Re: cfmx on kubuntu

2006-02-19 Thread Paul Scoffield II
naw.. that's not it.. i don't have a license.properties in that directory...

On 2/18/06, Andrew Stevens [EMAIL PROTECTED] wrote:
 Could be this...
 http://www.macromedia.com/cfusion/knowledgebase/index.cfm?id=cf8f287bpss=rs
 s_coldfusion_cf8f287b

 -Original Message-
 From: Paul Scoffield II [mailto:[EMAIL PROTECTED]
 Sent: Sunday, 19 February 2006 1:41 PM
 To: CF-Talk
 Subject: cfmx on kubuntu

 the install seems to have gone fine, but when i attempt to start the
 server, I get this in the coldfusion.log:

 Starting Macromedia JRun 4.0 (Build 92909), coldfusion server
 02/18 21:38:39 warning Unable to open
 /opt/coldfusionmx7/runtime/lib/license.properties
 02/18 21:38:39 error Error thrown in operation init

 any ideas or suggestions?

 (i am very green on *nix)

 Critter
 --
 http://single-dads.us



 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232828
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: cfmx on kubuntu

2006-02-19 Thread Andrew Stevens
It is 'just' a warning, is your server not working?

-Original Message-
From: Paul Scoffield II [mailto:[EMAIL PROTECTED] 
Sent: Sunday, 19 February 2006 7:23 PM
To: CF-Talk
Subject: Re: cfmx on kubuntu

naw.. that's not it.. i don't have a license.properties in that directory...

On 2/18/06, Andrew Stevens [EMAIL PROTECTED] wrote:
 Could be this...

http://www.macromedia.com/cfusion/knowledgebase/index.cfm?id=cf8f287bpss=rs
 s_coldfusion_cf8f287b

 -Original Message-
 From: Paul Scoffield II [mailto:[EMAIL PROTECTED]
 Sent: Sunday, 19 February 2006 1:41 PM
 To: CF-Talk
 Subject: cfmx on kubuntu

 the install seems to have gone fine, but when i attempt to start the
 server, I get this in the coldfusion.log:

 Starting Macromedia JRun 4.0 (Build 92909), coldfusion server
 02/18 21:38:39 warning Unable to open
 /opt/coldfusionmx7/runtime/lib/license.properties
 02/18 21:38:39 error Error thrown in operation init

 any ideas or suggestions?

 (i am very green on *nix)

 Critter
 --
 http://single-dads.us



 



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232829
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


cfmail - is it vulnerable?

2006-02-19 Thread Ian Buzer
Hello,

Just got a bunch of emails in my inbox this morning that had been sent from a 
contact form on one of my web sites. They all contained content a bit like this:

deeper
xxContent-Type: multipart/alternative; boundary=e00c35d22e0dba33a15957f33286efe8
MIME-Version: 1.0
Subject: idee is that a
bcc: [EMAIL PROTECTED]

This is a multi-part message in MIME format.

--e00c35d22e0dba33a15957f33286efe8
xxContent-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

v coorse, he thinks marredge is goin to change
--e00c35d22e0dba33a15957f33286efe8--

...

It looks like someone's trying to test to see if the form is vulnerable to 
having headers injected into it. In fact, on one of the attempts, he did manage 
to override the subject of the email.

Does anyone know if cfmail is vulnerable to this kind of thing? It looks like 
it might be.

What's the best way of preventing it? Perhaps I'll have to start replacing out 
any instances of Content-Type in any email form fields :(

Ian

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232830
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cfmx on kubuntu

2006-02-19 Thread James Holmes
Furthermore, I'd expect a license warning for a developer edition; is
this a licenced install or just a dev version?

On 2/19/06, Andrew Stevens [EMAIL PROTECTED] wrote:
 It is 'just' a warning, is your server not working?


--
CFAJAX docs and other useful articles:
http://jr-holmes.coldfusionjournal.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232831
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Rick Root wrote:
 I'm not getting any cf-talk email again, started sometime last night.
 
 Here's an entry from my smtp server's log file
 
 @400043f75bc5074da2f4 rblsmtpd: 64.118.74.249 pid 19425: 451 Blocked 
 - see http://www.spamcop.net/bl.shtml?64.118.74.249
 
 Looks like the same problem as before with the DNS or something

If the spamcop RBL routinely lists legitimate hosts, why do you 
use it?

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232832
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Problems with invoking a Webservice

2006-02-19 Thread Artur Kordowski
Deleting them ensures the stubs are re-generated from the WSDL.
Ok, understand.

But even if I delete this folder the error is still there. What can I do?
Any help is appreciate.

Artur

-Original Message-
From: Andrew Stevens [mailto:[EMAIL PROTECTED] 
Sent: Sunday, February 19, 2006 2:21 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

No, you need those files for it to work, Deleting them ensures the stubs are
re-generated from the WSDL.

-Original Message-
From: Artur Kordowski [mailto:[EMAIL PROTECTED]
Sent: Sunday, 19 February 2006 4:58 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Hi Andrew,

the problem is, when I deleted the folder it will be created new on every
reload. It is possible do disable it somewhere? Or is there any workaround?

Artur 

-Original Message-
From: Andrew Stevens [mailto:[EMAIL PROTECTED]
Sent: Saturday, February 18, 2006 6:49 PM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

You can delete the folders from here down:
D:/Programme/Macromedia/ColdFusionMX7/stubs/

The classes (stubs) will be regenerated when you call the web service again.
Does it still throw the same error then?

You might have another version of Axis which is mistakenly being loaded
before the CF one. Seems unlikely.

Sorry, it's late o'clock. Gotta go.

-Original Message-
From: Artur Kordowski [mailto:[EMAIL PROTECTED]
Sent: Sunday, 19 February 2006 4:30 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Here is the whole error message:

coldfusion.jsp.CompilationFailedException: Errors reported by Java compiler:
Found 4 semantic errors compiling
D:/Programme/Macromedia/ColdFusionMX7/stubs/WS1432946178/net/xmethods/www/s
d/TemperatureService_wsdl/TemperatureBindingStub.java: 33.
oper.setStyle(org.apache.axis.constants.Style.RPC);
 *** Error: No match was
found for method setStyle(org.apache.axis.constants.Style). 34.
oper.setUse(org.apache.axis.constants.Use.ENCODED);
 *** Error: No match was
found for method setUse(org.apache.axis.constants.Use). 54.
((org.apache.axis.client.Service)super.service).setTypeMappingVersion(1.2)
;
--
*** Error: No method named setTypeMappingVersion was found in type
org/apache/axis/client/Service. 59. org.apache.axis.client.Call _call =
super._createCall();










~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232833
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: cfmx on kubuntu

2006-02-19 Thread O�uz_Demirkap
This is just a warning and does not effect CF in any way.

I have same warning on Debian Linux but my CF installation works without any
problem.

I have first installed 30 day trial and activated my serial later. But it is
always same.


Here is a simple tutorial CF on Debian.
http://www.howtoforge.com/coldfusion_installation_debian_sarge


Oguz Demirkapi




-Original Message-
From: James Holmes [mailto:[EMAIL PROTECTED] 
Sent: Sonntag, 19. Februar 2006 10:37
To: CF-Talk
Subject: Re: cfmx on kubuntu

Furthermore, I'd expect a license warning for a developer edition; is
this a licenced install or just a dev version?

On 2/19/06, Andrew Stevens [EMAIL PROTECTED] wrote:
 It is 'just' a warning, is your server not working?


--
CFAJAX docs and other useful articles:
http://jr-holmes.coldfusionjournal.com/



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232834
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


perplexing SQL Server database permissions problem

2006-02-19 Thread Kay Smoljak
This goes beyond my understanding of SQL Server (2000, Standard
Edition, SP3, running on windows 2003 with CFMX 7 and FarCry 3 if that
matters at all).

I have a dev box set up which is as close to identical to my client's
server as I can make it. On both servers, the FarCry database is set
up the dbo user owning all tables. The DSN set up in the CF
Administrator uses that same database user. On my dev box, the
following works fine:

cfquery datasource=whatever name=test
SELECT *
FROM sometable
/cfquery

On the live box, I have to add the user name to the table or I get an
error that the table doesn't exist:

cfquery datasource=whatever name=test
SELECT *
FROM [db_user].sometable
/cfquery

I can't find anything different between them, and it's causing trouble
with FarCry as some but not all queries reference the db user as well
as the table name. As far as I can tell this started happening some
time in the last couple of weeks but I don't know triggered it and the
client has not been forthcoming.

Any pointers greatly appreciated!

--
Kay Smoljak
http://kay.zombiecoder.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232835
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Paul Hastings
Kay Smoljak wrote:
 up the dbo user owning all tables. The DSN set up in the CF

obviously not.

 cfquery datasource=whatever name=test
 SELECT *
 FROM [db_user].sometable
 /cfquery

trust the sql server box. that table is owned by that db user which is not the 
DBO and/or the DSN is setup w/another user.


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232836
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Problems with invoking a Webservice

2006-02-19 Thread Andrew Stevens
Is there any more code besides what you have already posted? As it's not
reproducible here, I guess the problem lies in your setup. 

-Original Message-
From: Artur Kordowski [mailto:[EMAIL PROTECTED] 
Sent: Sunday, 19 February 2006 9:47 PM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Deleting them ensures the stubs are re-generated from the WSDL.
Ok, understand.

But even if I delete this folder the error is still there. What can I do?
Any help is appreciate.

Artur

-Original Message-
From: Andrew Stevens [mailto:[EMAIL PROTECTED] 
Sent: Sunday, February 19, 2006 2:21 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

No, you need those files for it to work, Deleting them ensures the stubs are
re-generated from the WSDL.

-Original Message-
From: Artur Kordowski [mailto:[EMAIL PROTECTED]
Sent: Sunday, 19 February 2006 4:58 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Hi Andrew,

the problem is, when I deleted the folder it will be created new on every
reload. It is possible do disable it somewhere? Or is there any workaround?

Artur 

-Original Message-
From: Andrew Stevens [mailto:[EMAIL PROTECTED]
Sent: Saturday, February 18, 2006 6:49 PM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

You can delete the folders from here down:
D:/Programme/Macromedia/ColdFusionMX7/stubs/

The classes (stubs) will be regenerated when you call the web service again.
Does it still throw the same error then?

You might have another version of Axis which is mistakenly being loaded
before the CF one. Seems unlikely.

Sorry, it's late o'clock. Gotta go.

-Original Message-
From: Artur Kordowski [mailto:[EMAIL PROTECTED]
Sent: Sunday, 19 February 2006 4:30 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Here is the whole error message:

coldfusion.jsp.CompilationFailedException: Errors reported by Java compiler:
Found 4 semantic errors compiling
D:/Programme/Macromedia/ColdFusionMX7/stubs/WS1432946178/net/xmethods/www/s
d/TemperatureService_wsdl/TemperatureBindingStub.java: 33.
oper.setStyle(org.apache.axis.constants.Style.RPC);
 *** Error: No match was
found for method setStyle(org.apache.axis.constants.Style). 34.
oper.setUse(org.apache.axis.constants.Use.ENCODED);
 *** Error: No match was
found for method setUse(org.apache.axis.constants.Use). 54.
((org.apache.axis.client.Service)super.service).setTypeMappingVersion(1.2)
;
--
*** Error: No method named setTypeMappingVersion was found in type
org/apache/axis/client/Service. 59. org.apache.axis.client.Call _call =
super._createCall();












~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232837
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Kay Smoljak
 trust the sql server box. that table is owned by that db user which is not the
 DBO and/or the DSN is setup w/another user.

Well, I'm remote-desktopped into the live box right now, I'm staring
at both the CF Administrator DSN setup screen AND the database table
listing in Enterprise Manager and they both have the exact same user.
I'd send screenshots but it would be easier if you just believed me :)

Is there anything else it could be?

--
Kay Smoljak
http://kay.zombiecoder.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232838
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Numeric field woes

2006-02-19 Thread Roberto Perez
At 10:04 PM 2/14/2006, Charlie Griefer wrote:

  - if there are only spaces, it throws an error;
  - if there is text (e.g., n/a), it throws an error.

it throws an error?  what is it?  the regex?  the query?  what 
is the error?


I've done more testing, and I have it now where the only character 
that does not get stripped is the forward slash /. The error I get 
is this one:

[MERANT][SequeLink JDBC Driver][ODBC Socket][Microsoft][ODBC 
Microsoft Access Driver] Syntax error (missing operator) in query 
expression '/'.

I'm using the strip code right before my UPDATE to put the resulting 
value in a variable:
cfset GPA = #rereplace(FORM.GPA, '[^0-9/.]', '', 'all')#

Any idea on how to modified the code so that forward slashes are also stripped?

Thanks,

Roberto Perez 


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232839
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Problems with invoking a Webservice

2006-02-19 Thread Artur Kordowski
No, there is no other code. I will try to install CF again. Thanks for ur
help.

Artur 

-Original Message-
From: Andrew Stevens [mailto:[EMAIL PROTECTED] 
Sent: Sunday, February 19, 2006 1:41 PM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Is there any more code besides what you have already posted? As it's not
reproducible here, I guess the problem lies in your setup. 

-Original Message-
From: Artur Kordowski [mailto:[EMAIL PROTECTED]
Sent: Sunday, 19 February 2006 9:47 PM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Deleting them ensures the stubs are re-generated from the WSDL.
Ok, understand.

But even if I delete this folder the error is still there. What can I do?
Any help is appreciate.

Artur

-Original Message-
From: Andrew Stevens [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 19, 2006 2:21 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

No, you need those files for it to work, Deleting them ensures the stubs are
re-generated from the WSDL.

-Original Message-
From: Artur Kordowski [mailto:[EMAIL PROTECTED]
Sent: Sunday, 19 February 2006 4:58 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Hi Andrew,

the problem is, when I deleted the folder it will be created new on every
reload. It is possible do disable it somewhere? Or is there any workaround?

Artur 

-Original Message-
From: Andrew Stevens [mailto:[EMAIL PROTECTED]
Sent: Saturday, February 18, 2006 6:49 PM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

You can delete the folders from here down:
D:/Programme/Macromedia/ColdFusionMX7/stubs/

The classes (stubs) will be regenerated when you call the web service again.
Does it still throw the same error then?

You might have another version of Axis which is mistakenly being loaded
before the CF one. Seems unlikely.

Sorry, it's late o'clock. Gotta go.

-Original Message-
From: Artur Kordowski [mailto:[EMAIL PROTECTED]
Sent: Sunday, 19 February 2006 4:30 AM
To: CF-Talk
Subject: RE: Problems with invoking a Webservice

Here is the whole error message:

coldfusion.jsp.CompilationFailedException: Errors reported by Java compiler:
Found 4 semantic errors compiling
D:/Programme/Macromedia/ColdFusionMX7/stubs/WS1432946178/net/xmethods/www/s
d/TemperatureService_wsdl/TemperatureBindingStub.java: 33.
oper.setStyle(org.apache.axis.constants.Style.RPC);
 *** Error: No match was
found for method setStyle(org.apache.axis.constants.Style). 34.
oper.setUse(org.apache.axis.constants.Use.ENCODED);
 *** Error: No match was
found for method setUse(org.apache.axis.constants.Use). 54.
((org.apache.axis.client.Service)super.service).setTypeMappingVersion(1.2)
;
--
*** Error: No method named setTypeMappingVersion was found in type
org/apache/axis/client/Service. 59. org.apache.axis.client.Call _call =
super._createCall();














~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232840
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Numeric field woes

2006-02-19 Thread Roberto Perez
At 08:56 AM 2/19/2006, I myself wrote:

I have it now where the only character
that does not get stripped is the forward slash /. The error I get
is this one:

[MERANT][SequeLink JDBC Driver][ODBC Socket][Microsoft][ODBC
Microsoft Access Driver] Syntax error (missing operator) in query
expression '/'.


On further testing, this is what is happening: the two characters 
included in the regex below, the forward slash / and the dot . do 
not get stripped:

#rereplace(FORM.GPA, '[^0-9/.]', '', 'all')#

So my questions are:
1- Does the forward slash perform a specific function, so that it has 
to stay in the regex?
2- If the user enters a dot with no numbers, e.g., na., the letters 
get stripped (which is good) but the dot does not, and it creates an 
error similar to the one quoted above. Any way of detecting such 
instances of dots with no numbers?
3- The MM document at 
(http://livedocs.macromedia.com/coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/regexp3.htm#1117230)says
 
the carat at the beginning of the regex makes it match only 
characters that appear at the beginning of the string. But in my 
tests, alphanumeric characters in any position get stripped. Am I 
reading the MM document properly?


Thanks,

Roberto


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232841
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Numeric field woes

2006-02-19 Thread Jochem van Dieten
Roberto Perez wrote:
 
 I've done more testing, and I have it now where the only character 
 that does not get stripped is the forward slash /.

 cfset GPA = #rereplace(FORM.GPA, '[^0-9/.]', '', 'all')#

cfset GPA = REReplace(FORM.GPA, '[^0-9\.]', '', 'ALL')

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232842
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Numeric field woes

2006-02-19 Thread Jochem van Dieten
Roberto Perez wrote:
 
 On further testing, this is what is happening: the two characters 
 included in the regex below, the forward slash / and the dot . do 
 not get stripped:
 
 #rereplace(FORM.GPA, '[^0-9/.]', '', 'all')#
 
 So my questions are:
 1- Does the forward slash perform a specific function, so that it has 
 to stay in the regex?

No. I think its presence is an error and it should be a backslash.


 2- If the user enters a dot with no numbers, e.g., na., the letters 
 get stripped (which is good) but the dot does not, and it creates an 
 error similar to the one quoted above. Any way of detecting such 
 instances of dots with no numbers?

IsNumeric() on the result of the replace operation.


 3- The MM document at 
 (http://livedocs.macromedia.com/coldfusion/6/Developing_ColdFusion_MX_Applications_with_CFML/regexp3.htm#1117230)says
  
 the carat at the beginning of the regex makes it match only 
 characters that appear at the beginning of the string. But in my 
 tests, alphanumeric characters in any position get stripped. Am I 
 reading the MM document properly?

No. A ^ only matches the beginning of a string if it is the first 
character in the regular expression. If it occurs in any other 
position it is the NOT operator.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232843
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Paul Hastings
Kay Smoljak wrote:
 Is there anything else it could be?

not really. while that table might belong to that user name (as seen 
in EM), if they aren't the DBO you'll always *have* to supply the user 
name when accessing the table. pop open that user or the roles in that 
db  see what's what.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232844
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Kay Smoljak
On 2/19/06, Paul Hastings [EMAIL PROTECTED] wrote:
 not really. while that table might belong to that user name (as seen
 in EM), if they aren't the DBO you'll always *have* to supply the user
 name when accessing the table. pop open that user or the roles in that
 db  see what's what.

Been through that - the dbo role has the user in question listed first
on both servers.
I'm really stuck!

--
Kay Smoljak
http://kay.zombiecoder.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232845
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Paul Hastings
Kay Smoljak wrote:
 Been through that - the dbo role has the user in question listed first
 on both servers.
 I'm really stuck!

if you can only access that table using a user name as a qualifier then 
that user's not the DBO. can you query the unqualified table using query 
analyzer using that user/password?

if you add the user/password to cfquery does it work?

dumb questions: any chance you're not looking at same db/server? what 
driver? JDBC?

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232846
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Numeric field woes

2006-02-19 Thread Roberto Perez
At 09:44 AM 2/19/2006, Jochem van Dieten wrote:

  2- If the user enters a dot with no numbers, e.g., na., the letters
  get stripped (which is good) but the dot does not, and it creates an
  error similar to the one quoted above. Any way of detecting such
  instances of dots with no numbers?

IsNumeric() on the result of the replace operation.


Thanks, I added this to the INSERT code:

cfif IsDefined(GPA) AND #GPA# NEQ  AND isNumeric(#GPA#)
#GPA#
cfelse
 NULL
/cfif


 and it seems to be working now.

Thanks again,

Roberto 


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232847
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Kay Smoljak
On 2/19/06, Paul Hastings [EMAIL PROTECTED] wrote:
 if you can only access that table using a user name as a qualifier then
 that user's not the DBO. can you query the unqualified table using query
 analyzer using that user/password?

Through Query Analyzer using that user/pass, I cannot query the table
unqualified. Yet Enterprise Manager-roles-dbo-properties tells me
that user is in the dbo role. It makes no sense.

 if you add the user/password to cfquery does it work?

No.

 dumb questions: any chance you're not looking at same db/server? what
 driver? JDBC?

Each server is only running the FarCry site, basically. There's only
one database on each, essentially, so no chance at all (I wish that's
what it was).

It's JDBC... both SQL Servers are running the same MDAC, if that means anything.

Is there a chance that something like this could happen if the
database was had to be restored from a backup? The client didn't reply
when I asked if anything had happened to the box.

--
Kay Smoljak
http://kay.zombiecoder.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232848
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Paul Hastings
Kay Smoljak wrote:
 Through Query Analyzer using that user/pass, I cannot query the table

then that user cannot be in the DBO for that database.

 Is there a chance that something like this could happen if the
 database was had to be restored from a backup? The client didn't reply
 when I asked if anything had happened to the box.

well the users should be in the backup but i suppose it's possible the 
user went south  wasn't restored  then created later on.

lets try kicking it where the sun don't shine:

login as SA w/query analyzer  connect to that db

EXEC sp_changedbowner 'that_user_name'

then see what happens.


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232849
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Kay Smoljak
On 2/20/06, Paul Hastings [EMAIL PROTECTED] wrote:
 lets try kicking it where the sun don't shine:

 login as SA w/query analyzer  connect to that db

I don't have the SA password on that box... I have my own login to the
server (not administrator). If I open Query Analyser and log in with
Windows authentication that won't work, will it?

 EXEC sp_changedbowner 'that_user_name'

I can probably get the sysadmin to do that tomorrow morning.

Thanks for all your help, Paul, by the way... much appreciated :)

--
Kay Smoljak
http://kay.zombiecoder.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232850
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Kay Smoljak
On 2/20/06, Kay Smoljak [EMAIL PROTECTED] wrote:
 I don't have the SA password on that box... I have my own login to the
 server (not administrator). If I open Query Analyser and log in with
 Windows authentication that won't work, will it?

  EXEC sp_changedbowner 'that_user_name'

Actually, I logged in with my Windows user and tried it anyway... and got:
Server: Msg 15110, Level 16, State 1, Procedure sp_changedbowner, Line 47
The proposed new database owner is already a user in the database.

If I delete the user first, the site will stop working completely and
all hell will break loose, no?

--
Kay Smoljak
http://kay.zombiecoder.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232851
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Paul Hastings
Kay Smoljak wrote:
 I don't have the SA password on that box... I have my own login to the
 server (not administrator). If I open Query Analyser and log in with
 Windows authentication that won't work, will it?

no.


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232852
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Paul Hastings
Kay Smoljak wrote:
 Actually, I logged in with my Windows user and tried it anyway... and got:

i guess you're in the admin group on that server. i wouldn't have 
expected that.

 Server: Msg 15110, Level 16, State 1, Procedure sp_changedbowner, Line 47
 The proposed new database owner is already a user in the database.

but isn't recognized as existing db owner.

 If I delete the user first, the site will stop working completely and
 all hell will break loose, no?

does it work now? do you have backups? if you do, take the db off-line  
drop the user from the db (not from the logins) then try again.


i've tried to recreate this but no matter what i do as long as that user 
either created the object or was DBO it can access the objects 
unqualified (connecting using that user name in query analyzer). ditto 
using a DSN for that user/password.

you might have more luck on the sql server list/


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232853
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: perplexing SQL Server database permissions problem

2006-02-19 Thread Snake
Login with enterprise manager, look at the tables.
Who doe sit say is the owner of the tables, DBO or a specific user.
If it is a specific user, then that means the tables were created as that
user, and thus why you have to prefix all queries with that user name.

Russ



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232854
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Rick Root
Jochem van Dieten wrote:
 
 If the spamcop RBL routinely lists legitimate hosts, why do you 
 use it?

The answer is obvious.

*ALL* RBL lists contain some legitimate hosts from time to time.  IMO.

Spamcop listed houseoffusion because of some DNS/hostname configuration 
issues.  I guess the mail coming from houseoffusion said it was coming 
from a specific hostname whose IP address was different than the actual 
IP address it was coming from.

Rick


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232855
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cfmx on kubuntu

2006-02-19 Thread Paul Scoffield II
i have a s/n for it.. but, i just installed it as a dev version to start...

Upon initial startup, I get:
.snip.
ColdFusion MX 7 not started, will retry connector 2 more time(s)
ColdFusion MX 7 not started, will retry connector 1 more time(s)
The connector wizard has not been able to contact the local ColdFusion
MX 7, connector installation aborted.
==
ColdFusion MX 7 has been started.
ColdFusion MX 7 will write logs to /opt/coldfusionmx7/logs/cfserver.log


but if i try to stop the service, I get this:

[EMAIL PROTECTED]:/opt/coldfusionmx7/bin$ sudo ./coldfusion stop
ColdFusion MX 7 does not seem to be currently running

if I attempt to start it again, It errors with this in the logs:

Starting Macromedia JRun 4.0 (Build 92909), coldfusion server
02/19 13:31:31 warning Invalid license; reverting to Developer Version
02/19 13:31:31 error Error thrown in operation init

..

02/19 13:31:33 error Exception thrown in operation start
[1]java.lang.Exception: No LicenseService configured; server terminating

..

02/19 13:31:33 warning No sessionSecret has been specified in
jrun.xml. Installing a self generated sessionSecret.
02/19 13:31:34 info No JDBC data sources have been configured for this
server (see jrun-resources.xml)
[1]jrunx.kernel.ServiceException: No LicenseService configured; server
terminating

..

autorestart: Process died in less than 30 seconds; not restarting


On 2/19/06, Oðuz_Demirkapý [EMAIL PROTECTED] wrote:
 This is just a warning and does not effect CF in any way.

 I have same warning on Debian Linux but my CF installation works without any
 problem.

 I have first installed 30 day trial and activated my serial later. But it is
 always same.


 Here is a simple tutorial CF on Debian.
 http://www.howtoforge.com/coldfusion_installation_debian_sarge


 Oguz Demirkapi




 -Original Message-
 From: James Holmes [mailto:[EMAIL PROTECTED]
 Sent: Sonntag, 19. Februar 2006 10:37
 To: CF-Talk
 Subject: Re: cfmx on kubuntu

 Furthermore, I'd expect a license warning for a developer edition; is
 this a licenced install or just a dev version?

 On 2/19/06, Andrew Stevens [EMAIL PROTECTED] wrote:
  It is 'just' a warning, is your server not working?
 

 --
 CFAJAX docs and other useful articles:
 http://jr-holmes.coldfusionjournal.com/



 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232856
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Michael Dinowitz
A little over a month ago I made a DNS config change from 64.118.74.245 to 
46.118.74.249 but forgot to set the mail server to say 
mail.houseoffusion.com rather than houseoffusion.com. I fixed it really fast 
when I saw a spamcop block but to this day I still see people blocked due to 
spamcop despite being told by spamcop that it's all good. In some cases it's 
a cached spamcop reference on someone's system, in others it's spamcops 
fault. Bottom line is that I haven't changed anything with the mail for over 
a month now so if there is a spamcop entry, it's false.


 Jochem van Dieten wrote:

 If the spamcop RBL routinely lists legitimate hosts, why do you
 use it?

 The answer is obvious.

 *ALL* RBL lists contain some legitimate hosts from time to time.  IMO.

 Spamcop listed houseoffusion because of some DNS/hostname configuration
 issues.  I guess the mail coming from houseoffusion said it was coming
 from a specific hostname whose IP address was different than the actual
 IP address it was coming from.

 Rick


 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232857
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: cfmail - is it vulnerable?

2006-02-19 Thread Mark A Kruger
It is not vulnerable - except that you will get these annoying probes from
time to time :)

I have a blog on this top with lots of additional insight in the comments at
the bottom.

http://mkruger.cfwebtools.com/index.cfm?mode=aliasalias=email%20injection

This follow up references a function for handling the injections.

http://mkruger.cfwebtools.com/index.cfm/2006/2/5/email.injection.function

-Mark


-Original Message-
From: Ian Buzer [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 19, 2006 2:18 AM
To: CF-Talk
Subject: cfmail - is it vulnerable?


Hello,

Just got a bunch of emails in my inbox this morning that had been sent from
a contact form on one of my web sites. They all contained content a bit like
this:

deeper
xxContent-Type: multipart/alternative;
boundary=e00c35d22e0dba33a15957f33286efe8
MIME-Version: 1.0
Subject: idee is that a
bcc: [EMAIL PROTECTED]

This is a multi-part message in MIME format.

--e00c35d22e0dba33a15957f33286efe8
xxContent-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

v coorse, he thinks marredge is goin to change
--e00c35d22e0dba33a15957f33286efe8--



It looks like someone's trying to test to see if the form is vulnerable to
having headers injected into it. In fact, on one of the attempts, he did
manage to override the subject of the email.

Does anyone know if cfmail is vulnerable to this kind of thing? It looks
like it might be.

What's the best way of preventing it? Perhaps I'll have to start replacing
out any instances of Content-Type in any email form fields :(

Ian



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232858
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Rick Root
for what it's worth, I hate spam.  And spam blocking/filtering is a 
necessary evil, unfortunately.  The harder you try to block spam, the 
more likely you are to not see legitimate email.

My mail server, which isn't particularly large, has blocked over 32,000 
incoming connections via various RBLs

dsn.rfc-ignorant.org list.dsbl.org relays.ordb.org bl.spamcop.net 
sbl-xbl.spamhaus.org.

In that same timeframe, I've also blocked 987 messages tagged with spam 
assassin scores higher than 8.0, and 76 viruses.

And since I reject mail to invalid recipients, that's another 3,142 
messages.  757 of those are to an email address I haven't used in 6 
years, though I still own the domain.

That's out of 41,000 incoming connections in the last 7-1/2 days. 
Nearly 88% spam mail, or mail coming from likely spammers.

I'd hate to see my inbox if I stopped using RBLs.

Rick

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232859
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Rick Root wrote:
 Jochem van Dieten wrote:
 If the spamcop RBL routinely lists legitimate hosts, why do you 
 use it?
 
 The answer is obvious.
 
 *ALL* RBL lists contain some legitimate hosts from time to time.  IMO.

Some: yes. From time to time: yes. Routinely: no.


 Spamcop listed houseoffusion because of some DNS/hostname configuration 
 issues.

SCBL does not work that way. SCBL lists IP addresses based on 
spam reports: http://www.spamcop.net/fom-serve/cache/297.html


I am a big fan of RBLs, but I very much question the wisdom of 
using SCBL to block email. Do you really want to give anybody 
with a SpamCop account the power to stop your email?

Jochem


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232860
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cfmail - is it vulnerable?

2006-02-19 Thread Jochem van Dieten
Ian Buzer wrote:
 
 It looks like someone's trying to test to see if the form is vulnerable to 
 having headers injected into it. In fact, on one of the attempts, he did 
 manage to override the subject of the email.
 
 Does anyone know if cfmail is vulnerable to this kind of thing?

Not to this specific one, but you do keep up with your patched, 
don't you? 
http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232861
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Rick Root wrote:
 
 My mail server, which isn't particularly large, has blocked over 32,000 
 incoming connections via various RBLs
 
 dsn.rfc-ignorant.org list.dsbl.org relays.ordb.org bl.spamcop.net 
 sbl-xbl.spamhaus.org.

I would move bl.spamcop.net and dsn.rfc-ignorant.org from 
blocking spam to adding points in SpamAssassin and instead add 
greylisting: http://www.greylisting.org/


 And since I reject mail to invalid recipients, that's another 3,142 
 messages.  757 of those are to an email address I haven't used in 6 
 years, though I still own the domain.

I have mentioned the emailaddress i-need-a-gf @ vandieten . net 
in the body of an email on this list once. Just once. I think it 
was quoted one more time in an answer. Now, several years later, 
I get about 20 spam messages to that address every day.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232862
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Rick Root
Jochem van Dieten wrote:
 
 Spamcop listed houseoffusion because of some DNS/hostname configuration 
 issues.
 
 SCBL does not work that way. SCBL lists IP addresses based on 
 spam reports: http://www.spamcop.net/fom-serve/cache/297.html

Actually, Spamcop *DOES* work that way sometimes, and in this particular 
case, it did.  House of Fusion was blacklisted because of DNS and 
hostname issues, as Michael has already pointed out.

When I looked up the IP address, it said it was the DNS mismatch that 
caused it to be blacklisted, because spamcop feels that any mail server 
trying to masquerade as another host with a different IP address is 
probably a spammer.

 I am a big fan of RBLs, but I very much question the wisdom of 
 using SCBL to block email. Do you really want to give anybody 
 with a SpamCop account the power to stop your email?

It takes more than anyone it takes numerous someones.  One spam 
report to spamcop doesn't cause you to get blacklisted.

I block the spamcop listed email for two main reasons.

#1 - my users don't want to do their own filtering
#2 - if someone (a person not a list) sends legitimate email and their 
mail server is listed in spamcop, they'll get a bounced message that 
tells them why.  That's actually better than the mail being accepted and 
thrown into a spam folder, because the original sender gets immediate 
feedback.

I suppose we're *WAY* off topic here =)

Rick

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232863
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Michael Dinowitz
Actually, Spamcop *DOES* work that way sometimes, and in this particular 
case, it did.  House of Fusion was blacklisted because of DNS and 
hostname issues, as Michael has already pointed out.
Yes, a month ago. So why are they having problems now?

When I looked up the IP address, it said it was the DNS mismatch that 
caused it to be blacklisted, because spamcop feels that any mail server 
trying to masquerade as another host with a different IP address is 
probably a spammer.
Yes, the IP was for mail.houseoffusion.com and the header said 
houseoffusion.com. Intelligent software would be more lenient in such a case or 
at least give it a flag to be checked rather than send it directly to a black 
hole.

It takes more than anyone it takes numerous someones.  One spam 
report to spamcop doesn't cause you to get blacklisted.
I can easily 'hack' this process and ban anyone I choose. This is one of the 
reasons I don't use any RBL for my spam checker. I wrote it myself and let me 
tell you that while it takes a few moments to review some of the subjects, my 
success rate is 100% blocked with the only mistakes coming from people who send 
mail without a subject. (red flagged, not deleted, but sometimes deleted by the 
human eye process.)

I block the spamcop listed email for two main reasons.

#1 - my users don't want to do their own filtering
#2 - if someone (a person not a list) sends legitimate email and their 
mail server is listed in spamcop, they'll get a bounced message that 
tells them why.  That's actually better than the mail being accepted and 
Not exactly true. I found out about the problem first from a concerned list 
member and the spamcop entries I still see to this day are from other peoples 
mail with no message sent to me as the mail server admin.

I suppose we're *WAY* off topic here =)
Actually, yes we are but there is a little more leaway on the weekend. Not 
much, but enough as long as the talk is still technical.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232864
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Kay Smoljak
On 2/20/06, Paul Hastings [EMAIL PROTECTED] wrote:
  If I delete the user first, the site will stop working completely and
  all hell will break loose, no?

 does it work now? do you have backups? if you do, take the db off-line 
 drop the user from the db (not from the logins) then try again.

Most of it works - the FarCry errors are mostly in the admin when you
try to update objects. The one or two front end areas where it wasn't
working I have worked around the issue by altering the code to output
the database owner in the SQL statements.

 i've tried to recreate this but no matter what i do as long as that user
 either created the object or was DBO it can access the objects
 unqualified (connecting using that user name in query analyzer). ditto
 using a DSN for that user/password.

Well, thanks so much for all your help, it's much appreciated and has
been very useful. As soon as he gets in this morning I will be getting
the sysadmin to try reowning the tables.

Cheers!

--
Kay Smoljak
http://kay.zombiecoder.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232865
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Rick Root
Michael Dinowitz wrote:

 Yes, a month ago. So why are they having problems now?

Or rather, Friday night, they're not now.. but a good question 
nonetheless.

 This is one of the reasons I don't use any RBL for my spam checker. I wrote 
 it myself and let me tell you that while it takes a few moments to review 
 some of the subjects, my success rate is 100% blocked with the only mistakes 
 coming from people who send mail without a subject. (red flagged, not 
 deleted, but sometimes deleted by the human eye process.)

You've got a lot more time on your hands than me, apparently =)

Rick



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232866
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: perplexing SQL Server database permissions problem

2006-02-19 Thread Kay Smoljak
On 2/20/06, Snake [EMAIL PROTECTED] wrote:
 Login with enterprise manager, look at the tables.
 Who doe sit say is the owner of the tables, DBO or a specific user.
 If it is a specific user, then that means the tables were created as that
 user, and thus why you have to prefix all queries with that user name.

Hi Russ,

When I'm logged in as the local Windows users, both servers (working
and non-working) say the same thing - that the specific user owns all
the tables, and that user is in the dbo role. Yet on one machine I
have to prefix the query names, and on the other I don't. I will get
the client's sysadmin to reown the tables when he gets in (I don't
have SA access) as I
suspect the database was restored at some point and the users are
somehow messed up.

--
Kay Smoljak
http://kay.zombiecoder.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232867
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Various thoughts on chat, cfhttp, phpbb, and the encrypt function

2006-02-19 Thread Rick Root
In an effort to do something different with my chat app, I thought it'd 
be cool to integrate with an EXTERNAL third party app - phpBB.

I run a little blog... www.thecaniac.com (I'm a big fan of the Carolina 
Hurricanes hockey club).  I'm also a heavy participant in the 
organizations official message boards, which use phpBB.

So I put up a chat room on my blog, and I want people to use their phpbb 
usernames.. but I don't want people to be able to masquerade as someone 
else.

So I wrote a little script that actually uses my message board login, 
and using CFHTTP, logs into phpbb and sends a private message to the 
user with a link they can use to access the chat room.  The link 
contains an access key which is encrypted and url-encoded, it contains 
their username and a timestamp.

And it worked!  I was actually amazed.

Question - how difficult is it to crack the encyption that CF uses by 
default?  Without knowing the key I used to encrypt it, of course.

Rick

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232868
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Rick Root wrote:
 Jochem van Dieten wrote:
 Spamcop listed houseoffusion because of some DNS/hostname configuration 
 issues.
 SCBL does not work that way. SCBL lists IP addresses based on 
 spam reports: http://www.spamcop.net/fom-serve/cache/297.html
 
 Actually, Spamcop *DOES* work that way sometimes, and in this particular 
 case, it did.  House of Fusion was blacklisted because of DNS and 
 hostname issues, as Michael has already pointed out.
 
 When I looked up the IP address, it said it was the DNS mismatch that 
 caused it to be blacklisted, because spamcop feels that any mail server 
 trying to masquerade as another host with a different IP address is 
 probably a spammer.

That is fun for anybody running CF 5 and older and talking to a 
host that forwards to SpamCop: they use the hostname of the 
recipient SMTP server instead of their own hostname in the HELO 
dialogue :)


 I am a big fan of RBLs, but I very much question the wisdom of 
 using SCBL to block email. Do you really want to give anybody 
 with a SpamCop account the power to stop your email?
 
 It takes more than anyone it takes numerous someones.  One spam 
 report to spamcop doesn't cause you to get blacklisted.

It takes 2 reports. They don't have to be from different sources.


 I block the spamcop listed email for two main reasons.
 
 #1 - my users don't want to do their own filtering
 #2 - if someone (a person not a list) sends legitimate email and their 
 mail server is listed in spamcop, they'll get a bounced message that 
 tells them why.  That's actually better than the mail being accepted and 
 thrown into a spam folder, because the original sender gets immediate 
 feedback.

These features are not unique to SCBL or even to RBLs.

But rejecting email instead of accepting and then sending a non 
delivery notification is why I am such a fan of RBLs and 
greylisting. Once you have responded OK to the other SMTP 
server and have accepted an email message you are responsible for 
it. There really is no good way for a postmaster to deal with 
suspected spam then: you can not delete it because it might be a 
false positive, you can not bounce it because 99% of the time you 
are bouncing to an innocent bystander so you have no other option 
but to deliver it. Outright rejection is indead the way to deal 
with this.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232869
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: cf-talk blacklisted again by spamcop

2006-02-19 Thread Dave Watts
 I would move bl.spamcop.net and dsn.rfc-ignorant.org from 
 blocking spam to adding points in SpamAssassin and instead add
 greylisting: http://www.greylisting.org/

I second the greylisting recommendation. We recently implemented it, and
it's provided a significant improvement.

 I have mentioned the emailaddress i-need-a-gf @ vandieten . 
 net in the body of an email on this list once. Just once. I 
 think it was quoted one more time in an answer. Now, several 
 years later, I get about 20 spam messages to that address 
 every day.

Yes, but more importantly, did any of those messages help you find a gf?

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232870
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Michael Dinowitz
 This is one of the reasons I don't use any RBL for my spam checker. I 
 wrote it myself and let me tell you that while it takes a few moments to 
 review some of the subjects, my success rate is 100% blocked with the 
 only mistakes coming from people who send mail without a subject. (red 
 flagged, not deleted, but sometimes deleted by the human eye process.)

 You've got a lot more time on your hands than me, apparently =)
Actually, I don't. The anti-spam package I wrote is about 3 years old and 
based heavily on proper headers and regex patterns in subjects. Alone, it 
will remove at least 75% of spam while labeling another 23% (or more) as 
possible spam with different ratings. This, combined with a few extra rules 
is what keeps the lists safe even from spam that comes from a forged 
address.
If I had time I'd add in the large site (LS) module which will set some 
specific sites (google, paypal, ebay, amazon) and their expected received 
domains, message-id domains and the like. If a message comes in that is not 
from an expected domain in the received or message-id, then it's trashed. If 
it looks legal, it'll check a table of expected IPs. If it's not there (an 
extreme case), then it'll do a fast ip lookup. I'd say 95%+ of the spam that 
says its from these domains will die in the first check easily. The few that 
forge the proper received and message-id will die in IP lookup. 
exceptionally few will hit the third test. It's a simple module and rather 
foolproof. As LS mail is always coming from a proper location, it'll really 
reduce phishing attacks. 


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232871
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Michael Dinowitz wrote:
 
 It takes more than anyone it takes numerous someones.  One spam 
 report to spamcop doesn't cause you to get blacklisted.
 I can easily 'hack' this process and ban anyone I choose. This is one of the 
 reasons I don't use any RBL for my spam checker.

Use greylisting, no hacking or banning needed, it is a purely 
technical process.

For instance, if you just make your SMTP server send 1 byte per 
second for the first 10 seconds of an incomming mail dialogue, 
more then 20% of your spam disappears because the sender thinks 
you are too slow and moves on to more lucrative victims: 
http://www.openbsd.org/papers/bsdcan05-spamd/mgp6.html

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232872
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Michael Dinowitz
For personal mail this might be an effective option, but can you see the 
firestorm if list mail was slowed down? :)

As for adding it on a personal level (or mail server one), is there any good 
instructions?

 Use greylisting, no hacking or banning needed, it is a purely
 technical process.

 For instance, if you just make your SMTP server send 1 byte per
 second for the first 10 seconds of an incomming mail dialogue,
 more then 20% of your spam disappears because the sender thinks
 you are too slow and moves on to more lucrative victims:
 http://www.openbsd.org/papers/bsdcan05-spamd/mgp6.html

 Jochem

 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232873
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Michael Dinowitz wrote:
 For personal mail this might be an effective option, but can you see the 
 firestorm if list mail was slowed down? :)

Nobody notices a 10 or 15 second slowdown (you can go full speed 
after that).


 As for adding it on a personal level (or mail server one), is there any good 
 instructions?

Most big *nix mailservers support it in some way or another. For 
Windows there is one proxy implementation that does generic 
greylisting: http://www.greylisting.org/implementations/

The 10 second slowdown feature is not the usual implementation of 
greylisting but is specific for OpenBSDs spamd and is implemented 
in the firewall instead of the SMTP server. If you want to use 
that, you need to place an OpenBSD box in your network as firewall.

Jochem


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232874
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Dave Watts wrote:
 
 I have mentioned the emailaddress i-need-a-gf @ vandieten . 
 net in the body of an email on this list once. Just once. I 
 think it was quoted one more time in an answer. Now, several 
 years later, I get about 20 spam messages to that address 
 every day.
 
 Yes, but more importantly, did any of those messages help you find a gf?

Only the ones that charge by the minute.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232875
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


SERVER scope

2006-02-19 Thread Baz
Hi,

I have a CFC that I use across all applications. It's basically a global UDF
library that stores no data. 

Is it ok to store this CFC in the SERVER scope rather than the application
scope? Is using a named lock for this ok:

cflock name=ServerUtils type=exclusive
   cfset Server.Utils=createObject('Component','SystemUtils') /
/cflock

Cheers,
Baz




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232876
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: SERVER scope

2006-02-19 Thread Michael Dinowitz
I do, but it's usually frowned upon (for no logical reason). Just make sure 
you check if the var exists first before adding it to avoid unnecessary 
writing to the server scope, but even that is nothing to worry about as 
there is no 'real' storage difference between the server, application and 
session scopes (or any scope for that matter) other than how it's accessed.

 Hi,

 I have a CFC that I use across all applications. It's basically a global 
 UDF
 library that stores no data.

 Is it ok to store this CFC in the SERVER scope rather than the application
 scope? Is using a named lock for this ok:

 cflock name=ServerUtils type=exclusive
   cfset Server.Utils=createObject('Component','SystemUtils') /
 /cflock

 Cheers,
 Baz




 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232877
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: SERVER scope

2006-02-19 Thread Mark A Kruger
If as you say this library is server wide then I say go for it :) But make
sure and check to see if it already exists and only instantiate it once -
othewise whats' the point?

-mark


-Original Message-
From: Baz [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 19, 2006 4:25 PM
To: CF-Talk
Subject: SERVER scope


Hi,

I have a CFC that I use across all applications. It's basically a global UDF
library that stores no data.

Is it ok to store this CFC in the SERVER scope rather than the application
scope? Is using a named lock for this ok:

cflock name=ServerUtils type=exclusive
   cfset Server.Utils=createObject('Component','SystemUtils') /
/cflock

Cheers,
Baz






~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232878
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Various thoughts on chat, cfhttp, phpbb, and the encrypt function

2006-02-19 Thread James Holmes
I'd be worried about the reverse situation - PHPBB is one of the most
hacked web apps on the planet.

On 2/20/06, Rick Root [EMAIL PROTECTED] wrote:
 In an effort to do something different with my chat app, I thought it'd
 be cool to integrate with an EXTERNAL third party app - phpBB.

 I run a little blog... www.thecaniac.com (I'm a big fan of the Carolina
 Hurricanes hockey club).  I'm also a heavy participant in the
 organizations official message boards, which use phpBB.

 So I put up a chat room on my blog, and I want people to use their phpbb
 usernames.. but I don't want people to be able to masquerade as someone
 else.

 So I wrote a little script that actually uses my message board login,
 and using CFHTTP, logs into phpbb and sends a private message to the
 user with a link they can use to access the chat room.  The link
 contains an access key which is encrypted and url-encoded, it contains
 their username and a timestamp.

 And it worked!  I was actually amazed.

 Question - how difficult is it to crack the encyption that CF uses by
 default?  Without knowing the key I used to encrypt it, of course.

--
CFAJAX docs and other useful articles:
http://jr-holmes.coldfusionjournal.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232879
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cfmx on kubuntu

2006-02-19 Thread Paul Scoffield II
ok, well i think i got it going using the built in server, but when i
attempt to connect to port 8500. i get a connection refused error.. is
the port locked down.. or does that mean the bloody thing isn't
running.. ?

On 2/19/06, Paul Scoffield II [EMAIL PROTECTED] wrote:
 i have a s/n for it.. but, i just installed it as a dev version to start...

 Upon initial startup, I get:
 snip.
 ColdFusion MX 7 not started, will retry connector 2 more time(s)
 ColdFusion MX 7 not started, will retry connector 1 more time(s)
 The connector wizard has not been able to contact the local ColdFusion
 MX 7, connector installation aborted.
 ==
 ColdFusion MX 7 has been started.
 ColdFusion MX 7 will write logs to /opt/coldfusionmx7/logs/cfserver.log


 but if i try to stop the service, I get this:

 [EMAIL PROTECTED]:/opt/coldfusionmx7/bin$ sudo ./coldfusion stop
 ColdFusion MX 7 does not seem to be currently running

 if I attempt to start it again, It errors with this in the logs:

 Starting Macromedia JRun 4.0 (Build 92909), coldfusion server
 02/19 13:31:31 warning Invalid license; reverting to Developer Version
 02/19 13:31:31 error Error thrown in operation init

 .

 02/19 13:31:33 error Exception thrown in operation start
 [1]java.lang.Exception: No LicenseService configured; server terminating

 .

 02/19 13:31:33 warning No sessionSecret has been specified in
 jrun.xml. Installing a self generated sessionSecret.
 02/19 13:31:34 info No JDBC data sources have been configured for this
 server (see jrun-resources.xml)
 [1]jrunx.kernel.ServiceException: No LicenseService configured; server
 terminating

 .

 autorestart: Process died in less than 30 seconds; not restarting


 On 2/19/06, Oðuz_Demirkapý [EMAIL PROTECTED] wrote:
  This is just a warning and does not effect CF in any way.
 
  I have same warning on Debian Linux but my CF installation works without any
  problem.
 
  I have first installed 30 day trial and activated my serial later. But it is
  always same.
 
 
  Here is a simple tutorial CF on Debian.
  http://www.howtoforge.com/coldfusion_installation_debian_sarge
 
 
  Oguz Demirkapi
 
 
 
 
  -Original Message-
  From: James Holmes [mailto:[EMAIL PROTECTED]
  Sent: Sonntag, 19. Februar 2006 10:37
  To: CF-Talk
  Subject: Re: cfmx on kubuntu
 
  Furthermore, I'd expect a license warning for a developer edition; is
  this a licenced install or just a dev version?
 
  On 2/19/06, Andrew Stevens [EMAIL PROTECTED] wrote:
   It is 'just' a warning, is your server not working?
  
 
  --
  CFAJAX docs and other useful articles:
  http://jr-holmes.coldfusionjournal.com/
 
 
 
  

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232880
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Various thoughts on chat, cfhttp, phpbb, and the encrypt function

2006-02-19 Thread Bobby Hartsfield
Wal-Mart is one of the most widely shopped at stores on the planet but
that's just because there are so many of them out there ;-)

PHPBB may get hacked occasionally but it's because its widely used and well
known... not to mention, anyone can see the source. Usually, the hacks
happen because people don’t update or pay attention to notifications of
vulnerabilities. I don't recall any of those notifications or updates fixing
and security risks in the encryption it uses though.


..:.:.:.:.:.:.:.:.:.:.:.:.
Bobby Hartsfield
http://acoderslife.com


-Original Message-
From: James Holmes [mailto:[EMAIL PROTECTED] 
Sent: Sunday, February 19, 2006 7:31 PM
To: CF-Talk
Subject: Re: Various thoughts on chat, cfhttp, phpbb, and the encrypt
function

I'd be worried about the reverse situation - PHPBB is one of the most
hacked web apps on the planet.

On 2/20/06, Rick Root [EMAIL PROTECTED] wrote:
 In an effort to do something different with my chat app, I thought it'd
 be cool to integrate with an EXTERNAL third party app - phpBB.

 I run a little blog... www.thecaniac.com (I'm a big fan of the Carolina
 Hurricanes hockey club).  I'm also a heavy participant in the
 organizations official message boards, which use phpBB.

 So I put up a chat room on my blog, and I want people to use their phpbb
 usernames.. but I don't want people to be able to masquerade as someone
 else.

 So I wrote a little script that actually uses my message board login,
 and using CFHTTP, logs into phpbb and sends a private message to the
 user with a link they can use to access the chat room.  The link
 contains an access key which is encrypted and url-encoded, it contains
 their username and a timestamp.

 And it worked!  I was actually amazed.

 Question - how difficult is it to crack the encyption that CF uses by
 default?  Without knowing the key I used to encrypt it, of course.

--
CFAJAX docs and other useful articles:
http://jr-holmes.coldfusionjournal.com/



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232881
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


How would I write this query...

2006-02-19 Thread Rick Faircloth
What I'm after would be a list
of the company names that
match the letters in the form field
that start with the first letter of
the company name...not with the
form field letters just anywhere in the
name...

E.g

Search for the letter A would bring up

Allstate
AIM

Not:

Hartford
Allstate
AIM

or

if the search was for  All...

Allstate

would match...

???

Rick


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232882
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: How would I write this query...

2006-02-19 Thread Charlie Griefer
WHERE
 companyName LIKE '#form.companyName#%'

the LIKE is similar to 'contains'.  the % is a wildcard character, so
putting it at the end of the string means any string that starts with
#form.companyName#.


On 2/19/06, Rick Faircloth [EMAIL PROTECTED] wrote:
 What I'm after would be a list
 of the company names that
 match the letters in the form field
 that start with the first letter of
 the company name...not with the
 form field letters just anywhere in the
 name...

 E.g

 Search for the letter A would bring up

 Allstate
 AIM

 Not:

 Hartford
 Allstate
 AIM

 or

 if the search was for  All...

 Allstate

 would match...

 ???

 Rick


 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232883
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: SERVER scope

2006-02-19 Thread Baz
Thanks guys,

Why is it frowned upon by the way? I've heard such talk before, that's why I
ask, but I'm not sure of the reasons.

Baz


-Original Message-
From: Mark A Kruger [mailto:[EMAIL PROTECTED] 
Sent: Sunday, February 19, 2006 5:41 PM
To: CF-Talk
Subject: RE: SERVER scope

If as you say this library is server wide then I say go for it :) But make
sure and check to see if it already exists and only instantiate it once -
othewise whats' the point?

-mark


-Original Message-
From: Baz [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 19, 2006 4:25 PM
To: CF-Talk
Subject: SERVER scope


Hi,

I have a CFC that I use across all applications. It's basically a global UDF
library that stores no data.

Is it ok to store this CFC in the SERVER scope rather than the application
scope? Is using a named lock for this ok:

cflock name=ServerUtils type=exclusive
   cfset Server.Utils=createObject('Component','SystemUtils') /
/cflock

Cheers,
Baz








~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232884
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: How would I write this query...

2006-02-19 Thread James Holmes
WHERE companynamecolumn
LIKE cfqueryparam cfsqltype=cf_sql_varchar value=#FORM.letter#%

On 2/20/06, Rick Faircloth [EMAIL PROTECTED] wrote:
 What I'm after would be a list
 of the company names that
 match the letters in the form field
 that start with the first letter of
 the company name...not with the
 form field letters just anywhere in the
 name...

 E.g

 Search for the letter A would bring up

 Allstate
 AIM

 Not:

 Hartford
 Allstate
 AIM

 or

 if the search was for  All...

 Allstate

 would match...

--
CFAJAX docs and other useful articles:
http://jr-holmes.coldfusionjournal.com/

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232885
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How would I write this query...

2006-02-19 Thread Baz
SELECT *
FROM XYZ
WHERE ColumnName like 'A%'



-Original Message-
From: Rick Faircloth [mailto:[EMAIL PROTECTED] 
Sent: Sunday, February 19, 2006 9:43 PM
To: CF-Talk
Subject: How would I write this query...

What I'm after would be a list
of the company names that
match the letters in the form field
that start with the first letter of
the company name...not with the
form field letters just anywhere in the
name...

E.g

Search for the letter A would bring up

Allstate
AIM

Not:

Hartford
Allstate
AIM

or

if the search was for  All...

Allstate

would match...

???

Rick




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232886
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: How would I write this query...

2006-02-19 Thread Josh Nathanson
Would that be ...

WHERE CompanyName LIKE '#form.CompanyName#%'

-- Josh




- Original Message - 
From: Rick Faircloth [EMAIL PROTECTED]
To: CF-Talk cf-talk@houseoffusion.com
Sent: Sunday, February 19, 2006 6:43 PM
Subject: How would I write this query...


 What I'm after would be a list
 of the company names that
 match the letters in the form field
 that start with the first letter of
 the company name...not with the
 form field letters just anywhere in the
 name...

 E.g

 Search for the letter A would bring up

 Allstate
 AIM

 Not:

 Hartford
 Allstate
 AIM

 or

 if the search was for  All...

 Allstate

 would match...

 ???

 Rick


 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232887
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: SERVER scope

2006-02-19 Thread Michael Dinowitz
I'd bet money that the issue was a pre-mx one. If you remember in CF 5, 
there was the issue of locking of memory variables and corruption of them if 
not done. This is not a case in MX so it should not be a problem. Actually, 
this is a plug for CFObjective and CFUnited where there will be people 
talking about creating CFC factories to control CFCs that will be used 
across applications. I'd use something like that in this case.


 Thanks guys,

 Why is it frowned upon by the way? I've heard such talk before, that's why 
 I
 ask, but I'm not sure of the reasons.

 Baz


 -Original Message-
 From: Mark A Kruger [mailto:[EMAIL PROTECTED]
 Sent: Sunday, February 19, 2006 5:41 PM
 To: CF-Talk
 Subject: RE: SERVER scope

 If as you say this library is server wide then I say go for it :) But 
 make
 sure and check to see if it already exists and only instantiate it once -
 othewise whats' the point?

 -mark


 -Original Message-
 From: Baz [mailto:[EMAIL PROTECTED]
 Sent: Sunday, February 19, 2006 4:25 PM
 To: CF-Talk
 Subject: SERVER scope


 Hi,

 I have a CFC that I use across all applications. It's basically a global 
 UDF
 library that stores no data.

 Is it ok to store this CFC in the SERVER scope rather than the application
 scope? Is using a named lock for this ok:

 cflock name=ServerUtils type=exclusive
   cfset Server.Utils=createObject('Component','SystemUtils') /
 /cflock

 Cheers,
 Baz








 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232888
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How would I write this query...

2006-02-19 Thread Rick Faircloth
Perfect...thanks, Charlie...

Rick

 -Original Message-
 From: Charlie Griefer [mailto:[EMAIL PROTECTED]
 Sent: Sunday, February 19, 2006 9:52 PM
 To: CF-Talk
 Subject: Re: How would I write this query...
 
 
 WHERE
  companyName LIKE '#form.companyName#%'
 
 the LIKE is similar to 'contains'.  the % is a wildcard character, so
 putting it at the end of the string means any string that starts with
 #form.companyName#.
 
 




~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232889
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How would I write this query...

2006-02-19 Thread Rick Faircloth
Thanks, James!

Rick

 -Original Message-
 From: James Holmes [mailto:[EMAIL PROTECTED]
 Sent: Sunday, February 19, 2006 9:54 PM
 To: CF-Talk
 Subject: Re: How would I write this query...
 
 
 WHERE companynamecolumn
 LIKE cfqueryparam cfsqltype=cf_sql_varchar value=#FORM.letter#%
 



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232890
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How would I write this query...

2006-02-19 Thread Rick Faircloth
Thanks, Baz  Josh, too!

Rick

 -Original Message-
 From: Baz [mailto:[EMAIL PROTECTED]
 Sent: Sunday, February 19, 2006 9:55 PM
 To: CF-Talk
 Subject: RE: How would I write this query...
 
 
 SELECT *
 FROM XYZ
 WHERE ColumnName like 'A%'
 
 



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232891
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Verity search case sensitivity

2006-02-19 Thread Joe Ferraro
Hello all,

I have a client requesting that the full text searches using verity on his
site not be case sensitive. I looked over the ColdFusion documentation but
couldn't find any specific information on case sensitivity in Verity at all,
but when doing searches on the site it certainly is case sensitive. Is there
any way to tell the search not to be case sensitive?

Thanks,

Joe


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232892
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54