Re: CF attack on a buddies server

2012-02-23 Thread James Holmes

This would confirm which patches are missing:

http://www.hackmycf.com/


--
Shu Ha Ri: Agile and .NET blog
http://www.bifrost.com.au/


On 24 February 2012 02:46, Pete Freitag  wrote:

>
> On Wed, Feb 22, 2012 at 7:55 PM, Ras Tafari  wrote:
>
> > any idea how they were able to get the file that ran into the cfide
> > directory? and what might prevent that part?
> > that's the most haunting part to him.  i said it was probably a
> > windows exploit first... not sure tho.
> >
>
> If they are running CF8 without security hotfixes then there is a really
> good chance that it was the FCKeditor vulnerability:
> http://www.adobe.com/support/security/bulletins/apsb09-09.html
>
> But there are also so many other things ways they could have done it. The
> bottom line is you want to make sure you have all security hotfixes in
> place, and then make sure everything is running with the least possible
> privilege. Otherwise its pretty easy to take control of your server!
>
> --
> Pete Freitag - Adobe Community Professional
> http://foundeo.com/ - ColdFusion Consulting & Products
> http://petefreitag.com/ - My Blog
> http://hackmycf.com - Is your ColdFusion Server Secure?
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350086
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: XML and "unicode: 0x1a"

2012-02-23 Thread Paul Hastings

On 2/24/2012 2:04 AM, Leigh wrote:
>
> Have you tried a regex replace of "\x1a" ? It *might* work. Worth a shot 
> anyway.

and there are several other codepoints that are illegal in XML. probably should 
sweep them all away. these are supposed to be a-ok for XML:

#x9 | #xA | #xD | [#x20-#xD7FF] | [#xE000-#xFFFD] | [#x1-#x10]
/* any Unicode character, excluding the surrogate blocks, FFFE, and . */

http://www.w3.org/TR/REC-xml/#charsets

so maybe this (probably wrong, regex isn't my strong suit):

[^\x09\x0A\x0D\x20-\xD7FF\xE000-\xFFFD\x1-x10]


-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.1913 / Virus Database: 2114/4827 - Release Date: 02/23/12



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350085
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


odd warning on startup of CF 7 ODBC service

2012-02-23 Thread Ben Conner

Hi,

We've been seeing the CF ODBC server becoming non-responsive to Access 
databases 
on occasion lately.  Trying to stop/restart it results in a hung process.  If 
we 
kill it, it won't come back up.

Restarting the server, I saw the following today in the event log which was 
rather odd:

A service process other than the one launched by the Service Control Manager 
connected when starting the ColdFusion MX 7 ODBC Server service.  The Service 
Control Manager launched process 3104 and process 596 connected instead.

Anyone have any insight as to the significance of this?

Thanks!

--Ben

-- 
Ben Conner  b...@webworldinc.com
Web World, Inc. 888-206-6486 or
PO Box 1122 480-704-2000
Queen Creek, AZ 85142



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350084
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Application Mappings RE: Ram Disk problem under load

2012-02-23 Thread Raymond Camden

Errr, you would think I would know that. ;)

How about I do you a favor. Don't tell anyone else. Email me off list
and try to make it a succinct and complete as possible. If you can
include code in a zip that's even better. I'll try to push this up the
change.

Also - please try in CF10 too.


On Thu, Feb 23, 2012 at 1:23 PM, Brook Davies  wrote:
>
> Whats the best way to contact Adobe Support?
>

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350083
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


cfgrid

2012-02-23 Thread Stephens, Larry V

New to using cfgrid and have a question or two.

I'm using a cfselect input with a query. It's possible that two or more items 
that are displayed will be very similar so I'll have the cfgrid in a hidden div 
that the user can pop open and do a lookup there where more information is 
displayed about each entry. For updates or inserts I plan on using a submit 
button that triggers a ColdFusion.Ajax.submitForm call (I don't want to process 
the entire form at this point). 

I think I have the javascript/jquery to append to my select box if an insert is 
made. Any suggestions on how to allow users to make their selection (without an 
update or insert) from the cfgrid => Ajax => callback routine where it can then 
be handled?


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350082
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


I need an html grid to auto calculate totals

2012-02-23 Thread Ray Meade

I have an HTML cfgrid that contains fields for quantity, name (which is the 
description of the work done), price and amount (the price times the quantity). 
Upon loading, the grid will start out blank (this is for new jobs). When the 
client starts entering data into the grid, I need the grid to calculate the 
total based upon quantity times price and update the amount field accordingly. 
I also need it to calculate the subtotal by adding all the amount fields in the 
grid together. Both the form and the grid MUST be in HTML format. I've tried to 
adapt several techniques I found online, but to no avail. I found some code 
that works flawlessly on a Flash formatted grid in a Flash form, but I can't 
seem to get it to work with an HTML formatted grid. Does anyone have any 
solution for this? It's driving me bonkers. Here is the code for the grid:


  
  
 
  
  

Any help would be greatly appreciated, thanks. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350081
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Application Mappings RE: Ram Disk problem under load

2012-02-23 Thread Brook Davies

Whats the best way to contact Adobe Support? 

-Original Message-
From: Raymond Camden [mailto:raymondcam...@gmail.com] 
Sent: February-23-12 10:51 AM
To: cf-talk
Subject: Re: Application Mappings RE: Ram Disk problem under load


I'd suggest pinging Adobe support. You are right - this is something that
was fixed. But it sounds like you have a -very- reproduceable case, which
makes it easier for them to fix.


On Thu, Feb 23, 2012 at 12:36 PM, Pete Freitag  wrote:
>
> Do you have code that calls ApplicationStop() on error or something I 
> wonder if that might cause the application scoped mappings to be 
> undefined for a split second while the application is reloading? Just a
guess.
>
>



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350080
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: XML and "unicode: 0x1a"

2012-02-23 Thread Leigh

Have you tried a regex replace of "\x1a" ? It *might* work. Worth a shot anyway.

 
-Leigh

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350079
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Application Mappings RE: Ram Disk problem under load

2012-02-23 Thread Brook Davies

Nope, no code that called onApplicationStop() at all...

-Original Message-
From: Pete Freitag [mailto:p...@foundeo.com] 
Sent: February-23-12 10:36 AM
To: cf-talk
Subject: Re: Application Mappings RE: Ram Disk problem under load


Do you have code that calls ApplicationStop() on error or something I wonder
if that might cause the application scoped mappings to be undefined for a
split second while the application is reloading? Just a guess.



On Thu, Feb 23, 2012 at 1:10 PM, Brook Davies  wrote:

>
> So we ran a load test last night with 100 concurrent users. Everything 
> went fine *except* this ram disk problem  and another problem with a 
> missing template include. Looking at it closer, both errors "Could not 
> find the included template" used application mappings to do the include.
>
> These are defined in the application.cfc:
>
> 
>
>  
>  
>  
>
> 
>
> Cf 8.01 had a hotfix that was supposed to fix  custom tag path 
> mappings acting up under load:
> http://kb2.adobe.com/cps/529/cpsid_52915.html
>
> 73761   Fix for the error "Cannot find CFML template for custom tag"
thrown
> under load when using THIS.customtagpath in application.cfc and 
> "enable per app settings" is enabled.
>
>
> But I am running CF 9.01 with all the hotfixes. BTW, I dumped the ram 
> disk after some failed includes and the file *did exist* on the ram disk.
>
> --
>
> I just did another load test this morning, however this time the load 
> was all done on a single application testing a form submission process 
> (this is where the include error was generated). No errors this time. 
> The difference between this test and the last test that generated lots 
> of errors is that this test did not run concurrent load on the other 
> side of this application which uses an application.cfc that extends 
> the main application.cfc via applicationProxy.cfc. It's a child 
> application that shares the main applications name and scope but also 
> enables client variables and does some other stuff (pseudo code below)
>
> 
>   
>  
>  
> 
>
> 
>
>  
>
> 
>
>  
>
> 
>
> ---
>
> So my guess is that because it doesn't include the application 
> mappings that it is somehow overwriting them when two requests run at 
> the same time.
> Strange I know, but that's the best I can figure. I am gonna run 
> another load test tomorrow night, and try adding the mappings into the 
> child application and see if that helps.
>
>
>
> Brook
>
>
> -Original Message-
> From: Brook Davies [mailto:cft...@logiforms.com]
> Sent: February-22-12 12:30 PM
> To: cf-talk
> Subject: RE: Ram Disk problem under load
>
>
> Hi Raymond,
>
> I don't see your reply actually... oh here it is in my junk 
> folder...g...
>
> Tonight when the load test is running, I'll pause midway and swap in a 
> real file path and see how that runs.
>
> The only other thing I can think is that there is a name collision and 
> the file is deleted by another thread who was using the same filename. 
> But the filename variable IS var scoped (FYI, this IS inside an 
> application scoped CFC).
>
> Brook
>
>
>
> -Original Message-
> From: Raymond Camden [mailto:raymondcam...@gmail.com]
> Sent: February-22-12 11:38 AM
> To: cf-talk
> Subject: Re: Ram Disk problem under load
>
>
> Noticed you didn't reply to my idea... can you also ensure that it 
> really is a VFS issue by simply switching to a real folder - just for 
> testing?
>
> On Wed, Feb 22, 2012 at 12:05 PM, Brook Davies 
> wrote:
> >
> > Good idea, I'll check the contents of the ram disk after any failures...
> >
> > Brook
> >
> > -Original Message-
> > From: Pete Freitag [mailto:p...@foundeo.com]
> > Sent: February-22-12 9:58 AM
> > To: cf-talk
> > Subject: Re: Ram Disk problem under load
> >
> >
> > Hi Brook,
> >
> > Certainly you will want to have a try / catch around that, you could 
> > put the delete of the ram file in a  tag to ensure it 
> > runs, otherwise if an error is thrown in the cfinclude the file 
> > never gets deleted and stays in ram.
> >
> > Also to answer your question about the garbage collection, I don't 
> > think that would be the issue, the garbage collector only removes 
> > objects that have a reference count of zero, I would assume that 
> > when you have a file on the ram disk ColdFusion maintains a 
> > reference to it, when you delete the file CF will delete the 
> > reference and allow the
> GC
> to cleanup.
> >
> > I don't think reducing the size of your ram disk will make the 
> > problem go away.
> >
> > What you might want to do is run this after you run your load test 
> > to see whats in there:
> >
> >  > name="dir"> 
> >
> > --
> > Pete Freitag - Adobe Community Professional http://foundeo.com/ - 
> > ColdFusion Consulting & Products http://petefreitag.com/ - My Blog 
> > http://hackmycf.com
> > - Is your ColdFusion Server Secure?
> >
> >
> >
> >
> > On Wed, Feb 22, 2012 at 12:44 PM, Brook Davies 
> > 
> wro

Re: Application Mappings RE: Ram Disk problem under load

2012-02-23 Thread Raymond Camden

I'd suggest pinging Adobe support. You are right - this is something
that was fixed. But it sounds like you have a -very- reproduceable
case, which makes it easier for them to fix.


On Thu, Feb 23, 2012 at 12:36 PM, Pete Freitag  wrote:
>
> Do you have code that calls ApplicationStop() on error or something I
> wonder if that might cause the application scoped mappings to be undefined
> for a split second while the application is reloading? Just a guess.
>
>

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350077
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


CF-friendly iPad Code Editor app

2012-02-23 Thread Michael E. Carluen

I'm trying to decide which CF-friendly iPad code editor to get. So far, its a 
toss-up between Koder Code, Textastic, and Gusto. Anyone got some experience in 
using any of these apps and if so, have some nice or not-so-nice things to 
comment? Also your wish list features if those are absent from your chosen app. 
Thanks. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350076
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF attack on a buddies server

2012-02-23 Thread Pete Freitag

On Wed, Feb 22, 2012 at 7:55 PM, Ras Tafari  wrote:

> any idea how they were able to get the file that ran into the cfide
> directory? and what might prevent that part?
> that's the most haunting part to him.  i said it was probably a
> windows exploit first... not sure tho.
>

If they are running CF8 without security hotfixes then there is a really
good chance that it was the FCKeditor vulnerability:
http://www.adobe.com/support/security/bulletins/apsb09-09.html

But there are also so many other things ways they could have done it. The
bottom line is you want to make sure you have all security hotfixes in
place, and then make sure everything is running with the least possible
privilege. Otherwise its pretty easy to take control of your server!

--
Pete Freitag - Adobe Community Professional
http://foundeo.com/ - ColdFusion Consulting & Products
http://petefreitag.com/ - My Blog
http://hackmycf.com - Is your ColdFusion Server Secure?


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350075
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Application Mappings RE: Ram Disk problem under load

2012-02-23 Thread Pete Freitag

Do you have code that calls ApplicationStop() on error or something I
wonder if that might cause the application scoped mappings to be undefined
for a split second while the application is reloading? Just a guess.



On Thu, Feb 23, 2012 at 1:10 PM, Brook Davies  wrote:

>
> So we ran a load test last night with 100 concurrent users. Everything went
> fine *except* this ram disk problem  and another problem with a missing
> template include. Looking at it closer, both errors "Could not find the
> included template" used application mappings to do the include.
>
> These are defined in the application.cfc:
>
> 
>
>  
>  
>  
>
> 
>
> Cf 8.01 had a hotfix that was supposed to fix  custom tag path mappings
> acting up under load:
> http://kb2.adobe.com/cps/529/cpsid_52915.html
>
> 73761   Fix for the error "Cannot find CFML template for custom tag" thrown
> under load when using THIS.customtagpath in application.cfc and "enable per
> app settings" is enabled.
>
>
> But I am running CF 9.01 with all the hotfixes. BTW, I dumped the ram disk
> after some failed includes and the file *did exist* on the ram disk.
>
> --
>
> I just did another load test this morning, however this time the load was
> all done on a single application testing a form submission process (this is
> where the include error was generated). No errors this time. The difference
> between this test and the last test that generated lots of errors is that
> this test did not run concurrent load on the other side of this application
> which uses an application.cfc that extends the main application.cfc via
> applicationProxy.cfc. It’s a child application that shares the main
> applications name and scope but also enables client variables and does some
> other stuff (pseudo code below)
>
> 
>   
>  
>  
> 
>
> 
>
>  
>
> 
>
>  
>
> 
>
> ---
>
> So my guess is that because it doesn't include the application mappings
> that
> it is somehow overwriting them when two requests run at the same time.
> Strange I know, but that’s the best I can figure. I am gonna run another
> load test tomorrow night, and try adding the mappings into the child
> application and see if that helps.
>
>
>
> Brook
>
>
> -Original Message-
> From: Brook Davies [mailto:cft...@logiforms.com]
> Sent: February-22-12 12:30 PM
> To: cf-talk
> Subject: RE: Ram Disk problem under load
>
>
> Hi Raymond,
>
> I don't see your reply actually... oh here it is in my junk
> folder...g...
>
> Tonight when the load test is running, I'll pause midway and swap in a real
> file path and see how that runs.
>
> The only other thing I can think is that there is a name collision and the
> file is deleted by another thread who was using the same filename. But the
> filename variable IS var scoped (FYI, this IS inside an application scoped
> CFC).
>
> Brook
>
>
>
> -Original Message-
> From: Raymond Camden [mailto:raymondcam...@gmail.com]
> Sent: February-22-12 11:38 AM
> To: cf-talk
> Subject: Re: Ram Disk problem under load
>
>
> Noticed you didn't reply to my idea... can you also ensure that it really
> is
> a VFS issue by simply switching to a real folder - just for testing?
>
> On Wed, Feb 22, 2012 at 12:05 PM, Brook Davies 
> wrote:
> >
> > Good idea, I'll check the contents of the ram disk after any failures...
> >
> > Brook
> >
> > -Original Message-
> > From: Pete Freitag [mailto:p...@foundeo.com]
> > Sent: February-22-12 9:58 AM
> > To: cf-talk
> > Subject: Re: Ram Disk problem under load
> >
> >
> > Hi Brook,
> >
> > Certainly you will want to have a try / catch around that, you could
> > put the delete of the ram file in a  tag to ensure it runs,
> > otherwise if an error is thrown in the cfinclude the file never gets
> > deleted and stays in ram.
> >
> > Also to answer your question about the garbage collection, I don't
> > think that would be the issue, the garbage collector only removes
> > objects that have a reference count of zero, I would assume that when
> > you have a file on the ram disk ColdFusion maintains a reference to
> > it, when you delete the file CF will delete the reference and allow the
> GC
> to cleanup.
> >
> > I don't think reducing the size of your ram disk will make the problem
> > go away.
> >
> > What you might want to do is run this after you run your load test to
> > see whats in there:
> >
> >  > name="dir"> 
> >
> > --
> > Pete Freitag - Adobe Community Professional http://foundeo.com/ -
> > ColdFusion Consulting & Products http://petefreitag.com/ - My Blog
> > http://hackmycf.com
> > - Is your ColdFusion Server Secure?
> >
> >
> >
> >
> > On Wed, Feb 22, 2012 at 12:44 PM, Brook Davies 
> wrote:
> >
> >>
> >> Hi Pete,
> >>
> >> I don't think its possible because the ram disk size is set to 500
> >> megs, and this was only 10 concurrent users!  I have another test
> >> with
> >> 100 cuncurrent users running tonight and I guess we'll see what
> >> happens though I am sure th

Application Mappings RE: Ram Disk problem under load

2012-02-23 Thread Brook Davies

So we ran a load test last night with 100 concurrent users. Everything went
fine *except* this ram disk problem  and another problem with a missing
template include. Looking at it closer, both errors "Could not find the
included template" used application mappings to do the include. 

These are defined in the application.cfc:



 
 
 



Cf 8.01 had a hotfix that was supposed to fix  custom tag path mappings
acting up under load:
http://kb2.adobe.com/cps/529/cpsid_52915.html

73761   Fix for the error "Cannot find CFML template for custom tag" thrown
under load when using THIS.customtagpath in application.cfc and "enable per
app settings" is enabled.


But I am running CF 9.01 with all the hotfixes. BTW, I dumped the ram disk
after some failed includes and the file *did exist* on the ram disk.

--

I just did another load test this morning, however this time the load was
all done on a single application testing a form submission process (this is
where the include error was generated). No errors this time. The difference
between this test and the last test that generated lots of errors is that
this test did not run concurrent load on the other side of this application
which uses an application.cfc that extends the main application.cfc via
applicationProxy.cfc. It’s a child application that shares the main
applications name and scope but also enables client variables and does some
other stuff (pseudo code below)


   
  
  
 
   
 

  

 

  



---

So my guess is that because it doesn't include the application mappings that
it is somehow overwriting them when two requests run at the same time.
Strange I know, but that’s the best I can figure. I am gonna run another
load test tomorrow night, and try adding the mappings into the child
application and see if that helps.



Brook


-Original Message-
From: Brook Davies [mailto:cft...@logiforms.com] 
Sent: February-22-12 12:30 PM
To: cf-talk
Subject: RE: Ram Disk problem under load


Hi Raymond,

I don't see your reply actually... oh here it is in my junk
folder...g...

Tonight when the load test is running, I'll pause midway and swap in a real
file path and see how that runs. 

The only other thing I can think is that there is a name collision and the
file is deleted by another thread who was using the same filename. But the
filename variable IS var scoped (FYI, this IS inside an application scoped
CFC).  

Brook



-Original Message-
From: Raymond Camden [mailto:raymondcam...@gmail.com]
Sent: February-22-12 11:38 AM
To: cf-talk
Subject: Re: Ram Disk problem under load


Noticed you didn't reply to my idea... can you also ensure that it really is
a VFS issue by simply switching to a real folder - just for testing?

On Wed, Feb 22, 2012 at 12:05 PM, Brook Davies  wrote:
>
> Good idea, I'll check the contents of the ram disk after any failures...
>
> Brook
>
> -Original Message-
> From: Pete Freitag [mailto:p...@foundeo.com]
> Sent: February-22-12 9:58 AM
> To: cf-talk
> Subject: Re: Ram Disk problem under load
>
>
> Hi Brook,
>
> Certainly you will want to have a try / catch around that, you could 
> put the delete of the ram file in a  tag to ensure it runs, 
> otherwise if an error is thrown in the cfinclude the file never gets 
> deleted and stays in ram.
>
> Also to answer your question about the garbage collection, I don't 
> think that would be the issue, the garbage collector only removes 
> objects that have a reference count of zero, I would assume that when 
> you have a file on the ram disk ColdFusion maintains a reference to 
> it, when you delete the file CF will delete the reference and allow the GC
to cleanup.
>
> I don't think reducing the size of your ram disk will make the problem 
> go away.
>
> What you might want to do is run this after you run your load test to 
> see whats in there:
>
>  name="dir"> 
>
> --
> Pete Freitag - Adobe Community Professional http://foundeo.com/ - 
> ColdFusion Consulting & Products http://petefreitag.com/ - My Blog 
> http://hackmycf.com
> - Is your ColdFusion Server Secure?
>
>
>
>
> On Wed, Feb 22, 2012 at 12:44 PM, Brook Davies 
wrote:
>
>>
>> Hi Pete,
>>
>> I don't think its possible because the ram disk size is set to 500 
>> megs, and this was only 10 concurrent users!  I have another test 
>> with
>> 100 cuncurrent users running tonight and I guess we'll see what 
>> happens though I am sure this is going to be an issue. I added a 
>> try/catch around the write/read and am them attempting to do it 
>> again, so I guess we'll see what happens.
>>
>> Maybe I should reduce the size allocated to the ram disk?
>>
>> Brook
>>
>> -Original Message-
>> From: Pete Freitag [mailto:p...@foundeo.com]
>> Sent: February-22-12 9:35 AM
>> To: cf-talk
>> Subject: Re: Ram Disk problem under load
>>
>>
>> Another thing to consider is that the Ram disk has a size limit 
>> specified in the ColdFusion administrator. Is it possibl

XML and "unicode: 0x1a"

2012-02-23 Thread Les Irvin

Apparently, after a billion hours of trying to figure out why I
couldn't successfully output some xml data, it seems that the
"unicode: 0x1a" character is contained in a text string and making it
fail.

#xmlformat(thestring)# does not successfully strip it from the string.

How can I get rid of that character?  Must be some sort of
replace(thestring,'0x1a','','all') thing but i can't figure out how to
reference it.

Thanks in advance for any help,
Les

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350072
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF 9 Mulit-Sever only uses default site

2012-02-23 Thread Russ Michaels

Eric,

check the .CFM handlers in iis and make sure they link to the right
connectors.
if they do, then check the wsconfig.properties in the wsconfig folder

this should specify which connector is for which site/instance

should look like this.


1=IIS,0,false,""
1.srv=localhost,"cfusion"
1.cfmx=true,C:/Inetpub/wwwroot
2=IIS,7605,false,""
2.srv=localhost,"anorak"
2.cfmx=true,
3=IIS,2714,false,""
3.srv=localhost,"CFMX10120"
3.cfmx=true,
5=IIS,1851,false,""
5.srv=localhost,"CFMX10158"
5.cfmx=true,

the number is the connector in your wsconfig folder
e.g

wsconfig/1
wsconfig/2

the first entry for each number tells you the web server type and siteID
the 2nd entry is the host and instance name
the 3rd entry specifies that cf handlers are enabled


--

Russ Michaels

www.bluethunderinternet.com  : Business hosting services & solutions
www.cfmldeveloper.com: ColdFusion developer community
www.michaels.me.uk   : my blog
www.cfsearch.com : ColdFusion search engine
**
*skype me* : russmichaels


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350071
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: HTML Grid binding problem.

2012-02-23 Thread Ray Meade

Sorry, I forgot to mention that the script is triggerd by the onChange event of 
the grid. (just in case it matters)

> Can anyone tell me why this code works fine when used with a Flash 
> type cfgrid, but not with an html type cfgrid? Is there something in 
> the code that is telling it that it's binding to a Flash type grid? 
> Basically, this code does EXACTLY what I need it to, but I need it to 
> work on an HTML form with an HTML grid.
> 
> 
  
> var totalAmount = 0;
  
> var item;
  
> var subTotal = 0;
  
> for(var i = 0; i < cart.length; i++) {

> item = cart.getItemAt(i);

> subTotal = number(item['price']) * item['quantity'];

> totalAmount += subTotal;

> cart.editField(i, 'amount', subTotal);
  
> }
  
> total.text = totalAmount;
>  

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350070
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


CF 9 Mulit-Sever only uses default site

2012-02-23 Thread Eric Cobb

I have a strange issue with my CF 9 Multi-Sever install running on Windows 
2008 R2 and IIS 7.  This is a new server and I set up CF 9.01 in 
multi-server mode on it yesterday.  The install went fine, and I have my 
first instance up and running with no problem.  I was able to successfully 
spin off 2 more instances from within the CF Admin.  I have my sites set up 
in IIS, and I ran wsconfig to assign each site to a CF instance.  I made 
absolutely sure that I selected the correct CF instance and the correct 
site in wsconfig.

For whatever reason, all of my sites still use the default cfusion 
instance, regardless of what I've assigned to them in wsconfig.  I even 
deleted the sites from wsconfig and added them back, and every one of them 
still uses cfusion.  

Has anyone every run into this before?  

Thanks,

Eric




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350069
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


HTML Grid binding problem.

2012-02-23 Thread Ray Meade

Can anyone tell me why this code works fine when used with a Flash type cfgrid, 
but not with an html type cfgrid? Is there something in the code that is 
telling it that it's binding to a Flash type grid? Basically, this code does 
EXACTLY what I need it to, but I need it to work on an HTML form with an HTML 
grid.


  var totalAmount = 0;
  var item;
  var subTotal = 0;
  for(var i = 0; i < cart.length; i++) {
item = cart.getItemAt(i);
subTotal = number(item['price']) * item['quantity'];
totalAmount += subTotal;
cart.editField(i, 'amount', subTotal);
  }
  total.text = totalAmount;
 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350068
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Javascript error help!

2012-02-23 Thread Stephens, Larry V

Look at jquery.maskedinput-1.2.2.min.js  I have a lot of masked fields in 
hidden divs. 


 

-Original Message-
From: Ken Hammond [mailto:khamm...@saleminc.com] 
Sent: Wednesday, February 22, 2012 1:08 PM
To: cf-talk
Subject: Javascript error help!


I am running into this exact problem this guy had and cannot find a fix 
ANYWHERE.

http://www.elliottsprehn.com/cfbugs/bugs/79033

I can show some example code of mine but basically I'm having the same problem 
he is describing.  I have a hidden div with cfinputs that have masks and 
validation and I get the same error he is getting  I don't have a problem 
in Safari, but I have the problem EVERY TIME in both IE8 and IE9...  

I REALLY need help here!

Ken Hammo



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350067
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Waiting for 30 seconds

2012-02-23 Thread Russ Michaels

don;t feel bad.
back in the days of cf4/5 I knew virtually every tag and function off by
heart, but there is certainly a lot more to remember now and most folks do
not use a lot of them on a regular basis if at all.
I don't do a lot of coding these days, so often have to check the
attributes of tags/functions, but that is exactly why sites like
cfquickdocs.com and others exists


On Thu, Feb 23, 2012 at 3:58 AM, UXB  wrote:

>
> >> If it makes you feel any better, I work with the CFML Reference PDF open
> all day long.
>
> LOL. The printed manual has its own stand on my desk but I was away from
> it.
> I guess I really do need to fill out the AARP card applications now.
>
>
>
> Dennis Powers
> UXB Internet - A website Design and Hosting Company
> P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844
> W: http://www.uxbinternet.com
> W: http://www.ctbusinesslist.com
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350066
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF attack on a buddies server

2012-02-23 Thread Russ Michaels

I would say that most folks running their own web server with no previous
expereince usually do leave great big holes.
running every site under the default iis user
not removing everyone group from drives
not sandboxing coldfusion
these  things can allow code in any sites to read/read to any other site,
including the default website where the cfide lives.



On Thu, Feb 23, 2012 at 4:50 AM, Tony  wrote:

>
> I didnt, was in a meeting, fwd'd all msgs to him and didn't go back and
> read... but it wouldn't hurt to read myself :)
>
> On Wednesday, February 22, 2012, Dave Watts wrote:
>
> >
> > > any idea how they were able to get the file that ran into the cfide
> > > directory? and what might prevent that part?
> > > that's the most haunting part to him.  i said it was probably a
> > > windows exploit first... not sure tho.
> >
> > Did you read my initial response? It describes the likely
> > possibilities for writing a file.
> >
> > It probably wasn't a Windows exploit actually, unless you happen to be
> > running Windows 2000 or something. IIS and Windows are fairly secure
> > "out of the box" and don't have remote exploits that let you write
> > files via HTTP requests, unless you enable WebDAV.
> >
> > Dave Watts, CTO, Fig Leaf Software
> > http://www.figleaf.com/
> > http://training.figleaf.com/
> >
> > Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
> > GSA Schedule, and provides the highest caliber vendor-authorized
> > instruction at our training centers, online, or onsite
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350065
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Required folders under CFIDE

2012-02-23 Thread Russ Michaels

I would suggest NOT pointing to original CFIDE as this gives every sites
access to the cfadmin.
instead make a copy of the original CFIDE and remove the administrator and
adminapi folders and use this as your vDir

On Thu, Feb 23, 2012 at 5:41 AM, IT (Pradeep Viswanathan) <
prade...@emiratesnbd.com> wrote:

>
> Thanks Jay
>
> Thx & rgds,
> Pradeep Viswanathan R
>
>
> -Original Message-
> From: Jay Pandya [mailto:jaypandy...@gmail.com]
> Sent: Thursday, February 23, 2012 9:39 AM
> To: cf-talk
> Subject: Re: Required folders under CFIDE
>
>
> Hi Pradeep,
>   In your IIS just create virtual directory which points to
> original CFIDE.
> http://www.hosting.com/support/cfusion/create-a-cfide-mapping-under-iis6
>
> http://www.neiland.net/blog/article/how-to-create-a-virtual-cfide-directory-mapping-in-apache/
>
>So you can implement in above way then all ajax functionality
> will work smoothly.
>   Let me know if you have any doubt over this.
>
> Thank You
> Jay Pandya
> > I am currently setting up a new server where my CFIDE is compeletely
> > not exposed - it actually runs on a different web server/port.
> >
> > I would want to copy the folders that are essential from the CFIDE
> > folder to make the AJAX /others cftags to work, can someone please
> > tell me what folders will be required.
> >
> > I see that scripts folder is required?
> >
> > Thx & rgds,
> > Pradeep Viswanathan R
> >
> >
> >
> > DISCLAIMER:
> > "This e-mail message including any of its attachments is intended
> > solely for the addressee(s) and may contain privileged information. If
> > you are not the addressee or you have received this email message in
> > error, please notify the sender who will remove your details from its
> > database. You are not authorized to read, copy, disseminate,
> > distribute or use this e-mail message or any attachment to it in any
> > manner and must delete the email and destroy any hard copies of it.
> > This e-mail message does not contain financial instructions or
> > commitments of any kind. Any views expressed in this message are those
> > of the individual sender and do not necessarily reflect the views of
> > Emirates NBD PJSC, or any other related subsidiaries, entities or
> > persons."
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350064
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm