowpages.com - [31/Jan/2005:11:35:47 -0800] 
 GET /MSOffice/index.cfm HTTP/1.1 302 233  Mozilla/4.0 (compatible; 
 MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
 
 31,758 times and counting.  The first 208.27.31.145 looks like an attempt 
 at SQL Injection.  Is it?  We don't run asp here (perhaps 
 fortunately).

Doesn't look like that to me: no SQL keywords, no strings (only 
numbers), no special characters.


 The second looks something like a DOS attack.

More like a runaway script. Apart from the volume there really 
isn't anything harmfull in there.

Jochem

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192532
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: javascript insert problem in BD

2005-02-01 Thread CFDEV
Thanks to all, it was a known bug that got fixed in the hot fix.

Pat 

-Original Message-
From: Keith Gaughan [mailto:[EMAIL PROTECTED] 
Sent: February 1, 2005 06:41
To: CF-Talk
Subject: Re: javascript insert problem in BD

CFDEV wrote:
 Hi,
   
 This works in ColdFusion but i'm not able to make it work in BlueDragon. 
   
 script type=text/javascript language=JavaScript1.2
 src=cfoutput#path#wwwlib/fonction.js/cfoutput
 /script
  
 Also if I copy the content of fonction.js in the cfm file it works.. ??? 

It's one of tho things: either you've got the wrong name there for the JS
file, or the value in your path variable is wrong. It could be something as
simple as a missing slash at the end.

Try just writing the full string out, and check it's correct.

K.



~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192533
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: How do you change the color of each row?

2005-02-01 Thread Jochem van Dieten
Calvin Ward wrote:
 I'm missing something here.
 
 On this site: http://www.jaxfusion.org/ there is the following in the CSS:
 
 #mainMenu a:hover {
   color: #FCD031;
   text-decoration: underline; 
 }
 
 And it seems to work in both IE 6.x and FireFox.

Correct, in IE the :hover pseudo class works with anchors. In 
other browsers (and the standard) it works with any element, 
including the tr element we need to give an entire table row a 
different color.

Jochem

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192534
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: How do you change the color of each row?

2005-02-01 Thread Adam Haskell
Exactly what Jochem said. IE is the only browser that supports HTCs so
all other browsers will simply ignore this in the style. However IE is
the only browser that does not support the :hover pseudo class on
anything other than on links, this makes IE support it. IE 7 which has
been talked about on here before, a javascript hack for IE to make it
more CSS2 compatible, will also work but from our tests it takes way
to long to parse/fix our pages which are reports with 1000 and upto
maybe 10 columns sometimes IE7 makes our pages useless for about 15-20
seconds which is completely unacceptable.

Adam H


On Tue, 01 Feb 2005 13:09:48 +0100, Jochem van Dieten
[EMAIL PROTECTED] wrote:
 Calvin Ward wrote:
  I'm missing something here.
 
  On this site: http://www.jaxfusion.org/ there is the following in the CSS:
 
  #mainMenu a:hover {
color: #FCD031;
text-decoration: underline;
  }
 
  And it seems to work in both IE 6.x and FireFox.
 
 Correct, in IE the :hover pseudo class works with anchors. In
 other browsers (and the standard) it works with any element,
 including the tr element we need to give an entire table row a
 different color.
 
 Jochem
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192535
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: How do you change the color of each row?

2005-02-01 Thread Keith Gaughan
Calvin Ward wrote:

 I'm missing something here.
 
 On this site: http://www.jaxfusion.org/ there is the following in the CSS:
 
 #mainMenu a:hover {
   color: #FCD031;
   text-decoration: underline; 
 }
 
 And it seems to work in both IE 6.x and FireFox.

That's 'cause it's being applied to an anchor element.

IE supports it only on anchor elements, whereas others support on any
arbitrary (visible) element you can think of.

K.

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192536
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: ColdFusion-based scanning solution?

2005-02-01 Thread Rick Root
Don Smith wrote:
 A friend has put together a web-based scanning solution in ASP.NET
 utilizing, I believe, com objects. 

Must be an activeX control involved... since coldfusion, nor the java 
engine that runs it, has access to anything on the client side, you'll 
probably need to build something similar that communicates with a 
coldfusion-based web service.  Really, the back-end (coldfusion, in your 
case) is pretty irrelevant to this solution.  You need an installed 
application on the client side.

The TiffSurfer plugin works with TWAIN compliant scanners.. see 
www.tiffsurfer.com - but it is Windows only, and may not be customizable 
enough to suit your needs.

I found TiffSurfer with a google search:

http://www.google.com/search?hl=enlr=q=twain+browser+plugin+-virus

  - Rick

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192537
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Two free Alagad Image Component licenses

2005-02-01 Thread Rick Root
Doug Hughes wrote:
 
 Now, to that extent, I am willing to bribe you guys.  Anyone who signs
 up for me and completes an offer (until I'm done with this) will get
 two free licenses for the Alagad Image Component
 (http://www.alagad.com/index.cfm/name-aic).  That's a $100 value.

I have a theory about web sites like this... my wife got one the other 
day for a $250 nordstrom shopping spree at www.fillmycloset.com

In order to complete the offer, you have to sign up 5 others who also 
complete the offer

Okay, let's say you invite 5 others... at what point do they qualify as 
having completed the offer?  When they invite 5 people who complete 
the offer.

Mathmetically, I don't think anyone can ever complete the offer, 
because there are ALWAYS new invitees at the end of the chain who have 
not completed their offer.

  - Rick

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192538
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: CFMX 6.1 Install issue: Resolved

2005-02-01 Thread Cutter (CF related)
Thank you much for you assistance. Truevector continued to run, even 
though I had turned ZoneAlarm off. I had to uninstall ZoneAlarm 
completely, then reinstall after setting up the connector. Once again, I 
appreciate the help. That's why this list rocks!

Cutter

Steven Erat wrote:
 Find the JNDI port that Coldfusion (JRun) is listening on (you can look it
 up in jndi.properties if needed), then try to telnet to host over the JNDI
 port.  Before doing this, make sure that you can see the JNDI port in the
 netstat output (netstat -a | more).
 
 For example:  telnet localhost 2901
 
 When doing this, do you connect? (the cmd window goes blank and you get a
 blinking cursor)
 
 If you can't connect then neither can wsconfig. 
 
 You might want to confirm that the TrueVector service is turned off (the
 service under ZoneAlarm).
 
 Let us know ...
 
 -Steven Erat
 
 
  
 
 
-Original Message-
From: Cutter [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 31, 2005 8:27 PM
To: CF-Talk
Subject: CFMX 6.1 Install issue (2nd try)

Ok, so my 6.1 install isn't going well. The install has placed and 
started the server, but without connectors. When I run the manual 
install on the connectors (after verifying that the server is 
running) I 
get a message that basically says that the JNDI listening 
port listed in 
the jndi.properties file may not be accessible because of TCP/IP 
filtering or a firewall (my firewall was disabled prior to 
the install, 
and filtering isn't enabled). Or that the host may be 
unaccessible as it 
is listed in the security.properties file (I did have to manually add 
'localhost' to this file and restart the CFMX server). I've 
checked the 
livedocs, but without any success to these specific issues. Any ideas?

specs:
WinXP Pro
CFMX 6.1 (devnet)
ZoneAlarm (disabled)
Windows Firewall (always disabled)

 
 
 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192539
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Correct Way To Query For Birthdays

2005-02-01 Thread Claremont, Timothy
My field name is DOB, and I want to query the list for dates that match
today. Of course, the year will never match. I have tried a bunch of
different ways, but I know there must be a more elegant way!

BTW: CFMX and Access

TIA,
Tim
**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please delete it from 
your system.

This footnote also confirms that this email message has been swept for
the presence of computer viruses.

Thank You,
Viahealth
**


~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192541
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Preventing Malicious Sql without cfquery param

2005-02-01 Thread gabriel l smallman
 why can't you use cfqueryParam???

Because the query may be called with the cachedwithin attribute which
doesn't play nice with queryparams. I haven't seen a easy work around for
this issue yet. 

 Realistically, coldfusion automatically escapes any single quotes
ANYWAY... 

But if im not mistaken(easily could be) someone might not need to be able to
stuff in single quotes to tamper? I think they need the semi colon and
parens to insert a sub query to blow something up

;(drop table users) or something of the sort?

gabe


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192540
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Block a Spyder / DOS Attack?

2005-02-01 Thread Adam Haskell
Quick google search turns up it is caused by MS office most lilely
frontpage or someone using office to view part of the website, maybe
excel files or word files??  No SQL injection more annoyance than
anything else.


Adam H


On Mon, 31 Jan 2005 21:15:32 -0800, Paul Smith [EMAIL PROTECTED] wrote:
 This guy (64.242.88.50) is back again.  14,702 times and counting since
 last midnight.  He apparently ignors robots.txt  I asked my ISP to block
 him at the firewall early this morning, but he apparently did
 not.  (Today's log file for this URL is 27MB and counting.)
 
 But another character started out:
 
 208.27.31.145 www.smarteryellowpages.com - [31/Jan/2005:11:35:46 -0800]
 GET /MSOffice/cltreq.asp?UL=1ACT=4BUILD=5606STRMVER=4CAPREQ=0
 HTTP/1.1 302 233  Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
 .NET CLR 1.1.4322)
 
 and then did
 
 208.27.31.145 www.smarteryellowpages.com - [31/Jan/2005:11:35:47 -0800]
 GET /MSOffice/index.cfm HTTP/1.1 302 233  Mozilla/4.0 (compatible;
 MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
 
 31,758 times and counting.  The first 208.27.31.145 looks like an attempt
 at SQL Injection.  Is it?  We don't run asp here (perhaps
 fortunately).  The second looks something like a DOS attack.
 
 All this brings to my mind whether I should develop a ColdFusion
 application that counts hits from IP addresses, emails me the top 5 or 10
 every hour, and offers me the opportunity to block an IP address in
 application.cfm on the fly.
 
 Anyone ever do anything like this?
 
 best,  paul
 
 Date: Thu, 13 Jan 2005 12:51:50 -0800
 To: [EMAIL PROTECTED]
 From: Paul Smith [EMAIL PROTECTED]
 Subject: Block a Spyder
 
 What do I put in robots.txt to block this guy:
 
 64.242.88.50 www.smarteryellowpages.com - [12/Jan/2005:00:00:55 -0800]
 GET /hl/shl/index.cfm?in.8259/cd.10335593/cn.21277304/hd.2666000/al.I.htm
 HTTP/1.1 200 7534  Mozilla/4.0 compatible ZyBorg/1.0 Dead Link Checker
 ([EMAIL PROTECTED]; http://www.WISEnutbot.com)
 64.242.88.50 www.smarteryellowpages.com - [12/Jan/2005:00:00:58 -0800]
 GET
 /HL/LL/LO/index.cfm?IN.1882/CD.10332492/CN.86320180/HD.3675000/AL.O/or.141677.htm
 HTTP/1.1 200 6379  Mozilla/4.0 compatible ZyBorg/1.0 Dead Link Checker
 ([EMAIL PROTECTED]; http://www.WISEnutbot.com)
 64.242.88.50 www.smarteryellowpages.com - [12/Jan/2005:00:00:59 -0800]
 GET /emailfriend/index.cfm?in.5762/cd.10331370/cn.1817190.htm HTTP/1.1
 200 7114  Mozilla/4.0 compatible ZyBorg/1.0 Dead Link Checker
 ([EMAIL PROTECTED]; http://www.WISEnutbot.com)
 
 Whenever it comes around it brings my web server down (whereas Googlebot
 does not)
 
 best,  paul
 
 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192542
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


MX CHR(10)

2005-02-01 Thread Dan O'Keefe
Has anyone noticed a difference in the way this function works in MX?
I upgraded a CF 5 server to MX and now my text files that I have
always written out with chr(10) are not formatted properly and a
control code is visible when viewing the file in notepad.

Dan

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192543
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Correct Way To Query For Birthdays

2005-02-01 Thread Tyler \(T2\) Clendenin
Why not use

WHERE Month(DOB) = Month(GetDate) AND Year(DOB) = Year(GetDate()) 


Tyler Clendenin
GSL Solutions

-Original Message-
From: Claremont, Timothy [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 9:20 AM
To: CF-Talk
Subject: Correct Way To Query For Birthdays

My field name is DOB, and I want to query the list for dates that match
today. Of course, the year will never match. I have tried a bunch of
different ways, but I know there must be a more elegant way!

BTW: CFMX and Access

TIA,
Tim
**
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please delete it from your system.

This footnote also confirms that this email message has been swept for the
presence of computer viruses.

Thank You,
Viahealth
**




~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192544
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Correct Way To Query For Birthdays

2005-02-01 Thread Chris Terrebonne
SELECT *
FROM   myTable
WHERE DAY(DOB) = DAY(GetDate())
 AND
 MONTH(DOB) = MONTH(GetDate())

HTH,
Chris

 [EMAIL PROTECTED] 02/01/05 08:19AM 
My field name is DOB, and I want to query the list for dates that match
today. Of course, the year will never match. I have tried a bunch of
different ways, but I know there must be a more elegant way!

BTW: CFMX and Access

TIA,
Tim
**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please delete it from 
your system.

This footnote also confirms that this email message has been swept for
the presence of computer viruses.

Thank You,
Viahealth
**




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192545
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Two free Alagad Image Component licenses

2005-02-01 Thread Doug Hughes
Here's how an individual completes the offer: 

You follow the link and create an account. You are then presented with
a list of advertisers.  You go out to one of those advertisers and
create an account or buy something or sign up for a trial... whatever
the offer requires.  Many of these offers don't require money up
front but are trials or subscriptions or introductions which if you
don't forget to cancel they'll charge you for.

So, you create the account and wait about 24 hours.  The company you
completed the offer with apparently notified the pyrimad-scheme
company and they mark your offer as completed.

You then, if you choose, can try to get ten other people to do the
same thing.  If you do, they claim they'll give you a Mac Mini, or an
iPod or something.

My guess as to the finacials behind this is that it generates enough
REAL leads for a company from people who might not otherwise be
interested in their products.  The pyrimad-scheme company gets paid
for generating this leads.  Only a few out of most participants
actually complete the 11 required offers and so they don't loose much
money giving away stuff like Mac Minis or iPods, etc.

It seems to add up.

Doug

On Tue, 01 Feb 2005 08:19:09 -0500, Rick Root [EMAIL PROTECTED] wrote:
 Doug Hughes wrote:
 
  Now, to that extent, I am willing to bribe you guys.  Anyone who signs
  up for me and completes an offer (until I'm done with this) will get
  two free licenses for the Alagad Image Component
  (http://www.alagad.com/index.cfm/name-aic).  That's a $100 value.
 
 I have a theory about web sites like this... my wife got one the other
 day for a $250 nordstrom shopping spree at www.fillmycloset.com
 
 In order to complete the offer, you have to sign up 5 others who also
 complete the offer
 
 Okay, let's say you invite 5 others... at what point do they qualify as
 having completed the offer?  When they invite 5 people who complete
 the offer.
 
 Mathmetically, I don't think anyone can ever complete the offer,
 because there are ALWAYS new invitees at the end of the chain who have
 not completed their offer.
 
  - Rick
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192546
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Two free Alagad Image Component licenses

2005-02-01 Thread Thomas Chiverton
On Tuesday 01 Feb 2005 13:19 pm, Rick Root wrote:
 In order to complete the offer, you have to sign up 5 others who also
 complete the offer

Yeah, it's basically a pyramid selling scheme, which may be illegal in your 
country.

-- 
Tom Chiverton 
Advanced ColdFusion Programmer

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192547
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Ewok
Wow, too much for so little, Just use Richard's method

RUN YOUR INSERT QUERY

Then directly after the insert get the records ID...

cfquery name=mid datasource=
SELECT MAX(TheID) as LatestID FROM TABLENAME
/cfquery

The newest records ID from that table will now be in #mid.LatestID#

Since you said grab the id ( autonum, primary key)... autonumber being an
Access data type means the above is about your only option. Does @@identity
even work in access? (or does anything else useful work in access for that
matter)

There's also no need to cflock the query from above that I can think of with
an access data source. For the most part, access locks itself when it needs
to.



-Original Message-
From: Barney Boisvert [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 31, 2005 2:02 PM
To: CF-Talk
Subject: Re: EASY: grabbing the id of a newly created item..

That's a horrible way to do it.  Quite inefficient.

A better route is to check your DB's docs and see how they expose the
last inserted sequence value.  In MySQL it's LAST_INSERT_ID(), with MS
SQL Server its one of three @IDENTITY variables.  Run your INSERT, and
then select the value back out using this mechanism.  You may or may
not need a transaction, depending on the specifics, and you definitely
won't need CFLOCK.

cheers,
barneyb

On Mon, 31 Jan 2005 10:24:34 -0800, Richard Colman [EMAIL PROTECTED] wrote:
  This is actually pretty easy in ACCESS:
 
 1) put the enire transaction within a CFLOCK block
 
 2) do the insert
 
 3) then select max(id) assuming you have an autonumber field for the id
 
 Which will give you the id of the record just inserted.
 
 This is so easy that even I can do it.
 
 Rick Colman
 


-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 6 invites.



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192548
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Preventing Malicious Sql without cfquery param

2005-02-01 Thread Rick Root
gabriel l smallman wrote:
 
Realistically, coldfusion automatically escapes any single quotes
 
 But if im not mistaken(easily could be) someone might not need to be able to
 stuff in single quotes to tamper? I think they need the semi colon and
 parens to insert a sub query to blow something up
 
 ;(drop table users) or something of the sort?

If your query doesn't already have the single quotes... that's an issue, 
like this:

cfquery ..
select * from emp where emp_id=#url.emp_id#
/cfquery

That would certainly be bad...

Then you could pass ?emp_id=;drop table emp (with the appropriate url 
encoding.

But for strings...

cfquery ...
select * from products where title like '%#url.criteria#%'
/cfquery

It's not really a problem because like I said, coldfusion automatically 
escapes single quotes within variables inside cfquery.  So even if you 
passed a value like   '; drop table products

the resulting query would be:

select * from products where title like '%''; drop table products'

And that's not dangerous.

That being said.. I've never had a problem with cfquery using cached 
attributes.. it doesn't cache the attributes, the database caches the 
query without the attributes so it doesn't have to recompile the query 
everytime.. so coldfusion is passing the parameters in every time.

  - Rick

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192549
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Two free Alagad Image Component licenses

2005-02-01 Thread Micha Schopman
If you are really a nice guy, you would give everyone on this list a
free license despite completing offers :) We provide you with free
consultancy here.

Micha Schopman
Software Engineer

Modern Media, Databankweg 12 M, 3821 AL  Amersfoort
Tel 033-4535377, Fax 033-4535388
KvK Amersfoort 39081679, Rabo 39.48.05.380



-
Modern Media, Making You Interact Smarter. Onze oplossingen verbeteren
de interactie met uw doelgroep. 
Wilt u meer omzet, lagere kosten of een beter service niveau? Voor meer
informatie zie www.modernmedia.nl 


-


~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192552
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Calvin Ward
It absolutely isn't your only option. And if you do the below you need to
use cftransaction.

The best option, in my opinion, is to generate a UUID/GUID and use that
instead of a database generated ID. That will work with every single
database platform out there and will always be the correct ID.

- Calvin

-Original Message-
From: Ewok [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 10:01 AM
To: CF-Talk
Subject: RE: EASY: grabbing the id of a newly created item..

Wow, too much for so little, Just use Richard's method

RUN YOUR INSERT QUERY

Then directly after the insert get the records ID...

cfquery name=mid datasource=
SELECT MAX(TheID) as LatestID FROM TABLENAME
/cfquery

The newest records ID from that table will now be in #mid.LatestID#

Since you said grab the id ( autonum, primary key)... autonumber being an
Access data type means the above is about your only option. Does @@identity
even work in access? (or does anything else useful work in access for that
matter)

There's also no need to cflock the query from above that I can think of with
an access data source. For the most part, access locks itself when it needs
to.



-Original Message-
From: Barney Boisvert [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 31, 2005 2:02 PM
To: CF-Talk
Subject: Re: EASY: grabbing the id of a newly created item..

That's a horrible way to do it.  Quite inefficient.

A better route is to check your DB's docs and see how they expose the
last inserted sequence value.  In MySQL it's LAST_INSERT_ID(), with MS
SQL Server its one of three @IDENTITY variables.  Run your INSERT, and
then select the value back out using this mechanism.  You may or may
not need a transaction, depending on the specifics, and you definitely
won't need CFLOCK.

cheers,
barneyb

On Mon, 31 Jan 2005 10:24:34 -0800, Richard Colman [EMAIL PROTECTED] wrote:
  This is actually pretty easy in ACCESS:
 
 1) put the enire transaction within a CFLOCK block
 
 2) do the insert
 
 3) then select max(id) assuming you have an autonumber field for the id
 
 Which will give you the id of the record just inserted.
 
 This is so easy that even I can do it.
 
 Rick Colman
 


-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 6 invites.





~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192550
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread COLLIE David
 Wow, too much for so little, Just use Richard's method
 
 RUN YOUR INSERT QUERY
 
 Then directly after the insert get the records ID...
 
 cfquery name=mid datasource=
 SELECT MAX(TheID) as LatestID FROM TABLENAME
 /cfquery


Sorry but have to chime in here rather than lurking

OK it'll work, but what happens if you have a few concurrent users and
one thread (or process.. CMIIW) has ran the insert query, but before the
thread get's the chance to do another query to get the max id out,
another thread has inserted a record.

This then means that when you try and get the max ID for the first
thread out you'll actually be retrieving the second thread's ID meaning
that all FK's etc after that would just be plain wrong.

Then the question will be... 'How come my user's are seeing other
people's data'

Might as well do it right in the first place There are plenty of
suggestions for doing this in previous messages in the thread(s)
covering this.

-- 
dc

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192551
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Robertson-Ravo, Neil (RX)
SQL Server is simply @@IDENTITY



-Original Message-
From: Ewok [mailto:[EMAIL PROTECTED] 
Sent: 01 February 2005 15:01
To: CF-Talk
Subject: RE: EASY: grabbing the id of a newly created item..

Wow, too much for so little, Just use Richard's method

RUN YOUR INSERT QUERY

Then directly after the insert get the records ID...

cfquery name=mid datasource=
SELECT MAX(TheID) as LatestID FROM TABLENAME
/cfquery

The newest records ID from that table will now be in #mid.LatestID#

Since you said grab the id ( autonum, primary key)... autonumber being an
Access data type means the above is about your only option. Does @@identity
even work in access? (or does anything else useful work in access for that
matter)

There's also no need to cflock the query from above that I can think of with
an access data source. For the most part, access locks itself when it needs
to.



-Original Message-
From: Barney Boisvert [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 31, 2005 2:02 PM
To: CF-Talk
Subject: Re: EASY: grabbing the id of a newly created item..

That's a horrible way to do it.  Quite inefficient.

A better route is to check your DB's docs and see how they expose the
last inserted sequence value.  In MySQL it's LAST_INSERT_ID(), with MS
SQL Server its one of three @IDENTITY variables.  Run your INSERT, and
then select the value back out using this mechanism.  You may or may
not need a transaction, depending on the specifics, and you definitely
won't need CFLOCK.

cheers,
barneyb

On Mon, 31 Jan 2005 10:24:34 -0800, Richard Colman [EMAIL PROTECTED] wrote:
  This is actually pretty easy in ACCESS:
 
 1) put the enire transaction within a CFLOCK block
 
 2) do the insert
 
 3) then select max(id) assuming you have an autonumber field for the id
 
 Which will give you the id of the record just inserted.
 
 This is so easy that even I can do it.
 
 Rick Colman
 


-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 6 invites.





~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192553
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Thanks! Was RE: Hiding Credit Card Numbers

2005-02-01 Thread James Watkins
I used the UDF ccEscape and it does a fine job.  This also introduced me
to http://www.cflib.org and I have found other nice things

Jim W 

-Original Message-
From: Larry Lyons [mailto:[EMAIL PROTECTED] 
Sent: Friday, January 28, 2005 2:50 PM
To: CF-Talk
Subject: Re: Hiding Credit Card Numbers


When we receive a credit card payment I send an email (using Cfmail) 
thanking them for the payment and explaining that the charges have been

applied to #nameofcard# and #cardnumber#  what I would like to do is 
only display last 4 numbers of credit card and fill first numbers with 
asterisk as in 6514

So how would I modify following to do that:

Card Number: #creditcard.cardnumber#

Jim Watkins
VP Technology  Institutional Services [EMAIL PROTECTED]
http://www.northgatech.edu

There's a good UDF on CFLIB called ccEscape that does this. From the
site: http://www.cflib.org/udf.cfm?ID=657

 Escapes a credit card number, showing only the last 4 digits. The other
digits are replaced with the * character.  cfset
creditcard=4343010125259797
cfoutput#ccEscape(creditcard)#/cfoutput

gives you ***9797

hth,

larry
--
Larry C. Lyons
Web Analyst
BEI Resources
American Type Culture Collection
email: llyons(at)atcc(dot)org
tel: 703.365.2700.2678
--




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192554
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Correct Way To Query For Birthdays

2005-02-01 Thread Rick Root
Claremont, Timothy wrote:
 My field name is DOB, and I want to query the list for dates that match
 today. Of course, the year will never match. I have tried a bunch of
 different ways, but I know there must be a more elegant way!

rant type=way_off_topic
Others have already answered your question suitable.  Let me just rant 
that stupid Postgres doesn't have Day() Month() and Year() functions 
like every other freakin' database in the world.
subrantMySQL uses DayOfMonth() and didn't add Day() until 4.1/subrant
/rant

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192555
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Two free Alagad Image Component licenses

2005-02-01 Thread Doug Hughes
Micha,

As much as I'd love to do that, it would more or less put me out of business. :)

Charlie, 

If you go though the process within the next couple hours it should
show up as completed arround 1 est.  Thank you!  I'm sure Joe will
understand.

Doug


On Tue, 1 Feb 2005 16:14:31 +0100, Micha Schopman
[EMAIL PROTECTED] wrote:
 If you are really a nice guy, you would give everyone on this list a
 free license despite completing offers :) We provide you with free
 consultancy here.
 
 Micha Schopman
 Software Engineer
 
 Modern Media, Databankweg 12 M, 3821 AL  Amersfoort
 Tel 033-4535377, Fax 033-4535388
 KvK Amersfoort 39081679, Rabo 39.48.05.380
 
 
 
 -
 Modern Media, Making You Interact Smarter. Onze oplossingen verbeteren
 de interactie met uw doelgroep.
 Wilt u meer omzet, lagere kosten of een beter service niveau? Voor meer
 informatie zie www.modernmedia.nl
 
 
 -
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192556
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: OT: Free WIKI web services?

2005-02-01 Thread Sean Corfield
On Thu, 27 Jan 2005 14:16:49 -0600, Jake McKee [EMAIL PROTECTED] wrote:
 Sorry for the off-topic post, but
 
 Does anyone know of a good, free, and password-protectable WIKI?
 
 I might be willing to pay a reasonable amount if I can keep the content
 private and the service is stable.

I don't know how 'good' it is but http://www.seedwiki.com/ ought to
suit your needs.
-- 
Sean A Corfield -- http://www.corfield.org/
Team Fusebox -- http://www.fusebox.org/
Breeze Me! -- http://www.corfield.org/breezeme
Got Gmail? -- I have 5 invites to give away!

If you're not annoying somebody, you're not really alive.
-- Margaret Atwood

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192558
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Jeff Garza
If you are using SQL Server 2000, I would recommend moving away from using 
@@IDENTITY as it can return incorrect information if you have a trigger set 
up on the table you are inserting into.  It will return the ID from the 
Trigger action rather than the newly inserted row.  SCOPE_IDENTITY() does 
not have these issues.  That's all we use now as I've been burned once where 
the DBA added a trigger to a table without my knowledge... Took the longest 
time to figure out why that process wasn't working.

Cheers,

Jeff Garza

- Original Message - 
From: Robertson-Ravo, Neil (RX) [EMAIL PROTECTED]
To: CF-Talk cf-talk@houseoffusion.com
Sent: Tuesday, February 01, 2005 8:20 AM
Subject: RE: EASY: grabbing the id of a newly created item..


 SQL Server is simply @@IDENTITY



 -Original Message-
 From: Ewok [mailto:[EMAIL PROTECTED]
 Sent: 01 February 2005 15:01
 To: CF-Talk
 Subject: RE: EASY: grabbing the id of a newly created item..

 Wow, too much for so little, Just use Richard's method

 RUN YOUR INSERT QUERY

 Then directly after the insert get the records ID...

 cfquery name=mid datasource=
 SELECT MAX(TheID) as LatestID FROM TABLENAME
 /cfquery

 The newest records ID from that table will now be in #mid.LatestID#

 Since you said grab the id ( autonum, primary key)... autonumber being 
 an
 Access data type means the above is about your only option. Does 
 @@identity
 even work in access? (or does anything else useful work in access for that
 matter)

 There's also no need to cflock the query from above that I can think of 
 with
 an access data source. For the most part, access locks itself when it 
 needs
 to.



 -Original Message-
 From: Barney Boisvert [mailto:[EMAIL PROTECTED]
 Sent: Monday, January 31, 2005 2:02 PM
 To: CF-Talk
 Subject: Re: EASY: grabbing the id of a newly created item..

 That's a horrible way to do it.  Quite inefficient.

 A better route is to check your DB's docs and see how they expose the
 last inserted sequence value.  In MySQL it's LAST_INSERT_ID(), with MS
 SQL Server its one of three @IDENTITY variables.  Run your INSERT, and
 then select the value back out using this mechanism.  You may or may
 not need a transaction, depending on the specifics, and you definitely
 won't need CFLOCK.

 cheers,
 barneyb

 On Mon, 31 Jan 2005 10:24:34 -0800, Richard Colman [EMAIL PROTECTED] wrote:
  This is actually pretty easy in ACCESS:

 1) put the enire transaction within a CFLOCK block

 2) do the insert

 3) then select max(id) assuming you have an autonumber field for the id

 Which will give you the id of the record just inserted.

 This is so easy that even I can do it.

 Rick Colman



 -- 
 Barney Boisvert
 [EMAIL PROTECTED]
 360.319.6145
 http://www.barneyb.com/

 Got Gmail? I have 6 invites.





 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192557
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Preventing Malicious Sql without cfquery param

2005-02-01 Thread Bud
gabriel l smallman wrote:

Realistically, coldfusion automatically escapes any single quotes

  But if im not mistaken(easily could be) someone might not need to be able to
  stuff in single quotes to tamper? I think they need the semi colon and
  parens to insert a sub query to blow something up

  ;(drop table users) or something of the sort?

If your query doesn't already have the single quotes... that's an issue,
like this:

cfquery ..
   select * from emp where emp_id=#url.emp_id#
/cfquery

That would certainly be bad...

I use val()

select * from emp where emp_id=#val(url.emp_id)#

Anything not numeric will be dropped. A totally non-numeric value 
will return 0.

For dates I use ODBCDateFormat.
-- 

Bud Schneehagen - Tropical Web Creations, Inc.

_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
Web Based Solutions / eCommerce Development  Hosting
http://www.twcreations.com/ - http://www.cf-ezcart.com/
Toll Free: 877.207.6397 - Local  Int'l Phone/Fax: 386.789.0968

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192559
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Form Input Boxes

2005-02-01 Thread Mark Leder
Hi all,
Now that I've installed MSN Beta Search in the IE Browser all my form field
input boxes on all my sites show background colors (yellow, purple,etc).  In
my css for these fields INPUT#someName I've set the background color to
white, but this doesn't work.  Is there any way to programatically force the
field entry boxes not to use these goofy colors?  BTW: I've seen this
behavior in other browsers from time to time as well.
 
Thanks,
Mark




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192560
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Robertson-Ravo, Neil (RX)
Best to avoid triggers full stop.

-Original Message-
From: Jeff Garza [mailto:[EMAIL PROTECTED] 
Sent: 01 February 2005 15:41
To: CF-Talk
Subject: Re: EASY: grabbing the id of a newly created item..

If you are using SQL Server 2000, I would recommend moving away from using 
@@IDENTITY as it can return incorrect information if you have a trigger set 
up on the table you are inserting into.  It will return the ID from the 
Trigger action rather than the newly inserted row.  SCOPE_IDENTITY() does 
not have these issues.  That's all we use now as I've been burned once where

the DBA added a trigger to a table without my knowledge... Took the longest 
time to figure out why that process wasn't working.

Cheers,

Jeff Garza

- Original Message - 
From: Robertson-Ravo, Neil (RX) [EMAIL PROTECTED]
To: CF-Talk cf-talk@houseoffusion.com
Sent: Tuesday, February 01, 2005 8:20 AM
Subject: RE: EASY: grabbing the id of a newly created item..


 SQL Server is simply @@IDENTITY



 -Original Message-
 From: Ewok [mailto:[EMAIL PROTECTED]
 Sent: 01 February 2005 15:01
 To: CF-Talk
 Subject: RE: EASY: grabbing the id of a newly created item..

 Wow, too much for so little, Just use Richard's method

 RUN YOUR INSERT QUERY

 Then directly after the insert get the records ID...

 cfquery name=mid datasource=
 SELECT MAX(TheID) as LatestID FROM TABLENAME
 /cfquery

 The newest records ID from that table will now be in #mid.LatestID#

 Since you said grab the id ( autonum, primary key)... autonumber being 
 an
 Access data type means the above is about your only option. Does 
 @@identity
 even work in access? (or does anything else useful work in access for that
 matter)

 There's also no need to cflock the query from above that I can think of 
 with
 an access data source. For the most part, access locks itself when it 
 needs
 to.



 -Original Message-
 From: Barney Boisvert [mailto:[EMAIL PROTECTED]
 Sent: Monday, January 31, 2005 2:02 PM
 To: CF-Talk
 Subject: Re: EASY: grabbing the id of a newly created item..

 That's a horrible way to do it.  Quite inefficient.

 A better route is to check your DB's docs and see how they expose the
 last inserted sequence value.  In MySQL it's LAST_INSERT_ID(), with MS
 SQL Server its one of three @IDENTITY variables.  Run your INSERT, and
 then select the value back out using this mechanism.  You may or may
 not need a transaction, depending on the specifics, and you definitely
 won't need CFLOCK.

 cheers,
 barneyb

 On Mon, 31 Jan 2005 10:24:34 -0800, Richard Colman [EMAIL PROTECTED] wrote:
  This is actually pretty easy in ACCESS:

 1) put the enire transaction within a CFLOCK block

 2) do the insert

 3) then select max(id) assuming you have an autonumber field for the id

 Which will give you the id of the record just inserted.

 This is so easy that even I can do it.

 Rick Colman



 -- 
 Barney Boisvert
 [EMAIL PROTECTED]
 360.319.6145
 http://www.barneyb.com/

 Got Gmail? I have 6 invites.





 



~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192561
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


SOT: PostgreSQL problem and cfqueryparam

2005-02-01 Thread Rick Root
I'm having a strange issue with postgresql...

I have a database table containing a field defined as follows:

ABSTRACT text not null default ''

When I insert data, I use cfqueryparam as follows:

cfqueryparam cfsqltype=cf_sql_longvarchar 
value=#arguments.details.abstract#

And I'm seeing this error:

[Macromedia][SequeLink JDBC Driver][ODBC Socket]ERROR: ExecInsert: Fail 
to add null value in not null attribute abstract

This works great in tables defined the same way in MySQL ...

I would think that cfqueryparam would be sending an empty string, not a 
null...

The simpler solution is just to allow null values in fields that are not 
required... but I tend to avoid null values as a general rule (I read 
somewhere that indices on not null fields are more efficient)

  - Rick

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192562
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Ewok
 OK it'll work, but what happens if you have a few concurrent users and one

 thread (or process.. CMIIW) has ran the insert query, but before the  
 thread get's the chance to do another query to get the max id out, another

 thread has inserted a record.

Seems to me that the last record would be the last record no matter when it
was entered...

It's access people... how much concurrent traffic do you think it's going to
get? Do you honestly see threads getting crossed? I see the data source
crashing more often than that. Hell, I probably have a better chance of
hitting the lotto.

 Might as well do it right in the first place

What's right for one application is quite possibly overkill for another.
Did I mention it was access?

**ducks**

-Original Message-
From: COLLIE David [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 10:13 AM
To: CF-Talk
Subject: RE: EASY: grabbing the id of a newly created item..

 Wow, too much for so little, Just use Richard's method
 
 RUN YOUR INSERT QUERY
 
 Then directly after the insert get the records ID...
 
 cfquery name=mid datasource=
 SELECT MAX(TheID) as LatestID FROM TABLENAME
 /cfquery


Sorry but have to chime in here rather than lurking

OK it'll work, but what happens if you have a few concurrent users and
one thread (or process.. CMIIW) has ran the insert query, but before the
thread get's the chance to do another query to get the max id out,
another thread has inserted a record.

This then means that when you try and get the max ID for the first
thread out you'll actually be retrieving the second thread's ID meaning
that all FK's etc after that would just be plain wrong.

Then the question will be... 'How come my user's are seeing other
people's data'

Might as well do it right in the first place There are plenty of
suggestions for doing this in previous messages in the thread(s)
covering this.

-- 
dc



~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192563
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Ewok
 It absolutely isn't your only option. And if you do the below you need to 
 use cftransaction.

I didnÂ’t say it was the only option known to man, I said it was ABOUT the
only option for autonumbers. (I try to avoid autonumbers like the plague in
a relational data structure)

And why would you need cftransaction for that? ItÂ’s a simple select. You
think it should have cftransaction because it follows an insert?

-Original Message-
From: Calvin Ward [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 10:09 AM
To: CF-Talk
Subject: RE: EASY: grabbing the id of a newly created item..

It absolutely isn't your only option. And if you do the below you need to
use cftransaction.

The best option, in my opinion, is to generate a UUID/GUID and use that
instead of a database generated ID. That will work with every single
database platform out there and will always be the correct ID.

- Calvin

-Original Message-
From: Ewok [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 10:01 AM
To: CF-Talk
Subject: RE: EASY: grabbing the id of a newly created item..

Wow, too much for so little, Just use Richard's method

RUN YOUR INSERT QUERY

Then directly after the insert get the records ID...

cfquery name=mid datasource=
SELECT MAX(TheID) as LatestID FROM TABLENAME
/cfquery

The newest records ID from that table will now be in #mid.LatestID#

Since you said grab the id ( autonum, primary key)... autonumber being an
Access data type means the above is about your only option. Does @@identity
even work in access? (or does anything else useful work in access for that
matter)

There's also no need to cflock the query from above that I can think of with
an access data source. For the most part, access locks itself when it needs
to.

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.3 - Release Date: 1/31/2005
 


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192566
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Form Input Boxes

2005-02-01 Thread Alex Sherwood
It's done by the browser, not the stylesheet. The Google toolbar does 
this, too.

The thing is, other people that install the MSN Beta search will see 
this too, regardless of what you CSS sheets say.

There might be an option to turn this off.



Mark Leder wrote:

Hi all,
Now that I've installed MSN Beta Search in the IE Browser all my form field
input boxes on all my sites show background colors (yellow, purple,etc).  In
my css for these fields INPUT#someName I've set the background color to
white, but this doesn't work.  Is there any way to programatically force the
field entry boxes not to use these goofy colors?  BTW: I've seen this
behavior in other browsers from time to time as well.
 
Thanks,
Mark






~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192565
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Robertson-Ravo, Neil (RX)
Best to avoid triggers full stop.

-Original Message-
From: Jeff Garza [mailto:[EMAIL PROTECTED] 
Sent: 01 February 2005 15:41
To: CF-Talk
Subject: Re: EASY: grabbing the id of a newly created item..

If you are using SQL Server 2000, I would recommend moving away from using 
@@IDENTITY as it can return incorrect information if you have a trigger set 
up on the table you are inserting into.  It will return the ID from the 
Trigger action rather than the newly inserted row.  SCOPE_IDENTITY() does 
not have these issues.  That's all we use now as I've been burned once where

the DBA added a trigger to a table without my knowledge... Took the longest 
time to figure out why that process wasn't working.

Cheers,
This e-mail is from Reed Exhibitions (Oriel House, 26 The Quadrant,
Richmond, Surrey, TW9 1DL, United Kingdom), a division of Reed Business,
Registered in England, Number 678540.  It contains information which is
confidential and may also be privileged.  It is for the exclusive use of the
intended recipient(s).  If you are not the intended recipient(s) please note
that any form of distribution, copying or use of this communication or the
information in it is strictly prohibited and may be unlawful.  If you have
received this communication in error please return it to the sender or call
our switchboard on +44 (0) 20 89107910.  The opinions expressed within this
communication are not necessarily those expressed by Reed Exhibitions.
Visit our website at http://www.reedexpo.com

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192564
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: SOT: PostgreSQL problem and cfqueryparam

2005-02-01 Thread Jochem van Dieten
Rick Root wrote:
 I'm having a strange issue with postgresql...
 
 I have a database table containing a field defined as follows:
 
 ABSTRACT text not null default ''

What is the function of DEFAULT ''?


 When I insert data, I use cfqueryparam as follows:
 
 cfqueryparam cfsqltype=cf_sql_longvarchar 
 value=#arguments.details.abstract#
 
 And I'm seeing this error:
 
 [Macromedia][SequeLink JDBC Driver][ODBC Socket]ERROR: ExecInsert: Fail 
 to add null value in not null attribute abstract

Don't use ODBC, use JDBC:
http://www.macromedia.com/cfusion/knowledgebase/index.cfm?id=tn_18338


 I would think that cfqueryparam would be sending an empty string, not a 
 null...

I would think the PostgreSQL ODBC driver doesn't know the difference.


 The simpler solution is just to allow null values in fields that are not 
 required... but I tend to avoid null values as a general rule (I read 
 somewhere that indices on not null fields are more efficient)

You probably read that in the Oracle documentation (Oracle can't 
index NULL fields and doesn't know the difference between an 
empty string and a NULL).
Index efficiency is governed by index selectivity, so NULLs can 
be both good and bad depending on how large the fraction of NULLs 
is in the table. In PostgreSQL you just use a partial index if 
there are too many NULLs.

Jochem

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192567
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Jeff Garza
Triggers have their place and we use them judiciously.  You just have to 
really keep on top of your documentation so you understand what's happening 
when you do an insert.  I'd much rather use a trigger than have to code a 
whole bunch of extraneous CF to acheive the same goal.  The other advantage 
for triggers is that they operate independantly of the mechanism used to 
create the entry.  A lot of our apps have both a web based interface and an 
MSAccess interface to the same data.

Cheers,

Jeff Garza

- Original Message - 
From: Robertson-Ravo, Neil (RX) [EMAIL PROTECTED]
To: CF-Talk cf-talk@houseoffusion.com
Sent: Tuesday, February 01, 2005 8:50 AM
Subject: RE: EASY: grabbing the id of a newly created item..


 Best to avoid triggers full stop.

 -Original Message-
 From: Jeff Garza [mailto:[EMAIL PROTECTED]
 Sent: 01 February 2005 15:41
 To: CF-Talk
 Subject: Re: EASY: grabbing the id of a newly created item..

 If you are using SQL Server 2000, I would recommend moving away from using
 @@IDENTITY as it can return incorrect information if you have a trigger 
 set
 up on the table you are inserting into.  It will return the ID from the
 Trigger action rather than the newly inserted row.  SCOPE_IDENTITY() does
 not have these issues.  That's all we use now as I've been burned once 
 where

 the DBA added a trigger to a table without my knowledge... Took the 
 longest
 time to figure out why that process wasn't working.

 Cheers,

 Jeff Garza

 - Original Message - 
 From: Robertson-Ravo, Neil (RX) [EMAIL PROTECTED]
 To: CF-Talk cf-talk@houseoffusion.com
 Sent: Tuesday, February 01, 2005 8:20 AM
 Subject: RE: EASY: grabbing the id of a newly created item..


 SQL Server is simply @@IDENTITY



 -Original Message-
 From: Ewok [mailto:[EMAIL PROTECTED]
 Sent: 01 February 2005 15:01
 To: CF-Talk
 Subject: RE: EASY: grabbing the id of a newly created item..

 Wow, too much for so little, Just use Richard's method

 RUN YOUR INSERT QUERY

 Then directly after the insert get the records ID...

 cfquery name=mid datasource=
 SELECT MAX(TheID) as LatestID FROM TABLENAME
 /cfquery

 The newest records ID from that table will now be in #mid.LatestID#

 Since you said grab the id ( autonum, primary key)... autonumber being
 an
 Access data type means the above is about your only option. Does
 @@identity
 even work in access? (or does anything else useful work in access for 
 that
 matter)

 There's also no need to cflock the query from above that I can think of
 with
 an access data source. For the most part, access locks itself when it
 needs
 to.



 -Original Message-
 From: Barney Boisvert [mailto:[EMAIL PROTECTED]
 Sent: Monday, January 31, 2005 2:02 PM
 To: CF-Talk
 Subject: Re: EASY: grabbing the id of a newly created item..

 That's a horrible way to do it.  Quite inefficient.

 A better route is to check your DB's docs and see how they expose the
 last inserted sequence value.  In MySQL it's LAST_INSERT_ID(), with MS
 SQL Server its one of three @IDENTITY variables.  Run your INSERT, and
 then select the value back out using this mechanism.  You may or may
 not need a transaction, depending on the specifics, and you definitely
 won't need CFLOCK.

 cheers,
 barneyb

 On Mon, 31 Jan 2005 10:24:34 -0800, Richard Colman [EMAIL PROTECTED] 
 wrote:
  This is actually pretty easy in ACCESS:

 1) put the enire transaction within a CFLOCK block

 2) do the insert

 3) then select max(id) assuming you have an autonumber field for the id

 Which will give you the id of the record just inserted.

 This is so easy that even I can do it.

 Rick Colman



 -- 
 Barney Boisvert
 [EMAIL PROTECTED]
 360.319.6145
 http://www.barneyb.com/

 Got Gmail? I have 6 invites.









 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192568
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: CF-Talk: Digest every hour

2005-02-01 Thread Paul Smith
Actually I posted the wrong IP.  Looking in the light of morning the 31,758 
lines of MS Office stuff started out like this:

207.213.217.31 www.smarteryellowpages.com - [31/Jan/2005:11:48:26 -0800] 
GET / HTTP/1.1 302 167 
http://www.google.com/search?hl=enq=SMARTER+YELLOW+PAGESbtnG=Google+Search; 
Mozilla/4.0 (compatible; MSIE 6.0; MSNIA; Windows 98; Hotbar 4.1.2.0; .NET 
CLR 1.1.4322)

207.213.217.31 www.smarteryellowpages.com - [31/Jan/2005:11:48:27 -0800] 
GET /index.cfm HTTP/1.1 200 9434 
http://www.google.com/search?hl=enq=SMARTER+YELLOW+PAGESbtnG=Google+Search; 
Mozilla/4.0 (compatible; MSIE 6.0; MSNIA; Windows 98; Hotbar 4.1.2.0; .NET 
CLR 1.1.4322)

I had not noticed the following line before.  They are looking for the DLL 
owssver.dll in _vti_bin

Anyone know what owssver.dll does?

207.213.217.31 www.smarteryellowpages.com - [31/Jan/2005:11:48:27 -0800] 
GET /_vti_bin/owssvr.dll?UL=1ACT=4BUILD=2614STRMVER=4CAPREQ=0 
HTTP/1.1 302 233  Mozilla/4.0 (compatible; MSIE 6.0; MSNIA; Windows 98; 
Hotbar 4.1.2.0; .NET CLR 1.1.4322)

207.213.217.31 www.smarteryellowpages.com - [31/Jan/2005:11:48:28 -0800] 
GET /_vti_bin/index.cfm HTTP/1.1 200 230  Mozilla/4.0 (compatible; 
MSIE 6.0; MSNIA; Windows 98; Hotbar 4.1.2.0; .NET CLR 1.1.4322)

207.213.217.31 www.smarteryellowpages.com - [31/Jan/2005:11:48:28 -0800] 
GET /MSOffice/cltreq.asp?UL=1ACT=4BUILD=2614STRMVER=4CAPREQ=0 
HTTP/1.1 302 233  Mozilla/4.0 (compatible; MSIE 6.0; MSNIA; Windows 98; 
Hotbar 4.1.2.0; .NET CLR 1.1.4322)

207.213.217.31 www.smarteryellowpages.com - [31/Jan/2005:11:48:28 -0800] 
GET /MSOffice/index.cfm HTTP/1.1 302 233  Mozilla/4.0 (compatible; 
MSIE 6.0; MSNIA; Windows 98; Hotbar 4.1.2.0; .NET CLR 1.1.4322)

What the /MSOffice/index.cfm stuff does is to burn time until the browser 
figures out there is no such folder.  So 31,000 /MSOffice/index.cfm's 
appear to be acting like a DOS attack.  Fortunately it didn't work.

best,  paul

Subject: Block a Spyder / DOS Attack?
From: Adam Haskell [EMAIL PROTECTED]
Date: Tue, 1 Feb 2005 09:26:55 -0500
Thread: 
http://www.houseoffusion.com/cf_lists/index.cfm/method=messagesthreadid=37994forumid=4#192542

Quick google search turns up it is caused by MS office most lilely
frontpage or someone using office to view part of the website, maybe
excel files or word files??  No SQL injection more annoyance than
anything else.


Adam H


On Mon, 31 Jan 2005 21:15:32 -0800, Paul Smith [EMAIL PROTECTED] 
wrote:
  This guy (64.242.88.50) is back again.  14,702 times and counting since
  last midnight.  He apparently ignors robots.txt  I asked my ISP to block
  him at the firewall early this morning, but he apparently did
  not.  (Today's log file for this URL is 27MB and counting.)
 
  But another character started out:
 
  208.27.31.145 www.smarteryellowpages.com - [31/Jan/2005:11:35:46 -0800]
  GET /MSOffice/cltreq.asp?UL=1ACT=4BUILD=5606STRMVER=4CAPREQ=0
  HTTP/1.1 302 233  Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
  .NET CLR 1.1.4322)
 
  and then did
 
  208.27.31.145 www.smarteryellowpages.com - [31/Jan/2005:11:35:47 -0800]
  GET /MSOffice/index.cfm HTTP/1.1 302 233  Mozilla/4.0 (compatible;
  MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
 
  31,758 times and counting.  The first 208.27.31.145 looks like an attempt
  at SQL Injection.  Is it?  We don't run asp here (perhaps
  fortunately).  The second looks something like a DOS attack.
 


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192569
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread COLLIE David
 What's right for one application is quite possibly overkill 
 for another. Did I mention it was access?
 
 **ducks**
 

Yeah the database is Access at the moment.  And the application at the
moment is using access... But it might get upgraded... The same
priniciple might be used in another application... And you could go
on...

I agree and I'm ducking out this is as well :)

-- 
dc

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192570
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Robertson-Ravo, Neil (RX)
We tend to avoid them since we use SP's for all our SQL anyway. We find it
easier to manage.  Personally I don't like triggers - I think they are evil.

;-)


-Original Message-
From: Jeff Garza [mailto:[EMAIL PROTECTED] 
Sent: 01 February 2005 16:11
To: CF-Talk
Subject: Re: EASY: grabbing the id of a newly created item..

Triggers have their place and we use them judiciously.  You just have to 
really keep on top of your documentation so you understand what's happening 
when you do an insert.  I'd much rather use a trigger than have to code a 
whole bunch of extraneous CF to acheive the same goal.  The other advantage 
for triggers is that they operate independantly of the mechanism used to 
create the entry.  A lot of our apps have both a web based interface and an 
MSAccess interface to the same data.

Cheers,

Jeff Garza

- Original Message - 
From: Robertson-Ravo, Neil (RX) [EMAIL PROTECTED]
To: CF-Talk cf-talk@houseoffusion.com
Sent: Tuesday, February 01, 2005 8:50 AM
Subject: RE: EASY: grabbing the id of a newly created item..


 Best to avoid triggers full stop.

 -Original Message-
 From: Jeff Garza [mailto:[EMAIL PROTECTED]
 Sent: 01 February 2005 15:41
 To: CF-Talk
 Subject: Re: EASY: grabbing the id of a newly created item..

 If you are using SQL Server 2000, I would recommend moving away from using
 @@IDENTITY as it can return incorrect information if you have a trigger 
 set
 up on the table you are inserting into.  It will return the ID from the
 Trigger action rather than the newly inserted row.  SCOPE_IDENTITY() does
 not have these issues.  That's all we use now as I've been burned once 
 where

 the DBA added a trigger to a table without my knowledge... Took the 
 longest
 time to figure out why that process wasn't working.

 Cheers,

 Jeff Garza

 - Original Message - 
 From: Robertson-Ravo, Neil (RX) [EMAIL PROTECTED]
 To: CF-Talk cf-talk@houseoffusion.com
 Sent: Tuesday, February 01, 2005 8:20 AM
 Subject: RE: EASY: grabbing the id of a newly created item..


 SQL Server is simply @@IDENTITY


This e-mail is from Reed Exhibitions (Oriel House, 26 The Quadrant,
Richmond, Surrey, TW9 1DL, United Kingdom), a division of Reed Business,
Registered in England, Number 678540.  It contains information which is
confidential and may also be privileged.  It is for the exclusive use of the
intended recipient(s).  If you are not the intended recipient(s) please note
that any form of distribution, copying or use of this communication or the
information in it is strictly prohibited and may be unlawful.  If you have
received this communication in error please return it to the sender or call
our switchboard on +44 (0) 20 89107910.  The opinions expressed within this
communication are not necessarily those expressed by Reed Exhibitions.
Visit our website at http://www.reedexpo.com

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192571
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ColdFusion-based scanning solution?

2005-02-01 Thread Paul
CFDEV used to have such a product; looks like they killed it a year ago:
http://www.cfdev.com/activescan/


-Original Message-
From: Don Smith [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 31, 2005 11:20 PM
To: CF-Talk
Subject: ColdFusion-based scanning solution?

A friend has put together a web-based scanning solution in ASP.NET
utilizing, I believe, com objects. 

I am convinced I can do the same in CF.  

He won't show me how he did it right now.  Has anyone seen an
application that allows you to similarly scan right onto the screen and
save the document on a server?  I presume this would take advantage of
Java libraries, but I'm just starting my research.  Anyone seen this
done?

The process I have for some clients now involves using COTS scanning
software and then uploading via file upload, but anyway I can make that
more fool-proof the better.

Thanks,

Don




~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192572
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Dave Watts
 We tend to avoid them since we use SP's for all our SQL 
 anyway. We find it easier to manage.  Personally I don't like 
 triggers - I think they are evil.

If you can constrain database access to only allow SPs, that's fine. If you
can't, triggers are extremely useful. For web applications, where we can
often constrain all database access to SPs, we typically don't use them; not
because they're evil, but because they're unnecessary in that case.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192573
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: javascript and cookies

2005-02-01 Thread Qasim Rasheed
You can look at irt.org which has some nice tutorials on JavaScript.

http://developer.irt.org/script/cookie.htm




On Mon, 31 Jan 2005 21:36:04 -0500, Wurst, Keith D. [EMAIL PROTECTED] wrote:
 this is a little off topic but i didnt know where else to turn...
 
 im looking for a chunk of javascript that i can throw into any page with a 
 form and it will set cookies for the selections that a user makes before 
 submitting. the page has drop downs, check boxes, text fields - just about 
 everything. any suggestions? thanks so much.
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192574
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CF-Talk: Digest every hour

2005-02-01 Thread Dave Watts
 I had not noticed the following line before.  They are 
 looking for the DLL owssver.dll in _vti_bin
 
 Anyone know what owssver.dll does?

http://lists.jammed.com/incidents/2001/10/0124.html

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192575
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Jeff Garza
Agreed!!!  ;-)

Jeff
- Original Message - 
From: Robertson-Ravo, Neil (RX) [EMAIL PROTECTED]
To: CF-Talk cf-talk@houseoffusion.com
Sent: Tuesday, February 01, 2005 9:12 AM
Subject: RE: EASY: grabbing the id of a newly created item..


 We tend to avoid them since we use SP's for all our SQL anyway. We find it
 easier to manage.  Personally I don't like triggers - I think they are 
 evil.

 ;-)




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192576
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


in need of education

2005-02-01 Thread Tim Laureska
I am rapidly coming to the conclusion that I need some educatin' with
respect to structures, arrays, evaluation function, list
creation/manipulation .all that sort of stuff

I've been doing a lot of learn as you go/googling for solutions etc, but
that type of training is costing too much time now.would like to get
some structured training on these topics

Any suggestions that don't totally empty my wallet would be greatly
appreciated... books/classroom/good online training etc. 

Tim



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192577
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Block a Spyder / DOS Attack?

2005-02-01 Thread Dave Watts
 This guy (64.242.88.50) is back again.  14,702 times and 
 counting since last midnight.  He apparently ignors 
 robots.txt  I asked my ISP to block him at the firewall early 
 this morning, but he apparently did not.  (Today's log file 
 for this URL is 27MB and counting.)
 
 But another character started out:
 
 208.27.31.145 www.smarteryellowpages.com - 
 [31/Jan/2005:11:35:46 -0800] GET 
 /MSOffice/cltreq.asp?UL=1ACT=4BUILD=5606STRMVER=4CAPREQ=0
 HTTP/1.1 302 233  Mozilla/4.0 (compatible; MSIE 6.0; 
 Windows NT 5.1; .NET CLR 1.1.4322)
 
 and then did
 
 208.27.31.145 www.smarteryellowpages.com - 
 [31/Jan/2005:11:35:47 -0800] GET /MSOffice/index.cfm 
 HTTP/1.1 302 233  Mozilla/4.0 (compatible; MSIE 6.0; 
 Windows NT 5.1; .NET CLR 1.1.4322)
 
 31,758 times and counting.  The first 208.27.31.145 looks 
 like an attempt at SQL Injection.  Is it?  We don't run asp 
 here (perhaps fortunately).  The second looks something like 
 a DOS attack.

Neither of these contains an SQL injection attack string. SQL injection
attacks contain, well, SQL.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192579
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


My CFSET error

2005-02-01 Thread Chris Kavanagh
Hi List,

This CFSET is returning the error: Variable DIFFTYPE is undefined.

--

CFOUTPUT query=get_tasks
 CFSWITCH EXPRESSION=lead_time_type_id
CFCASE VALUE=1CFSET difftype=n/CFCASE
CFCASE VALUE=2CFSET difftype=h/CFCASE
CFCASE VALUE=3CFSET difftype=d/CFCASE
CFCASE VALUE=4CFSET difftype=ww/CFCASE
/CFSWITCH
   CFSET diff = DateDiff(#difftype#, Now(), #deadline#)
/CFOUTPUT

--

:/   Can anybody see what I'm doing wrong?

Thanks guys,
CK.


~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192578
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: in need of education

2005-02-01 Thread COLLIE David
 I am rapidly coming to the conclusion that I need some 
 educatin' with respect to structures, arrays, evaluation 
 function, list creation/manipulation .all that sort of stuff

Like this when I started

http://www.depressedpress.com/depressedpress/Content/Development/ColdFu
sion/Guides/Variables/Index.cfm

-- 
dc



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192581
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: in need of education

2005-02-01 Thread Michael T. Tangorre
 From: Tim Laureska [mailto:[EMAIL PROTECTED] 
 I am rapidly coming to the conclusion that I need some 
 educatin' with respect to structures, arrays, evaluation 
 function, list creation/manipulation .all that sort of stuff
 
 I've been doing a lot of learn as you go/googling for 
 solutions etc, but that type of training is costing too much 
 time now.would like to get some structured training on 
 these topics
 
 Any suggestions that don't totally empty my wallet would be 
 greatly appreciated... books/classroom/good online training etc. 

Great book..
http://www.cafepress.com/protonarts.9983243

Mike




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192583
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: pdf to jpg

2005-02-01 Thread Emmet McGovern
I was hoping to avoid imagemagick.  I might just have to search for a
command line executable specific to this.   I would give the world for a pdf
to jpg and ai to jpg app!

Emmet

-Original Message-
From: Kay Smoljak [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 12:47 AM
To: CF-Talk
Subject: Re: pdf to jpg

On Mon, 31 Jan 2005 12:51:36 -0500, Emmet McGovern
[EMAIL PROTECTED] wrote:
 I see plenty of tools to create pdf's with cf but can any tools create a
jpg
 out of a pdf?

We've done this in a PHP site using ImageMagick - sorry I don't have
specifics but it's definitely possible. I think there's a custom tag
available that acts as an ImageMagick wrapper.

-- 
Kay Smoljak
http://kay.smoljak.com/



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192582
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: in need of education

2005-02-01 Thread Robertson-Ravo, Neil (RX)
Tim,
Depends on what kind of help you neeed 

Ping me offline if you like.

N



-Original Message-
From: Tim Laureska [mailto:[EMAIL PROTECTED] 
Sent: 01 February 2005 16:51
To: CF-Talk
Subject: in need of education

I am rapidly coming to the conclusion that I need some educatin' with
respect to structures, arrays, evaluation function, list
creation/manipulation .all that sort of stuff

I've been doing a lot of learn as you go/googling for solutions etc, but
that type of training is costing too much time now.would like to get
some structured training on these topics

Any suggestions that don't totally empty my wallet would be greatly
appreciated... books/classroom/good online training etc. 

Tim





~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192581
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: My CFSET error

2005-02-01 Thread Jochem van Dieten
Chris Kavanagh wrote:
 
 This CFSET is returning the error: Variable DIFFTYPE is undefined.
 
 --
 
 CFOUTPUT query=get_tasks
  CFSWITCH EXPRESSION=lead_time_type_id
   CFCASE VALUE=1CFSET difftype=n/CFCASE
   CFCASE VALUE=2CFSET difftype=h/CFCASE
   CFCASE VALUE=3CFSET difftype=d/CFCASE
   CFCASE VALUE=4CFSET difftype=ww/CFCASE
   /CFSWITCH
CFSET diff = DateDiff(#difftype#, Now(), #deadline#)
 /CFOUTPUT
 
 --
 
 :/   Can anybody see what I'm doing wrong?

What happens when the query returns something else then 1, 2, 3 or 4?

Jochem

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192585
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: My CFSET error

2005-02-01 Thread Michael Dinowitz
Your switch expression is the text lead_time_type_id which does not have a
case. If you mean it to be a variable of that name, you have to place pound
sighs around the variable.
Like so:
CFSWITCH EXPRESSION=#lead_time_type_id#

 Hi List,
 
 This CFSET is returning the error: Variable DIFFTYPE is undefined.
 
 --
 
 CFOUTPUT query=get_tasks
  CFSWITCH EXPRESSION=lead_time_type_id
   CFCASE VALUE=1CFSET difftype=n/CFCASE
   CFCASE VALUE=2CFSET difftype=h/CFCASE
   CFCASE VALUE=3CFSET difftype=d/CFCASE
   CFCASE VALUE=4CFSET difftype=ww/CFCASE
   /CFSWITCH
CFSET diff = DateDiff(#difftype#, Now(), #deadline#)
 /CFOUTPUT
 
 --
 
 :/   Can anybody see what I'm doing wrong?
 
 Thanks guys,
 CK.
 
 
 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192584
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: My CFSET error

2005-02-01 Thread Qasim Rasheed
Your variable difftype is not set for some case. I would first make
sure that 1,2,3,4 are the only values for lead_time_type_id



On Tue, 1 Feb 2005 16:39:24 +, Chris Kavanagh [EMAIL PROTECTED] wrote:
 Hi List,
 
 This CFSET is returning the error: Variable DIFFTYPE is undefined.
 
 --
 
 CFOUTPUT query=get_tasks
 CFSWITCH EXPRESSION=lead_time_type_id
CFCASE VALUE=1CFSET difftype=n/CFCASE
CFCASE VALUE=2CFSET difftype=h/CFCASE
CFCASE VALUE=3CFSET difftype=d/CFCASE
CFCASE VALUE=4CFSET difftype=ww/CFCASE
/CFSWITCH
   CFSET diff = DateDiff(#difftype#, Now(), #deadline#)
 /CFOUTPUT
 
 --
 
 :/   Can anybody see what I'm doing wrong?
 
 Thanks guys,
 CK.
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192587
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Jochem van Dieten
Robertson-Ravo, Neil (RX) wrote:
 We tend to avoid them since we use SP's for all our SQL anyway. We find it
 easier to manage.  Personally I don't like triggers - I think they are evil.

Triggers that don't change data but just throw errors when the 
data is invalid are great. Triggers that change data are a missed 
blessing.

Jochem

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192587
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: SOT: PostgreSQL problem and cfqueryparam

2005-02-01 Thread Rick Root
Jochem van Dieten wrote:

ABSTRACT text not null default ''
 
 What is the function of DEFAULT ''?

It's a simple and common option that assigns a default value upon INSERT 
if the field is not included.

 Don't use ODBC, use JDBC:
 http://www.macromedia.com/cfusion/knowledgebase/index.cfm?id=tn_18338
 
I would think that cfqueryparam would be sending an empty string, not a 
null...
 
 I would think the PostgreSQL ODBC driver doesn't know the difference.

I can't force all users of my application to use JDBC.  I can't imagine 
that many hosting providers would say Sure, I'll install the postgresql 
JDBC driver for you.

I'm just going to go with allowing nulls for my varchar and text fields 
in postgres... doesn't really affect my code, and the form validation 
prevents inserting of empty strings for things like title and content 
anyway.

  - Rick

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192588
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Correct Way To Query For Birthdays

2005-02-01 Thread Tyler \(T2\) Clendenin
Haha, yeah day not year =)

Was too early to be helping. 


Tyler Clendenin
GSL Solutions

-Original Message-
From: Tyler (T2) Clendenin [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 9:35 AM
To: CF-Talk
Subject: RE: Correct Way To Query For Birthdays

Why not use

WHERE Month(DOB) = Month(GetDate) AND Year(DOB) = Year(GetDate()) 


Tyler Clendenin
GSL Solutions

-Original Message-
From: Claremont, Timothy [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 01, 2005 9:20 AM
To: CF-Talk
Subject: Correct Way To Query For Birthdays

My field name is DOB, and I want to query the list for dates that match
today. Of course, the year will never match. I have tried a bunch of
different ways, but I know there must be a more elegant way!

BTW: CFMX and Access

TIA,
Tim
**
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please delete it from your system.

This footnote also confirms that this email message has been swept for the
presence of computer viruses.

Thank You,
Viahealth
**






~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192590
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: in need of education

2005-02-01 Thread Qasim Rasheed
Here is a good book about CF List, Arrays and Structures

http://www.cafepress.com/protonarts.9983243


On Tue, 01 Feb 2005 11:51:07 -0500, Tim Laureska [EMAIL PROTECTED] wrote:
 I am rapidly coming to the conclusion that I need some educatin' with
 respect to structures, arrays, evaluation function, list
 creation/manipulation .all that sort of stuff
 
 I've been doing a lot of learn as you go/googling for solutions etc, but
 that type of training is costing too much time now.would like to get
 some structured training on these topics
 
 Any suggestions that don't totally empty my wallet would be greatly
 appreciated... books/classroom/good online training etc.
 
 Tim
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192590
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: in need of education

2005-02-01 Thread Charlie Griefer
http://tutorial171.easycfm.com/
http://tutorial172.easycfm.com/
http://tutorial173.easycfm.com/

a 3 parter that covers arrays, structures, and combining the two.  if
you've got time to check it out, i'd be interested in your feedback :)

On Tue, 01 Feb 2005 11:51:07 -0500, Tim Laureska [EMAIL PROTECTED] wrote:
 I am rapidly coming to the conclusion that I need some educatin' with
 respect to structures, arrays, evaluation function, list
 creation/manipulation .all that sort of stuff
 
 I've been doing a lot of learn as you go/googling for solutions etc, but
 that type of training is costing too much time now.would like to get
 some structured training on these topics
 
 Any suggestions that don't totally empty my wallet would be greatly
 appreciated... books/classroom/good online training etc.
 
 Tim
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192592
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


SOLVED: My CFSET error

2005-02-01 Thread Chris Kavanagh
Thanks everybody, this was the problem exactly:

 Your switch expression is the text lead_time_type_id which does not 
 have a
 case. If you mean it to be a variable of that name, you have to place 
 pound
 sighs around the variable.
 Like so:
 CFSWITCH EXPRESSION=#lead_time_type_id#


~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192592
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: in need of education

2005-02-01 Thread Greg Hamm
You can try Jeff's book:

http://www.cafepress.com/protonarts.9983243


On Tue, 01 Feb 2005 11:51:07 -0500, Tim Laureska [EMAIL PROTECTED] wrote:
 I am rapidly coming to the conclusion that I need some educatin' with
 respect to structures, arrays, evaluation function, list
 creation/manipulation .all that sort of stuff
 
 I've been doing a lot of learn as you go/googling for solutions etc, but
 that type of training is costing too much time now.would like to get
 some structured training on these topics
 
 Any suggestions that don't totally empty my wallet would be greatly
 appreciated... books/classroom/good online training etc.
 
 Tim
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192593
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: in need of education

2005-02-01 Thread Rick Root
Tim Laureska wrote:
 I am rapidly coming to the conclusion that I need some educatin' with
 respect to structures, arrays, evaluation function, list
 creation/manipulation .all that sort of stuff
 
 I've been doing a lot of learn as you go/googling for solutions etc, but
 that type of training is costing too much time now.would like to get
 some structured training on these topics
 
 Any suggestions that don't totally empty my wallet would be greatly
 appreciated... books/classroom/good online training etc. 

Sounds like pretty basic coldfusion concepts... all of which can be 
learned by reading the manual =) And read the language reference too. 
Believe it or not, that's how I learned Coldfusion back in 1997.

You could probably skip that step and just go directly to Ben Forta's 
books...

http://www.forta.com/books/

  - Rick

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192594
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: My CFSET error

2005-02-01 Thread Rick Root
First of all, thank god i'm not the last person in the world to stop 
using uppercase code =)

Second... if coldfusion says DIFFTYPE doesn't exist, then it probably 
means that none of your cfcase statements matched, and thus difftype 
was never set.

Probably because you have an error in your cfswitch expression.  That 
expression always evaluates as the string lead_time_type_id

It should be:

cfswitch expression=#lead_time_type_id#

One other note... you don't need # symbols when referring to variables 
as function arguments, ie:

cfset diff = DateDiff(difftype, now(), deadline)

versus

cfset diff = DateDiff(#difftype#, now(), #deadline#)

  - Rick

Chris Kavanagh wrote:
 Hi List,
 
 This CFSET is returning the error: Variable DIFFTYPE is undefined.
 
 --
 
 CFOUTPUT query=get_tasks
  CFSWITCH EXPRESSION=lead_time_type_id
   CFCASE VALUE=1CFSET difftype=n/CFCASE
   CFCASE VALUE=2CFSET difftype=h/CFCASE
   CFCASE VALUE=3CFSET difftype=d/CFCASE
   CFCASE VALUE=4CFSET difftype=ww/CFCASE
   /CFSWITCH
CFSET diff = DateDiff(#difftype#, Now(), #deadline#)
 /CFOUTPUT
 
 --
 
 :/   Can anybody see what I'm doing wrong?
 
 Thanks guys,
 CK.
 
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192595
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: SOT: PostgreSQL problem and cfqueryparam

2005-02-01 Thread Jochem van Dieten
Rick Root wrote:
 Jochem van Dieten wrote:
 
 ABSTRACT text not null default ''
 
 What is the function of DEFAULT ''?
 
 It's a simple and common option that assigns a default value upon INSERT 
 if the field is not included.

But why is that better then just inserting a NULL?


 I can't force all users of my application to use JDBC.  I can't imagine 
 that many hosting providers would say Sure, I'll install the postgresql 
 JDBC driver for you.

I can't imagine any hosting provider offering PostgreSQL not 
offering the JDBC driver.

Jochem

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192596
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: MX CHR(10)

2005-02-01 Thread Tony Hicks
That could be an ASCII/BINARY problem with notepad.

As for your chr() problem itself.. have you tried changing your carriage return?

There's #chr(13)# or #chr(13)##chr(10)# or the solid 
 (entering a return yourself).


On Tue, 1 Feb 2005 09:30:44 -0500, Dan O'Keefe [EMAIL PROTECTED] wrote:
 Has anyone noticed a difference in the way this function works in MX?
 I upgraded a CF 5 server to MX and now my text files that I have
 always written out with chr(10) are not formatted properly and a
 control code is visible when viewing the file in notepad.
 
 Dan
 
 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192597
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: in need of education

2005-02-01 Thread RADEMAKERS Tanguy
Tim,

The O'Reilly book Programming ColdFusion MX is well worth the money -
good end to end tutorial with plenty of examples, coupled with a tag and
function reference. I've bought both the old CF5 version and the CFMX
version because it is the fastest way i know to bring new hires up to
speed in CF w/out having to hold their hands.

/t 

-Original Message-
From: Tim Laureska [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 5:51 PM
To: CF-Talk
Subject: in need of education

I am rapidly coming to the conclusion that I need some educatin' with
respect to structures, arrays, evaluation function, list
creation/manipulation .all that sort of stuff

I've been doing a lot of learn as you go/googling for 
solutions etc, but
that type of training is costing too much time now.would 
like to get
some structured training on these topics

Any suggestions that don't totally empty my wallet would be greatly
appreciated... books/classroom/good online training etc. 

Tim





~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192598
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: MX CHR(10)

2005-02-01 Thread Dave Watts
 Has anyone noticed a difference in the way this function works 
 in MX? I upgraded a CF 5 server to MX and now my text files that 
 I have always written out with chr(10) are not formatted 
 properly and a control code is visible when viewing the file 
 in notepad.

On Windows, you use two control characters to specify a new line: 13 and 10.
I don't think anything's changed on the CF side with regard to this, though.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192603
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: SOT: PostgreSQL problem and cfqueryparam

2005-02-01 Thread Rick Root
Jochem van Dieten wrote:
 
 But why is that better then just inserting a NULL?

It guarantees that I don't ever have to worry about null values, I 
guess.  Though I never realized that oracle didn't know the difference 
between null and an empty string.


 I can't imagine any hosting provider offering PostgreSQL not 
 offering the JDBC driver.

I can, because the hosting provider I'm using for www.blogcfm.org doesn't.

  - Rick

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192600
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Preventing Malicious Sql without cfquery param

2005-02-01 Thread Dave Watts
 I use val()
 
 select * from emp where emp_id=#val(url.emp_id)#
 
 Anything not numeric will be dropped. A totally non-numeric 
 value will return 0.
 
 For dates I use ODBCDateFormat.

That's great for numbers, but what about strings?

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192599
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Preventing Malicious Sql without cfquery param

2005-02-01 Thread Dave Watts
 Because the query may be called with the cachedwithin 
 attribute which doesn't play nice with queryparams. I haven't 
 seen a easy work around for this issue yet. 

You can cache your query within the Session, Application or Server scopes,
or you might be able to cache a query of that query using
CACHEDWITHIN/CACHEDAFTER.

 But if im not mistaken(easily could be) someone might not 
 need to be able to stuff in single quotes to tamper? I think 
 they need the semi colon and parens to insert a sub query to 
 blow something up
 
 ;(drop table users) or something of the sort?

There are all sorts of things you might do within an SQL injection attack,
some of which are database-specific. For example, on MS SQL Server, you
might try to open a shell using xp_cmdshell.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192601
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Email problems

2005-02-01 Thread Ben Densmore
I'm all of a sudden having issues with sending emails and can't seem
to find out where the issue is. Everything was working up until about
10:00 AM EST this morning then all of a sudden the emails stopped
coming through.

I can send an email, watch it go into the spool directory and then
leave. I check the mailsent.log and it shows the mail was successfully
sent and nothing comes into the undeliverable folder. I don't see any
errors during the process. I've rebooted the server several times and
tried several tests of sending just one email to my several different
email addresses and I don't receive anything.

Has anyone run into anything similar?

Thanks,
Ben

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192602
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ColdFusion-based scanning solution?

2005-02-01 Thread Dave Watts
 A friend has put together a web-based scanning solution in 
 ASP.NET utilizing, I believe, com objects. 
 
 I am convinced I can do the same in CF.  
 
 He won't show me how he did it right now.  Has anyone seen an 
 application that allows you to similarly scan right onto the 
 screen and save the document on a server?  I presume this 
 would take advantage of Java libraries, but I'm just starting 
 my research.  Anyone seen this done?
 
 The process I have for some clients now involves using COTS 
 scanning software and then uploading via file upload, but 
 anyway I can make that more fool-proof the better.

You might want to take a look at Xerox Docushare, which does exactly this
among other things. It's not CF, but it's a COTS solution which provides all
of the server and client components to do what you want. We are Xerox
Docushare partners, so if you have any questions about it feel free to
contact me off-list.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192604
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


SOT: Plain JSP - something to set request timeout

2005-02-01 Thread Katz, Dov B (IT)
Is there code like CFSETTING::requesttimeout which allows a regular JSP
page programmatically set its timeout, or something I can enter into the
web.xml config file?  This is for a shared servlet container on New
Atlanta ServletExec 4.1.1p22
 
Thanks
dov 

 
NOTICE: If received in error, please destroy and notify sender.  Sender does 
not waive confidentiality or privilege, and use is prohibited. 
 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192607
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


NullPointerException and CFSTOREDPROC

2005-02-01 Thread Alisa Thomson
I am working on migrating our CF5 apps to CFMX and ran into a problem with one 
of our stored procedure calls.  It is a CFSTOREDPROC that has 3 input 
parameters, 1 output parameter and returns a result set.  The only error I get 
is java.lang.NullPointerException - in : line -1.  The exception log shows no 
further information. I copied the problem call to a test page, so that is the 
only code in the page.  To make sure it isn't purely a driver problem (because 
we have had MANY of those), I wrote a java app that makes the same call and 
that works fine.  None of the input parameters are null and the output 
parameter is not null.  The result set is also not null.  For testing, I have 
hard-coded everything to make sure.  I am using Sybase with the jConnect 5.5 
driver.  Any ideas on how to at least get a better message?

Here is my call:

   CFSTOREDPROC PROCEDURE=rates..ListCurve_pr DATASOURCE=fms_DEVEL 
RETURNCODE=yes debug=yes
  CFPROCPARAM TYPE=In DBVARNAME=@TradeDate 
CFSQLTYPE=CF_SQL_TIMESTAMP  VALUE=09/02/2004
 NULL=no
  CFPROCPARAM TYPE=In DBVARNAME=@SeqNbr CFSQLTYPE=CF_SQL_INTEGER 
VALUE=1 NULL=no
  CFPROCPARAM TYPE=Out DBVARNAME=@MaxBenchmarkDatetime 
CFSQLTYPE=CF_SQL_TIMESTAMP VARIABLE=ATTRIBUTES.BenchmarkDatetime
  CFPROCPARAM TYPE=In DBVARNAME=@RawTypesInd 
CFSQLTYPE=CF_SQL_CHAR VALUE=N NULL=no
  CFPROCRESULT NAME=sqlCurveQuery
   /CFSTOREDPROC

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192605
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: OT: Free WIKI web services?

2005-02-01 Thread Brian Meloche
If you are not looking to host it yourself, Seedwiki is an option.

Although Seedwiki, technically, has downloadable code, I can say from
personal experience NOT to try to install it and configure it
yourself.  The install files are virtually uninstallable - I gave up
after 2 days, and they haven't been updated since that time.

There are a couple of versions of CFWiki out there on the web, a wiki
written a few years back that SeedWiki is based upon.  Although
functional, it's not as fully functional as a lot of other wikis, and
doesn't offer the password protection you seek.

If that is an issue, and you are hosting yourself, there are many
Wikis out there you could use, but the ones I mentioned are the only
Wikis programmed in the CF world.  Writing a decent one in CF is on my
list of to dos, but it's low on the list! :-)

On Tue, 1 Feb 2005 07:46:30 -0800, Sean Corfield [EMAIL PROTECTED] wrote:
 On Thu, 27 Jan 2005 14:16:49 -0600, Jake McKee [EMAIL PROTECTED] wrote:
  Sorry for the off-topic post, but
 
  Does anyone know of a good, free, and password-protectable WIKI?
 
  I might be willing to pay a reasonable amount if I can keep the content
  private and the service is stable.
 
 I don't know how 'good' it is but http://www.seedwiki.com/ ought to
 suit your needs.
 --
 Sean A Corfield -- http://www.corfield.org/
 Team Fusebox -- http://www.fusebox.org/
 Breeze Me! -- http://www.corfield.org/breezeme
 Got Gmail? -- I have 5 invites to give away!
 
 If you're not annoying somebody, you're not really alive.
 -- Margaret Atwood
 
 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192607
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Replacing variable text in a string

2005-02-01 Thread Mickael
Hello,

I would like replace a portion of a string that is a SQL statement generated by 
my users via an interface that I have created.  I have never used Regular 
Expressions but from what I have heard about this task sounds like a candidate.

I would like to update a SQL statement that is generated by my users there is a 
portion of the string that says set primary_assign_id = 123 that I would like 
to remove the problem is that I am not sure what the number is but I know that 
it always three numbers.

How can I do this?  

Regards,

Mike



~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192608
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


CF5 to CFMX - cfif breaks

2005-02-01 Thread Earl, George
I figure this is an ODBC vs. JDBC issue . . .

The following cfif has been working fine in CF5 for 3 years but it breaks in
MX 6.1 with updater (we are just now migrating CF5 to MX, so I don't know if
it would have worked in MX or MX 6.1 pre updater . . .):


cfif right(trim(code), 1) is not 0 
and trim(code) is not W8 
and trim(code) is not W12 
and right(trim(code), 3) is not 904 
or not isDefined(RS1)

closeTransferWindow();
alert(An error has occured within this application,
please try again later.
cfoutput#code#-#message#/cfoutput);
cfelse


code is the return code and message is the message sent back by a DB2
mainframe stored procedure:


CFPROCPARAM TYPE=OUT
cfsqltype=CF_SQL_VARCHAR
VARIABLE=code
!--- cf5 to cfmx - 20050129---
!--- DBVARNAME is ignored in cfmx  ---
!---   DBVARNAME=@PARM-RETURN-CODE  ---
CFPROCPARAM TYPE=OUT
cfsqltype=CF_SQL_VARCHAR
VARIABLE=message
!--- cf5 to cfmx - 20050129---
!--- DBVARNAME is ignored in cfmx  ---
!---   DBVARNAME=@PARM-RETURN-MSG   ---



What's happening is that if trim(code) is W8 or W12 MX executes the cfif
above instead of falling through.

I have checked, and trim(code) does convert correctly to W8 or W12.
Without trimming it is W8  and W12 . I have also tried CF_SQL_CHAR (and
a number of others in desperation!) instead of CF_SQL_VARCHAR, but that made
no difference.

Any ideas why the cfif isn't working on MX?

We are using IBM JDBC Type 2 drivers to access DB2 on z/OS (mandated by our
DB2 folks) but behavior is the same with the DataDirect DB2 JDBC Type 4
drivers supplied with the updater. We are running CFMX Enterprise 6.1 with
updater on Windows 2000 . . .

Thanks!

George
[EMAIL PROTECTED]



~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192609
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: NullPointerException and CFSTOREDPROC

2005-02-01 Thread Dave Carabetta
On Tue, 01 Feb 2005 12:36:26 -0400, Alisa Thomson [EMAIL PROTECTED] wrote:
 I am working on migrating our CF5 apps to CFMX and ran into a problem with 
 one of our stored procedure calls.  It is a CFSTOREDPROC that has 3 input 
 parameters, 1 output parameter and returns a result set.  The only error I 
 get is java.lang.NullPointerException - in : line -1.  The exception log 
 shows no further information. I copied the problem call to a test page, so 
 that is the only code in the page.  To make sure it isn't purely a driver 
 problem (because we have had MANY of those), I wrote a java app that makes 
 the same call and that works fine.  None of the input parameters are null and 
 the output parameter is not null.  The result set is also not null.  For 
 testing, I have hard-coded everything to make sure.  I am using Sybase with 
 the jConnect 5.5 driver.  Any ideas on how to at least get a better message?
 
 Here is my call:
 
CFSTOREDPROC PROCEDURE=rates..ListCurve_pr DATASOURCE=fms_DEVEL 
 RETURNCODE=yes debug=yes
   CFPROCPARAM TYPE=In DBVARNAME=@TradeDate 
 CFSQLTYPE=CF_SQL_TIMESTAMP  VALUE=09/02/2004
  NULL=no
   CFPROCPARAM TYPE=In DBVARNAME=@SeqNbr 
 CFSQLTYPE=CF_SQL_INTEGER VALUE=1 NULL=no
   CFPROCPARAM TYPE=Out DBVARNAME=@MaxBenchmarkDatetime 
 CFSQLTYPE=CF_SQL_TIMESTAMP VARIABLE=ATTRIBUTES.BenchmarkDatetime
   CFPROCPARAM TYPE=In DBVARNAME=@RawTypesInd 
 CFSQLTYPE=CF_SQL_CHAR VALUE=N NULL=no
   CFPROCRESULT NAME=sqlCurveQuery
/CFSTOREDPROC
 

I really don't know how much help I can be other than to tell you that
the dbVarName attribute no longer works in CFMX because the JDBC
drivers don't support it. So I would make sure that the order of your
input params match one-to-one with the order defined in the stored
proc.

Regards,
Dave.

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192610
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Email problems

2005-02-01 Thread Russ
Have you checked your mail server?  Perhaps it's backlogged...

Russ

-Original Message-
From: Ben Densmore [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 12:46 PM
To: CF-Talk
Subject: Email problems

I'm all of a sudden having issues with sending emails and can't seem
to find out where the issue is. Everything was working up until about
10:00 AM EST this morning then all of a sudden the emails stopped
coming through.

I can send an email, watch it go into the spool directory and then
leave. I check the mailsent.log and it shows the mail was successfully
sent and nothing comes into the undeliverable folder. I don't see any
errors during the process. I've rebooted the server several times and
tried several tests of sending just one email to my several different
email addresses and I don't receive anything.

Has anyone run into anything similar?

Thanks,
Ben



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192611
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Preventing Malicious Sql without cfquery param

2005-02-01 Thread gabriel l smallman
 Because the query may be called with the cachedwithin attribute which 
 doesn't play nice with queryparams. I haven't seen a easy work around 
 for this issue yet.

You can cache your query within the Session, Application or Server scopes,
or you might be able to cache a query of that query using
CACHEDWITHIN/CACHEDAFTER.

 The cache a query of that query using CACHEDWITHIN, I have tried
this but ran into casting issues. MX would make the wrong guess at the data
type of the column. 

 But if im not mistaken(easily could be) someone might not need to be 
 able to stuff in single quotes to tamper? I think they need the semi 
 colon and parens to insert a sub query to blow something up
 
 ;(drop table users) or something of the sort?

There are all sorts of things you might do within an SQL injection attack,
some of which are database-specific. For example, on MS SQL Server, you
might try to open a shell using xp_cmdshell.

 would the statement made by rick still hold true though. The
attack would need to be able to close the single quotes to embed an attack.
B/C cf escapes them then the embedded sql would always occur inside 'quotes'
thus not being executed but interpreted literally.



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192613
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: NullPointerException and CFSTOREDPROC

2005-02-01 Thread Alisa Thomson
Right.  I just left them in there so we could tell what variable it is mapping 
to since the dbvarname is just ignored at this point.  I believe it has 
something to do with the fact that there is both an output parameter AND a 
resultset.  All of our other proc calls work fine.

Thanks.
Ci-Ci

On Tue, 01 Feb 2005 12:36:26 -0400, Alisa Thomson [EMAIL PROTECTED] wrote:

I really don't know how much help I can be other than to tell you that
the dbVarName attribute no longer works in CFMX because the JDBC
drivers don't support it. So I would make sure that the order of your
input params match one-to-one with the order defined in the stored
proc.

Regards,
Dave.

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192614
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: in need of education

2005-02-01 Thread Donna French
I'd be interested to hear what others have to say about www.eclasses.org ?

Considering taking the Cold Fusion course(s) but would like to hear
from others so thought this would be appropriate here.

TIA,
Donna


On Tue, 01 Feb 2005 18:18:48 +0100, RADEMAKERS Tanguy
[EMAIL PROTECTED] wrote:
 Tim,
 
 The O'Reilly book Programming ColdFusion MX is well worth the money -
 good end to end tutorial with plenty of examples, coupled with a tag and
 function reference. I've bought both the old CF5 version and the CFMX
 version because it is the fastest way i know to bring new hires up to
 speed in CF w/out having to hold their hands.
 
 /t
 
 -Original Message-
 From: Tim Laureska [mailto:[EMAIL PROTECTED] 
 Sent: Tuesday, February 01, 2005 5:51 PM
 To: CF-Talk
 Subject: in need of education
 
 I am rapidly coming to the conclusion that I need some educatin' with
 respect to structures, arrays, evaluation function, list
 creation/manipulation .all that sort of stuff
 
 I've been doing a lot of learn as you go/googling for
 solutions etc, but
 that type of training is costing too much time now.would
 like to get
 some structured training on these topics
 
 Any suggestions that don't totally empty my wallet would be greatly
 appreciated... books/classroom/good online training etc.
 
 Tim
 
 
 
 
 
 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192612
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: EASY: grabbing the id of a newly created item..

2005-02-01 Thread Calvin Ward
I'm assuming it is following an insert since that's the subject line of this
thread.

If you don't have cftransaction then another record could be created in
between the two cfquerys and you could have the incorrect ID returned.
Access isn't going to lock the database between the two requests waiting...

- Calvin

-Original Message-
From: Ewok [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 11:04 AM
To: CF-Talk
Subject: RE: EASY: grabbing the id of a newly created item..

 It absolutely isn't your only option. And if you do the below you need to 
 use cftransaction.

I didn't say it was the only option known to man, I said it was ABOUT the
only option for autonumbers. (I try to avoid autonumbers like the plague in
a relational data structure)

And why would you need cftransaction for that? It's a simple select. You
think it should have cftransaction because it follows an insert?

-Original Message-
From: Calvin Ward [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 10:09 AM
To: CF-Talk
Subject: RE: EASY: grabbing the id of a newly created item..

It absolutely isn't your only option. And if you do the below you need to
use cftransaction.

The best option, in my opinion, is to generate a UUID/GUID and use that
instead of a database generated ID. That will work with every single
database platform out there and will always be the correct ID.

- Calvin

-Original Message-
From: Ewok [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 10:01 AM
To: CF-Talk
Subject: RE: EASY: grabbing the id of a newly created item..

Wow, too much for so little, Just use Richard's method

RUN YOUR INSERT QUERY

Then directly after the insert get the records ID...

cfquery name=mid datasource=
SELECT MAX(TheID) as LatestID FROM TABLENAME
/cfquery

The newest records ID from that table will now be in #mid.LatestID#

Since you said grab the id ( autonum, primary key)... autonumber being an
Access data type means the above is about your only option. Does @@identity
even work in access? (or does anything else useful work in access for that
matter)

There's also no need to cflock the query from above that I can think of with
an access data source. For the most part, access locks itself when it needs
to.

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.3 - Release Date: 1/31/2005
 




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192615
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: ColdFusion-based scanning solution?

2005-02-01 Thread Eric Hoffman
Yeah, works sorta under MX6.1 and IE6 XPSP2, tried to get support for it
and they said no dice even though we purchased it years ago.  They
stopped selling and developing it, so we understood. 


Regards, 

Eric J. Hoffman
CIO
Market Connections, LLC
Building Brands.  Breaking Barriers.

-Original Message-
From: Paul [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 01, 2005 10:30 AM
To: CF-Talk
Subject: RE: ColdFusion-based scanning solution?

CFDEV used to have such a product; looks like they killed it a year ago:
http://www.cfdev.com/activescan/


-Original Message-
From: Don Smith [mailto:[EMAIL PROTECTED]
Sent: Monday, January 31, 2005 11:20 PM
To: CF-Talk
Subject: ColdFusion-based scanning solution?

A friend has put together a web-based scanning solution in ASP.NET
utilizing, I believe, com objects. 

I am convinced I can do the same in CF.  

He won't show me how he did it right now.  Has anyone seen an
application that allows you to similarly scan right onto the screen and
save the document on a server?  I presume this would take advantage of
Java libraries, but I'm just starting my research.  Anyone seen this
done?

The process I have for some clients now involves using COTS scanning
software and then uploading via file upload, but anyway I can make that
more fool-proof the better.

Thanks,

Don






~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192616
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Replacing variable text in a string

2005-02-01 Thread Scott Stroz
RERepalce(yourString,set primary_assign_id = [:digit:]{3},,all)

Should work, but has not been tested.


On Tue, 1 Feb 2005 12:57:51 -0500, Mickael [EMAIL PROTECTED] wrote:
 Hello,
 
 I would like replace a portion of a string that is a SQL statement generated 
 by my users via an interface that I have created.  I have never used Regular 
 Expressions but from what I have heard about this task sounds like a 
 candidate.
 
 I would like to update a SQL statement that is generated by my users there is 
 a portion of the string that says set primary_assign_id = 123 that I would 
 like to remove the problem is that I am not sure what the number is but I 
 know that it always three numbers.
 
 How can I do this?
 
 Regards,
 
 Mike
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192617
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Preventing Malicious Sql without cfquery param

2005-02-01 Thread Jochem van Dieten
gabriel l smallman wrote:
 
would the statement made by rick still hold true though. The
 attack would need to be able to close the single quotes to embed an attack.

And how hard is that exactly? Don't go and play 'I know more 
about SQL then you do' with a hacker. You lose.

Jochem

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192618
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


getting datasource metadata

2005-02-01 Thread Rick Root
I'm interested in dynamically discovering the type of database used 
based on the datasource...  So I don't have to add a dbtype 
configuration parameter to my application.

Is this possible?  Preferably in some reliable, documented fashion..

  - Rick

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192619
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Preventing Malicious Sql without cfquery param

2005-02-01 Thread Dave Watts
 I have tried this but ran into casting issues. MX would make 
 the wrong guess at the data type of the column.

In that case, I'd recommend that you just put the query objects within the
Session, Application or Server scopes as appropriate. If you're writing the
application yourself, this is usually pretty easy to do.

 would the statement made by rick still hold true though. The 
 attack would need to be able to close the single quotes to 
 embed an attack. B/C cf escapes them then the embedded sql 
 would always occur inside 'quotes' thus not being executed but 
 interpreted literally.

You're trying to figure out all of the possible ways that SQL injection
attacks may occur, rather than simply saying to the database don't treat
these values as code. This is not a battle that you want to fight. What
happens, for example, if I pass Unicode escape sequences within an SQL
injection attack string? My guess is that CF won't escape them for you.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:192620
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


  1   2   >