Re: can't enable debug output in coldfusion 8

2008-07-28 Thread Brad Wood
Also, check for this anywhere in your code:


~Brad

- Original Message - 
From: "Al Musella, DPM" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Monday, July 28, 2008 8:18 PM
Subject: Re: can't enable debug output in coldfusion 8


>I am still on an older version of cf, but does cf 
> 8 have a "restrict debug output to specified 
> ips"?  Check that your ip address is specified.
> 
> 
> 
>>Maybe there is something in the CF code that is suppressing the debug
>>output...?


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309849
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Unknown JS error when doing AJAX.

2008-07-28 Thread Brad Wood
Just tossing out an idea here.
I have had problems with IE sometimes where, depending on the version of 
MSXML.dll being used IE will crash unexpectedly. Sometimes it appears to be 
related to the encoding used, but that is hard to nail down.  Usually I 
tended to get the error in IE 6 on machines with MS Office which had 
MSXML5.dll installed and using the following code:
xmlHttp=new ActiveXObject("Microsoft.XMLHTTP");
That basically let's the user's computer decide which version of MSXML is 
registered.

I always had the best luck forcing MSXML version 3 like this:
var httpReq = new ActiveXObject('MSXML2.XMLHTTP.3.0');

Also, what kind of element is "character"?  IE doesn't like it when you 
attempt to innerHTML a table after page load.

Ok one more think, how come your readyStateChange function isn't checking 
the xmlHttp.readyState flag or the xmlHttp.status flag.
Usually I am used to seeing something like:

if (xmlhttp.readyState==4) // 4 = "loaded"
{
if (xmlhttp.status==200) // 200 = OK
  {
// Do something
   }
}

~Brad

- Original Message - 
From: "Phillip M. Vector" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Monday, July 28, 2008 7:59 PM
Subject: Re: Unknown JS error when doing AJAX. 


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309848
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: cfflush in CF 8

2008-07-28 Thread James Holmes
Copy and paste the link carefully. The page is working fine.

On Tue, Jul 29, 2008 at 10:23 AM, Wes Middendorff
<[EMAIL PROTECTED]> wrote:
> This link no longer works, does anyone know what this solution was supposed 
> to be?
>
>
>> My solution for cfflush on CF8 with IIS:
>>
>> http://orangepips.instantspot.com/blog/index.
>> cfm/2007/12/12/cfflush-Problem-and-Solution-on-CF8-with-IIS-

-- 
mxAjax / CFAjax docs and other useful articles:
http://www.bifrost.com.au/blog/

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309847
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: cfflush in CF 8

2008-07-28 Thread Wes Middendorff
This link no longer works, does anyone know what this solution was supposed to 
be?


> My solution for cfflush on CF8 with IIS: 
> 
> http://orangepips.instantspot.com/blog/index.
> cfm/2007/12/12/cfflush-Problem-and-Solution-on-CF8-with-IIS- 


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309846
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: cfflush in CF 8

2008-07-28 Thread Wes Middendorff
I am also having issues with the cfflush tag using IIS. Unfortunately the 
environment I am in is pretty locked down and I cannot even use firefox to 
determine if the problem is IE. My biggest problem is that this link no longer 
works. Does anyone know what this solution was?

> My solution for cfflush on CF8 with IIS: 
> 
> http://orangepips.instantspot.com/blog/index.
> cfm/2007/12/12/cfflush-Problem-and-Solution-on-CF8-with-IIS- 


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309845
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Grials vs Coldfusion

2008-07-28 Thread Andrew Scott
Lession1:

Yes in some cases ant is all that is needed, however when you deal with the
Java world you have dependancies and version conflicts. Maven2 is a means to
minimise conflicts with incorrect versions of dependant libraries.

Lesson2:

I can't speak of BlazeDS as I know very little about it, but REST is a
methodology.

Lesson3:

In Grails, he is refering to the SES option for friendlier urls. It does a
form of url rewrite, the problem he is refering to is that the controller
and action needed attention in his scenario.



On Tue, Jul 29, 2008 at 5:48 AM, henry ho <[EMAIL PROTECTED]> wrote:

> reading through the dzone rss feed today, I found:
>
>
> http://fbflex.wordpress.com/2008/07/26/nine-lessons-from-building-a-grails-flex-flash-website/
>
> Very interesting for someone who'd like to get his hand dirty with Flex
> like me.  However, how different would it be if CF is used in place of
> Grials?
>
> > Lesson 1: Spend time in your build and deploy tools
> would simple ANT do the job?
>
> > Lesson 2: Grails REST services beats BlazeDS. To a bloody pulp.
> CF Flex remote support?
>
> > Lesson 3: Keep Two Sets of Books for Navigation and Deep Linking.
> CF missingtemplate? some mod-rewrite?
>
>
> I don't know enough about flex and CF, what do you experts think?
>
>
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309844
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client Certificate Validation in Coldfusion 8

2008-07-28 Thread Mike Henry
Found the solution...


not before = #x509[1].getNotBefore()#
not after = #x509[1].getNotAfter()#

>Mike,
>
>Your validation needs to occur at handshake level but I don't know how to do
>that:
>
>http://docs.sun.com/app/docs/doc/820-2493/aakhe?l=en&a=view
>
>Cheers
>Marco Antonio
>
>
>
>> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309843
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: can't enable debug output in coldfusion 8

2008-07-28 Thread Al Musella, DPM
I am still on an older version of cf, but does cf 
8 have a "restrict debug output to specified 
ips"?  Check that your ip address is specified.



>Maybe there is something in the CF code that is suppressing the debug
>output...?
>
>On Mon, Jul 28, 2008 at 2:54 PM, Alex I <[EMAIL PROTECTED]> wrote:
>
> > already re-installed CF8 and can't find any solution...
> > i'm simply trying to enable debug output in CF admin and nothing happens
> > when i check "Enable Robust Exception Information" setting.
> > "Request Debugging" is not working as well. (?cfdebug)
> >
> > BTW, running CF8 on Vista32/IIS7
> >
> > anyone else having similar problems? thanks!
> >
> >
> >
>
>

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309842
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Unknown JS error when doing AJAX.

2008-07-28 Thread Phillip M. Vector
Josh Nathanson wrote:
> Your bracketing looks fine.

*nods*

> Don't you have to do some kind of Active-X thingamabob for IE's xmlHttp 
> implementation, or do you have that in another part of the code?

Another part of the code.

// Set variable for AJAX
var xmlHttp;

// Load in the AJAX object based on what browser you have
function GetXmlHttpObject()
{
var xmlHttp=null;
try
{
// Firefox, Opera 8.0+, Safari
xmlHttp=new XMLHttpRequest();
}
catch (e)
{
// Internet Explorer
try
{
xmlHttp=new ActiveXObject("Msxml2.XMLHTTP");
}
catch (e)
{
try
{
xmlHttp=new ActiveXObject("Microsoft.XMLHTTP");
}
catch (e)
{
alert("Your browser does not support AJAX!");
return false;
}
}
}
return xmlHttp;
}


> Also, did you console.log the final url content to make sure it's what 
> you're expecting?

Yeah. If you mean "View Source", it looks fine to me.

> Finally, I don't think it's strictly required that you have a semicolon 
> after the below line of code but I'd put one there anyway, just to make sure 
> that's not the problem.
> 
> xmlHttp.onreadystatechange=
> function()
> {
> document.getElementById("character").innerHTML=xmlHttp.responseText;
> };  <== semicolon there

Semicolon in. Still not working on IE.

> - Original Message - 
> From: "Phillip M. Vector" <[EMAIL PROTECTED]>
> To: "CF-Talk" 
> Sent: Monday, July 28, 2008 4:35 PM
> Subject: Re: Unknown JS error when doing AJAX.
> 
> 
>> No. I didn't post the whole code. Trying to cut down on extra code..
>>
>> function updatestats()
>> {
>> xmlHttp=GetXmlHttpObject();
>> 
>> var url="#myself#AJAX.ShowCharacter";
>> url=url+"&House="+document.getElementById("House").value;
>> url=url+"&Genre="+document.getElementById("Genre").value;
>> > Traits="Strength,Fury,Agility,Sleight,Willpower,Intelligence,Perception,Wits,Manipulation,Charisma,Appearance,JenaSeQua,Life,Luck">
>> 
>> url=url+"&#trait#="+document.getElementById("#trait#").value;
>> 
>> 
>>
>> xmlHttp.open("GET",url,true);
>> xmlHttp.send(null);
>> xmlHttp.onreadystatechange=
>> function()
>> {
>> document.getElementById("character").innerHTML=xmlHttp.responseText;
>> }
>> }
>>
>> I tried changing it to
>> xmlHttp.onreadystatechange=
>> function()
>> {
>> document.getElementById("character").innerHTML=xmlHttp.responseText};
>> }
>>
>> But that didn't seem to help.
>>
>>
>> Josh Nathanson wrote:
>>
>>> I don't know if you posted the entire code there, but if so, the second
>>> close curly bracket should be a semicolon.
>>>
>>> xmlHttp.onreadystatechange=
>>> function()
>>> {
>>> document.getElementById("character").innerHTML=xmlHttp.responseText;
>>> }
>>> } <== make that a semicolon
>>>
>>> -- Josh
>>>
>>>
>>> - Original Message - 
>>> From: "Phillip M. Vector" <[EMAIL PROTECTED]>
>>> To: "CF-Talk" 
>>> Sent: Monday, July 28, 2008 3:32 PM
>>> Subject: Unknown JS error when doing AJAX.
>>>
>>>
 I'm setting up a AJAX JS which updates a field on the form that is
 called "character" as Stuff

 When this function is run, it submits ok, but I get an "Unknown runtime
 Error" in the area of "{document.". The thing is, I thought Firefox was
 more solid on JS and it runs perfectly on that. But I do it in IE and it
 bombs.

 Any ideas what I'm missing?

 xmlHttp.onreadystatechange=
 function()
 {
 document.getElementById("character").innerHTML=xmlHttp.responseText;
 }
 }


>>>
>>
> 
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309841
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: PDF delivery via CFContent in IE7 ... doesn't.

2008-07-28 Thread Will Tomlinson
>> I had to go in and change IE7's settings before it would shoe the movie
>
>You mean Windows' settings, right?  I don't know anywhere where IE7
>does file type support, although that doesn't mean its not hiding
>somewhere inside.  Since I have the full Acrobat (5) on my desktop
>unit,  I'll try it on one that has just the plugin.  Maybe thats the
>problem... but it worked on this desktop recently.

Here's some instructions I posted for our users, pertaining to the WMV problem. 
I dunno if this is barkin up the wrong tree. 


You may need to change your settings in Internet Explorer 7 to view the video 
tutorials. If so, follow the instructions below.

   1. Open IE7 > Tools > Internet Options
   2. Click on the "Programs" tab
   3. Click on the "Set Programs" button
   4. Click the "Set program access and computer defaults" link
   5. Click the "Custom" option
   6. Go down to the "Choose a default media player:" option and select 
"Windows Media Player"
   7. Click the "Ok" button
   8. Close "Default Programs" window
   9. Click the "Ok" button on the "Internet Options" window


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309840
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Unknown JS error when doing AJAX.

2008-07-28 Thread Josh Nathanson
Your bracketing looks fine.

Don't you have to do some kind of Active-X thingamabob for IE's xmlHttp 
implementation, or do you have that in another part of the code?

Also, did you console.log the final url content to make sure it's what 
you're expecting?

Finally, I don't think it's strictly required that you have a semicolon 
after the below line of code but I'd put one there anyway, just to make sure 
that's not the problem.

xmlHttp.onreadystatechange=
function()
{
document.getElementById("character").innerHTML=xmlHttp.responseText;
};  <== semicolon there


- Original Message - 
From: "Phillip M. Vector" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Monday, July 28, 2008 4:35 PM
Subject: Re: Unknown JS error when doing AJAX.


> No. I didn't post the whole code. Trying to cut down on extra code..
>
> function updatestats()
> {
> xmlHttp=GetXmlHttpObject();
> 
> var url="#myself#AJAX.ShowCharacter";
> url=url+"&House="+document.getElementById("House").value;
> url=url+"&Genre="+document.getElementById("Genre").value;
>  Traits="Strength,Fury,Agility,Sleight,Willpower,Intelligence,Perception,Wits,Manipulation,Charisma,Appearance,JenaSeQua,Life,Luck">
> 
> url=url+"&#trait#="+document.getElementById("#trait#").value;
> 
> 
>
> xmlHttp.open("GET",url,true);
> xmlHttp.send(null);
> xmlHttp.onreadystatechange=
> function()
> {
> document.getElementById("character").innerHTML=xmlHttp.responseText;
> }
> }
>
> I tried changing it to
> xmlHttp.onreadystatechange=
> function()
> {
> document.getElementById("character").innerHTML=xmlHttp.responseText};
> }
>
> But that didn't seem to help.
>
>
> Josh Nathanson wrote:
>
>> I don't know if you posted the entire code there, but if so, the second
>> close curly bracket should be a semicolon.
>>
>> xmlHttp.onreadystatechange=
>> function()
>> {
>> document.getElementById("character").innerHTML=xmlHttp.responseText;
>> }
>> } <== make that a semicolon
>>
>> -- Josh
>>
>>
>> - Original Message - 
>> From: "Phillip M. Vector" <[EMAIL PROTECTED]>
>> To: "CF-Talk" 
>> Sent: Monday, July 28, 2008 3:32 PM
>> Subject: Unknown JS error when doing AJAX.
>>
>>
>>> I'm setting up a AJAX JS which updates a field on the form that is
>>> called "character" as Stuff
>>>
>>> When this function is run, it submits ok, but I get an "Unknown runtime
>>> Error" in the area of "{document.". The thing is, I thought Firefox was
>>> more solid on JS and it runs perfectly on that. But I do it in IE and it
>>> bombs.
>>>
>>> Any ideas what I'm missing?
>>>
>>> xmlHttp.onreadystatechange=
>>> function()
>>> {
>>> document.getElementById("character").innerHTML=xmlHttp.responseText;
>>> }
>>> }
>>>
>>>
>>
>>
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309839
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Unknown JS error when doing AJAX.

2008-07-28 Thread Phillip M. Vector
No. I didn't post the whole code. Trying to cut down on extra code..

function updatestats()
{
xmlHttp=GetXmlHttpObject();

var url="#myself#AJAX.ShowCharacter";
url=url+"&House="+document.getElementById("House").value;
url=url+"&Genre="+document.getElementById("Genre").value;



url=url+"&#trait#="+document.getElementById("#trait#").value;



xmlHttp.open("GET",url,true);
xmlHttp.send(null);
xmlHttp.onreadystatechange=
function()
{

document.getElementById("character").innerHTML=xmlHttp.responseText;
}
}

I tried changing it to
xmlHttp.onreadystatechange=
function()
{

document.getElementById("character").innerHTML=xmlHttp.responseText};
}

But that didn't seem to help.


Josh Nathanson wrote:

> I don't know if you posted the entire code there, but if so, the second 
> close curly bracket should be a semicolon.
> 
> xmlHttp.onreadystatechange=
> function()
> {
> document.getElementById("character").innerHTML=xmlHttp.responseText;
> }
> } <== make that a semicolon
> 
> -- Josh
> 
> 
> - Original Message - 
> From: "Phillip M. Vector" <[EMAIL PROTECTED]>
> To: "CF-Talk" 
> Sent: Monday, July 28, 2008 3:32 PM
> Subject: Unknown JS error when doing AJAX.
> 
> 
>> I'm setting up a AJAX JS which updates a field on the form that is
>> called "character" as Stuff
>>
>> When this function is run, it submits ok, but I get an "Unknown runtime
>> Error" in the area of "{document.". The thing is, I thought Firefox was
>> more solid on JS and it runs perfectly on that. But I do it in IE and it
>> bombs.
>>
>> Any ideas what I'm missing?
>>
>> xmlHttp.onreadystatechange=
>> function()
>> {
>> document.getElementById("character").innerHTML=xmlHttp.responseText;
>> }
>> }
>>
>>
> 
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309838
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Grials vs Coldfusion

2008-07-28 Thread Paul Hastings
henry ho wrote:
> Very interesting for someone who'd like to get his hand dirty with Flex like
> me.  However, how different would it be if CF is used in place of Grials?

well for one thing you wouldn't spend "about 2 months on this site, figuring out
how to get Flex, Flash and Grails to work together nicely". cf & flex just 
works.

>> Lesson 2: Grails REST services beats BlazeDS. To a bloody pulp.
> CF Flex remote support?

james ward actually took the trouble to gather some facts:

http://www.jamesward.com/wordpress/2007/04/30/ajax-and-flex-data-loading-benchmarks/

while processing w/e4x is pretty good, it's bandwidth usage is still bad 
compared to AMF (text vs binary). i guess this depends on what your backend is 
producing & your application but i'd still say cf on the backend is a better 
choice for talking to a flex front-end.


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309837
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Unknown JS error when doing AJAX.

2008-07-28 Thread Josh Nathanson
I don't know if you posted the entire code there, but if so, the second 
close curly bracket should be a semicolon.

xmlHttp.onreadystatechange=
function()
{
document.getElementById("character").innerHTML=xmlHttp.responseText;
}
} <== make that a semicolon

-- Josh


- Original Message - 
From: "Phillip M. Vector" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Monday, July 28, 2008 3:32 PM
Subject: Unknown JS error when doing AJAX.


> I'm setting up a AJAX JS which updates a field on the form that is
> called "character" as Stuff
>
> When this function is run, it submits ok, but I get an "Unknown runtime
> Error" in the area of "{document.". The thing is, I thought Firefox was
> more solid on JS and it runs perfectly on that. But I do it in IE and it
> bombs.
>
> Any ideas what I'm missing?
>
> xmlHttp.onreadystatechange=
> function()
> {
> document.getElementById("character").innerHTML=xmlHttp.responseText;
> }
> }
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309836
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Unknown JS error when doing AJAX.

2008-07-28 Thread Phillip M. Vector
I'm setting up a AJAX JS which updates a field on the form that is 
called "character" as Stuff

When this function is run, it submits ok, but I get an "Unknown runtime 
Error" in the area of "{document.". The thing is, I thought Firefox was 
more solid on JS and it runs perfectly on that. But I do it in IE and it 
bombs.

Any ideas what I'm missing?

xmlHttp.onreadystatechange=
function()
{
document.getElementById("character").innerHTML=xmlHttp.responseText;
}
}

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309835
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: jsmx and progress bar

2008-07-28 Thread Richard White
very good point about the estimated time being better than nothing. 

i haven't read anything anywhere else that suggests how to do this, and also as 
suggested cfflush may not be the right option for this scenario, so until 
something else is available then i think your option may be best josh

thanks for your feedback and suggestions




>Richard, it sounds like you might be able to implement the process I 
>mentioned.
>
>If you were able to determine a "baseline" processing time for a simple data 
>set, you could use this to estimate the amount of time it would take for 
>more complex data sets.  You'd have to do a lot of testing to see how long 
>different scenarios would take, and which things had what effect on the 
>processing time.  For example, if a certain variable exists it might take 
>10X as long as it would if that variable didn't exist.
>
>If you have a very complex processing task with many variables, this will be 
>somewhat difficult...however, I think this would be your only option, as 
>there isn't really a way (that I know of anyway) to pass back progress 
>information from the server.  Maybe you could try  or something but 
>I don't know if that could be captured by javascript, or what that would 
>entail.
>
>And remember, even an estimated completion time is better than nothing at 
>all, from the user's perspective.
>
>
>> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309834
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: PDF delivery via CFContent in IE7 ... doesn't.

2008-07-28 Thread Matt Robertson
> I had to go in and change IE7's settings before it would shoe the movie

You mean Windows' settings, right?  I don't know anywhere where IE7
does file type support, although that doesn't mean its not hiding
somewhere inside.  Since I have the full Acrobat (5) on my desktop
unit,  I'll try it on one that has just the plugin.  Maybe thats the
problem... but it worked on this desktop recently.

Bah!  This is supposed to be simple!  I don't know what I'd do if I
spent the day working on what I expected to.

-- 
[EMAIL PROTECTED]
Janitor, The Robertson Team
mysecretbase.com




On Mon, Jul 28, 2008 at 3:04 PM, Will Tomlinson <[EMAIL PROTECTED]> wrote:
>>This is driving me nuts.  It works great in Safari, FF and, up until
>>recently, in IE.  Server is CF 6.1
>>
>
> I could swear I ran into this same thing with WMV's. IE7 wasn't set as 
> default for that file type. I had to go in and change IE7's settings before 
> it would shoe the movie. Otherwise, I believe it was a blank screen.
>
> Could that be the culprit with PDF's as well?
>
> hth,
> Will
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309833
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: PDF delivery via CFContent in IE7 ... doesn't.

2008-07-28 Thread Will Tomlinson
>This is driving me nuts.  It works great in Safari, FF and, up until
>recently, in IE.  Server is CF 6.1
>

I could swear I ran into this same thing with WMV's. IE7 wasn't set as default 
for that file type. I had to go in and change IE7's settings before it would 
shoe the movie. Otherwise, I believe it was a blank screen. 

Could that be the culprit with PDF's as well? 

hth,
Will 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309832
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


PDF delivery via CFContent in IE7 ... doesn't.

2008-07-28 Thread Matt Robertson
This is driving me nuts.  It works great in Safari, FF and, up until
recently, in IE.  Server is CF 6.1

I have to serve up pre-existing pdf files stored off the web root and
pushed to the authenticated visitor via cfcontent.  User clicks on
link located at foo.cfm:

click me

bar.cfm contains some gymnastics that determines which folder is
pulled.  I'll hardwire it here for simplicity:



I do a fileExists() check of course.  and now the part that seems to
have suddenly broken:




IE tries to treat "bar.cfm?FileIs=woof.pdf" as a pdf file.  Then
nothing in the blank window that follows.

What am I doing wrong?  Seems like something changed in IE.  I am on
IE7 and Acrobat 5 and 9.  Tests in IE6 and 5 show it works fine.  And
it worked in IE 7 until very recently.

-- 
[EMAIL PROTECTED]
Janitor, The Robertson Team
mysecretbase.com

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309831
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: (ot) URL Hack Attempt Leaves Me Scractching My Head

2008-07-28 Thread Mary Jo Sminkey
>MaryJo produces a product that she supports on older platforms, hence 
>the need to bypass cfqueryparam.

Actually, that's not really the issue so much as customers that are running 
older versions of my software that don't have all the text inputs covered with 
cfqueryparams. While this is certainly no substitution for them upgrading to my 
newer versions that are better protected against this new attack (and other 
stuff like XSS) it helps with customer relations to provide them with something 
to as least block it until such time as they get around to upgrading. I haven't 
supported anything below CF5 for quite some time! 

I may still include it in newer versions as well, for a couple reasons. One is 
simply that I prefer stopping hackers before they even can get to code that 
accesses the database, for whatever reason. It may not be 100% foolproof, but 
it's a worthwhile thing to do, IMO. The other reason is that my software is 
*very* commonly modified by those that purchase it. Hopefully anyone doing the 
code changes would know to use cfqueryparam but I've seen some pretty awful 
coding in my years of doing this, so I prefer not to assume and have some code 
in there that may help protect the sitebecause regardless of how a hacker 
gets in, it will still be me that gets the blame. ;-) 

--- Mary Jo



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309830
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Export to Excel and PDF from the Spry Filtered Data Set??

2008-07-28 Thread Elena Aminova
Is there a way to go about exporting to PDF and Excel from the Spry Filtered 
Data Set?
I am not sure how to go about doing that from my Search output, which is Spry 
filtered XML Data Set

Thanks.
Elena. 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309829
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: (ot) URL Hack Attempt Leaves Me Scractching My Head

2008-07-28 Thread Kris Jones
I have a client who reluctantly upgraded to CF5 from CF4.0 last year
(yes, that would be 2007) because an sysadmin _accidentally_ upgraded,
and they couldn't find the original 4.0 disks. While they'd like to
upgrade to CF7 or CF8, the cost of migrating the many, many apps they
have is cost prohibitive for them. So, there ya go. There are plenty
of companies out there still running 4.0, and I'd guess, even earlier
versions.

> Goodness sakes-- cfqueryparam has been around since ColdFusion 4.5.1.  How
> far back does she need to support?  :)

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309828
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: (ot) URL Hack Attempt Leaves Me Scractching My Head

2008-07-28 Thread Brad Wood
Goodness sakes-- cfqueryparam has been around since ColdFusion 4.5.1.  How 
far back does she need to support?  :)

~Brad

- Original Message - 
From: "Cutter (CFRelated)" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Monday, July 28, 2008 2:56 PM
Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Head


> MaryJo produces a product that she supports on older platforms, hence
> the need to bypass cfqueryparam.
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309827
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: can't enable debug output in coldfusion 8

2008-07-28 Thread Qing Xia
Maybe there is something in the CF code that is suppressing the debug
output...?

On Mon, Jul 28, 2008 at 2:54 PM, Alex I <[EMAIL PROTECTED]> wrote:

> already re-installed CF8 and can't find any solution...
> i'm simply trying to enable debug output in CF admin and nothing happens
> when i check "Enable Robust Exception Information" setting.
> "Request Debugging" is not working as well. (?cfdebug)
>
> BTW, running CF8 on Vista32/IIS7
>
> anyone else having similar problems? thanks!
>
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309826
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: (ot) URL Hack Attempt Leaves Me Scractching My Head

2008-07-28 Thread Cutter (CFRelated)
MaryJo produces a product that she supports on older platforms, hence 
the need to bypass cfqueryparam.

Steve "Cutter" Blades
Adobe Certified Professional
Advanced Macromedia ColdFusion MX 7 Developer
_
http://blog.cutterscrossing.com

Robert Harrison wrote:
>> Version 2 of the scanner I did is now available here:
> http://www.cfwebstore.com/index.cfm?fuseaction=page.download&downloadID=18
> 
> Am I missing something here. I thought CFQUERYPARAM solved this problem. Is
> this redundant or is there some problem with CFQUERYPARAM I'm missing?
> 
> 
> 
> Robert B. Harrison
> Director of Interactive services
> Austin & Williams
> 125 Kennedy Drive, Suite 100 Hauppauge NY 11788
> T : 631.231.6600 Ext. 119 
> F : 631.434.7022
> www.austin-williams.com
> 
> Great advertising can't be either/or... It must be &.
> 
> 
> 
> 
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309825
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: jsmx and progress bar

2008-07-28 Thread Josh Nathanson
Richard, it sounds like you might be able to implement the process I 
mentioned.

If you were able to determine a "baseline" processing time for a simple data 
set, you could use this to estimate the amount of time it would take for 
more complex data sets.  You'd have to do a lot of testing to see how long 
different scenarios would take, and which things had what effect on the 
processing time.  For example, if a certain variable exists it might take 
10X as long as it would if that variable didn't exist.

If you have a very complex processing task with many variables, this will be 
somewhat difficult...however, I think this would be your only option, as 
there isn't really a way (that I know of anyway) to pass back progress 
information from the server.  Maybe you could try  or something but 
I don't know if that could be captured by javascript, or what that would 
entail.

And remember, even an estimated completion time is better than nothing at 
all, from the user's perspective.


- Original Message - 
From: "Richard White" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Monday, July 28, 2008 12:25 PM
Subject: Re: jsmx and progress bar


> Hi Josh
>
> we are doing something very complex actually that has so many different 
> things that could effect the time it takes.
>
> jsmx only passes back information when it is done but if we could get it 
> to pass back at various stages in the cycle then it would be perfect
>
> we are generating a spreadsheet with data but the data needs to be 
> processed and formatted with sql and cf and based on many many different 
> scenarios.
>
> currently the user selects to generate a spreadsheet and it says 
> 'generating spreadsheet...' but if they have selected a large amount of 
> data then it could take some time so we need to provide them with feedback 
> on the progress
>
> this is the issue we have right now
>
> thanks
>
>
>
>>What sort of thing are you doing on the server exactly?
>>
>>I don't think you can really get the exact progress, but you can do sort 
>>of
>>an estimation that is better than nothing.
>>
>>I do this when doing multiple inserts into a database that can be a bit
>>slow.  You do a test single insert via ajax, record the time it took, then
>>use that time to calculate the total estimated time for all inserts, and 
>>use
>>that total time to do the progress bar.
>>
>>-- Josh
>>
>>
>>>
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309824
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Grials vs Coldfusion

2008-07-28 Thread henry ho
reading through the dzone rss feed today, I found:

http://fbflex.wordpress.com/2008/07/26/nine-lessons-from-building-a-grails-flex-flash-website/

Very interesting for someone who'd like to get his hand dirty with Flex like 
me.  However, how different would it be if CF is used in place of Grials?

> Lesson 1: Spend time in your build and deploy tools
would simple ANT do the job?

> Lesson 2: Grails REST services beats BlazeDS. To a bloody pulp.
CF Flex remote support?

> Lesson 3: Keep Two Sets of Books for Navigation and Deep Linking.
CF missingtemplate? some mod-rewrite?


I don't know enough about flex and CF, what do you experts think?



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309823
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: jsmx and progress bar

2008-07-28 Thread Robert Harrison
Some progress bar tools might be a good addition for CF. 

This is the same problem I've been dealing with on large file uploads. I
previously ran a thread about some problems with that, and upgrading to CF8
(as the list suggested) did fix the timeout problems, but it still has no
way to indicate upload progress. I tried to use CFFLUSH to simulate
something, but unless your generating more bytes of data as processing is
done, CFFLUSH is moot. 

In your case you may be able to do something with CFFLUSH, though, because
you are actually generating more data as processing runs (or so it seemed
from what I read). 



Robert B. Harrison
Director of Interactive services
Austin & Williams
125 Kennedy Drive, Suite 100 Hauppauge NY 11788
T : 631.231.6600 Ext. 119 
F : 631.434.7022
www.austin-williams.com

Great advertising can't be either/or... It must be &.




~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309822
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: (ot) URL Hack Attempt Leaves Me Scractching My Head

2008-07-28 Thread Robert Harrison
> Version 2 of the scanner I did is now available here:
http://www.cfwebstore.com/index.cfm?fuseaction=page.download&downloadID=18

Am I missing something here. I thought CFQUERYPARAM solved this problem. Is
this redundant or is there some problem with CFQUERYPARAM I'm missing?



Robert B. Harrison
Director of Interactive services
Austin & Williams
125 Kennedy Drive, Suite 100 Hauppauge NY 11788
T : 631.231.6600 Ext. 119 
F : 631.434.7022
www.austin-williams.com

Great advertising can't be either/or... It must be &.




~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309821
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: jsmx and progress bar

2008-07-28 Thread Richard White
Hi Josh

we are doing something very complex actually that has so many different things 
that could effect the time it takes. 

jsmx only passes back information when it is done but if we could get it to 
pass back at various stages in the cycle then it would be perfect

we are generating a spreadsheet with data but the data needs to be processed 
and formatted with sql and cf and based on many many different scenarios. 

currently the user selects to generate a spreadsheet and it says 'generating 
spreadsheet...' but if they have selected a large amount of data then it could 
take some time so we need to provide them with feedback on the progress

this is the issue we have right now

thanks



>What sort of thing are you doing on the server exactly?
>
>I don't think you can really get the exact progress, but you can do sort of 
>an estimation that is better than nothing.
>
>I do this when doing multiple inserts into a database that can be a bit 
>slow.  You do a test single insert via ajax, record the time it took, then 
>use that time to calculate the total estimated time for all inserts, and use 
>that total time to do the progress bar.
>
>-- Josh
>
>
>> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309820
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: jsmx and progress bar

2008-07-28 Thread Josh Nathanson
What sort of thing are you doing on the server exactly?

I don't think you can really get the exact progress, but you can do sort of 
an estimation that is better than nothing.

I do this when doing multiple inserts into a database that can be a bit 
slow.  You do a test single insert via ajax, record the time it took, then 
use that time to calculate the total estimated time for all inserts, and use 
that total time to do the progress bar.

-- Josh


- Original Message - 
From: "Richard White" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Monday, July 28, 2008 11:58 AM
Subject: Re: jsmx and progress bar


> for 'JSMX', it allows us to make calls to the server to do functions that 
> can return results.
>
> we want to show a progress bar while it is on the server running the 
> function to show the user how long it will be before the server returns 
> the result
>
>
>>Progress bar for what? For multiple page cart? For loading content? For
>>users RSVPing?
>>
>>Richard White wrote:
>>> hi
>>>
>>> does anyone have any ideas on how to achieve this?
>>>
>>> thanks
>>>
>>>
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309819
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: [ot] - Payment Gateways?

2008-07-28 Thread Al Musella, DPM
I use google checkout for a non-profit organization - they do not 
charge any processing fees for nonprofits - at least until the end of 2009...
   they have been excellent so far.

At 09:10 PM 7/27/2008, William Seiter wrote:

>I get the feeling that Paypal is a bad choice.
>
>I have had some runins with them not being very helpful as a buyer, but I
>just assumed their main focus was on the seller.  Apparently their main
>focus in on themselves.  Hmmm
>
>Anyone have any experience with Google Checkout or any other companies that
>I should look into?
>
>William



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309818
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Barclays ePDQ MPI Integration

2008-07-28 Thread Paul Giesenhagen
Thank you Les, I am looking for the code that is posting to the bank for 
authorization .. anything you can provide you can email to [EMAIL PROTECTED]

Thank you!


-Original Message-
From: Les Mizzell [mailto:[EMAIL PROTECTED]
Sent: Monday, July 28, 2008 1:54 PM
To: CF-Talk
Subject: Re: Barclays ePDQ MPI Integration

>> Has anyone out there had any success in connecting via XML to BarclayCards 
>> ePDQ MPI?


I have a Barclays payment gateway set up for a company that sells
insurance to traveling medical personal. I've had a death in the family
and will be out for a few days, but would be happy to assist towards the
end of the week.

Hardest part was the lack of any type of sandbox text environment to be
sure it was working correctly! You could only run *real* transactions
through the Barclays system. Ack!



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309817
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Right of @ Replace email

2008-07-28 Thread Greg Morphis
Yeah, sorry I'm in DB land.. but I knew it would help get you to where
you needed to be.

On Mon, Jul 28, 2008 at 1:54 PM, Paul Ihrig <[EMAIL PROTECTED]> wrote:
> thanks Greg
> instr isnt a function in CFC
> but you lead me to
> #right(getaUser.usr_email, find('@', getaUser.usr_email))#
>
> which is just what i wanted.
> thanks!
> -paul
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309816
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Right of @ Replace email

2008-07-28 Thread Paul Ihrig
Robert that works great as well.
thanks

On Mon, Jul 28, 2008 at 2:40 PM, Robert Harrison
<[EMAIL PROTECTED]> wrote:
> Try
>
> #ListLast(myfield,"@")#
>
> Robert B. Harrison
> Director of Interactive services
> Austin & Williams
> 125 Kennedy Drive, Suite 100 Hauppauge NY 11788
> T : 631.231.6600 Ext. 119
> F : 631.434.7022
> www.austin-williams.com
>
> Great advertising can't be either/or... It must be &.
>
>

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309815
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: jsmx and progress bar

2008-07-28 Thread Richard White
for 'JSMX', it allows us to make calls to the server to do functions that can 
return results. 

we want to show a progress bar while it is on the server running the function 
to show the user how long it will be before the server returns the result


>Progress bar for what? For multiple page cart? For loading content? For 
>users RSVPing?
>
>Richard White wrote:
>> hi
>> 
>> does anyone have any ideas on how to achieve this? 
>> 
>> thanks 
>> 
>> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309814
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


can't enable debug output in coldfusion 8

2008-07-28 Thread Alex I
already re-installed CF8 and can't find any solution...
i'm simply trying to enable debug output in CF admin and nothing happens when i 
check "Enable Robust Exception Information" setting.
"Request Debugging" is not working as well. (?cfdebug)

BTW, running CF8 on Vista32/IIS7

anyone else having similar problems? thanks! 


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309813
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Right of @ Replace email

2008-07-28 Thread Paul Ihrig
thanks Greg
instr isnt a function in CFC
but you lead me to
#right(getaUser.usr_email, find('@', getaUser.usr_email))#

which is just what i wanted.
thanks!
-paul

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309812
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Barclays ePDQ MPI Integration

2008-07-28 Thread Les Mizzell
>> Has anyone out there had any success in connecting via XML to BarclayCards 
>> ePDQ MPI?


I have a Barclays payment gateway set up for a company that sells 
insurance to traveling medical personal. I've had a death in the family 
and will be out for a few days, but would be happy to assist towards the 
end of the week.

Hardest part was the lack of any type of sandbox text environment to be 
sure it was working correctly! You could only run *real* transactions 
through the Barclays system. Ack!

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309811
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: Right of @ Replace email

2008-07-28 Thread Robert Harrison
Try

#ListLast(myfield,"@")#

Robert B. Harrison
Director of Interactive services
Austin & Williams
125 Kennedy Drive, Suite 100 Hauppauge NY 11788
T : 631.231.6600 Ext. 119 
F : 631.434.7022
www.austin-williams.com

Great advertising can't be either/or... It must be &.




__ NOD32 3302 (20080728) Information __

This message was checked by NOD32 antivirus system.
http://www.eset.com




~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309810
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Right of @ Replace email

2008-07-28 Thread Greg Morphis
what about something like
right(email, instr(email,'@')+1, len(email))

note: didn't test

On Mon, Jul 28, 2008 at 1:32 PM, Paul Ihrig <[EMAIL PROTECTED]> wrote:
> i know i have done this befor
> i am trying to get the values of an email address from right of the AT @ 
> symbol.
> so far i can get the stuff from the left
> then try to use replace to clear it out but next to my replace i still
> am retuning the domain like @gmail.com
> i just want gmail.com
>
> 
> 
> Email: #getaUser.usr_email#
> Exclude: #xclude# 
> Replace: #Replace(getaUser.usr_email, xclude, '')#
> 
>
>
> i tried #Replace(getaUser.usr_email, xclude@, '')#
> but it freaks out on the @
>
> thanks folks
>
> -paul
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309809
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Right of @ Replace email

2008-07-28 Thread Paul Ihrig
i know i have done this befor
i am trying to get the values of an email address from right of the AT @ symbol.
so far i can get the stuff from the left
then try to use replace to clear it out but next to my replace i still
am retuning the domain like @gmail.com
i just want gmail.com



Email: #getaUser.usr_email#
Exclude: #xclude# 
Replace: #Replace(getaUser.usr_email, xclude, '')#



i tried #Replace(getaUser.usr_email, xclude@, '')#
but it freaks out on the @

thanks folks

-paul

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309808
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: jsmx and progress bar

2008-07-28 Thread Phillip M. Vector
Progress bar for what? For multiple page cart? For loading content? For 
users RSVPing?

Richard White wrote:
> hi
> 
> does anyone have any ideas on how to achieve this? 
> 
> thanks 
> 
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309807
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben Forta

2008-07-28 Thread Mary Jo Sminkey
>This has *not* been heavily tested as of yet, so use at your own risk! 

There was a little mistake in the scanner I posted earlier that could cause it 
to hang, if anyone downloaded it before, please grab the updated copy.

In just some basic iteration checking, the new version does appear to be 
significantly more efficient, with an average of 1.5 ms to process a large form 
submission, versus about 10 ms with the old method. So thanks Gabriel, nice 
improvement! 

--- Mary Jo



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309806
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: jsmx and progress bar

2008-07-28 Thread Richard White
hi

does anyone have any ideas on how to achieve this? 

thanks 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309805
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Data source [datasourceNameHere] verification failed

2008-07-28 Thread Joe Velez
Here's an interesting one I recently had issues with.
The server only has about 8 sites running on it, 1 is a city web site 
which does get a lot of traffic, but the server should still be able to 
handle it.

Recently, I've been seeing this type of error:

Data source [myDatasource] verification failed.
The root cause was that: java.sql.SQLException: Datasource names for all 
the database tags within CFTRANSACTION must be the same

What's ironic is that I'm not even using CFTRANSACTION

Any ideas why this would keep occurring? So far it's been happening to a 
couple sites. A quick restart of CF typically fixes it. And sometimes if 
I just hit refresh a half dozen or so times the site starts to work again.

Thanks for any insight.

Joe Velez



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309804
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: CFPOP and Email gateway

2008-07-28 Thread Varun Dixit
Thanks for the info Dave. It's always good to know of alternate solutions, but, 
I was thinking more on the line of gateway which would continuously listen for 
emails (just like it would do for SMS messages), any thoughts on that? Is it 
possible to listen for emails at all?

>Varun,
>
>I forgot to mention that I have my VB app running as a Service on my server.
>
>Dave
>
>Varun,
>
>I had an issue like this and couldn't find a 'pure' ColdFusion solution.  I
>ended up building a little VB app that checked the mailbox every 5 seconds
>to see if had any mail and then, if it did, it would then execute my CF page
>to pull the mail.  Of course, I was checking every 5 seconds, and, as a
>result, since it would take longer than 5 seconds for my page to run, I had
>the issue of multiple requests trying to process the mail at the same time.
>So, I set up a DB variable that would, in effect, 'lock' the process so that
>it could only be running once at any given time.  Once the VB app saw there
>was mail, it would start firing the CF request (it would shell out to WGET
>which would execute the HTTP call to the CF page) every 5 seconds until
>there was no mail anymore.  The first request would actually start the
>processing and the remaining requests would just abort because the process
>was already running.
>
>This has been working well for us for two months now.
>
>I'm sure there are other ways to accomplish this, and maybe even a 'Pure'
>ColdFusion solution, but I found the overhead on CFPOP so slow that I
>couldn't reliably expect it to check for messages every 5 seconds
>successfully without killing my server (sometimes a single CFPOP call would
>take more than 5 seconds anyway).
>
>HTH,
>
>Dave
>
>I have a CRM tool which uses CFPOP to pull the email from the mailbox,
>parses those email and connects them to an existing open tickets in the CRM
>tool for that email address. 
>I have a scheduled task which runs every 15 minutes and does the pull,parse
>and append. I need to have this task run every 2 minutes but because we have
>a lot already going on in that tool it has huge performance issues.
>
>I was thinkin may be, if there is a email gateway or some other method to
>continusouly listen the mailbox and as soon as we get email parse it, append
>it. 
>
>Please advise if any of you have ever looked into some solutions where the
>app can continuously listen for event (email in this case) without having
>huge performance impact.
>
>Thanks 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309803
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben Forta

2008-07-28 Thread Mary Jo Sminkey
Version 2 of the scanner I did is now available here:

http://www.cfwebstore.com/index.cfm?fuseaction=page.download&downloadID=18

This has *not* been heavily tested as of yet, so use at your own risk! 


--- Mary Jo



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309802
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client Certificate Validation in Coldfusion 8

2008-07-28 Thread Web Specialist
Mike,

Your validation needs to occur at handshake level but I don't know how to do
that:

http://docs.sun.com/app/docs/doc/820-2493/aakhe?l=en&a=view

Cheers
Marco Antonio

On Mon, Jul 28, 2008 at 12:12 PM, Mike Henry <[EMAIL PROTECTED]> wrote:

> This looks like a great tool...  I installed it and appears to be useful,
> but the client certificate isn't stored on the server.  It's presented by
> the client at run-time through SSL.  I don't know how to get the client cert
> from Coldfusion.  I appear to only have access to the CGI variables in
> coldfusion.  The CGI.CERT_SUBJECT contains some of the cert information, but
> not the validity dates.
>
> Any additional support you can provide would be greatly appreciated.
>
> Thanks, Mike
>
> >Mike, because our application needs to create and validate certificates,
> >openssl is a great tool to do that.
> >
> >Another option for you is certman custom tags. This custom tags display
> >certificate dates. Do you can download this great tool here and study his
> >routines:
> >
> >http://certman.riaforge.org/
> >
> >Cheers
> >Marco Antonio
> >
> >
> >
> >
> >>
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309801
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client Certificate Validation in Coldfusion 8

2008-07-28 Thread Mike Henry
This looks like a great tool...  I installed it and appears to be useful, but 
the client certificate isn't stored on the server.  It's presented by the 
client at run-time through SSL.  I don't know how to get the client cert from 
Coldfusion.  I appear to only have access to the CGI variables in coldfusion.  
The CGI.CERT_SUBJECT contains some of the cert information, but not the 
validity dates.

Any additional support you can provide would be greatly appreciated.

Thanks, Mike

>Mike, because our application needs to create and validate certificates,
>openssl is a great tool to do that.
>
>Another option for you is certman custom tags. This custom tags display
>certificate dates. Do you can download this great tool here and study his
>routines:
>
>http://certman.riaforge.org/
>
>Cheers
>Marco Antonio
>
>
>
>
>> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309800
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben Forta

2008-07-28 Thread Mary Jo Sminkey
>The code on my blog is a working example, but it's not
>"drop in" ready - you would still need to check the form and cookie scope
>for example... So either way you will need to do some tweaking to get it to
>work for you situation.

I'm going to post an updated version of my tool later today, just want to run a 
few tests on it first. As I noted on your blog though Mark, the original RegEx 
was Gabriel's work as well. I just used it to create the scanner tool. My 
ability to write regular expressions is rudimentary at best. ;-) 

--- Mary Jo



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309799
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Newb AJAX question

2008-07-28 Thread Phillip M. Vector
Well...

As I see it, if something Norton cooked up is preventing you from seeing 
what domain the user is going to, then the easiest thing is to remove 
Norton from the users computer (and I'm always in support of removing 
that spyware).

I suppose that you can use a onload to write a value (the page location) 
to the DB and then cause the page to redirect to that specific page 
within the iframe (which you shouldn't use anyway since frames are going 
out with HTML 5.0).

No AJAX required.

Bret McDermitt wrote:
> Thanks for the feedback. So this seems more like a work-around instead of a 
> fix, there's no way you can think of to get this done using a JS include and 
> ajax? Appreciate it.
> Bret
> 
>> Why not check for the CGI variable and if it doesn't exist (or if it's 
>>
>> blank, I'm not sure what it looks like), then put up a message saying 
>> to 
>> please turn it back on (with directions on how).
>>
>> That bypasses any issue you may have. Granted, it may upset a few 
>> people, but honestly, they shouldn't be using nortons anyway.
>>
>> Bret McDermitt wrote:
>>> I have a framed app and I'm trying to authenticate it's use by 
>> domain. So if someone in domain a.com wants to use it, I would like to 
>> be able to check and see if that domain is authorized. Norton killed 
>> my odds of going the CGI route, now I'm wondering if I can give the 
>> clients a JS script include which would post their 'document.location' 
>> to my server and I could send back the key to populate the iframe with 
>> an authenticated app URL?
>>> Easier said than done? I've been mulling this over a while and I 
>> can't seem to get it right from an architecture standpoint. Any 
>> thoughts?
>>> Thanks, Bret 
>>>
>>>
> 
> 
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309798
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Newb AJAX question

2008-07-28 Thread Tom Chiverton
On Monday 28 Jul 2008, Bret McDermitt wrote:
> I have a framed app and I'm trying to authenticate it's use by domain. So
> if someone in domain a.com wants to use it, I would like to be able to
> check and see if that domain is authorized. Norton killed my odds of going
> the CGI route,

Tell me you weren't relying on CGI.REFERER ...

-- 
Tom Chiverton



This email is sent for and on behalf of Halliwells LLP.

Halliwells LLP is a limited liability partnership registered in England and 
Wales under registered number OC307980 whose registered office address is at 
Halliwells LLP, 3 Hardman Square, Spinningfields, Manchester, M3 3EB.  A list 
of members is available for inspection at the registered office. Any reference 
to a partner in relation to Halliwells LLP means a member of Halliwells LLP.  
Regulated by The Solicitors Regulation Authority.

CONFIDENTIALITY

This email is intended only for the use of the addressee named above and may be 
confidential or legally privileged.  If you are not the addressee you must not 
read it and must not use any information contained in nor copy it nor inform 
any person other than Halliwells LLP or the addressee of its existence or 
contents.  If you have received this email in error please delete it and notify 
Halliwells LLP IT Department on 0870 365 2500.

For more information about Halliwells LLP visit www.halliwells.com.

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309797
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Newb AJAX question

2008-07-28 Thread Bret McDermitt
Thanks for the feedback. So this seems more like a work-around instead of a 
fix, there's no way you can think of to get this done using a JS include and 
ajax? Appreciate it.
Bret

> Why not check for the CGI variable and if it doesn't exist (or if it's 
> 
> blank, I'm not sure what it looks like), then put up a message saying 
> to 
> please turn it back on (with directions on how).
> 
> That bypasses any issue you may have. Granted, it may upset a few 
> people, but honestly, they shouldn't be using nortons anyway.
> 
> Bret McDermitt wrote:
> > I have a framed app and I'm trying to authenticate it's use by 
> domain. So if someone in domain a.com wants to use it, I would like to 
> be able to check and see if that domain is authorized. Norton killed 
> my odds of going the CGI route, now I'm wondering if I can give the 
> clients a JS script include which would post their 'document.location' 
> to my server and I could send back the key to populate the iframe with 
> an authenticated app URL?
> > 
> > Easier said than done? I've been mulling this over a while and I 
> can't seem to get it right from an architecture standpoint. Any 
> thoughts?
> > 
> > Thanks, Bret 
> > 
> > 


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309796
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client Certificate Validation in Coldfusion 8

2008-07-28 Thread Web Specialist
Mike, because our application needs to create and validate certificates,
openssl is a great tool to do that.

Another option for you is certman custom tags. This custom tags display
certificate dates. Do you can download this great tool here and study his
routines:

http://certman.riaforge.org/

Cheers
Marco Antonio


On Mon, Jul 28, 2008 at 11:09 AM, Mike Henry <[EMAIL PROTECTED]> wrote:

> Thanks for the reply...  Are you using this to validate Client
> Certificates?  On the server, I don't have access to the "PEM" file for the
> client cert.  In addition, I don't think I want to run a batch process from
> a web transaction.
>
> Can I implicitly trust IIS (or any webserver) to validate the date for the
> certificate?  My client wants to add an additional level of validation on
> the application server.  They provided the following example from .NET:
>
> session("PK_Expire_Date")=Request.ClientCertificate("ValidUntil")
>
> Is there a way to get to the client cert ValidUntil date in Coldfusion?
>
>
>
> >I'm using openssl to do this task.
> >After download openSSL(http://www.openssl.org/related/binaries.html) our
> CF
> >application runs a bat with this command:
> >
> >openssl x509 -in %path2PEMfile% -noout -enddate
> >
> >Cheers
> >Marco Antonio
> >
> >
> >On Thu, Jul 24, 2008 at 3:44 PM, Mike Henry <[EMAIL PROTECTED]> wrote:
> >
> >>
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309795
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben Forta

2008-07-28 Thread Mark Kruger
Che,

That depends... Mary Jo's function does all the scope checking for you ...
So you might want to use the reMatcher.reset().find() in Mary Jo's function
in place of the call to checkSQLInject() inside of the checkforattack()
function. That would make use of Gabriel's cod, but keep all the
looping/checking inside of Mary Jo's function. You get the best of both
worlds that way :)  The code on my blog is a working example, but it's not
"drop in" ready - you would still need to check the form and cookie scope
for example... So either way you will need to do some tweaking to get it to
work for you situation.

-Mark 

-Original Message-
From: Che Vilnonis [mailto:[EMAIL PROTECTED] 
Sent: Monday, July 28, 2008 9:01 AM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

Thanks Mark. So, the function checkSQLInject(str) and the function
checkforattack() are no longer needed from Mary's original blocker.cfm file?


-Original Message-
From: Mark Kruger [mailto:[EMAIL PROTECTED]
Sent: Monday, July 28, 2008 9:52 AM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

Che,

I tested a working example of his code... I posted on my blog if you want
the skinny.

http://www.coldfusionmuse.com

-Mark 

-Original Message-
From: Che Vilnonis [mailto:[EMAIL PROTECTED]
Sent: Monday, July 28, 2008 8:46 AM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

Gabriel... would you post the page in complete working order with your code
modifications? Thanks!

-Original Message-
From: Gabriel [mailto:[EMAIL PROTECTED]
Sent: Sunday, July 27, 2008 8:05 PM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

To anyone who happened to use the regex I posted earlier I have an updated
method to be used in place, effective immediately.

// Short list of db objects to protect
DBObj.short = 'database|function|procedure|role|table|trigger|user|view';

// Sql Threat Indicators
blackList = '@@|' &
'(?:alter.*?(#DBObj.short#))|' &
'cast.*?\(|' &
'char.*?\([\w]{2}\)|' &
'(?:create.*?(#DBObj.short#))|' &
'(?:declare.*?@|cursor)|' &
'delete.*?from.*?_|' &
'(?:drop.*?(#DBObj.short#))|' &
'exec.*?\(|' &
'insert.*?values.*?\(+?|' &
'schema[^\w]+?|' &
'sysObjects|' &
'truncate.*?table|' &
'update.*?set+?|' &
'[sx]p_[\w_]+?|' &
'\''.*?-{2}|-{2}.*?\''' &
'/\*.*?\*/';
 
// Build the java pattern matcher
rePattern = createObject('java', 'java.util.regex.Pattern'); rePattern =
rePattern.compile(blackList); reMatcher = rePattern.matcher('');

Then use reMatcher.reset(lcase(var_to_scan)).find() to scan the var.

This will fix a problem in which a long string containing too many back
references for non-word chars can cause a stack overflow. As much as I love
CF, I find the native regex implementation sadly lacking.

My apologies to anyone already using it, I guess this is what I get being
drawn into posting code I hadn't had a chance to fully test. If anyone has
problems with, or enhancements to the above, please let me know.

Also, thank you to Mary Jo for adding me to the credits. My surname is Read
FYI in case you still desire to include me.

Regards,
Gabriel Read

-Original Message-
From: Mary Jo Sminkey [mailto:[EMAIL PROTECTED]
Sent: Saturday, 26 July 2008 5:40 AM
To: CF-Talk
Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

>What do you think about this solution for sites with 5000 files:

This looks similar to the solution I am providing to my customers (I have a
lot that run old releases that are not as well protected as my current one
and have little desire to either update their software *or* the code). I
used the RedEx that Gabriel posted (sorry, don't know your last name as I
read this list online, let me know and I'll add that to the credits!) and
made a URL/Form scanner that will abort the page if it finds anything
illegal. This looks quite a bit more sophisticated, so it depends on how
much you are getting hit, and how aggressive you want to get.

My simple tool is here, feel free to download and modify as you wish. 

http://www.cfwebstore.com/index.cfm?fuseaction=page.download&downloadID=17

--- Mary Jo









~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309794
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Sticky Sessions - managing session variables- Any Difference?

2008-07-28 Thread coldfusion . developer
Is there a difference between regular application, session variable managment 
vs how it 
should be done using sticky sessions?  

Does anyone know of any good articles?

Thanks

D


~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309793
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client Certificate Validation in Coldfusion 8

2008-07-28 Thread Mike Henry
Thanks for the reply...  Are you using this to validate Client Certificates?  
On the server, I don't have access to the "PEM" file for the client cert.  In 
addition, I don't think I want to run a batch process from a web transaction.

Can I implicitly trust IIS (or any webserver) to validate the date for the 
certificate?  My client wants to add an additional level of validation on the 
application server.  They provided the following example from .NET:

session("PK_Expire_Date")=Request.ClientCertificate("ValidUntil") 

Is there a way to get to the client cert ValidUntil date in Coldfusion?



>I'm using openssl to do this task.
>After download openSSL(http://www.openssl.org/related/binaries.html) our CF
>application runs a bat with this command:
>
>openssl x509 -in %path2PEMfile% -noout -enddate
>
>Cheers
>Marco Antonio
>
>
>On Thu, Jul 24, 2008 at 3:44 PM, Mike Henry <[EMAIL PROTECTED]> wrote:
>
>> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309792
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben Forta

2008-07-28 Thread Che Vilnonis
Thanks Mark. So, the function checkSQLInject(str) and the function
checkforattack() are no longer needed from Mary's original blocker.cfm file?


-Original Message-
From: Mark Kruger [mailto:[EMAIL PROTECTED] 
Sent: Monday, July 28, 2008 9:52 AM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

Che,

I tested a working example of his code... I posted on my blog if you want
the skinny.

http://www.coldfusionmuse.com

-Mark 

-Original Message-
From: Che Vilnonis [mailto:[EMAIL PROTECTED]
Sent: Monday, July 28, 2008 8:46 AM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

Gabriel... would you post the page in complete working order with your code
modifications? Thanks!

-Original Message-
From: Gabriel [mailto:[EMAIL PROTECTED]
Sent: Sunday, July 27, 2008 8:05 PM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

To anyone who happened to use the regex I posted earlier I have an updated
method to be used in place, effective immediately.

// Short list of db objects to protect
DBObj.short = 'database|function|procedure|role|table|trigger|user|view';

// Sql Threat Indicators
blackList = '@@|' &
'(?:alter.*?(#DBObj.short#))|' &
'cast.*?\(|' &
'char.*?\([\w]{2}\)|' &
'(?:create.*?(#DBObj.short#))|' &
'(?:declare.*?@|cursor)|' &
'delete.*?from.*?_|' &
'(?:drop.*?(#DBObj.short#))|' &
'exec.*?\(|' &
'insert.*?values.*?\(+?|' &
'schema[^\w]+?|' &
'sysObjects|' &
'truncate.*?table|' &
'update.*?set+?|' &
'[sx]p_[\w_]+?|' &
'\''.*?-{2}|-{2}.*?\''' &
'/\*.*?\*/';
 
// Build the java pattern matcher
rePattern = createObject('java', 'java.util.regex.Pattern'); rePattern =
rePattern.compile(blackList); reMatcher = rePattern.matcher('');

Then use reMatcher.reset(lcase(var_to_scan)).find() to scan the var.

This will fix a problem in which a long string containing too many back
references for non-word chars can cause a stack overflow. As much as I love
CF, I find the native regex implementation sadly lacking.

My apologies to anyone already using it, I guess this is what I get being
drawn into posting code I hadn't had a chance to fully test. If anyone has
problems with, or enhancements to the above, please let me know.

Also, thank you to Mary Jo for adding me to the credits. My surname is Read
FYI in case you still desire to include me.

Regards,
Gabriel Read

-Original Message-
From: Mary Jo Sminkey [mailto:[EMAIL PROTECTED]
Sent: Saturday, 26 July 2008 5:40 AM
To: CF-Talk
Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

>What do you think about this solution for sites with 5000 files:

This looks similar to the solution I am providing to my customers (I have a
lot that run old releases that are not as well protected as my current one
and have little desire to either update their software *or* the code). I
used the RedEx that Gabriel posted (sorry, don't know your last name as I
read this list online, let me know and I'll add that to the credits!) and
made a URL/Form scanner that will abort the page if it finds anything
illegal. This looks quite a bit more sophisticated, so it depends on how
much you are getting hit, and how aggressive you want to get.

My simple tool is here, feel free to download and modify as you wish. 

http://www.cfwebstore.com/index.cfm?fuseaction=page.download&downloadID=17

--- Mary Jo







~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309791
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben Forta

2008-07-28 Thread Mark Kruger
Che,

I tested a working example of his code... I posted on my blog if you want
the skinny.

http://www.coldfusionmuse.com

-Mark 

-Original Message-
From: Che Vilnonis [mailto:[EMAIL PROTECTED] 
Sent: Monday, July 28, 2008 8:46 AM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

Gabriel... would you post the page in complete working order with your code
modifications? Thanks!

-Original Message-
From: Gabriel [mailto:[EMAIL PROTECTED]
Sent: Sunday, July 27, 2008 8:05 PM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

To anyone who happened to use the regex I posted earlier I have an updated
method to be used in place, effective immediately.

// Short list of db objects to protect
DBObj.short = 'database|function|procedure|role|table|trigger|user|view';

// Sql Threat Indicators
blackList = '@@|' &
'(?:alter.*?(#DBObj.short#))|' &
'cast.*?\(|' &
'char.*?\([\w]{2}\)|' &
'(?:create.*?(#DBObj.short#))|' &
'(?:declare.*?@|cursor)|' &
'delete.*?from.*?_|' &
'(?:drop.*?(#DBObj.short#))|' &
'exec.*?\(|' &
'insert.*?values.*?\(+?|' &
'schema[^\w]+?|' &
'sysObjects|' &
'truncate.*?table|' &
'update.*?set+?|' &
'[sx]p_[\w_]+?|' &
'\''.*?-{2}|-{2}.*?\''' &
'/\*.*?\*/';
 
// Build the java pattern matcher
rePattern = createObject('java', 'java.util.regex.Pattern'); rePattern =
rePattern.compile(blackList); reMatcher = rePattern.matcher('');

Then use reMatcher.reset(lcase(var_to_scan)).find() to scan the var.

This will fix a problem in which a long string containing too many back
references for non-word chars can cause a stack overflow. As much as I love
CF, I find the native regex implementation sadly lacking.

My apologies to anyone already using it, I guess this is what I get being
drawn into posting code I hadn't had a chance to fully test. If anyone has
problems with, or enhancements to the above, please let me know.

Also, thank you to Mary Jo for adding me to the credits. My surname is Read
FYI in case you still desire to include me.

Regards,
Gabriel Read

-Original Message-
From: Mary Jo Sminkey [mailto:[EMAIL PROTECTED]
Sent: Saturday, 26 July 2008 5:40 AM
To: CF-Talk
Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

>What do you think about this solution for sites with 5000 files:

This looks similar to the solution I am providing to my customers (I have a
lot that run old releases that are not as well protected as my current one
and have little desire to either update their software *or* the code). I
used the RedEx that Gabriel posted (sorry, don't know your last name as I
read this list online, let me know and I'll add that to the credits!) and
made a URL/Form scanner that will abort the page if it finds anything
illegal. This looks quite a bit more sophisticated, so it depends on how
much you are getting hit, and how aggressive you want to get.

My simple tool is here, feel free to download and modify as you wish. 

http://www.cfwebstore.com/index.cfm?fuseaction=page.download&downloadID=17

--- Mary Jo





~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309790
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben Forta

2008-07-28 Thread Che Vilnonis
Gabriel... would you post the page in complete working order with your code
modifications? Thanks!

-Original Message-
From: Gabriel [mailto:[EMAIL PROTECTED] 
Sent: Sunday, July 27, 2008 8:05 PM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

To anyone who happened to use the regex I posted earlier I have an updated
method to be used in place, effective immediately.

// Short list of db objects to protect
DBObj.short = 'database|function|procedure|role|table|trigger|user|view';

// Sql Threat Indicators
blackList = '@@|' &
'(?:alter.*?(#DBObj.short#))|' &
'cast.*?\(|' &
'char.*?\([\w]{2}\)|' &
'(?:create.*?(#DBObj.short#))|' &
'(?:declare.*?@|cursor)|' &
'delete.*?from.*?_|' &
'(?:drop.*?(#DBObj.short#))|' &
'exec.*?\(|' &
'insert.*?values.*?\(+?|' &
'schema[^\w]+?|' &
'sysObjects|' &
'truncate.*?table|' &
'update.*?set+?|' &
'[sx]p_[\w_]+?|' &
'\''.*?-{2}|-{2}.*?\''' &
'/\*.*?\*/';
 
// Build the java pattern matcher
rePattern = createObject('java', 'java.util.regex.Pattern'); rePattern =
rePattern.compile(blackList); reMatcher = rePattern.matcher('');

Then use reMatcher.reset(lcase(var_to_scan)).find() to scan the var.

This will fix a problem in which a long string containing too many back
references for non-word chars can cause a stack overflow. As much as I love
CF, I find the native regex implementation sadly lacking.

My apologies to anyone already using it, I guess this is what I get being
drawn into posting code I hadn't had a chance to fully test. If anyone has
problems with, or enhancements to the above, please let me know.

Also, thank you to Mary Jo for adding me to the credits. My surname is Read
FYI in case you still desire to include me.

Regards,
Gabriel Read

-Original Message-
From: Mary Jo Sminkey [mailto:[EMAIL PROTECTED]
Sent: Saturday, 26 July 2008 5:40 AM
To: CF-Talk
Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

>What do you think about this solution for sites with 5000 files:

This looks similar to the solution I am providing to my customers (I have a
lot that run old releases that are not as well protected as my current one
and have little desire to either update their software *or* the code). I
used the RedEx that Gabriel posted (sorry, don't know your last name as I
read this list online, let me know and I'll add that to the credits!) and
made a URL/Form scanner that will abort the page if it finds anything
illegal. This looks quite a bit more sophisticated, so it depends on how
much you are getting hit, and how aggressive you want to get.

My simple tool is here, feel free to download and modify as you wish. 

http://www.cfwebstore.com/index.cfm?fuseaction=page.download&downloadID=17

--- Mary Jo



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309789
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: Barclays ePDQ MPI Integration

2008-07-28 Thread Paul Vernon
I've never used BarclayCard to do this but have used many, many others... Do
you have any URL's to documentation, or a specific problem you need to test
for? I can certainly take a look for you...

Paul

> 
> Just Bumping and hopefully someone will have dealt with this...
> 
> >Heya Folks,
> >
> >Has anyone out there had any success in connecting via XML to
> BarclayCards ePDQ MPI?
> >
> >Having some troubles and would like some help . .. example code would
> be tremendous...
> >
> >Thank you in advance
> >
> >Paul
> 




~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309788
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Barclays ePDQ MPI Integration

2008-07-28 Thread [EMAIL PROTECTED] [EMAIL PROTECTED]
Just Bumping and hopefully someone will have dealt with this...

>Heya Folks,
>
>Has anyone out there had any success in connecting via XML to BarclayCards 
>ePDQ MPI?
>
>Having some troubles and would like some help . .. example code would be 
>tremendous...
>
>Thank you in advance
>
>Paul 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309787
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: [ot] - Payment Gateways?

2008-07-28 Thread Gerald Guido
>>it may be just because Paypal having been around for such a long time,
there are more people using it,
thus more people to report problems.


This is true, but my impression is that it not so much people having
problems as much as the "Shoot first, ask questions later" approach that
they take that people find so disconcerting.

Mike Kear's was not the first story I had heard about Paypal's draconian
fraud prevention policies.

http://www.somethingawful.com/d/news/paypal-fiasco-summary.php

~G~


On Sun, Jul 27, 2008 at 9:56 PM, Claude Schneegans <
[EMAIL PROTECTED]> wrote:

>  >>Anyone have any experience with Google Checkout or any other
> companies that
> I should look into?
>
>
> Yes, good question.
> I have the feeling that if a significant number of developers here are
> complaining about Paypal,
> it may be just because Paypal having been around for such a long time,
> there are more people using it,
> thus more people to report problems.
>
> I just developed my own payment module for a customer, and so far my
> experience with
> the Paypal technical support has been a bad experience.
> Obviously, the person at the desk didn't even know what HTTP and HTTP
> request are all about.
>
> --
> ___
> REUSE CODE! Use custom tags;
> See http://www.contentbox.com/claude/customtags/tagstore.cfm
> (Please send any spam to this address: [EMAIL PROTECTED])
> Thanks.
>
>
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309786
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: (ot) URL Hack Attempt Leaves Me Scractching My Head

2008-07-28 Thread Mark Kruger
Gabriel,

One that might need adding is execute. 

"execute something"   

I notice you are trapping " sp_" nice catch.

Mark A. Kruger, CFG, MCSE
(402) 408-3733 ext 105
www.cfwebtools.com
www.coldfusionmuse.com
www.necfug.com

-Original Message-
From: Gabriel [mailto:[EMAIL PROTECTED] 
Sent: Sunday, July 27, 2008 7:05 PM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

To anyone who happened to use the regex I posted earlier I have an updated
method to be used in place, effective immediately.

// Short list of db objects to protect
DBObj.short = 'database|function|procedure|role|table|trigger|user|view';

// Sql Threat Indicators
blackList = '@@|' &
'(?:alter.*?(#DBObj.short#))|' &
'cast.*?\(|' &
'char.*?\([\w]{2}\)|' &
'(?:create.*?(#DBObj.short#))|' &
'(?:declare.*?@|cursor)|' &
'delete.*?from.*?_|' &
'(?:drop.*?(#DBObj.short#))|' &
'exec.*?\(|' &
'insert.*?values.*?\(+?|' &
'schema[^\w]+?|' &
'sysObjects|' &
'truncate.*?table|' &
'update.*?set+?|' &
'[sx]p_[\w_]+?|' &
'\''.*?-{2}|-{2}.*?\''' &
'/\*.*?\*/';
 
// Build the java pattern matcher
rePattern = createObject('java', 'java.util.regex.Pattern'); rePattern =
rePattern.compile(blackList); reMatcher = rePattern.matcher('');

Then use reMatcher.reset(lcase(var_to_scan)).find() to scan the var.

This will fix a problem in which a long string containing too many back
references for non-word chars can cause a stack overflow. As much as I love
CF, I find the native regex implementation sadly lacking.

My apologies to anyone already using it, I guess this is what I get being
drawn into posting code I hadn't had a chance to fully test. If anyone has
problems with, or enhancements to the above, please let me know.

Also, thank you to Mary Jo for adding me to the credits. My surname is Read
FYI in case you still desire to include me.

Regards,
Gabriel Read

-Original Message-
From: Mary Jo Sminkey [mailto:[EMAIL PROTECTED]
Sent: Saturday, 26 July 2008 5:40 AM
To: CF-Talk
Subject: Re: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

>What do you think about this solution for sites with 5000 files:

This looks similar to the solution I am providing to my customers (I have a
lot that run old releases that are not as well protected as my current one
and have little desire to either update their software *or* the code). I
used the RedEx that Gabriel posted (sorry, don't know your last name as I
read this list online, let me know and I'll add that to the credits!) and
made a URL/Form scanner that will abort the page if it finds anything
illegal. This looks quite a bit more sophisticated, so it depends on how
much you are getting hit, and how aggressive you want to get.

My simple tool is here, feel free to download and modify as you wish. 

http://www.cfwebstore.com/index.cfm?fuseaction=page.download&downloadID=17

--- Mary Jo



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309785
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben Forta

2008-07-28 Thread Mark Kruger
Gabriel, 

Nice job on this.  Looks like it works rather spendidly.

-Mark



Mark A. Kruger, CFG, MCSE
(402) 408-3733 ext 105
www.cfwebtools.com
www.coldfusionmuse.com
www.necfug.com

-Original Message-
From: Gabriel [mailto:[EMAIL PROTECTED] 
Sent: Sunday, July 27, 2008 7:05 PM
To: CF-Talk
Subject: RE: (ot) URL Hack Attempt Leaves Me Scractching My Head... To Ben
Forta

To anyone who happened to use the regex I posted earlier I have an updated
method to be used in place, effective immediately.

// Short list of db objects to protect
DBObj.short = 'database|function|procedure|role|table|trigger|user|view';

// Sql Threat Indicators
blackList = '@@|' &
'(?:alter.*?(#DBObj.short#))|' &
'cast.*?\(|' &
'char.*?\([\w]{2}\)|' &
'(?:create.*?(#DBObj.short#))|' &
'(?:declare.*?@|cursor)|' &
'delete.*?from.*?_|' &
'(?:drop.*?(#DBObj.short#))|' &
'exec.*?\(|' &
'insert.*?values.*?\(+?|' &
'schema[^\w]+?|' &
'sysObjects|' &
'truncate.*?table|' &
'update.*?set+?|' &
'[sx]p_[\w_]+?|' &
'\''.*?-{2}|-{2}.*?\''' &
'/\*.*?\*/';
 
// Build the java pattern matcher
rePattern = createObject('java', 'java.util.regex.Pattern'); rePattern =
rePattern.compile(blackList); reMatcher = rePattern.matcher('');

Then use reMatcher.reset(lcase(var_to_scan)).find() to scan the var.

This will fix a problem in which a long string containing too many back
references for non-word chars can cause a stack overflow. As much as I love
CF, I find the native regex implementation sadly lacking.

My apologies to anyone already using it, I guess this is what I get being
drawn into posting code I hadn't had a chance to fully test. If anyone has
problems with, or enhancements to the above, please let me know.

Also, thank you to Mary Jo for adding me to the credits. My surname is Read
FYI in case you still desire to include me.

Regards,
Gabriel Read



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309784
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: Long running process - cflock & cfthread

2008-07-28 Thread Richard Meredith-Hardy
Thanks for this.

Actually the earlier response made me forget about the cleverness of
cfthread in this situation and look at just using cflock which I think does
the trick perfectly well.

Regards

Richard

> -Original Message-
> From: Rich Kroll [mailto:[EMAIL PROTECTED] 
> Sent: 28 July 2008 03:25
> To: CF-Talk
> Subject: Re: Long running process - cflock & cfthread
> 
> You could use java to manage this, take a look at creating a "guarded
> block":
> 
> http://java.sun.com/docs/books/tutorial/essential/concurrency/
> guardmeth.html
> 
> HTH,
> Rich
> 
> 
> 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309783
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4