RE: CFCHART - No Chart :-(

[Dave Watts]

> I haven't used CFCHART much -- well, actually never -- outside of
> testing it on my dev box.  So on my first deployment I find the Flash
> chart doesn't show up.  So I figure it'd be easier to debug if I made
> the type JPG.
> 
> Here's the chart image code that CF generates:
> 
>  SRC="/CFIDE/GraphData.cfm?graphID=Images/12.JPG" 
> id=Images_12_JPG 
> name=Images_12_JPG 
> usemap="#Images_12_JPG_map" 
> border=0>
> 
> Preceded by a big image map, also cf-generated.
> 
> I get the red 'x' for the JPG image.  If I look in the /cfide folder
> (actually I searched my whole hard drive) i find no graphdata.cfm file
> anywhere.  I did find the generated jpg's and swf's in
> c:\cfusionmx\charting\cache\
> 
> I'm running CF 6.1, /cfide folder mapped as you would expect. What am
> I missing here?

Your chart, of course! Ho, ho, ho!

Seriously, you don't need to have a GraphData.cfm file if your web server is
connected to CFMX using the default configuration - CF simply detects the
appropriate URL pattern and figures out what to do. Out of curiosity, what
exact error do you get within the browser if you go directly to the JPG?

http://www.whatever.com/CFIDE/GraphData.cfm?graphID=Images/12.JPG

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210693
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: Syncing Data between Websites

[Dave Watts]

> One fundamental question is why use Access on the tablet? MySQL is
> available under the GPL, so unless you're needing a commercial license
> you should be fine. That would save an *enormous* amount of pain in
> the back/forth conversion.

Or, better yet, run MS SQL Server on the network and MSDE on the desktop,
and just use its built-in synchronization functionality. I've been working a
bit with something similar lately (SQL Server CE on Windows Mobile for the
client) and it seems to work pretty well. You can probably buy a
single-processor MS SQL Server license with the money you save by not
writing the code you'd otherwise need.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210692
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

OT: onTap framework Quick Start now available

[S . Isaac Dealey]

I know, I could post this on the framework list (and I did announce it
on the framework forum), but I'm hoping to get some thoughts from
people who may not be subscribed or who may not be watching the
announcement forum in their news-readers...

Yesterday I released a new build of the framework core components with
a "Quick Start Guide" with most of the subjects I mentioned in the
last thread covered (using multiple processes -- which is equivalent
of multiple events in MG or Mach-II didn't make it into this version
-- not sure if it really qualifies as a "quick start" subject with
this framework), plus a few that were either suggested (i18n, CFC's)
or that occurred to me while I was writing it (configuring email,
disabling javascript).

So at this point I would be grateful for any opinions from anyone
who's interested in the framework (no rush James :). The latest
version can be downloaded from http://www.fusiontap.com/download

Thanks to everyone for all your encouragement, it's greatly
appreciated. :)

s. isaac dealey 954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210691
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

CSV and SQL

[Parker, Kevin]

Is it possible to structure your SQL query (target SQL Server) so that
it returns a CSV file rather than manipulate the returned results in
your application to produce a CSV file.

TIA!!!


++
Kevin Parker
Web Services Consultant
WorkCover Corporation

p: 08 8233 2548
m: 0418 806 166
e: [EMAIL PROTECTED]
w: www.workcover.com

++

 
This e-mail is intended for the use of the addressee only. It may 
contain information that is protected by legislated confidentiality 
and/or is legally privileged. If you are not the intended recipient you 
are prohibited from disseminating, distributing or copying this e-mail. 

Any opinion expressed in this e-mail may not necessarily be that of the 
WorkCover Corporation of South Australia. Although precautions have 
been taken, the sender cannot warrant that this e-mail or any files 
transmitted with it are free of viruses or any other defect. 

If you have received this e-mail in error, please notify the sender 
immediately by return e-mail and destroy the original e-mail and any 
copies. 
 


~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210690
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Secure FTP/SSH Server

[Bryan Stevenson]

Perfectthanks Dave..saves me some hunting around ;-)

Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
phone: 250.480.0642
fax: 250.480.1264
cell: 250.920.8830
e-mail: [EMAIL PROTECTED]
web: www.electricedgesystems.com
- Original Message - 
From: "Dave Watts" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Monday, June 27, 2005 7:04 PM
Subject: RE: Secure FTP/SSH Server


>> I'm looking for a decent secure FTP/SSH server to be used in
>> conjunction with WinSCP (http://winscp.net/eng/index.php)
>>
>> Open source is just fine...but I'll pay if it's worth it ;-)
>>
>> Thanks in advance for any links/opinions/etc.
>
> VShell: a good commercial SSH server for Windows:
> http://www.vandyke.com/products/vshell/index.html
>
> OpenSSH: the standard open-source SSH server:
> http://www.openssh.org/windows.html
>
> I prefer the former, since it integrates with Windows accounts and
> authentication, and it's easier to set up.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
>
> Fig Leaf Software provides the highest caliber vendor-authorized
> instruction at our training centers in Washington DC, Atlanta,
> Chicago, Baltimore, Northern Virginia, or on-site at your location.
> Visit http://training.figleaf.com/ for more information!
>
>
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210689
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: Secure FTP/SSH Server

[Dave Watts]

> I'm looking for a decent secure FTP/SSH server to be used in 
> conjunction with WinSCP (http://winscp.net/eng/index.php)
> 
> Open source is just fine...but I'll pay if it's worth it ;-)
> 
> Thanks in advance for any links/opinions/etc.

VShell: a good commercial SSH server for Windows:
http://www.vandyke.com/products/vshell/index.html

OpenSSH: the standard open-source SSH server:
http://www.openssh.org/windows.html

I prefer the former, since it integrates with Windows accounts and
authentication, and it's easier to set up.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210688
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: CF5 Regex Backreferences

[S . Isaac Dealey]

> In CF5 are backreferences ($1, $2, etc.) available for use
> in REReplace(),
> or do you have to do an REFind() and then use the array
> returned if
> returnsubexpressions is set to TRUE?

Backreferences in all versions of CF are expressed with \ instead of
$.


s. isaac dealey 954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210687
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: CF5 Regex Backreferences

[Matthew Walker]

yes but they are \1, \2, etc.
http://livedocs.macromedia.com/coldfusion/5.0/Developing_ColdFusion_Applicat
ions/regexp5.htm 

-Original Message-
From: Jim McAtee [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 28 June 2005 10:37 a.m.
To: CF-Talk
Subject: CF5 Regex Backreferences

In CF5 are backreferences ($1, $2, etc.) available for use in REReplace(), 
or do you have to do an REFind() and then use the array returned if 
returnsubexpressions is set to TRUE? 




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210686
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

CF5 Regex Backreferences

[Jim McAtee]

In CF5 are backreferences ($1, $2, etc.) available for use in REReplace(), 
or do you have to do an REFind() and then use the array returned if 
returnsubexpressions is set to TRUE? 


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210685
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: USPS & HTTP

[Andy]

Thanks.

-Original Message-
From: Figy, Kam [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 27, 2005 6:22 PM
To: CF-Talk
Subject: RE: USPS & HTTP

Livedocs.macromedia.com?

You'll need cfhttp with cfhttpparam s for the URL parameters. Make sure
to urlencodedformat() that xml.

/kam

-Original Message-
From: Andy [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 27, 2005 2:48 PM
To: CF-Talk
Subject: USPS & HTTP

In the documentation for performing address standardization via the
USPS,
they refer to a HTTP Connection DLL.  Is this what  is used for?

 

If so, how would the following map into the equivalent ?

 

http://SERVERNAME/ShippingAPITest.dll?API=Verify&XML= 

6406 Ivy
LaneGreenbeltMD 

 




 

Is there someplace I can go to read up on this?

 

Andy

 

 

 








~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210684
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: USPS & HTTP

[Figy, Kam]

Livedocs.macromedia.com?

You'll need cfhttp with cfhttpparam s for the URL parameters. Make sure
to urlencodedformat() that xml.

/kam

-Original Message-
From: Andy [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 27, 2005 2:48 PM
To: CF-Talk
Subject: USPS & HTTP

In the documentation for performing address standardization via the
USPS,
they refer to a HTTP Connection DLL.  Is this what  is used for?

 

If so, how would the following map into the equivalent ?

 

http://SERVERNAME/ShippingAPITest.dll?API=Verify&XML= 

6406 Ivy
LaneGreenbeltMD 

 




 

Is there someplace I can go to read up on this?

 

Andy

 

 

 






~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210683
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Secure FTP/SSH Server

[Bryan Stevenson]

Hey All,

I'm looking for a decent secure FTP/SSH server to be used in conjunction with 
WinSCP (http://winscp.net/eng/index.php)

Open source is just fine...but I'll pay if it's worth it ;-)

Thanks in advance for any links/opinions/etc.

Cheers

Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
phone: 250.480.0642
fax: 250.480.1264
cell: 250.920.8830
e-mail: [EMAIL PROTECTED]
web: www.electricedgesystems.com

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210682
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Flash Grid

[Donna French]

I've just started experimenting with CF7 forms and have used one of the sample 
flash grids to play around with. The grid loads, but the form below it does not 
load the data when selected as it does in the sample data.

Here's the code, any help would be appreciated.

TIA,
Donna


select * 
from dolls
where subcategoryID = 8;






















 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210681
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

USPS & HTTP

[Andy]

In the documentation for performing address standardization via the USPS,
they refer to a HTTP Connection DLL.  Is this what  is used for?

 

If so, how would the following map into the equivalent ?

 

http://SERVERNAME/ShippingAPITest.dll?API=Verify&XML= 

6406 Ivy LaneGreenbeltMD 

 




 

Is there someplace I can go to read up on this?

 

Andy

 

 

 




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210680
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Claude Schneegans]

 >>Does that answer the first question?

It does, although the vulnerability is not as high, but still...

-- 
___
REUSE CODE! Use custom tags;
See http://www.contentbox.com/claude/customtags/tagstore.cfm
(Please send any spam to this address: [EMAIL PROTECTED])
Thanks.


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210679
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[S . Isaac Dealey]

> Mike,

> The basic question is where does "attributes.join" come
> from? If it's from a
> form field (for example) a malicious user could pass in:

Thanks for the thorough example Mark, well written. :)

s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210678
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[S . Isaac Dealey]

>> 
>> 
>>  select b.*, j.columns
>>  from basetable b
>>  #attributes.join# jointable j on (j.x = b.x)
>> 
>>
>> I don't use this syntax because it's insecure... This is
>> simplified to

> Why is this insecure?  Does it have something to do with
> you using the
> attributes scope?  Sorry if it's a stupid question, but
> I'm really not
> sure why it is insecure and I figure it's a good thing to
> know ;)

Well... it might make more sense if I'd used #url.join# instead of
#attributes.join# in the example... So... I should qualify by saying
the above example may or may not be secure. :P But by itself this is
not secure if you simply pass a user-provided value into it as in:



Because then it would still allow a user to perform a sql injection
attack by using the join variable. The boolean value by contrast
doesn't allow this -- the page may produce an error if the user
provided a non-boolean value, but you would never be able to inject
sql into the query as long as the variable is validated and/or used as
a boolean value somewhere before the query is executed (preferably
when defining the tag arguments). There are of course other ways to
ensure that the value is valid for the particular context of the query
being executed, this is just one example.


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210677
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Aaron Rouse]

I probably just misunderstand how things work, not a first for me, even 
asked for clarification on this. Anyway, the way I thought it worked is if 
you were passing in CF variables that could have their values changing then 
the execution plan would be cached the first time. So I just always thought 
it meant best to use a cfqueryparam on literals within the same statement 
that has the cf variables. Beyond any of that, what experience has shown me 
with different developers is if it does not hurt to always do something such 
as use cfqueryparam for variables or literals then people are more prone to 
remember to always do it than to remember when to not do it and to do it.

On 6/27/05, Barney Boisvert <[EMAIL PROTECTED]> wrote: 
> 
> There's absolutely no reason to use CFQUERYPARAM in that scenario
> though, so why bother? CFQUERYPARAM does variable binding for the
> database. The main purpose is to allow the statement to be cached
> (kind of ;) without any dynamic pieces, and then have the dynamic
> pieces inserted on the fly (the bind variables). That has the nice
> side effect of avoiding SQL injection attacks as well, because by the
> time the values are injected, the SQL engine has already done
> everything, so there's no way for any SQL in a value to be executed.
> 
> With literal values, you don't have either of those problems, so using
> CFQUERYPARAM is entirely superfluous.
> 
> cheers,
> barneyb
> 
> On 6/27/05, Aaron Rouse <[EMAIL PROTECTED]> wrote:
> > But then you might forget to use them when you key in some literals, 
> such
> > as:
> > SELECT ID, BLAH FROM MYTABLE WHERE MYSTATUS =  > cfsqltype="cf_sql_numeric" />
> >
> 
> --
> Barney Boisvert
> [EMAIL PROTECTED]
> 360.319.6145
> http://www.barneyb.com/
> 
> Got Gmail? I have 50 invites.
> 
> 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210676
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: Podcasting..

[David Delbridge]

On the Windows side of things, I'd recommend Sony Sound Forge.  They've 
released a trimmed down version with price and features probably more in 
line with podcasting and Internet audio in general.

If you need additional audio help on Windows, drop me a private note.

Dave

Mark A Kruger wrote:

> I'd like to try doing a podcast (audio) - maybe once a week. I have no
> problem configuring the RSS feed (seems straightforward) - but I have
> another question. What software and hardware does anyone recommend for
> creating the audio file? Can someone give me a couple of recomendations?
> 
> -Mark
> 
> 
> 
> Mark A. Kruger, CFG, MCSE
> www.cfwebtools.com
> www.necfug.com
> http://mkruger.cfwebtools.com
> 
> 
> 
> 
> 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210675
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[S . Isaac Dealey]

> While I'm a big fan of frameworks and standards, we use
>  caching for lookups and "static" data - mostly
> on legacy code that is still in production. When we do
> so we "scrub" the variables using a UDF that removes
> malicious SQL. I would hasten to add that such a UDF is
> probably not 100% infalliable, but it's a nice compromise
> that enables us to use query caching with reasonable
> certainty.  Sometimes, query caching is the quickest way
> to "fix" an application suffering from performance issues
> - even temporarily while you work on an upgrade.

Well in my case I do use query caching -- I just don't use the CF
native query caching tools... The framework has its own set of tools
for caching in general (not just queries) and those are integrated
into the query tools for convenience. So it's certainly not an
either-or situation... the original comment was with regard to using
the native caching tools, someone said (to paraphrase) "you shouldn't
create your own query caching tools, you should just use what the
server provides" and I was providing my reasons for creating custom
caching features for queries.


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210674
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[Mark A Kruger]

Mike,

The basic question is where does "attributes.join" come from? If it's from a
form field (for example) a malicious user could pass in:

a string that does something naughty to your table for example if I passed
in:

inner join jointable j on (j.x = b.x)
truncate table b
return 0 --

The result would be

select b.*, j.columns
from basetable b
inner join jointable j on (j.x = b.x)
truncate table b
return 0 -- j on (j.x = b.x)


the result "might" be that table b is wiped out (I say might - lots of
factors here including syntax). Notice the comment tag at the end - the 2
slashes. This is one that folks sometimes forget about.  Passing 2 slashes
in might "comment out" part of a query and allow it to run without some or
all of the "WHERE" clause.

For example, if you build a string as a where clause (as some folks do) and
your query looks like this:

select * from mytable where #mywherecluase#

I could get all the records from your table by passing in "1=1 --"

I would have to know the first parameter that is used in the where clause  -
but with some evil guessing I might figure it out.

You would end up with

select * from mytable where 1 = 1  --the rest of the where clause is
commented out

SQL injection is possibly the biggest hole in most web sites.  It needs
plugging. I've looked at code where someone has  worked days protecting the
site from obscure cross scripting attacks while their data sits there
exposed and vulnerable. Most of the really valuable stuff on your web site
is in the database - right?

ASP sites are worse because they almost always use a string building kind of
syntax and no automatic escaping of single quotes. In CF the query is
"readable" and easier to work with.

-Mark



-Original Message-
From: Mike Soultanian [mailto:[EMAIL PROTECTED]
Sent: Monday, June 27, 2005 3:25 PM
To: CF-Talk
Subject: Re: cfqueryparam


> 
> 
>   select b.*, j.columns
>   from basetable b
>   #attributes.join# jointable j on (j.x = b.x)
> 
>
> I don't use this syntax because it's insecure... This is simplified to

Why is this insecure?  Does it have something to do with you using the
attributes scope?  Sorry if it's a stupid question, but I'm really not
sure why it is insecure and I figure it's a good thing to know ;)

Thanks,
Mike



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210673
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[Dave Watts]

> 4.5 I think.

Yes, you are correct according to the CFML History on the MM site.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210672
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Sql Server & CF, getting field types

[Clint Tredway]

try this
execute sp_columns @Table_Name = '#form.table#'

On 6/27/05, Greg Johnson <[EMAIL PROTECTED]> wrote:
> Long story short, we need to move data from one database to another on a
> daily basis.  Problem is that one of the databases is out of our control
> and the structure is changed regularly.  About the only thing we can
> count on are the table names.
> 
> We are talking 100s of fields so what we want to do is to get the
> database to tell us not only what fields are in a table, but what type
> of field it is, len, etc.  This way we can build code that adapats
> automaticaly to changes.
> 
> Is there a command we can send via a cfquery that not only returns the
> nomal comma delimited list of field names, but also what type they are
> (nvarchar, int, bit, etc.)
> 
> Thanks
> 
> --
> Greg Johnson
> Owner & Lead Technician
> [EMAIL PROTECTED]
> 
> Techno-Fix-It
> Filling the Gap Between the Store and the Repair Shop
> --
> www.technofixit.com
> Phone:(919)-371-1476
> Fax:(919)-882-9804
> P.O. Box 1094
> Morrisville, N.C. 27560
> 
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210671
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Barney Boisvert]

The built-in query caching that CF provides is quite lacking in terms
of features, and it's not very difficult to roll your own caching
component that is not only far more functional, but far more flexible.
 So while it's potentially a good candiate for a bandaid while you
create a "proper" solution to something, I can't see using it for much
else.  Certainly not as a part of an architected system.

cheers,
barneyb

On 6/27/05, Mark A Kruger <[EMAIL PROTECTED]> wrote:
> While I'm a big fan of frameworks and standards, we use  caching
> for lookups and "static" data - mostly on legacy code that is still in
> production. When we do so we "scrub" the variables using a UDF that removes
> malicious SQL. I would hasten to add that such a UDF is probably not 100%
> infalliable, but it's a nice compromise that enables us to use query caching
> with reasonable certainty.  Sometimes, query caching is the quickest way to
> "fix" an application suffering from performance issues - even temporarily
> while you work on an upgrade.
> 
-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 50 invites.

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210670
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Barney Boisvert]

Well, it's not necessarily insecure.  However, since the
attributes.join variable is being passed to the database directly, it
needs to be closely sanitized to ensure nothing bad will hapen.  You
can imagine all the potential evil that would be exposed if you just
took the 'join' argument direct from the URL and used it. Really it
all boils down to proper input validation.  If you're doing it
properly, you needn't worry, but if you're not, you could be in big
trouble.  CFQUERYPARAM greatly reduces the requirement, because while
it doesn't ensure the input is valid, it'll at least prevent a variety
of evil things from happening.

cheers,
barneyb

On 6/27/05, Mike Soultanian <[EMAIL PROTECTED]> wrote:
> > 
> > 
> >   select b.*, j.columns
> >   from basetable b
> >   #attributes.join# jointable j on (j.x = b.x)
> > 
> >
> > I don't use this syntax because it's insecure... This is simplified to
> 
> Why is this insecure?  Does it have something to do with you using the
> attributes scope?  Sorry if it's a stupid question, but I'm really not
> sure why it is insecure and I figure it's a good thing to know ;)
> 
> Thanks,
> Mike
> 
> 

-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 50 invites.

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210668
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: Podcasting..

[Marlon Moyer]

http://www.castblaster.com/


On 6/27/05, Mark A Kruger <[EMAIL PROTECTED]> wrote:
> I'd like to try doing a podcast (audio) - maybe once a week. I have no
> problem configuring the RSS feed (seems straightforward) - but I have
> another question. What software and hardware does anyone recommend for
> creating the audio file? Can someone give me a couple of recomendations?
> 
> -Mark
> 
> 
> 
> Mark A. Kruger, CFG, MCSE
> www.cfwebtools.com
> www.necfug.com
> http://mkruger.cfwebtools.com
> 
> 
> 
> 
> 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210669
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[Mark A Kruger]

While I'm a big fan of frameworks and standards, we use  caching
for lookups and "static" data - mostly on legacy code that is still in
production. When we do so we "scrub" the variables using a UDF that removes
malicious SQL. I would hasten to add that such a UDF is probably not 100%
infalliable, but it's a nice compromise that enables us to use query caching
with reasonable certainty.  Sometimes, query caching is the quickest way to
"fix" an application suffering from performance issues - even temporarily
while you work on an upgrade.

-Original Message-
From: S. Isaac Dealey [mailto:[EMAIL PROTECTED]
Sent: Monday, June 27, 2005 1:02 PM
To: CF-Talk
Subject: Re: cfqueryparam


> I agree, excpet for the one exception to this rule of sorts,
> query caching. Yes, you can write your own caching mechanism,
> but why? CF has one built in already, use it.

Well I don't use the CF native query caching mechanism for two
reasons. The first is that it's rather limited. The second is that
it's impossible to use it with a generic SQL abstraction layer like
the one used in the onTap framework... Everything about the executed
query is gathered in from external tags and then a single 
tag executes the query with all the passed in arguments that apply to
that query. Since every select statement in the application is
executed through the same cfquery tag, there's no way to provide a
cachedin or cahcedafter attribute for two reasons. 1) it always has
the same name, so the cache would be eliminated on almost every select
anyway and 2) iirc an error is thrown if you provide a cachedafter
argument that's not a date, like say, an empty string.

The framework doesn't support maxrows in queries either for similar
reasons. Maxrows must be a number and a value of 0 produces no
results. Negatives either produce no results or an error, so rather
than simply choose an arbitrary high number like 50bil. as a default
maxrows value, I just don't support them.

But the tag/function provides caching features that are an improvement
over the native features, for instance, sql.getRecordCache() allows
you to specify a record id (for the target record in your table) and
the name of a column containing the modified date for the record. It
fetches the modified date from the db first by itself, then uses that
value to determine if the existing cache is valid. True it's an extra
query, but the one column select will execute much faster than a query
that's fetching several large varchar or nclob columns.


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm






~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210667
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: Podcasting..

[Rob]

If you're lucky enough to use a Mac you can follow this posting on how
to get it going http://www.engadget.com/entry/5843952395227141/

I've followed that and it'll have all you need

On 6/27/05, Mark A Kruger <[EMAIL PROTECTED]> wrote:
> I'd like to try doing a podcast (audio) - maybe once a week. I have no
> problem configuring the RSS feed (seems straightforward) - but I have
> another question. What software and hardware does anyone recommend for
> creating the audio file? Can someone give me a couple of recomendations?
> 
> -Mark
> 
> 
> 
> Mark A. Kruger, CFG, MCSE
> www.cfwebtools.com
> www.necfug.com
> http://mkruger.cfwebtools.com
> 
> 
> 
> 
> 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210666
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Adam Haskell]

4.5 I think.

Adam H

On 6/27/05, Dave Watts <[EMAIL PROTECTED]> wrote:
> > Right. However, before CF 5, consistency was NOT to use
> > CFQUERYPARAM since it didn't exist, and I would add another
> > most important thing: if it aint broken, don't fix it...
> 
> I believe that the CFQUERYPARAM tag was introduced in CF 4.0.1, actually.
> Unfortunately, for some reason I can't download the CFML history information
> from Macromedia right now:
> 
> http://www.macromedia.com/support/coldfusion/ts/documents/cfmlhistory/cfmlhi
> story.zip
> 
> And if your application doesn't use bind parameters, one can make a strong
> argument that it is in fact broken.
> 
> > So let me reformulate my question:
> > Is it really worth to modify old CF applications running
> > Access to use CFQUERYPARAM,
> 
> Maybe.
> 
> > and is it really true that the only way for SQL injection is
> > by using multiple commands, and that Access DS are SQL injection
> > free?
> 
> No, that is not true.
> 
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> 
> Fig Leaf Software provides the highest caliber vendor-authorized
> instruction at our training centers in Washington DC, Atlanta,
> Chicago, Baltimore, Northern Virginia, or on-site at your location.
> Visit http://training.figleaf.com/ for more information!
> 
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210665
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Sql Server & CF, getting field types

[Greg Johnson]

Long story short, we need to move data from one database to another on a 
daily basis.  Problem is that one of the databases is out of our control 
and the structure is changed regularly.  About the only thing we can 
count on are the table names.

We are talking 100s of fields so what we want to do is to get the 
database to tell us not only what fields are in a table, but what type 
of field it is, len, etc.  This way we can build code that adapats 
automaticaly to changes.

Is there a command we can send via a cfquery that not only returns the 
nomal comma delimited list of field names, but also what type they are 
(nvarchar, int, bit, etc.)

Thanks

-- 
Greg Johnson
Owner & Lead Technician
[EMAIL PROTECTED]

Techno-Fix-It
Filling the Gap Between the Store and the Repair Shop
--
www.technofixit.com
Phone:(919)-371-1476
Fax:(919)-882-9804
P.O. Box 1094
Morrisville, N.C. 27560


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210664
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Mike Soultanian]

> 
> 
>   select b.*, j.columns
>   from basetable b
>   #attributes.join# jointable j on (j.x = b.x)
> 
> 
> I don't use this syntax because it's insecure... This is simplified to

Why is this insecure?  Does it have something to do with you using the 
attributes scope?  Sorry if it's a stupid question, but I'm really not 
sure why it is insecure and I figure it's a good thing to know ;)

Thanks,
Mike

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210663
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

OT: Podcasting..

[Mark A Kruger]

I'd like to try doing a podcast (audio) - maybe once a week. I have no
problem configuring the RSS feed (seems straightforward) - but I have
another question. What software and hardware does anyone recommend for
creating the audio file? Can someone give me a couple of recomendations?

-Mark



Mark A. Kruger, CFG, MCSE
www.cfwebtools.com
www.necfug.com
http://mkruger.cfwebtools.com




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210662
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: This is crazy this is crazy this is crazy!

[Will Tomlinson]

Damn it's close. I'm setting 18 myself with the customer info.  :)

Thanks,
Will

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210661
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Where to put the data?

[Adam Haskell]

You might check out CFCdev mailing list/archives I think this has been
discussed over there a lot. But I would store it in application scope
and just use the application scope. On 6 you would do something like
this in app.cfm








in 7 you would just do the initialization in OnAppStart... in app.cfc

Adam H



On 6/27/05, Ian Skinner <[EMAIL PROTECTED]> wrote:
> I'm still trying to figure out this OOP/CFC/Layered development concept.  I 
> think I have a nice start.  I have a page (view?) that takes an array 
> representing a calendar month of data plus tails.  It displays this calendar 
> with controls to move up and down the year.
> 
> The calendar array and various other display-required information is built 
> with a CFC.  I think this is working well, the CFC has methods to figure out 
> the first day to display which is the Monday before the first day of the 
> given month and the last day which is the Sunday after the last day of the 
> month. As well as other display parameters.
> 
> I am planning on building a separate CFC to handle the data retrieval and 
> manipulation from the database.  My thoughts is that I would like this data 
> to be cached as it will be large and could take several seconds to retrieve 
> and organize, easily 45 to 60 or more.  I also want all the viewers to share 
> one data instance.  I don't need each one to have their own copy of the hefty 
> piece of data.  This application does not update this data; it is a 
> display/report only.  Information is entered into the system in other 
> locations outside of this web application.
> 
> So the question is where do I put this CFC and how do I access it so that 
> each user shares one instance of the data CFC?  Do I just create the data 
> object in application scope and have the display cfc access it with 
> #application.dataCFC.method()# calls.  Or would it be better to create a 
> local pointer to the data in the display cfc:  variables.dataCFC = application.dataCFC>   variables.dataCFC.someMethod()>
> 
> Or is there some other technique that I am complete missing?
> 
> Thanks Ian
> 
> --
> Ian Skinner
> Web Programmer
> BloodSource
> www.BloodSource.org
> Sacramento, CA
> 
> "C code. C code run. Run code run. Please!"
> - Cynthia Dunning
> 
> Confidentiality Notice:  This message including any
> attachments is for the sole use of the intended
> recipient(s) and may contain confidential and privileged
> information. Any unauthorized review, use, disclosure or
> distribution is prohibited. If you are not the
> intended recipient, please contact the sender and
> delete any copies of this message.
> 
> 
> 
> 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210660
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[Dave Watts]

> Right. However, before CF 5, consistency was NOT to use 
> CFQUERYPARAM since it didn't exist, and I would add another
> most important thing: if it aint broken, don't fix it...

I believe that the CFQUERYPARAM tag was introduced in CF 4.0.1, actually.
Unfortunately, for some reason I can't download the CFML history information
from Macromedia right now:

http://www.macromedia.com/support/coldfusion/ts/documents/cfmlhistory/cfmlhi
story.zip

And if your application doesn't use bind parameters, one can make a strong
argument that it is in fact broken.

> So let me reformulate my question:
> Is it really worth to modify old CF applications running 
> Access to use CFQUERYPARAM,

Maybe.

> and is it really true that the only way for SQL injection is 
> by using multiple commands, and that Access DS are SQL injection 
> free?

No, that is not true.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210659
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[Ian Skinner]

Is it really true that the only way for SQL injection is by using multiple 
commands, and that Access DS are SQL injection free?


NOPE FALSE!

SQL injection does not require multiple commands, and Access is vulnerable!

Does that answer the first question?




--
Ian Skinner
Web Programmer
BloodSource
www.BloodSource.org
Sacramento, CA
 
"C code. C code run. Run code run. Please!"
- Cynthia Dunning

Confidentiality Notice:  This message including any
attachments is for the sole use of the intended
recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the
intended recipient, please contact the sender and
delete any copies of this message. 



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210658
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[S . Isaac Dealey]

>>>The three most important things in software
>>>development are

>>>consistency, consistency, and consistency.

> Right. However, before CF 5, consistency was NOT to use
> CFQUERYPARAM since it didn't exist,
> and I would add another most important thing: if it aint
> broken, don't fix it...

If it aint broke it doesn't do anything useful anyway. :)

> So let me reformulate my question:
> Is it really worth to modify old CF applications running
> Access to use CFQUERYPARAM,

If the application is nearing the end of its lifespan, I would say
no... If it's got a good long, healthy life ahead of it, then I would
say yes.

> and is it really true that the only way for SQL injection
> is by using multiple commands, and that Access DS are SQL
> injection free?

No it's not true. Which is part of the reason for my previous
position.


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210657
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Claude Schneegans]

 >>The three most important things in software development are

>>consistency, consistency, and consistency.

Right. However, before CF 5, consistency was NOT to use CFQUERYPARAM since it 
didn't exist,
and I would add another most important thing: if it aint broken, don't fix it...

So let me reformulate my question:
Is it really worth to modify old CF applications running Access to use 
CFQUERYPARAM,
and is it really true that the only way for SQL injection is by using multiple 
commands, 
and that Access DS are SQL injection free?

-- 
___
REUSE CODE! Use custom tags;
See http://www.contentbox.com/claude/customtags/tagstore.cfm
(Please send any spam to this address: [EMAIL PROTECTED])
Thanks.


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210656
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: dreamweaver automated check-in for source control

[John Paul Ashenfelter]

On 6/27/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
> Wasn't aware VSS had its own GUI... it didn't get installed on this
> machine when VSS was installed -- or if it did, it didn't create an
> intuitive start-menu shortcut. Might be a (just) passable solution...
> sucks that I'd have to add yet another GUI to my desktop to manage
> something that ought to be easily managed within the programming IDE
> because the IDE does a bad job of integrating it.
> 
> > if you are using VSS and don't like DWMX interface to it,
> > why not use the VSS GUI? Back when I used VSS for a time
> > I just used the VSS GUI.
> >  DK

It may well *not* be on your machine -- I seem to recall, as you do,
that DWMX doesn't use the VSS API and hits the files directly which
certainly cuts down on licensing costs. Keep in mind that the VSS
"application" costs something like $400/developer (or is free if
you've paid for a $$$ MSDN subscription). Accessing the VSS repository
directly using DWMX should alleviate having to license individually
for each developer except for one copy to manage the repository... 
though I really don't know the details of the MS licensing. Not to
mention the fact the licensing is changing when MS releases the new
team tools (including source control) that are bundled in the next
Visual Studio.
-- 
John Paul Ashenfelter
CTO/Transitionpoint
(blog) http://www.ashenfelter.com
(email) [EMAIL PROTECTED]

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210655
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: dreamweaver automated check-in for source control

[John Paul Ashenfelter]

On 6/27/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
> Wasn't aware VSS had its own GUI... it didn't get installed on this
> machine when VSS was installed -- or if it did, it didn't create an
> intuitive start-menu shortcut. Might be a (just) passable solution...
> sucks that I'd have to add yet another GUI to my desktop to manage
> something that ought to be easily managed within the programming IDE
> because the IDE does a bad job of integrating it.
> 
> > if you are using VSS and don't like DWMX interface to it,
> > why not use the VSS GUI? Back when I used VSS for a time
> > I just used the VSS GUI.
> >  DK

It may well *not* be on your machine -- I seem to recall, as you do,
that DWMX doesn't use the VSS API and hits the files directly which
certainly cuts down on licensing costs. Keep in mind that the VSS
"application" costs something like $400/developer (or is free if
you've paid for a $$$ MSDN subscription). Accessing the VSS repository
directly using DWMX should alleviate having to license individually
for each developer except for one copy to manage the repository... 
though I really don't know the details of the MS licensing. Not to
mention the fact the licensing is changing when MS releases the new
team tools (including source control) that are bundled in the next
Visual Studio.
-- 
John Paul Ashenfelter
CTO/Transitionpoint
(blog) http://www.ashenfelter.com
(email) [EMAIL PROTECTED]

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210654
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Flush DB connections?

[Eddie]

On 6/27/05, John Beynon <[EMAIL PROTECTED]> wrote:
> an incorrect password would throw a different message, usually saying
> the login failed. All 'the establishing socket' messages i've seen are
> down to networking issues between the cf server and the db server but
> that may not be the case if normally requested pages work ok,

John,
Thanks for your reply. But "normally requested pages" work fine. So,
that rules out an incorrect password. Plus, when I verify the DB
connection in the CF Admin, it returns OK.

There used to be an undocumented function
CFUSION_DBCONNECTIONS_FLUSH(), but when I try to execute it throws an
error:

Function CFUSION_DBCONNECTIONS_FLUSH is not supported in ColdFusion MX. 

I guess that's why it is undocumented. But, is there another way to
flush the connection pool?

-- 
Eddie.
http://awads.net/

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210653
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Flush DB connections?

[John Beynon]

an incorrect password would throw a different message, usually saying
the login failed. All 'the establishing socket' messages i've seen are
down to networking issues between the cf server and the db server but
that may not be the case if normally requested pages work ok,

jb.

On 6/27/05, Eddie <[EMAIL PROTECTED]> wrote:
> During the weekend, our DBA changed the password to the datasource
> (Oracle 8i) used in our ColdFusion MX 7 application. The application
> works fine, however, the ColdFusion scheduled tasks (run every 15
> minutes) are generating the following error:
> 
> [Macromedia][Oracle JDBC Driver]Error establishing socket
> 
> I have restarted all ColdFusion services (CF installed on Windows).
> Still, the error won't go away. I suspect it is a cached connection
> that won't go away. So, my question is: How to flush all database
> connections created by ColdFusion (other than bouncing the server)?
> 
> Thanks.
> --
> Eddie.
> http://awads.net/
> 
> 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210652
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Where to put the data?

[Ian Skinner]

I'm still trying to figure out this OOP/CFC/Layered development concept.  I 
think I have a nice start.  I have a page (view?) that takes an array 
representing a calendar month of data plus tails.  It displays this calendar 
with controls to move up and down the year.  

The calendar array and various other display-required information is built with 
a CFC.  I think this is working well, the CFC has methods to figure out the 
first day to display which is the Monday before the first day of the given 
month and the last day which is the Sunday after the last day of the month. As 
well as other display parameters.

I am planning on building a separate CFC to handle the data retrieval and 
manipulation from the database.  My thoughts is that I would like this data to 
be cached as it will be large and could take several seconds to retrieve and 
organize, easily 45 to 60 or more.  I also want all the viewers to share one 
data instance.  I don't need each one to have their own copy of the hefty piece 
of data.  This application does not update this data; it is a display/report 
only.  Information is entered into the system in other locations outside of 
this web application.

So the question is where do I put this CFC and how do I access it so that each 
user shares one instance of the data CFC?  Do I just create the data object in 
application scope and have the display cfc access it with 
#application.dataCFC.method()# calls.  Or would it be better to create a local 
pointer to the data in the display cfc:     

Or is there some other technique that I am complete missing?

Thanks Ian

--
Ian Skinner
Web Programmer
BloodSource
www.BloodSource.org
Sacramento, CA
 
"C code. C code run. Run code run. Please!"
- Cynthia Dunning

Confidentiality Notice:  This message including any
attachments is for the sole use of the intended
recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the
intended recipient, please contact the sender and
delete any copies of this message. 



~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210651
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Flush DB connections?

[Eddie]

During the weekend, our DBA changed the password to the datasource
(Oracle 8i) used in our ColdFusion MX 7 application. The application
works fine, however, the ColdFusion scheduled tasks (run every 15
minutes) are generating the following error:

[Macromedia][Oracle JDBC Driver]Error establishing socket

I have restarted all ColdFusion services (CF installed on Windows).
Still, the error won't go away. I suspect it is a cached connection
that won't go away. So, my question is: How to flush all database
connections created by ColdFusion (other than bouncing the server)?

Thanks.
-- 
Eddie.
http://awads.net/

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210650
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: CFCHART - No Chart :-(

[Matt Robertson]

No this is a straight CF Pro single-server install

There was a thread on these circumstances (actually mixed causes but
one of the ones reported was same as mine) at MM forums starting in
2003 with no clear resolution.  Might have been easier to understand
if it hadn't coverd so many different subjects.  One suggestion was to
zap all the IIS connectors and remake them using the included batch
files, but reading the batch file source I was a bit worried to do
that to a working production box.  My config is in wsconfig/1/ and I
didn't see a numeral in the bat file's path.  Maybe thats taken care
of within the routine itself?  Some people reported success with it,
others no result.

CF is running under LocalSystem on this particular box, at least for
now, so its not a permissioning thing I don't think.

-- 
--mattRobertson--
Janitor, MSB Web Systems
mysecretbase.com

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210649
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[S . Isaac Dealey]

>> The framework doesn't support maxrows in queries either
>> for similar
>> reasons. Maxrows must be a number and a value of 0
>> produces no
>> results. Negatives either produce no results or an error,
>> so rather
>> than simply choose an arbitrary high number like 50bil.
>> as a default
>> maxrows value, I just don't support them.

> A value of -1 for MAXROWS will return all rows - that's
> the default value,
> essentially.

I could swear I had tried that... but I'll give it another shot when I
get home... Thanks Dave.

s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210648
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[Dave Watts]

> The framework doesn't support maxrows in queries either for similar
> reasons. Maxrows must be a number and a value of 0 produces no
> results. Negatives either produce no results or an error, so rather
> than simply choose an arbitrary high number like 50bil. as a default
> maxrows value, I just don't support them.

A value of -1 for MAXROWS will return all rows - that's the default value,
essentially.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210647
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: UUID CFC Problem

[S . Isaac Dealey]

> That worked, thanks.

Glad I could help. :)


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210646
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: UUID CFC Problem

[Mark Leder]

That worked, thanks. 

-Original Message-
From: Mark Leder [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 27, 2005 11:40 AM
To: CF-Talk
Subject: RE: UUID CFC Problem

Thanks, I'll give this a whirl this afternoon and let you know. 

-Original Message-
From: S. Isaac Dealey [mailto:[EMAIL PROTECTED]
Sent: Monday, June 27, 2005 11:28 AM
To: CF-Talk
Subject: Re: UUID CFC Problem

Well that's not where you would normall use urlencodedformat()...

You would want to use urlencodedformat() before generating a url for a link
or in theory to connect to a webservice via something like cfhttp, although
cfhttpparam will urlencode the value for you by default. So... if I'm
reading the rest of your message correctly and you're providing a link to
your webservice in an outgoing email, you would use urlencodedformat()
around the UUID before generating that email. Once the user selects that
link from their mail client, the CF Server should convert it back from
url-format automatically.

Moreover you seem to have a bit of difficulty with knowing when to use (or
not use) quotes and pound symbols... example:

>  

You don't really need this line, but if you did, you wouldn't need (or
want) either the quotes or the pound symbols.

>   component="#REQUEST.prefix#.cf-inf.cfcomponents.email"
> method="optInConfirmation">
> 

This is probably actually causing your problem here... you need the pound
symbols around #url.oi# in your cfinvokeargument tag... or better,



hth

s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm








~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210645
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[S . Isaac Dealey]

> I agree, excpet for the one exception to this rule of sorts,
> query caching. Yes, you can write your own caching mechanism,
> but why? CF has one built in already, use it.

Well I don't use the CF native query caching mechanism for two
reasons. The first is that it's rather limited. The second is that
it's impossible to use it with a generic SQL abstraction layer like
the one used in the onTap framework... Everything about the executed
query is gathered in from external tags and then a single 
tag executes the query with all the passed in arguments that apply to
that query. Since every select statement in the application is
executed through the same cfquery tag, there's no way to provide a
cachedin or cahcedafter attribute for two reasons. 1) it always has
the same name, so the cache would be eliminated on almost every select
anyway and 2) iirc an error is thrown if you provide a cachedafter
argument that's not a date, like say, an empty string.

The framework doesn't support maxrows in queries either for similar
reasons. Maxrows must be a number and a value of 0 produces no
results. Negatives either produce no results or an error, so rather
than simply choose an arbitrary high number like 50bil. as a default
maxrows value, I just don't support them.

But the tag/function provides caching features that are an improvement
over the native features, for instance, sql.getRecordCache() allows
you to specify a record id (for the target record in your table) and
the name of a column containing the modified date for the record. It
fetches the modified date from the db first by itself, then uses that
value to determine if the existing cache is valid. True it's an extra
query, but the one column select will execute much faster than a query
that's fetching several large varchar or nclob columns.


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210644
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[Dave Watts]

> But what if one uses an Access database ?

One should stop!

> AFAIK, SQL injection uses multiple SQL statements ...

Not necessarily. It is possible to have single statements that are
vulnerable to SQL injection attacks. And, you should see better performance
using prepared statements with Access just like with any other database
platform.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210643
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: Viewing Hidden Frames Source Code in Firefox...

[Dave Watts]

> Well not *exactly* what I want, this tool will surely help 
> out a ton.

You could just use an HTTP sniffer to show you what's being sent back and
forth. EffeTech has a nice one that's just for HTTP - it's about $30 or so,
but I've found it to be useful. It's better for this than a general-purpose
sniffer like Ethereal because it has all sorts of HTTP-specific
functionality.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210642
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

shopping cart suggestions

[Mary Jo Sminkey]

>Has
>anyone had any experience with this solution, or can anyone recommend any
>other shopping card solutions (that work with MX 6.1, but also would be
>interested in something that works with CF 4.5).  

You may have a tough time finding a cart that works in both MX and in CF 4.5. 
It's just not an easy task keeping compatibility with such old versions while 
continuing to support newer ones. For instance, any cart using sessions and 
properly locking them for CF5 would have locks that don't work with CF 4.5 at 
all as the syntax changed between those versions. It's hard enough keeping 
support for CF5, as my customers would like features that really need to use 
CFMX tags and functions. 


Mary Jo Sminkey
http://www.cfwebstore.com
CFWebstore, ColdFusion E-commerce

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210641
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Sandbox vs. CFX

[David Delbridge]

Egads.  It appears that my MX 7 server was not implementing my file/dir 
sandbox changes without a service restart.  [...or, something particular 
to these CFX tags was being cached.]

Hence, with a few restarts, I have found some permissions that resolve 
the aforementioned CFX tag problem.  For example, it would appear that 
CFX_Image and CFX_POP3 require access to \lib\.

Does this present a new security issue?

Dave

David Delbridge wrote:

> Hi all,
> 
> I've discovered that a couple of CFX tags aren't working on my new MX 7 
> server; they produce a "500 null" error.  If I disable sandbox security 
> outright, the problem disappears.  With sandbox security enabled, no 
> combination of file/directory permissions will work.  I've even tried 
> "C:\" and "C:\-" with full RWED permissions.  No luck.
> 
> Any ideas?  Googling shows that a handful of others have run into this 
> identical problem, but all discussions stopped short of a solution.
> 
> Any help is greatly appreciated.
> 
> Dave
> 

-- 

David M. Delbridge
Circa 3000
ColdFusion Hosting
http://www.circa3k.com
866-CIRCA3K (247-2235)
Outside U.S: +1.775-832-2445


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210640
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[S . Isaac Dealey]

>  >>Much simpler (but the same) meaning, is just that you
>  >>should NEVER

>>>have hashes inside CFQUERY tags, unless they are also
>>>inside
>>>CFQUERYPARAM tags.

> Beside the fact that use of CFQUERYPARAM may make queries
> more efficient,
> the main advantage is to prevent SQL injection.
> But what if one uses an Access database ? AFAIK, SQL
> injection uses multiple SQL statements,
> but since multiple SQL statements are not supported in
> Access datasources, is
> CFQUERYPARAM so important with Access ?

Well... in theory cfqueryparam should still make those queries faster
even when using Access... but entirely asside from the performance
issue, sql injection doesn't _need_ to use multiple sql statements...
here's an example:


delete * from mytable
where mycolumn = #url.x#


And the simple sql injection attack for this page is:

page.cfm?x=1 or 1=1

Of course the browser or other http engine will need to urlencode the
value "1 or 1=1" so that the spaces and the equal sign don't mangle
the url, however, as far as I know MS Access does support the
statement "1=1" and I know it supports the or keyword in the where
clause, so the end result would be that the Access driver will attempt
to delete every record in that table. Foreign key constraints may
prevent the deletion of some of them, but without a cftransaction you
may still lose extra records. Much better to just use the
cfqueryparam.

s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210639
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: JS Detection script

[Adkins, Randy]

That's fine, cause my goal is limiting it to IE or Firefox (Netscape).

It is a family website I am developing.
I found an great script in PHP but my knowledge of PHP
is non-existent that I would like to take the values
and store them in the Database when they log into the site.

That way it gives me some information when I have to do troubleshooting
for family members since most of them are not up on all the internet
and computer terminology. 

-Original Message-
From: S. Isaac Dealey [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 27, 2005 10:53 AM
To: CF-Talk
Subject: Re: JS Detection script

> Does anyone have a nice JS detection script that will detect the
> following:

> JS (installed and Version)
> Browser (to include FF, IE, etc)
> Flash (installed & version)
> Cookies enabled
> screen resolutions

> etc..

> I know there is BrowserHawk but this is a personal site and one a 
> shared hosting.

> I can detect the screen resolutions and found a script for the Flash 
> version.
> I have found TONS on browser scripts but some are lacking in 
> determining the version rather than just if it is IE or Netscape.

Problem is you'll do all that work and then someone will come along and
use Opera.



s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm






~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210638
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: CFCHART - No Chart :-(

[Douglas Knudsen]

Does your prod environment involve a JRun cluster? 
 You don't need a CF mapping to JRunScripts either, just the one in IIS that 
gets setup when you install CF (or use wsconfig).
   DK

 On 6/27/05, Matt Robertson <[EMAIL PROTECTED]> wrote: 
> 
> On 6/27/05, Allan Cliff <[EMAIL PROTECTED]> wrote:
> > Map also the JRunScripts folder.
> > Also create a file in CFIDE folder called GraphData.cfm and put a
> > comment only in it.
> > Restart the Service and try again.
> 
> I mapped JRunScripts as a virtual directory in IIS and under
> /JRunScripts/ in the CF Admin. I created GraphData.cfm (cased as
> shown) in CFIDE. CFIDE is also a virtual directory under IIS.
> GraphData.cfm has only a cfml comment in it ()
> 
> Same result. JPG not found. This works fine on my dev box but then
> again I'm using a default developer install. On the live server the
> CFIDE folder is really at c:\inetpub\wwwroot\ which is not web
> accessible (hence the mappings, of course)
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210637
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Douglas Knudsen]

I agree, excpet for the one exception to this rule of sorts, query caching. 
Yes, you can write your own caching mechanism, but why? CF has one built in 
already, use it.
  DK

 On 6/27/05, Barney Boisvert <[EMAIL PROTECTED]> wrote: 
> 
> The three most important things in software development are
> consistency, consistency, and consistency. So unless there's a
> compelling reason NOT to be consistent, be consistent wherever you
> can. If you just get in the habit of using CFQUERYPARAM everywhere,
> you'll never have to think about what type of database you're using.
> And when you upsize from Access to a real DB, you'll be thankful.
> 
> I did find that some early versions of MySQL's 3.23 series actually
> caused SQL error with the bind variables, so that would be an
> exception, I suppose, but other than that
> 
> cheers,
> barneyb
> 
> On 6/27/05, Claude Schneegans <[EMAIL PROTECTED]> wrote:
> > >>Much simpler (but the same) meaning, is just that you should NEVER
> >
> > >>have hashes inside CFQUERY tags, unless they are also inside
> > >>CFQUERYPARAM tags.
> >
> > Beside the fact that use of CFQUERYPARAM may make queries more 
> efficient,
> > the main advantage is to prevent SQL injection.
> > But what if one uses an Access database ? AFAIK, SQL injection uses 
> multiple SQL statements,
> > but since multiple SQL statements are not supported in Access 
> datasources, is
> > CFQUERYPARAM so important with Access ?
> >
> 
> --
> Barney Boisvert
> [EMAIL PROTECTED]
> 360.319.6145
> http://www.barneyb.com/
> 
> Got Gmail? I have 50 invites.
> 
> 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210636
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: dreamweaver automated check-in for source control

[S . Isaac Dealey]

Wasn't aware VSS had its own GUI... it didn't get installed on this
machine when VSS was installed -- or if it did, it didn't create an
intuitive start-menu shortcut. Might be a (just) passable solution...
sucks that I'd have to add yet another GUI to my desktop to manage
something that ought to be easily managed within the programming IDE
because the IDE does a bad job of integrating it.

> if you are using VSS and don't like DWMX interface to it,
> why not use the VSS GUI? Back when I used VSS for a time
> I just used the VSS GUI.
>  DK


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210635
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[S . Isaac Dealey]

> Yeah, that's true; my bad.  But as you say, it's also
> insecure.  Far
> better, and my preference, is be to do something like
> this:

> 
> 
>select b.*, j.columns
>from basetable b
>
>  left
>
>  right
>
>  inner
> jointable j on (j.x = b.x)
> 

> No more hashes, no more security issues, and you even get
> handling
> (though with a default, not a raised exception) for
> invalid values.

I'd use a cfswitch for that...



#attributes.join#

inner


or this





Though in my case it's not done this way either... I have a join
tag/function that accepts a boolean "required" attribute/argument...
The join is "inner" if the join is required, otherwise it's "left".
But the db access tags also perform a fair amount of massaging on the
table and column names, to do things like ensure that the names of
filter columns match columns in the table -- if not the filter is
ignored. This allows things like #sql.structToFilters()# (the default
for sql.select()) which converts a collection of strings into an array
of the attributes accepted by the filter tag to allow automated
filtering of list pages and the like. So when I create my list pages,
they're searchable by default without my having to add anything
special to the page to make the content searchable. In any event --
all these features require that I use hashed variables in the cfquery
tag (I can't switch-case or cfif every column name a person could
conceivably use), although since they're checked against the meta-data
for the table prior to executing the query that provides the security.



s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210634
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: CFCHART - No Chart :-(

[Matt Robertson]

On 6/27/05, Allan Cliff <[EMAIL PROTECTED]> wrote:
> Map also the JRunScripts folder.
> Also create a file in CFIDE folder called GraphData.cfm and put a
> comment only in it.
> Restart the Service and try again.

I mapped JRunScripts as a virtual directory in IIS and under
/JRunScripts/ in the CF Admin.  I created GraphData.cfm (cased as
shown) in CFIDE.  CFIDE is also a virtual directory under IIS. 
GraphData.cfm has only a cfml comment in it ()

Same result.  JPG not found.  This works fine on my dev box but then
again I'm using a default developer install.  On the live server the
CFIDE folder is really at c:\inetpub\wwwroot\ which is not web
accessible (hence the mappings, of course)

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210633
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Barney Boisvert]

The three most important things in software development are
consistency, consistency, and consistency.  So unless there's a
compelling reason NOT to be consistent, be consistent wherever you
can.  If you just get in the habit of using CFQUERYPARAM everywhere,
you'll never have to think about what type of database you're using. 
And when you upsize from Access to a real DB, you'll be thankful.

I did find that some early versions of MySQL's 3.23 series actually
caused SQL error with the bind variables, so that would be an
exception, I suppose, but other than that

cheers,
barneyb

On 6/27/05, Claude Schneegans <[EMAIL PROTECTED]> wrote:
>  >>Much simpler (but the same) meaning, is just that you should NEVER
> 
> >>have hashes inside CFQUERY tags, unless they are also inside
> >>CFQUERYPARAM tags.
> 
> Beside the fact that use of CFQUERYPARAM may make queries more efficient,
> the main advantage is to prevent SQL injection.
> But what if one uses an Access database ? AFAIK, SQL injection uses multiple 
> SQL statements,
> but since multiple SQL statements are not supported in Access datasources, is
> CFQUERYPARAM so important with Access ?
> 

-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 50 invites.

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210632
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Claude Schneegans]

 >>Much simpler (but the same) meaning, is just that you should NEVER

>>have hashes inside CFQUERY tags, unless they are also inside
>>CFQUERYPARAM tags.

Beside the fact that use of CFQUERYPARAM may make queries more efficient,
the main advantage is to prevent SQL injection.
But what if one uses an Access database ? AFAIK, SQL injection uses multiple 
SQL statements,
but since multiple SQL statements are not supported in Access datasources, is
CFQUERYPARAM so important with Access ?

-- 
___
REUSE CODE! Use custom tags;
See http://www.contentbox.com/claude/customtags/tagstore.cfm
(Please send any spam to this address: [EMAIL PROTECTED])
Thanks.


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210631
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Anyone ever heard of not allowing FTP?

[David Delbridge]

Why not simply restrict inbound FTP to trusted IPs at the firewall?  You 
have a static IP, right?

Dave

Brian Meloche wrote:

> I have run into FTP being blocked this several times, including where I am 
> working now. One unscrupulous developer (someone I used to see post on 
> CF-Community a lot, although I haven't seen him on there in some time) 
> actually created a honey pot on a public server where I was contracted 
> BEFORE I was there, so I can certainly see the I only see the need for 
> blocking FTP. Many use network drives to push code, but don't even allow 
> VPN, so you have to push code on site.
> 
> I usually only see FTP allowed for shared hosting, and certainly no PDS 
> turned on anywhere I have worked except for some development environments.
> 
> On 6/27/05, John Paul Ashenfelter <[EMAIL PROTECTED]> wrote:
> 
>>On 6/24/05, Russ <[EMAIL PROTECTED]> wrote:
>>
>>>I usually try to disable ftp on the server if I have a choice. FTP is 
>>
>>very
>>
>>>insecure as all username's and passwords get sent through plain text. 
>>
>>SFTP
>>
>>>or FTPS is another story, and I usually use FTP over SSH on *NIX boxes 
>>
>>and
>>
>>>some sort of secure FTP on windows boxes.
>>
>>Agreed. Except for commercial shared-hosting services, I hardly ever
>>see FTP on production servers. SFTP or FTP over SSH are definitely the
>>right choice for security and only slightly more onerous since there
>>are plenty of FTP clients that also support SFTP.
>>
>>
>>>If he doesn't allow any sort of FTP access then he's being a little too
>>>paranoid, and he might as well just turn off the server completely and 
>>
>>lock
>>
>>>it in a safe if he wants it to be completely secure. There is no such 
>>
>>thing
>>
>>>as a secure server, and there is always a way to hack in, the only 
>>
>>question
>>
>>>is how much effort/money it would take to hack into the server, and 
>>
>>whether
>>
>>>the information there is worth it.
>>>
>>>I would ask him to set up either secure ftp or ftp over ssh that gives 
>>
>>you
>>
>>>access to certain directories only (only what needs to be updated).
>>>
>>>Russ
>>>
>>>-Original Message-
>>>From: Will Tomlinson [mailto:[EMAIL PROTECTED]
>>>Sent: Friday, June 24, 2005 6:16 AM
>>>To: CF-Talk
>>>Subject: OT: Anyone ever heard of not allowing FTP?
>>>
>>>Hey guys,
>>>
>>>I just landed a contract and potential full time job at the local 
>>
>>community
>>
>>>college. They'll be installing CF pretty soon too (WOOHOO)!
>>>
>>>I had a talk with their server guy, and he informed me that I wouldn't 
>>
>>be
>>
>>>able to FTP my updates to the site because hackers target education
>>>institutions, and he doesn't allow any FTP access. I have to give him my
>>>updates on a thumb drive and *he* puts them on the server.
>>>
>>>Anyone ever heard of something like that? Can a server not be secured 
>>
>>enough
>>
>>>to allow FTP for the webmaster? Sounds a bit crazy to me.
>>>
>>>Thanks,
>>>Will
>>>
>>>
>>>
>>>
>>
>>
> 
> 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210630
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: dreamweaver automated check-in for source control

[Douglas Knudsen]

if you are using VSS and don't like DWMX interface to it, why not use the 
VSS GUI? Back when I used VSS for a time I just used the VSS GUI.
 DK

 On 6/27/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote: 
> 
> > VSS has an API you can script against, if memory serves.
> > Might be worth the effort to figure out how to do that
> > -- I remember doing automated checkouts and deploys with
> > batch files (been years since I used VSS so pretty foggy
> > -- but VSS has been v6.0.x for years) ), so should be
> > straightforward to write a batch file to do that
> > -- then maybe turn into a DW extension?
> 
> That's a possibility... I've heard (although I can't confirm from
> personal experience) that DW doesn't use the API to connect to VSS,
> instead accessing it's database directly... If that's true, I would
> expect that would eliminate this as a real possibility... granted...
> for that matter, dw extensions have very limited access to dw's
> internal ftp engine ... actually it's virtually inaccessible...
> virtually... you can sort of access it in an abstract way, but there's
> very little control. There's probably even less ability to access dw's
> source-control features in the dw extension api.
> 
> >> > + small files, which means less contention for files to
> >> > checkout/merge
> >>
> >> Isn't this a quality of the software, not of the
> >> source-control system?
> 
> > Right -- my real point was the approach doesn't work if
> > you've got lots of monolithic pages -- those 600 line
> > files that do everything :)
> 
> I hate those things. :) We have too many of them at the office where I
> work currently.
> 
> 
> s. isaac dealey 954.522.6080
> new epoch : isn't it time for a change?
> 
> add features without fixtures with
> the onTap open source framework
> 
> http://www.fusiontap.com
> http://coldfusion.sys-con.com/author/4806Dealey.htm
> 
> 
> 
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210629
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: dreamweaver automated check-in for source control

[S . Isaac Dealey]

> VSS has an API you can script against, if memory serves.
> Might be worth the effort to figure out how to do that
> -- I remember doing automated checkouts and deploys with
> batch files (been years since I used VSS so pretty foggy
> -- but VSS has been v6.0.x for years) ), so should be
> straightforward to write a batch file to do that
> -- then maybe turn into a DW extension?

That's a possibility... I've heard (although I can't confirm from
personal experience) that DW doesn't use the API to connect to VSS,
instead accessing it's database directly... If that's true, I would
expect that would eliminate this as a real possibility... granted...
for that matter, dw extensions have very limited access to dw's
internal ftp engine ... actually it's virtually inaccessible...
virtually... you can sort of access it in an abstract way, but there's
very little control. There's probably even less ability to access dw's
source-control features in the dw extension api.

>> > + small files, which means less contention for files to
>> > checkout/merge
>>
>> Isn't this a quality of the software, not of the
>> source-control system?

> Right -- my real point was the approach doesn't work if
> you've got lots of monolithic pages -- those 600 line
> files that do everything :)

I hate those things. :) We have too many of them at the office where I
work currently.


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210628
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: Viewing Hidden Frames Source Code in Firefox...

[Dan G. Switzer, II]

Marlon,

>Install this extension which is an HTML validator.
>
>https://addons.mozilla.org/extensions/moreinfo.php?application=firefox&cate
>gory=Developer%20Tools&numpg=10&id=249
>
>This will create an icon in the lower right hand side of the browser
>that has a view source option.  When you choose that, it will list all
>frames, including hidden frames.  I've found it to be invaluable.

Well not *exactly* what I want, this tool will surely help out a ton. I
probably out to look in to creating an extension to do exactly what I what.
I'd love to see a view source button I could add to the browser, which would
have a drop down of all the documents loaded on the current page and which
selecting the source file would show the *cached* content of the page (i.e.
what was actually rendered--instead of re-querying the URL.) That would be
perfect.

Thanks again for the link, this will definitely help me out.

-Dan



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210627
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Barney Boisvert]

Yeah, that's true; my bad.  But as you say, it's also insecure.  Far
better, and my preference, is be to do something like this:



   select b.*, j.columns
   from basetable b
   
 left
   
 right
   
 inner
jointable j on (j.x = b.x)


No more hashes, no more security issues, and you even get handling
(though with a default, not a raised exception) for invalid values.

Cheers,
barneyb

On 6/27/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
> > Much simpler (but the same) meaning, is just that you
> > should NEVER have hashes inside CFQUERY tags, unless
> > they are also inside CFQUERYPARAM tags.
> 
> I beg to differ:
> 
> 
> 
> select b.*, j.columns
> from basetable b
> #attributes.join# jointable j on (j.x = b.x)
> 
> 
> I don't use this syntax because it's insecure... This is simplified to
> make the example... The point being that there are cases in which a
> non-queryparamed variable is viable as part of a sql statement when
> the content of the variable constitutes part of the sql syntax which
> is not bind-able.
> 
> 
> s. isaac dealey   954.522.6080
> new epoch : isn't it time for a change?
> 

-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 50 invites.

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210626
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[S . Isaac Dealey]

>  
>   datasource="user020">
>  UPDATE tbl_020publicUsers
>  SET lastLogin = #UKTodayDate#,
>  daysVisited =
>  #GetUser.daysVisited#
>  WHERE userID =  value='#Client.KissMyDate_UserID#'
> cfsqltype="cf_sql_integer"
> maxlength="4">
>  

You should queryparam each of the columns being set...


> Also, when I am checking a db field against another table
> like below
> (AND userID = tbl_020publicResponses.senderUserID) should
> I use a cfqueryparam in that?

No joins to other tables don't use bind variables. You would only need
a queryparam if you needed an outer join with a CF variable in it,
i.e.

LEFT JOIN table2 on (table2.x = table1.x and table2.y = #url.y#)

url.y should be wrapped in a cfqueryparam in this example


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210625
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Using Firebird as an embedded database

[Rob]

On 6/27/05, John Paul Ashenfelter <[EMAIL PROTECTED]> wrote:
> On 6/23/05, Dave Watts <[EMAIL PROTECTED]> wrote:
> > > We've a few projects here where we'll need some kind of an embedded
> > > DBMS. It'd be nice to avoid MySQL (because of the need for a
> > > commercial license), MSSQL (as it's Windows only and its embeddable
> > > form--MSDE--doesn't allow as many simultaneous connections as
> > > we'd need in a server environment), and Oracle (ha! ha! ha! and yes,
> > > I know about Oracle lite). I'm not confident enough in PostgreSQL on
> > > Window quite yet, SQLite and HSQLdb are inappropriate in the context,
> > > so Firebird appears to be the best fit.
> > >
> 
> > You might take a look at Pointbase, which is the embedded Java database
> > server that JRun comes with. Offhand, I don't know if it gets installed if
> > you install CFMX in the standalone server configuration, but it does if you
> > install CFMX Multiserver.
> 
> One more option is Apache Derby (formerly IBM Cloudscape). I've only
> played with its so no real feedback, but should probably be on your
> evaluation list.

I've used this one http://hsqldb.org/ on a few projects with great success.

It's got a pretty nice license too http://hsqldb.org/web/hsqlLicense.html

-- 
~Blog~
http://www.robrohan.com
~The cfml plug-in for eclipse~
http://cfeclipse.tigris.org 
~open source xslt IDE~
http://treebeard.sourceforge.net

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210624
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[S . Isaac Dealey]

> Much simpler (but the same) meaning, is just that you
> should NEVER have hashes inside CFQUERY tags, unless
> they are also inside CFQUERYPARAM tags.

I beg to differ:



select b.*, j.columns
from basetable b
#attributes.join# jointable j on (j.x = b.x)


I don't use this syntax because it's insecure... This is simplified to
make the example... The point being that there are cases in which a
non-queryparamed variable is viable as part of a sql statement when
the content of the variable constitutes part of the sql syntax which
is not bind-able.


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210623
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[S . Isaac Dealey]

> You should use cfqueryparam *everywhere* you could specify
> a literal value.

> This includes SELECT, INSERT, UPDATE and DELETE statements
> as well as any DDL statements that can accept literal values.

Column defaults and create sequence statements are the only DDL
statements I can think of that would...

 okay, create view if the view includes a literal in a join or
where clause ...

Though ... that raises the question of whether all db's support bind
parameters in a create view statement... I don't see there being any
real benefit to it actually, given that the purpose of bind parameters
(security issues notwithstanding, since you wouldn't typically let a
user execute a process that creates a view) is to allow pre-generated
execution plans for performance purposes, which a view already does
when you create it. Now, if you use a select statement against that
view with a literal in a where clause, then you would want bing
parameters again because you need a separate execution plan.


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210622
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Barney Boisvert]

There's absolutely no reason to use CFQUERYPARAM in that scenario
though, so why bother?  CFQUERYPARAM does variable binding for the
database.  The main purpose is to allow the statement to be cached
(kind of ;) without any dynamic pieces, and then have the dynamic
pieces inserted on the fly (the bind variables).  That has the nice
side effect of avoiding SQL injection attacks as well, because by the
time the values are injected, the SQL engine has already done
everything, so there's no way for any SQL in a value to be executed.

With literal values, you don't have either of those problems, so using
CFQUERYPARAM is entirely superfluous.

cheers,
barneyb

On 6/27/05, Aaron Rouse <[EMAIL PROTECTED]> wrote:
> But then you might forget to use them when you key in some literals, such
> as:
>  SELECT ID, BLAH FROM MYTABLE WHERE MYSTATUS =  cfsqltype="cf_sql_numeric" />
> 

-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 50 invites.

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210621
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Aaron Rouse]

But then you might forget to use them when you key in some literals, such 
as: 
 SELECT ID, BLAH FROM MYTABLE WHERE MYSTATUS = 

 On 6/27/05, Barney Boisvert <[EMAIL PROTECTED]> wrote: 
> 
> Much simpler (but the same) meaning, is just that you should NEVER
> have hashes inside CFQUERY tags, unless they are also inside
> CFQUERYPARAM tags.
> 
> cheers,
> barneyb
> 
>


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210620
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: cfqueryparam

[Barney Boisvert]

Much simpler (but the same) meaning, is just that you should NEVER
have hashes inside CFQUERY tags, unless they are also inside
CFQUERYPARAM tags.

cheers,
barneyb

On 6/27/05, Dawson, Michael <[EMAIL PROTECTED]> wrote:
> You should use cfqueryparam *everywhere* you could specify a literal
> value.
> 
> This includes SELECT, INSERT, UPDATE and DELETE statements as well as
> any DDL statements that can accept literal values.
> 
> M!ke


-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 50 invites.

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210619
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: cfqueryparam

[Dawson, Michael]

You should use cfqueryparam *everywhere* you could specify a literal
value.

This includes SELECT, INSERT, UPDATE and DELETE statements as well as
any DDL statements that can accept literal values.

M!ke

-Original Message-
From: Saturday (Stuart Kidd) [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 27, 2005 10:47 AM
To: CF-Talk
Subject: cfqueryparam

Hi,

Just wondering if my CFQUERYPARAM is correct... should I be also putting
cfqueryparam tags around the SET variables?

 
 
 UPDATE tbl_020publicUsers
 SET lastLogin = #UKTodayDate#,
 daysVisited = #GetUser.daysVisited#
 WHERE userID = 
 


Also, when I am checking a db field against another table like below
(AND userID = tbl_020publicResponses.senderUserID) should I use a
cfqueryparam in that?

 
 
 SELECT responseID, tbl_020publicResponses.profileID,
recipientUserID, senderUserID, senderScreenName, senderEmail,
responseSubject, responseText, responseDate, responseReadStatus, userID,
screenName
 FROM tbl_020publicResponses, tbl_020publicProfiles
 WHERE recipientUserID =  AND responseID =  AND userID = tbl_020publicResponses.senderUserID
 


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210618
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

cfqueryparam

[Stuart Kidd]

Hi,

Just wondering if my CFQUERYPARAM is correct... should I be also  
putting cfqueryparam tags around the SET variables?

 
 
 UPDATE tbl_020publicUsers
 SET lastLogin = #UKTodayDate#,
 daysVisited = #GetUser.daysVisited#
 WHERE userID = 
 


Also, when I am checking a db field against another table like below  
(AND userID = tbl_020publicResponses.senderUserID) should I use a  
cfqueryparam in that?

 
 
 SELECT responseID, tbl_020publicResponses.profileID,  
recipientUserID, senderUserID, senderScreenName, senderEmail,  
responseSubject, responseText, responseDate, responseReadStatus,  
userID, screenName
 FROM tbl_020publicResponses, tbl_020publicProfiles
 WHERE recipientUserID =  AND responseID =  AND userID = tbl_020publicResponses.senderUserID
 



Thanks,

Saturday



~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210617
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Using Firebird as an embedded database

[Keith Gaughan]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

John Paul Ashenfelter wrote:
> On 6/23/05, Dave Watts <[EMAIL PROTECTED]> wrote:
> 
>>>We've a few projects here where we'll need some kind of an embedded
>>>DBMS. It'd be nice to avoid MySQL (because of the need for a
>>>commercial license), MSSQL (as it's Windows only and its embeddable
>>>form--MSDE--doesn't allow as many simultaneous connections as
>>>we'd need in a server environment), and Oracle (ha! ha! ha! and yes,
>>>I know about Oracle lite). I'm not confident enough in PostgreSQL on
>>>Window quite yet, SQLite and HSQLdb are inappropriate in the context,
>>>so Firebird appears to be the best fit.
>>>
> 
> 
>>You might take a look at Pointbase, which is the embedded Java database
>>server that JRun comes with. Offhand, I don't know if it gets installed if
>>you install CFMX in the standalone server configuration, but it does if you
>>install CFMX Multiserver.
> 
> 
> One more option is Apache Derby (formerly IBM Cloudscape). I've only
> played with its so no real feedback, but should probably be on your
> evaluation list.

Will do. Mind you, I can remember in days of yore fiddling with
Cloudscape and getting very irritated with it for some reason. I'll
take a look though.

And I didn't know about Pointbase myself, so I'll take a look at that.

Cheers lads,

K.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCwB8mmSWF0pzlQ04RAj/zAJ49xMD+NDwYAKwtrKj/Kw0EzefxkACgxJ2v
98HwwtK1mVf8x7LzIhFc7vA=
=vXcz
-END PGP SIGNATURE-

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210616
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Anyone ever heard of not allowing FTP?

[Brian Meloche]

I have run into FTP being blocked this several times, including where I am 
working now. One unscrupulous developer (someone I used to see post on 
CF-Community a lot, although I haven't seen him on there in some time) 
actually created a honey pot on a public server where I was contracted 
BEFORE I was there, so I can certainly see the I only see the need for 
blocking FTP. Many use network drives to push code, but don't even allow 
VPN, so you have to push code on site.

I usually only see FTP allowed for shared hosting, and certainly no PDS 
turned on anywhere I have worked except for some development environments.

On 6/27/05, John Paul Ashenfelter <[EMAIL PROTECTED]> wrote:
> 
> On 6/24/05, Russ <[EMAIL PROTECTED]> wrote:
> > I usually try to disable ftp on the server if I have a choice. FTP is 
> very
> > insecure as all username's and passwords get sent through plain text. 
> SFTP
> > or FTPS is another story, and I usually use FTP over SSH on *NIX boxes 
> and
> > some sort of secure FTP on windows boxes.
> 
> Agreed. Except for commercial shared-hosting services, I hardly ever
> see FTP on production servers. SFTP or FTP over SSH are definitely the
> right choice for security and only slightly more onerous since there
> are plenty of FTP clients that also support SFTP.
> 
> > If he doesn't allow any sort of FTP access then he's being a little too
> > paranoid, and he might as well just turn off the server completely and 
> lock
> > it in a safe if he wants it to be completely secure. There is no such 
> thing
> > as a secure server, and there is always a way to hack in, the only 
> question
> > is how much effort/money it would take to hack into the server, and 
> whether
> > the information there is worth it.
> >
> > I would ask him to set up either secure ftp or ftp over ssh that gives 
> you
> > access to certain directories only (only what needs to be updated).
> >
> > Russ
> >
> > -Original Message-
> > From: Will Tomlinson [mailto:[EMAIL PROTECTED]
> > Sent: Friday, June 24, 2005 6:16 AM
> > To: CF-Talk
> > Subject: OT: Anyone ever heard of not allowing FTP?
> >
> > Hey guys,
> >
> > I just landed a contract and potential full time job at the local 
> community
> > college. They'll be installing CF pretty soon too (WOOHOO)!
> >
> > I had a talk with their server guy, and he informed me that I wouldn't 
> be
> > able to FTP my updates to the site because hackers target education
> > institutions, and he doesn't allow any FTP access. I have to give him my
> > updates on a thumb drive and *he* puts them on the server.
> >
> > Anyone ever heard of something like that? Can a server not be secured 
> enough
> > to allow FTP for the webmaster? Sounds a bit crazy to me.
> >
> > Thanks,
> > Will
> >
> >
> >
> >
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210615
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: UUID CFC Problem

[Mark Leder]

Thanks, I'll give this a whirl this afternoon and let you know. 

-Original Message-
From: S. Isaac Dealey [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 27, 2005 11:28 AM
To: CF-Talk
Subject: Re: UUID CFC Problem

Well that's not where you would normall use urlencodedformat()...

You would want to use urlencodedformat() before generating a url for a link
or in theory to connect to a webservice via something like cfhttp, although
cfhttpparam will urlencode the value for you by default. So... if I'm
reading the rest of your message correctly and you're providing a link to
your webservice in an outgoing email, you would use urlencodedformat()
around the UUID before generating that email. Once the user selects that
link from their mail client, the CF Server should convert it back from
url-format automatically.

Moreover you seem to have a bit of difficulty with knowing when to use (or
not use) quotes and pound symbols... example:

>  

You don't really need this line, but if you did, you wouldn't need (or
want) either the quotes or the pound symbols.

>   component="#REQUEST.prefix#.cf-inf.cfcomponents.email"
> method="optInConfirmation">
> 

This is probably actually causing your problem here... you need the pound
symbols around #url.oi# in your cfinvokeargument tag... or better,



hth

s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm






~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210614
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Simulate sending emails

[S . Isaac Dealey]

It will if you specify spoolenable="false" (or if that's the default
in your CF Admin settings)... I believe there is a setting for the
default in your CF Administrator... not certain of that... but the
default is always true for spoolenable... You only get errors occuring
from invalid smtp server addresses, ports, etc. (anything occuring
during or after the connection is made to the smtp server) raised to
the page/browser if you disable the spool. When the spool is enabled
processing of the page continues regardless because the connection to
the mail server isn't made within your page (it's spooled and then
made by an external process in another thread) and any errors which
occur show up in the cfmail log.

hth

> that's what I thought about doing but I thought CF would
> complain that
> the smtp server was invalid if I did that.

> On 6/27/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
>> So don't simulate it... let the cf server spool the mail,
>> feed it a
>> bogus smtp-server address ("i.am.not.an.smtp.server"
>> instead of
>> "mail.yourdomain.com") and fire them off... delete the
>> cfmail log
>> afterward.
>>
>> > Is it possible to simulate sending emails in CF without
>> > letting them
>> > actually send out? I am having an issue where once in a
>> > while CF sends
>> > out duplicate emails to our customers. We do an email
>> > blast once a
>> > week and have about 11,000 emails in it. Sometimes it
>> > goes
>> > fine and
>> > other times it goes out twice. I can't seem to figure
>> > out
>> > where the
>> > issue is.
>>
>> > I have created an exact duplicate of our email table
>> > with
>> > 11,000 dummy
>> > emails and can't duplicate the problem.
>>
>> > We are using CFMX 7.
>>
>> > Thanks,
>> > Ben


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210613
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: dreamweaver automated check-in for source control

[John Paul Ashenfelter]

On 6/27/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
> > On 6/20/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
> >> > So yes, the last person to commit gets to merge, but it
> >> > rarely requires more than clicking an "ok" button.  It
> >> > should require testing of the new changes, just like
> >> > you do now, but that's outside the scope
> >> > of the version control software.
> >>
> >> Ahh okay... well that doesn't sound so bad...
> >> unfortunately I don't
> >> have any say in the IDE or the source-control
> >> decisions... :-(
> 
> 
> > There's two more characteristics of most concurrent
> > checkout systems (e.g. CVS, Subversion, etc):
> 
> > + *frequent* checkins, which keeps merge conflicts to a
> > minimum
> 
> Yea, dw's check-in functionality sucks... I really wish they'd give me
> a "check-in all when dreamweaver is closed" option and/or a check-in
> when the file is closed... and let me check-in only the checked-out
> files when I try to check-in the root directory. All three would be
> ideal -- any one would be a _dramatic_ improvement.

VSS has an API you can script against, if memory serves. Might be
worth the effort to figure out how to do that -- I remember doing
automated checkouts and deploys with batch files (been years since I
used VSS so pretty foggy -- but VSS has been v6.0.x for years) ), so
should be straightforward to write a batch file to do that -- then
maybe turn into a DW extension?
 
> > + small files, which means less contention for files to
> > checkout/merge
> 
> Isn't this a quality of the software, not of the source-control
> system?

Right -- my real point was the approach doesn't work if you've got
lots of monolithic pages -- those 600 line files that do everything :)

> > > In a ColdFusion environment, the only time I tend to get a
> > lot of merge issues is for things like configuration files
> > that tend to change a little faster than the rest of the
> > code, or maybe some of the layout if folks are working
> > simultaneously.
> 
> I can imagine that being an issue with something like the mach-ii
> config (or likely Model-Glue although I haven't had the time to work
> with it yet). Less so with fusebox, although I guess that depends how
> you design your circuits... If you design the whole app into 3
> model-view-controler circuits I'd expect it might still be an issue...
> If you design each circuit as its own self-contained unit and handle
> m-v-c architecture within the circuit and assign each circuit to an
> individual programmer, then I'd expect that would pretty much
> eliminate contention... Granted at that point there's little need for
> source control to manage contention (versioning notwithstanding).

In Fusebox 4, as long as you're adding new fuses to the end of the
circuit file, it's not bad. What's bad is when someone decides to
alphabetize the fuses in the circuit :) But when you do a "checkout,
add fuse defintion, checkin " there's not a lot of time for somone
else to do too much to the circuit. And then *they'll* be the one to
handle the mega-merge they created by trying to make things pretty :)
 
> > As an aside, Subversion 1.2 added reserved checkout (like
> > VSS) as a per-file option, which is really giving the best
> > of both worlds :)
> 
> Now that would be nice. :)

Y, I haven't used it, but it's nice to see both source control models
supported by one revision tool. And later when you *can* use
Subversion, there's the vss2svn (vss2svn.tigris.org)  import tool to
get your repository into Subversion :)

-- 
John Paul Ashenfelter
CTO/Transitionpoint
(blog) http://www.ashenfelter.com
(email) [EMAIL PROTECTED]

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210612
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: UUID CFC Problem

[S . Isaac Dealey]

Well that's not where you would normall use urlencodedformat()...

You would want to use urlencodedformat() before generating a url for a
link or in theory to connect to a webservice via something like
cfhttp, although cfhttpparam will urlencode the value for you by
default. So... if I'm reading the rest of your message correctly and
you're providing a link to your webservice in an outgoing email, you
would use urlencodedformat() around the UUID before generating that
email. Once the user selects that link from their mail client, the CF
Server should convert it back from url-format automatically.

Moreover you seem to have a bit of difficulty with knowing when to use
(or not use) quotes and pound symbols... example:

>  

You don't really need this line, but if you did, you wouldn't need (or
want) either the quotes or the pound symbols.

>   component="#REQUEST.prefix#.cf-inf.cfcomponents.email"
> method="optInConfirmation">
>   
>  

This is probably actually causing your problem here... you need the
pound symbols around #url.oi# in your cfinvokeargument tag... or
better,



hth

s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210611
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Anyone ever heard of not allowing FTP?

[John Paul Ashenfelter]

On 6/24/05, Russ <[EMAIL PROTECTED]> wrote:
> I usually try to disable ftp on the server if I have a choice.  FTP is very
> insecure as all username's and passwords get sent through plain text.  SFTP
> or FTPS is another story, and I usually use FTP over SSH on *NIX boxes and
> some sort of secure FTP on windows boxes.

Agreed. Except for commercial shared-hosting services, I hardly ever
see FTP on production servers. SFTP or FTP over SSH are definitely the
right choice for security and only slightly more onerous since there
are plenty of FTP clients that also support SFTP.
 
> If he doesn't allow any sort of FTP access then he's being a little too
> paranoid, and he might as well just turn off the server completely and lock
> it in a safe if he wants it to be completely secure.  There is no such thing
> as a secure server, and there is always a way to hack in, the only question
> is how much effort/money it would take to hack into the server, and whether
> the information there is worth it.
> 
> I would ask him to set up either secure ftp or ftp over ssh that gives you
> access to certain directories only (only what needs to be updated).
> 
> Russ
> 
> -Original Message-
> From: Will Tomlinson [mailto:[EMAIL PROTECTED]
> Sent: Friday, June 24, 2005 6:16 AM
> To: CF-Talk
> Subject: OT: Anyone ever heard of not allowing FTP?
> 
> Hey guys,
> 
> I just landed a contract and potential full time job at the local community
> college. They'll be installing CF pretty soon too (WOOHOO)!
> 
> I had a talk with their server guy, and he informed me that I wouldn't be
> able to FTP my updates to the site because hackers target education
> institutions, and he doesn't allow any FTP access. I have to give him my
> updates on a thumb drive and *he* puts them on the server.
> 
> Anyone ever heard of something like that? Can a server not be secured enough
> to allow FTP for the webmaster? Sounds a bit crazy to me.
> 
> Thanks,
> Will
> 
> 
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210610
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: dreamweaver automated check-in for source control

[S . Isaac Dealey]

> On 6/20/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
>> > So yes, the last person to commit gets to merge, but it
>> > rarely requires more than clicking an "ok" button.  It
>> > should require testing of the new changes, just like
>> > you do now, but that's outside the scope
>> > of the version control software.
>>
>> Ahh okay... well that doesn't sound so bad...
>> unfortunately I don't
>> have any say in the IDE or the source-control
>> decisions... :-(


> There's two more characteristics of most concurrent
> checkout systems (e.g. CVS, Subversion, etc):

> + *frequent* checkins, which keeps merge conflicts to a
> minimum

Yea, dw's check-in functionality sucks... I really wish they'd give me
a "check-in all when dreamweaver is closed" option and/or a check-in
when the file is closed... and let me check-in only the checked-out
files when I try to check-in the root directory. All three would be
ideal -- any one would be a _dramatic_ improvement.

> + small files, which means less contention for files to
> checkout/merge

Isn't this a quality of the software, not of the source-control
system?

> In a ColdFusion environment, the only time I tend to get a
> lot of merge issues is for things like configuration files
> that tend to change a little faster than the rest of the
> code, or maybe some of the layout if folks are working
> simultaneously.

I can imagine that being an issue with something like the mach-ii
config (or likely Model-Glue although I haven't had the time to work
with it yet). Less so with fusebox, although I guess that depends how
you design your circuits... If you design the whole app into 3
model-view-controler circuits I'd expect it might still be an issue...
If you design each circuit as its own self-contained unit and handle
m-v-c architecture within the circuit and assign each circuit to an
individual programmer, then I'd expect that would pretty much
eliminate contention... Granted at that point there's little need for
source control to manage contention (versioning notwithstanding).

> As an aside, Subversion 1.2 added reserved checkout (like
> VSS) as a per-file option, which is really giving the best
> of both worlds :)

Now that would be nice. :)

s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210609
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Using Firebird as an embedded database

[John Paul Ashenfelter]

On 6/23/05, Dave Watts <[EMAIL PROTECTED]> wrote:
> > We've a few projects here where we'll need some kind of an embedded
> > DBMS. It'd be nice to avoid MySQL (because of the need for a
> > commercial license), MSSQL (as it's Windows only and its embeddable
> > form--MSDE--doesn't allow as many simultaneous connections as
> > we'd need in a server environment), and Oracle (ha! ha! ha! and yes,
> > I know about Oracle lite). I'm not confident enough in PostgreSQL on
> > Window quite yet, SQLite and HSQLdb are inappropriate in the context,
> > so Firebird appears to be the best fit.
> >

> You might take a look at Pointbase, which is the embedded Java database
> server that JRun comes with. Offhand, I don't know if it gets installed if
> you install CFMX in the standalone server configuration, but it does if you
> install CFMX Multiserver.

One more option is Apache Derby (formerly IBM Cloudscape). I've only
played with its so no real feedback, but should probably be on your
evaluation list.

-- 
John Paul Ashenfelter
CTO/Transitionpoint
(blog) http://www.ashenfelter.com
(email) [EMAIL PROTECTED]

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210608
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Simulate sending emails

[Ben Densmore]

Thank you very much Howie,
 I will try this out.

Ben

On 6/27/05, Howie Hamlin <[EMAIL PROTECTED]> wrote:
> Both iMS and iMS-Lite come with a test smtp server that can be set up as the 
> ColdFusion default mail server (or you can use the mail server settings in 
> the CFMAIL syntax).  You can then send mail to that test server which will 
> accept and log the messages w/o sending to the actual recipient.  You can 
> also set up a developer (or any other iMS version except iMS-Lite) version of 
> iMS and set up the templates to accept the mail, log the recipient(s) and 
> then toss the mail w/o delivery (I can help you with the templates if you 
> decide to go this route).
> 
> You can also download the smtp test server here:
> 
> ftp://ftp.coolfusion.com/pub/ods/ims/utilities/SMTPTestServer10.zip
> 
> This is a slightly older version than the one that comes with iMS but it 
> should suffice for testing.
> 
> HTH,
> 
> --
> Howie Hamlin - inFusion Project Manager
> On-Line Data Solutions, Inc. - www.CoolFusion.com
> inFusion Mail Server (iMS) - The Award-winning, Intelligent Mail Server
> PrismAV - Virus scanning for ColdFusion and BlueDragon applications
> Find out how iMS Stacks up to the competition: 
> http://www.coolfusion.com/imssecomparison.cfm
> 
> iMS-Lite - the completely free mail server solution for applications and 
> application servers
> http://www.coolfusion.com/iMSLite
> 
> --- On Monday, June 27, 2005 10:11 AM, Ben Densmore scribed: ---
> >
> > Is it possible to simulate sending emails in CF without letting them
> > actually send out? I am having an issue where once in a while CF sends
> > out duplicate emails to our customers. We do an email blast once a
> > week and have about 11,000 emails in it. Sometimes it goes fine and
> > other times it goes out twice. I can't seem to figure out where the
> > issue is.
> >
> > I have created an exact duplicate of our email table with 11,000 dummy
> > emails and can't duplicate the problem.
> >
> > We are using CFMX 7.
> >
> > Thanks,
> > Ben
> >
> >
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210607
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: Registrar that does DNS management?

[John Paul Ashenfelter]

On 6/21/05, Damien McKenna <[EMAIL PROTECTED]> wrote:
> I'm looking for a registrar that supports DNS management, preferably at
> little or no additional cost over the domain name transfer price.  We
> have about 50 domains to manage and would prefer to do this all in one
> service than two separate ones.  Any suggestions?  Thanks.

I'm responding a bit late, but I'm an enormous fan of easyDNS.com.
They're multinational (Canada, US, UK servers), have good bulk
discounts (and tools to make DNS changes in bulk), support things like
round-robin DNS and MTA details, offer backup SMTP spools for free,
and are very responsive on the support-side.

And they had a 7-year 100% uptime until 2003 when they were the target
of a DDoS attack, which took them down for about 3 hours (which you'd
only notice if you needed to make a change or had a TTL of less than 3
hours). Since then it's been 100%, but 2 years doesn't sound quite as
good as 7 :)

-- 
John Paul Ashenfelter
CTO/Transitionpoint
(blog) http://www.ashenfelter.com
(email) [EMAIL PROTECTED]

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210606
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Simulate sending emails

[Howie Hamlin]

Both iMS and iMS-Lite come with a test smtp server that can be set up as the 
ColdFusion default mail server (or you can use the mail server settings in the 
CFMAIL syntax).  You can then send mail to that test server which will accept 
and log the messages w/o sending to the actual recipient.  You can also set up 
a developer (or any other iMS version except iMS-Lite) version of iMS and set 
up the templates to accept the mail, log the recipient(s) and then toss the 
mail w/o delivery (I can help you with the templates if you decide to go this 
route).

You can also download the smtp test server here:

ftp://ftp.coolfusion.com/pub/ods/ims/utilities/SMTPTestServer10.zip

This is a slightly older version than the one that comes with iMS but it should 
suffice for testing.

HTH,

--
Howie Hamlin - inFusion Project Manager
On-Line Data Solutions, Inc. - www.CoolFusion.com
inFusion Mail Server (iMS) - The Award-winning, Intelligent Mail Server
PrismAV - Virus scanning for ColdFusion and BlueDragon applications
Find out how iMS Stacks up to the competition: 
http://www.coolfusion.com/imssecomparison.cfm

iMS-Lite - the completely free mail server solution for applications and 
application servers
http://www.coolfusion.com/iMSLite

--- On Monday, June 27, 2005 10:11 AM, Ben Densmore scribed: ---
>
> Is it possible to simulate sending emails in CF without letting them
> actually send out? I am having an issue where once in a while CF sends
> out duplicate emails to our customers. We do an email blast once a
> week and have about 11,000 emails in it. Sometimes it goes fine and
> other times it goes out twice. I can't seem to figure out where the
> issue is.
> 
> I have created an exact duplicate of our email table with 11,000 dummy
> emails and can't duplicate the problem.
> 
> We are using CFMX 7.
> 
> Thanks,
> Ben
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210605
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: CFX_JpegResize caching problem

[David Delbridge]

Do you by any chance have sandbox security enabled?

I ask because I too am seeing some problems with image-manipulating CFX 
tags on MX 7.  I noticed that my problems disappear when sandbox 
security is turned off.  ...not that this is a solution; just an 
observation.  I'm still digging.

Dave

Saturday (Stuart Kidd) wrote:

> Hi guys,
> 
> I'm using the CFX_JpegResize tag and seem to be having a caching  
> problem.
> 
> My  destination is the same as my source, i'm just overwriting the  
> image.
> 
>   source =  
> "#KissMyDateImages##GetProfileDetails.imageName#"
> filename =  
> "#KissMyDateImages##GetProfileDetails.imageName#"
> quality = "100"
> width = "50">
> 
> However, when i look on the webserver it doesn't change - BUT when i  
> download the file to my local computer it has actually changed size  
> so I am guessing it's a caching problem.
> 
> Does anyone know how to fix this?
> 
> Thanks,
> 
> Saturday
> 
> 
> 
> 
> 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210604
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Syncing Data between Websites

[John Paul Ashenfelter]

On 6/22/05, Graham Pearson <[EMAIL PROTECTED]> wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> I am creating an application which will have 2 separate websites with
> one being a Live Server with MySQL and the other one being a Tablet PC
> with CF and Access.

One fundamental question is why use Access on the tablet? MySQL is
available under the GPL, so unless you're needing a commercial license
you should be fine. That would save an *enormous* amount of pain in
the back/forth conversion.
 
> The Idea at present time is if the Tablet had a connection to the
> Internet via Wireless while in the classroom, then the data would be
> stored on the Live Server under MySQL. If the tablet was not connect to
> the network then it would store the info to access until the time the
> tablet had Internet connection.

Makes sense, but if the data is more-or-less write-only, you might
want to store it in a more raw format that you can upload straight
into your target db instead of using Access. For example, if you're
collecting data on the tablet, you could write the data to a text file
in the MySQL bulk import format.

> I figure I would use cfhttp to check the Live Server and test to make
> sure I get a 200 Response code back but not sure after I get the 200
> Response from the table to save the data to the MySQL server. Does
> anyone have experience with this? Or has anyone done something like this
> who is willing to share their experiences.

I've done a couple apps that have offline storage capability and then
sync for the database when availble, but not in CF since that's a
pretty expensive license for a data collection box (I've used Java and
PHP). Unless the data you're storing is *remarkably* complex, I think
you should look at writing to an arbitrary data store (eg xml files,
wddx, text) instead of a database on the tablets and then bulk import
the data into MySQL -- that handles insert/update very cleanly.

Reading and writing XML is pretty easy in CFMX, so it might be worth
the effort to write the data storage routines for XML files and then
simply upload the XML to the live server, parse the XML back into the
required data, and then put it into the database.

-- 
John Paul Ashenfelter
CTO/Transitionpoint
(blog) http://www.ashenfelter.com
(email) [EMAIL PROTECTED]

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210603
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Simulate sending emails

[Ben Densmore]

that's what I thought about doing but I thought CF would complain that
the smtp server was invalid if I did that.

On 6/27/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
> So don't simulate it... let the cf server spool the mail, feed it a
> bogus smtp-server address ("i.am.not.an.smtp.server" instead of
> "mail.yourdomain.com") and fire them off... delete the cfmail log
> afterward.
> 
> > Is it possible to simulate sending emails in CF without
> > letting them
> > actually send out? I am having an issue where once in a
> > while CF sends
> > out duplicate emails to our customers. We do an email
> > blast once a
> > week and have about 11,000 emails in it. Sometimes it goes
> > fine and
> > other times it goes out twice. I can't seem to figure out
> > where the
> > issue is.
> 
> > I have created an exact duplicate of our email table with
> > 11,000 dummy
> > emails and can't duplicate the problem.
> 
> > We are using CFMX 7.
> 
> > Thanks,
> > Ben
> 
> 
> s. isaac dealey   954.522.6080
> new epoch : isn't it time for a change?
> 
> add features without fixtures with
> the onTap open source framework
> 
> http://www.fusiontap.com
> http://coldfusion.sys-con.com/author/4806Dealey.htm
> 
> 
> 
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210602
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: fbx_sesConvertor.cfm

[Dave Ashworth]

Have been looking at this already and I face a problem in using it

It works fine on every page except the default index.cfm

Basically, on my site, the default page is:

 index.cfm?fuseaction=email_marketing.home

Previously, in the index.cfm file, I would set the default fuseaction:



So that they get the correct page when they first visit the site

Now, the ses convertor works fine when linking from page to page, but
without defining the default value in index, the home page will not
display, but if I set the default, it overrides any values set in the
sesconverter!!





-Original Message-
From: Mark Drew [mailto:[EMAIL PROTECTED] 
Sent: 27 June 2005 15:38
To: CF-Talk
Subject: Re: fbx_sesConvertor.cfm


Try
http://developer.fusium.com/tools/

That should help :)

Regards

Mark Drew
On 27 Jun 2005, at 14:51, Dave Ashworth wrote:

> Hi
>
> Have seen references to this file fbx_sesConvertor.cfm in order to use

> search engine friendly URLs within fusebox 3, but haven't been able to

> locate it anywhere - does anyone else have a copy or know of it's 
> whereabouts, or indeed a way of using SES Urls within fusebox
>
> Here is the page which mentions it 
> 
> http://www.cfhub.com/advanced/fusebox/corefiles.cfm
>
> Thanks
>
> Dave
>
>
>
> 



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210601
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: OT: dreamweaver automated check-in for source control

[John Paul Ashenfelter]

On 6/20/05, S. Isaac Dealey <[EMAIL PROTECTED]> wrote:
> > So yes, the last person to commit gets to merge, but it
> > rarely requires more than clicking an "ok" button.  It
> > should require testing of the new changes, just like
> > you do now, but that's outside the scope
> > of the version control software.
> 
> Ahh okay... well that doesn't sound so bad... unfortunately I don't
> have any say in the IDE or the source-control decisions... :-(


There's two more characteristics of most concurrent checkout systems
(e.g. CVS, Subversion, etc):

+ *frequent* checkins, which keeps merge conflicts to a minimum
+ small files, which means less contention for files to checkout/merge

In a ColdFusion environment, the only time I tend to get a lot of
merge issues is for things like configuration files that tend to
change a little faster than the rest of the code, or maybe some of the
layout if folks are working simultaneously.

As an aside, Subversion 1.2 added reserved checkout (like VSS) as a
per-file option, which is really giving the best of both worlds :)
 
> s. isaac dealey 954.522.6080
> new epoch : isn't it time for a change?
> 
> add features without fixtures with
> the onTap open source framework
> 
> http://www.fusiontap.com
> http://coldfusion.sys-con.com/author/4806Dealey.htm
> 
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210600
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: JS Detection script

[S . Isaac Dealey]

> Does anyone have a nice JS detection script that will
> detect the
> following:

> JS (installed and Version)
> Browser (to include FF, IE, etc)
> Flash (installed & version)
> Cookies enabled
> screen resolutions

> etc..

> I know there is BrowserHawk but this is a personal site
> and one a shared
> hosting.

> I can detect the screen resolutions and found a script for
> the Flash
> version.
> I have found TONS on browser scripts but some are lacking
> in determining
> the version rather than just if it is IE or Netscape.

Problem is you'll do all that work and then someone will come along
and use Opera.



s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210599
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Simulate sending emails

[S . Isaac Dealey]

So don't simulate it... let the cf server spool the mail, feed it a
bogus smtp-server address ("i.am.not.an.smtp.server" instead of
"mail.yourdomain.com") and fire them off... delete the cfmail log
afterward.

> Is it possible to simulate sending emails in CF without
> letting them
> actually send out? I am having an issue where once in a
> while CF sends
> out duplicate emails to our customers. We do an email
> blast once a
> week and have about 11,000 emails in it. Sometimes it goes
> fine and
> other times it goes out twice. I can't seem to figure out
> where the
> issue is.

> I have created an exact duplicate of our email table with
> 11,000 dummy
> emails and can't duplicate the problem.

> We are using CFMX 7.

> Thanks,
> Ben


s. isaac dealey   954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://www.fusiontap.com
http://coldfusion.sys-con.com/author/4806Dealey.htm




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210598
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Storyboard Tool

[John Paul Ashenfelter]

On 6/3/05, Richard Colman <[EMAIL PROTECTED]> wrote:
> Does anyone know of tools to rapidly "storyboard" a sequence of screens for
> testing purposes.
> 
> Tried:
> 
> Visio - too clunky and hard to use
> 
> Code in HTML without functionality - too slow
> 
> Any recommendations appreciated
> 
> Richard Colman

I'm a big fan of mind-mapping software. I use FreeMind
(http://freemind.sourceforge.net/), which is an open source Java
mindmapper very similar to the commercial tools like MindMapper.

The data from Freemind is stored as an XML file, so it's not too hard
to write an XSLT transform to generate HTML from a map. Requires a bit
more work upfront, but makes it easy to customize to *exactly* how you
want it to behave. I use it on the backend to generate Fusebox 4 MVC
skeletons, but that's not quite the same thing :)


-- 
John Paul Ashenfelter
CTO/Transitionpoint
(blog) http://www.ashenfelter.com
(email) [EMAIL PROTECTED]

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210597
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

UUID CFC Problem

[Mark Leder]

Hi all,
I'm builing an email opt-in function where a user clicks a link passing a
uuid to a browser.  Trouble is, the CFC refuses to believe that it's a UUID
that is being passed (the UUID is CF generated).  The first page does
correctly display a UUID being passed from the email client. I've tried
using URLEncodedFormat, etc. with no luck.  Ideas?
 

 

 

 
  
 

 

 

 
 
  SELECT userUUID, emailAddress, pollUserOptIn, pollUserOptInUUID  
  FROM #REQUEST.prefix#_Poll_User 
  WHERE pollUserOptInUUID =  
  
  
 
  
   UPDATE #REQUEST.prefix#_Poll_User 
   SET pollUserOptIn = 1 
   pollUserOptInDate = #createodbcdatetime("#now()#")# 
   WHERE pollUserOptInUUID =  
 
 
 

 
Thanks,
Mark
 




~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210596
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Re: Get New Record ID in mySQL

[John Paul Ashenfelter]

On 6/4/05, Barney Boisvert <[EMAIL PROTECTED]> wrote:
> Mostly because it doesn't require an index lookup like using the MAX
> function does.  MySQL internally records the last inserted value for
> recall with the LAST_INSERT_ID function, exactly as MS SQL does with
> the @@IDENTITY variable (and the other two variants).  The MAX method
> will work on any DB (well, at least any decent one) without issue, but
> it's pretty much guarenteed to be slower than the built-in "get the
> last ID" mechanism for a given database, perhaps by a large margin.

Another reason not to use the Max(ID) approach is that you run into
problems if someone, for whatever reason, manually inserts an ID value
into the table that's larger than the current "next id" value. This
causes all sorts of weird problems in test databases and databases
that have been exported/imported.

You want the *just inserted id*, not the maximum of the id's already
inserted. That value is usually the same as the max, but you shouldn't
automatically count on it
 
> cheers,
> barneyb
> 
> On 6/4/05, Aaron Rouse <[EMAIL PROTECTED]> wrote:
> > I am not familar with MySQL but what would be the advantage of using that
> > function over just using
> >
> > 
> > INSERT INTO myTABLE (myCOLUMNS) VALUES (myVALUES)
> > 
> > 
> > SELECT MAX(ID) AS NewID FROM myTABLE
> > 
> > 
> >
> > NewID = #Get.NewID#
> >
> 
> --
> Barney Boisvert
> [EMAIL PROTECTED]
> 360.319.6145
> http://www.barneyb.com/
> 
> Got Gmail? I have 50 invites.
> 
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210595
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

RE: Fusebox/Sandboxing/Contribute Framework

[Dave Watts]

> Okay, theoretically, we could manually look for the DW/Contribute lock
> file before editing any files. But, seriously - we'd just be asking to
> overwrite someone's work that way.

I'm not exactly sure what you're trying to do, but I would recommend that
you avoid messing with Contribute's files from CF if you can. If you want to
have CF content within a file that someone will edit via Contribute, make
sure the CF content isn't in an editable region, and use a
CFINCLUDE/CFMODULE/CFC call to get the content in there in the first place.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:210594
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54