Re: web.config in web root

[Dave Watts]

> It seems like a huge security hole to me to have any kind of configuration
> file be world accessible, but I'll take your word for it.

It's actually not accessible, despite being located in your web root.
IIS won't serve it. This is similar to how J2EE servers don't serve
the contents of /WEB-INF, which is typically located in the web root
as well.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352332
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Maureen]

My point exactly.  The file has never been in web root until the tech at
the hosting company placed it there a few days ago.  The sole content of it
seems to turn detailed error messages.








Since it is a shared environment my assumption was that I would never
access to to CFIDE from the site.

It seems like a huge security hole to me to have any kind of configuration
file be world accessible, but I'll take your word for it.


On Tue, Aug 28, 2012 at 8:49 AM, Russ Michaels  wrote:

>
> the usual method is to have a vDir that points to a copy of the CFIDE with
> all the scripts inside it. The host should be doing this.
> it is not a good idea to maintain your own copy of CFIDE unless you are
> going to keep it up to date with any patched or hotfixes yourself, which
> may get out of sync with hosts version of cf.
>
> On Tue, Aug 28, 2012 at 12:54 PM, Byron Mann  wrote:
>
> >
> > The latter issue with CFIDE is probably fine too. There probably just
> isnt
> > a default doc.
> >
> > Best practice for a shared host would be to only put a copy of
> > /CFIDE/scripts into your web root for your convenience, since you
> shouldn't
> > have any CF admin access.
> >
> > Byron Mann
> > Lead Engineer and Architect
> > Hostmysite.com
> > On Aug 28, 2012 3:06 AM, "Maureen"  wrote:
> >
> > --
>
> Russ Michaels
>
> www.bluethunderinternet.com  : Business hosting services & solutions
> www.cfmldeveloper.com: ColdFusion developer community
> www.michaels.me.uk   : my blog
> www.cfsearch.com : ColdFusion search engine
> **
> *skype me* : russmichaels
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352330
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 64-bit updates to CFX at intrafoundation.com

[Michael van Leest]

+1 for CFX_IIS (7.5 support)

2012/8/28 Lewis Sellers 

>
> Possible. Are there any of them you had in mind in particular? I have
> become somewhat out of touch as to how many people are still using what
> these days and thus what might be a priority. I think though that if any of
> them need more than work and testing than I'm probably willing to invest
> atm it would be CFX_IIS.
>
> I'll look into it.
>
> On Sat, Aug 25, 2012 at 2:30 PM, Rick Mason  wrote:
>
> >
> > Lewis,
> >
> > I want to commend you for your efforts.  I would also suggest that you
> > consider cohosting them on gitHub as well.
> >
> >
> > Rick
> >
> > On Sat, Aug 25, 2012 at 5:01 AM, Lewis Sellers <
> > webmas...@intrafoundation.com> wrote:
> >
> > >
> > > I have been getting several requests in the last two months or so to
> > > update various CFX at intrafoundation.com to 64-bit. As I was in a bit
> > of
> > > an accident not long ago and have several more weeks to spend sitting
> in
> > a
> > > wheel-chair, it seemed like as good a time as any to do a mass-update.
> :)
> > >
> > > A few of the CFX have already been rebuilt, repackaged and uploaded.
> > > Currently, I'm working on getting IHTK out the door as well. As it's a
> > > collection of several networking and service related CFX, it is --
> rather
> > > involved to test, however.
> > >
> > > Anyway, anyone out there still using any of these CFX should feel free
> to
> > > download the new versions as they are released, and get back to me if
> > > something is not quite working right in the new builds.
> > >
> > >
> > >
> > >
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352329
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

OT - JS Question

[Bruce Sorge]

Can someone point me to a site or a sample of JS that does the following:

User enters first name, last name and birth date (birthdate is in a specific 
format by using drop downs and not free text).
Once the birth year has been selected, a query is triggered to check for the 
existence of the same information that was just entered. 
If a match is found, a pop up is displayed stating that they have already 
registered.
If no match, nothing happens.


Thanks,

Bruce

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352328
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Connecting to MS Access 2007 from Coldfusion 9.0 through JDBC URL (Select 'other' datasource)

[Dave Watts]

> I am trying to connect to MS access 2007 from my cf 9.0 and getting following 
> error.

Is there a reason you're not using SequeLink or the built-in JET driver?

Are you running a 64-bit version of CF?

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352331
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Russ Michaels]

the usual method is to have a vDir that points to a copy of the CFIDE with
all the scripts inside it. The host should be doing this.
it is not a good idea to maintain your own copy of CFIDE unless you are
going to keep it up to date with any patched or hotfixes yourself, which
may get out of sync with hosts version of cf.

On Tue, Aug 28, 2012 at 12:54 PM, Byron Mann  wrote:

>
> The latter issue with CFIDE is probably fine too. There probably just isnt
> a default doc.
>
> Best practice for a shared host would be to only put a copy of
> /CFIDE/scripts into your web root for your convenience, since you shouldn't
> have any CF admin access.
>
> Byron Mann
> Lead Engineer and Architect
> Hostmysite.com
> On Aug 28, 2012 3:06 AM, "Maureen"  wrote:
>
> --

Russ Michaels

www.bluethunderinternet.com  : Business hosting services & solutions
www.cfmldeveloper.com: ColdFusion developer community
www.michaels.me.uk   : my blog
www.cfsearch.com : ColdFusion search engine
**
*skype me* : russmichaels


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352326
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

RE: web.config in web root

[Eric Roberts]

yes


Three Ravens Consulting
Eric Roberts
Owner/Developer
ow...@threeravensconsulting.com
tel: 630-486-5255
fax: 630-310-8531
http://www.threeravensconsulting.com


-Original Message-
From: Maureen [mailto:mamamaur...@gmail.com] 
Sent: Tuesday, August 28, 2012 7:44 AM
To: cf-talk
Subject: Re: web.config in web root


Yes, but would the web.config file be in the web root directory?

On Tue, Aug 28, 2012 at 12:32 AM, Andrew Scott
wrote:

>
> ColdFusion 9, and all IIS 7 sites when making changes to the website 
> on IIS will make changes and create a web.config file. This is normal.
>




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352323
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 64-bit updates to CFX at intrafoundation.com

[Lewis Sellers]

Possible. Are there any of them you had in mind in particular? I have
become somewhat out of touch as to how many people are still using what
these days and thus what might be a priority. I think though that if any of
them need more than work and testing than I'm probably willing to invest
atm it would be CFX_IIS.

I'll look into it.

On Sat, Aug 25, 2012 at 2:30 PM, Rick Mason  wrote:

>
> Lewis,
>
> I want to commend you for your efforts.  I would also suggest that you
> consider cohosting them on gitHub as well.
>
>
> Rick
>
> On Sat, Aug 25, 2012 at 5:01 AM, Lewis Sellers <
> webmas...@intrafoundation.com> wrote:
>
> >
> > I have been getting several requests in the last two months or so to
> > update various CFX at intrafoundation.com to 64-bit. As I was in a bit
> of
> > an accident not long ago and have several more weeks to spend sitting in
> a
> > wheel-chair, it seemed like as good a time as any to do a mass-update. :)
> >
> > A few of the CFX have already been rebuilt, repackaged and uploaded.
> > Currently, I'm working on getting IHTK out the door as well. As it's a
> > collection of several networking and service related CFX, it is -- rather
> > involved to test, however.
> >
> > Anyway, anyone out there still using any of these CFX should feel free to
> > download the new versions as they are released, and get back to me if
> > something is not quite working right in the new builds.
> >
> >
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352325
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Connecting to MS Access 2007 from Coldfusion 9.0 through JDBC URL (Select 'other' datasource)

[somesh y]

Hi,

I am trying to connect to MS access 2007 from my cf 9.0 and getting following 
error.

java.sql.SQLException: [Microsoft][ODBC Driver Manager] Invalid string or 
buffer length
The root cause was that: java.sql.SQLException: [Microsoft][ODBC Driver 
Manager] Invalid string or buffer length

Connection Settings :

JDBC
jdbc:odbc:Driver={Microsoft Access Driver (*.mdb, 
*.accdb)};DBQ=E:/Inetpub/wwwroot/ssl/burs/Burs_be.accdb;";

Class: sun.jdbc.odbc.JdbcOdbcDriver

Driver : MS Access 2007

I would really appreciate if any idea, what i am doing mistake here ? any 
suggesions would be great.

Thanks
Somesh 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352327
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Russ Michaels]

Don't mess with the web.config file if you don't know what your doing
either, as you can completely break your website if you corrupt the file or
make it invalid. Make sure you back it up first.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352324
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Dave Watts]

> Yes, but would the web.config file be in the web root directory?

Yes. The web.config file will ONLY work in the web root (or a virtual
application root).

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352321
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Matt Quackenbush]

Yes.

Sent from my Samsung Galaxy SII
On Aug 28, 2012 9:41 AM, "Maureen"  wrote:

>
> Yes, but would the web.config file be in the web root directory?
>
> On Tue, Aug 28, 2012 at 12:32 AM, Andrew Scott  >wrote:
>
> >
> > ColdFusion 9, and all IIS 7 sites when making changes to the website on
> IIS
> > will make changes and create a web.config file. This is normal.
> >
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352322
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Byron Mann]

The latter issue with CFIDE is probably fine too. There probably just isnt
a default doc.

Best practice for a shared host would be to only put a copy of
/CFIDE/scripts into your web root for your convenience, since you shouldn't
have any CF admin access.

Byron Mann
Lead Engineer and Architect
Hostmysite.com
On Aug 28, 2012 3:06 AM, "Maureen"  wrote:

>
>  I have a client with a site on a shared host.  Yesterday, the site was
> throwing 500 server errors and reporting that files in CFIDE directory
> could not be found.
>
> The tech at the hosting company did some changes which resolved the
> problem.  However, one of the changes involved putting the web.config file
> in the web root.
>
> This is a CF9 site on IIS.  I have never encountered web.config in web root
> on a CF site running on Windows.  Doesn't seem to me that it should be
> there.
>
> Also, now if I go to domainname.com/CFIDE I get a 403 error page with some
> site info displayed.  Doesn't seem like that is good practice.
>
> Am I missing something obvious, or being too paranoid?
>
> Mama Mo
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352317
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Dave Watts]

>  I have a client with a site on a shared host.  Yesterday, the site was
> throwing 500 server errors and reporting that files in CFIDE directory
> could not be found.
>
> The tech at the hosting company did some changes which resolved the
> problem.  However, one of the changes involved putting the web.config file
> in the web root.
>
> This is a CF9 site on IIS.  I have never encountered web.config in web root
> on a CF site running on Windows.  Doesn't seem to me that it should be
> there.

IIS 7 uses .config files for its settings, so this is normal like
Andrew said. There are several different settings files: web.config,
applicationHost.config, machine.config (and more besides!) The
appropriate location for web.config is within a web root or within a
virtual application root. However, you can run into situations where
these settings conflict, so you have to be careful. I ran into one
yesterday, actually, where I added an IIS setting, it created a
web.config where none had been, and other things stopped working
because they were set differently in the .config file in the next
level up (applicationHost.config)

> Also, now if I go to domainname.com/CFIDE I get a 403 error page with some
> site info displayed.  Doesn't seem like that is good practice.

Is this set up as a virtual application in IIS? If so, it may need its
own web.config. Also, you probably want to make sure you can't get to
/CFIDE/administrator on your public interface.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352319
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

RE: web.config in web root

[Eric Roberts]

Yup...that is a IIS7 thing...


Three Ravens Consulting
Eric Roberts
Owner/Developer
ow...@threeravensconsulting.com
tel: 630-486-5255
fax: 630-310-8531
http://www.threeravensconsulting.com


-Original Message-
From: Maureen [mailto:mamamaur...@gmail.com] 
Sent: Tuesday, August 28, 2012 2:01 AM
To: cf-talk
Subject: web.config in web root


 I have a client with a site on a shared host.  Yesterday, the site was
throwing 500 server errors and reporting that files in CFIDE directory could
not be found.

The tech at the hosting company did some changes which resolved the problem.
However, one of the changes involved putting the web.config file in the web
root.

This is a CF9 site on IIS.  I have never encountered web.config in web root
on a CF site running on Windows.  Doesn't seem to me that it should be
there.

Also, now if I go to domainname.com/CFIDE I get a 403 error page with some
site info displayed.  Doesn't seem like that is good practice.

Am I missing something obvious, or being too paranoid?

Mama Mo




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352320
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Maureen]

Yes, but would the web.config file be in the web root directory?

On Tue, Aug 28, 2012 at 12:32 AM, Andrew Scott wrote:

>
> ColdFusion 9, and all IIS 7 sites when making changes to the website on IIS
> will make changes and create a web.config file. This is normal.
>


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352318
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: web.config in web root

[Andrew Scott]

ColdFusion 9, and all IIS 7 sites when making changes to the website on IIS
will make changes and create a web.config file. This is normal.


-- 
Regards,
Andrew Scott
WebSite: http://www.andyscott.id.au/
Google+: 
http://plus.google.com/113032480415921517411



On Tue, Aug 28, 2012 at 5:00 PM, Maureen  wrote:

>
>  I have a client with a site on a shared host.  Yesterday, the site was
> throwing 500 server errors and reporting that files in CFIDE directory
> could not be found.
>
> The tech at the hosting company did some changes which resolved the
> problem.  However, one of the changes involved putting the web.config file
> in the web root.
>
> This is a CF9 site on IIS.  I have never encountered web.config in web root
> on a CF site running on Windows.  Doesn't seem to me that it should be
> there.
>
> Also, now if I go to domainname.com/CFIDE I get a 403 error page with some
> site info displayed.  Doesn't seem like that is good practice.
>
> Am I missing something obvious, or being too paranoid?
>
> Mama Mo
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352316
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

web.config in web root

[Maureen]

 I have a client with a site on a shared host.  Yesterday, the site was
throwing 500 server errors and reporting that files in CFIDE directory
could not be found.

The tech at the hosting company did some changes which resolved the
problem.  However, one of the changes involved putting the web.config file
in the web root.

This is a CF9 site on IIS.  I have never encountered web.config in web root
on a CF site running on Windows.  Doesn't seem to me that it should be
there.

Also, now if I go to domainname.com/CFIDE I get a 403 error page with some
site info displayed.  Doesn't seem like that is good practice.

Am I missing something obvious, or being too paranoid?

Mama Mo


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352315
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm