Best practices for xss security in CMS?

[Nick Gleason]

Hi All,
I'm very interested in your feedback on best practices when 1) trying to 
mitigate risk of XSS and other hacks while 2) providing CMS functionality 
that includes a web editor that clients use to publish web pages.
For example, there are many tags like 

Re: Setting Cookie Secure, Domain, Path

[Pete Freitag]

Hi Richard,

You can use the technique here: http://www.petefreitag.com/item/764.cfm it
doesn't set path, domain, or secure but you can just add that to the
cfcookie tag in the CF9 example.

--
Pete Freitag - Adobe Community Professional
http://foundeo.com/ - ColdFusion Consulting & Products
http://hackmycf.com - Is your ColdFusion Server Secure?
http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10
minutes



On Tue, Feb 18, 2014 at 1:36 PM, Richard White  wrote:

>
> Hi,
>
> Is there a way to set the secure, domain and path values for session CFID
> and CFTOKEN cookies in the application.cfc page of CF9?
>
> I have done some searches but cannot seem to find an answer.
>
> Many thanks,
> Richard
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357709
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Upgrading CF9 Hotfixes

[Richard White]

Thanks Steve, it worked when I applied them one at a time!



> Most of them say they are cumulative, but I've always found it best to 
> 
> do them one at a time.
> 
> Steve 'Cutter' Blades
> Adobe Community Professional
> Adobe Certified Expert
> Advanced Macromedia ColdFusion MX 7 Developer
> 
> http://cutterscrossing.com
> 
> 
> Co-Author "Learning Ext JS 3.2" Packt Publishing 2010
> https://www.packtpub.
com/learni> 
ng-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book
> 
> "The best way to predict the future is to help create it"
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357708
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404's

[Randy Johnson]

I can been caught by this too when setting up a new windows server.  Very
frustrating, especially after you find out it is a double extension issue.

Randy



On Wed, Feb 19, 2014 at 12:56 PM, Russ Michaels  wrote:

>
> Well if other files wotk fine then it is not going to be a web server
> issur.
> How about just deleting and recreating the file.
> Make sure you have not doubled up the extension, which I have seen done
> many times with extensions hidden.
>
> Russ Michaels
> www.michaels.me.uk
> cfmldeveloper.com
> cflive.net
> cfsearch.com
> On 19 Feb 2014 15:28, "John M Bliss"  wrote:
>
> >
> > I'm not sure. Site has hundreds of .cfm files. index.cfm works fine, some
> > .htm and image files work fine, http://my.domain.com/formhandler.cfm is
> > 404.
> >
> >
> > On Wed, Feb 19, 2014 at 10:23 AM, Russ Michaels 
> > wrote:
> >
> > >
> > > yes I noted you said it was IIS, thus why I asked about the web.config,
> > > which of course  only applies to IIS
> > > is that any other files have this issue ?
> > >
> > >
> > > On Wed, Feb 19, 2014 at 2:33 PM, John M Bliss 
> > > wrote:
> > >
> > > >
> > > > I don't have a web.config. Also, this is IIS.
> > > >
> > > >
> > > > On Wed, Feb 19, 2014 at 9:29 AM, Russ Michaels 
> > > > wrote:
> > > >
> > > > >
> > > > > you don;t have any rewrite rules in your web.config do you which
> may
> > be
> > > > > causing this
> > > > >
> > > > >
> > > > > On Tue, Feb 18, 2014 at 8:44 PM, John M Bliss <
> bliss.j...@gmail.com>
> > > > > wrote:
> > > > >
> > > > > >
> > > > > > Just installed a legacy CF app under IIS, got index.cfm to run
> fine
> > > > with
> > > > > a
> > > > > > form submitting to another .cfm file. Upon submitting form,
> > location
> > > > bar
> > > > > > changes to http://my.domain.com/formhandler.cfm and that file is
> > > > > > definitely
> > > > > > in the webroot with the same permissions as index.cfm...but IIS
> > > > returns a
> > > > > > 404 error.
> > > > > >
> > > > > > Any ideas about what to look for next?
> > > > > >
> > > > > > --
> > > > > > John Bliss - http://www.linkedin.com/in/jbliss
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357707
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404's

[Russ Michaels]

Well if other files wotk fine then it is not going to be a web server issur.
How about just deleting and recreating the file.
Make sure you have not doubled up the extension, which I have seen done
many times with extensions hidden.

Russ Michaels
www.michaels.me.uk
cfmldeveloper.com
cflive.net
cfsearch.com
On 19 Feb 2014 15:28, "John M Bliss"  wrote:

>
> I'm not sure. Site has hundreds of .cfm files. index.cfm works fine, some
> .htm and image files work fine, http://my.domain.com/formhandler.cfm is
> 404.
>
>
> On Wed, Feb 19, 2014 at 10:23 AM, Russ Michaels 
> wrote:
>
> >
> > yes I noted you said it was IIS, thus why I asked about the web.config,
> > which of course  only applies to IIS
> > is that any other files have this issue ?
> >
> >
> > On Wed, Feb 19, 2014 at 2:33 PM, John M Bliss 
> > wrote:
> >
> > >
> > > I don't have a web.config. Also, this is IIS.
> > >
> > >
> > > On Wed, Feb 19, 2014 at 9:29 AM, Russ Michaels 
> > > wrote:
> > >
> > > >
> > > > you don;t have any rewrite rules in your web.config do you which may
> be
> > > > causing this
> > > >
> > > >
> > > > On Tue, Feb 18, 2014 at 8:44 PM, John M Bliss 
> > > > wrote:
> > > >
> > > > >
> > > > > Just installed a legacy CF app under IIS, got index.cfm to run fine
> > > with
> > > > a
> > > > > form submitting to another .cfm file. Upon submitting form,
> location
> > > bar
> > > > > changes to http://my.domain.com/formhandler.cfm and that file is
> > > > > definitely
> > > > > in the webroot with the same permissions as index.cfm...but IIS
> > > returns a
> > > > > 404 error.
> > > > >
> > > > > Any ideas about what to look for next?
> > > > >
> > > > > --
> > > > > John Bliss - http://www.linkedin.com/in/jbliss
> > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357706
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404's

[John M Bliss]

I'm not sure. Site has hundreds of .cfm files. index.cfm works fine, some
.htm and image files work fine, http://my.domain.com/formhandler.cfm is 404.


On Wed, Feb 19, 2014 at 10:23 AM, Russ Michaels  wrote:

>
> yes I noted you said it was IIS, thus why I asked about the web.config,
> which of course  only applies to IIS
> is that any other files have this issue ?
>
>
> On Wed, Feb 19, 2014 at 2:33 PM, John M Bliss 
> wrote:
>
> >
> > I don't have a web.config. Also, this is IIS.
> >
> >
> > On Wed, Feb 19, 2014 at 9:29 AM, Russ Michaels 
> > wrote:
> >
> > >
> > > you don;t have any rewrite rules in your web.config do you which may be
> > > causing this
> > >
> > >
> > > On Tue, Feb 18, 2014 at 8:44 PM, John M Bliss 
> > > wrote:
> > >
> > > >
> > > > Just installed a legacy CF app under IIS, got index.cfm to run fine
> > with
> > > a
> > > > form submitting to another .cfm file. Upon submitting form, location
> > bar
> > > > changes to http://my.domain.com/formhandler.cfm and that file is
> > > > definitely
> > > > in the webroot with the same permissions as index.cfm...but IIS
> > returns a
> > > > 404 error.
> > > >
> > > > Any ideas about what to look for next?
> > > >
> > > > --
> > > > John Bliss - http://www.linkedin.com/in/jbliss
> > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357705
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404's

[Russ Michaels]

yes I noted you said it was IIS, thus why I asked about the web.config,
which of course  only applies to IIS
is that any other files have this issue ?


On Wed, Feb 19, 2014 at 2:33 PM, John M Bliss  wrote:

>
> I don't have a web.config. Also, this is IIS.
>
>
> On Wed, Feb 19, 2014 at 9:29 AM, Russ Michaels 
> wrote:
>
> >
> > you don;t have any rewrite rules in your web.config do you which may be
> > causing this
> >
> >
> > On Tue, Feb 18, 2014 at 8:44 PM, John M Bliss 
> > wrote:
> >
> > >
> > > Just installed a legacy CF app under IIS, got index.cfm to run fine
> with
> > a
> > > form submitting to another .cfm file. Upon submitting form, location
> bar
> > > changes to http://my.domain.com/formhandler.cfm and that file is
> > > definitely
> > > in the webroot with the same permissions as index.cfm...but IIS
> returns a
> > > 404 error.
> > >
> > > Any ideas about what to look for next?
> > >
> > > --
> > > John Bliss - http://www.linkedin.com/in/jbliss
> > >
> > >
> > >
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357704
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404's

[John M Bliss]

I think I remember that's possible...but I don't.


On Wed, Feb 19, 2014 at 10:06 AM, Steve 'Cutter' Blades <
cold.fus...@cutterscrossing.com> wrote:

>
> You can have a web.config under IIS now.
>
> Steve 'Cutter' Blades
> Adobe Community Professional
> Adobe Certified Expert
> Advanced Macromedia ColdFusion MX 7 Developer
> 
> http://cutterscrossing.com
>
>
> Co-Author "Learning Ext JS 3.2" Packt Publishing 2010
>
> https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book
>
> "The best way to predict the future is to help create it"
>
> On 2/19/2014 8:33 AM, John M Bliss wrote:
> > I don't have a web.config. Also, this is IIS.
> >
> >
> > On Wed, Feb 19, 2014 at 9:29 AM, Russ Michaels 
> wrote:
> >
> >> you don;t have any rewrite rules in your web.config do you which may be
> >> causing this
> >>
> >>
> >> On Tue, Feb 18, 2014 at 8:44 PM, John M Bliss 
> >> wrote:
> >>
> >>> Just installed a legacy CF app under IIS, got index.cfm to run fine
> with
> >> a
> >>> form submitting to another .cfm file. Upon submitting form, location
> bar
> >>> changes to http://my.domain.com/formhandler.cfm and that file is
> >>> definitely
> >>> in the webroot with the same permissions as index.cfm...but IIS
> returns a
> >>> 404 error.
> >>>
> >>> Any ideas about what to look for next?
> >>>
> >>> --
> >>> John Bliss - http://www.linkedin.com/in/jbliss
> >>>
> >>>
> >>>
> >>
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357703
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404's

[Steve 'Cutter' Blades]

You can have a web.config under IIS now.

Steve 'Cutter' Blades
Adobe Community Professional
Adobe Certified Expert
Advanced Macromedia ColdFusion MX 7 Developer

http://cutterscrossing.com


Co-Author "Learning Ext JS 3.2" Packt Publishing 2010
https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book

"The best way to predict the future is to help create it"

On 2/19/2014 8:33 AM, John M Bliss wrote:
> I don't have a web.config. Also, this is IIS.
>
>
> On Wed, Feb 19, 2014 at 9:29 AM, Russ Michaels  wrote:
>
>> you don;t have any rewrite rules in your web.config do you which may be
>> causing this
>>
>>
>> On Tue, Feb 18, 2014 at 8:44 PM, John M Bliss 
>> wrote:
>>
>>> Just installed a legacy CF app under IIS, got index.cfm to run fine with
>> a
>>> form submitting to another .cfm file. Upon submitting form, location bar
>>> changes to http://my.domain.com/formhandler.cfm and that file is
>>> definitely
>>> in the webroot with the same permissions as index.cfm...but IIS returns a
>>> 404 error.
>>>
>>> Any ideas about what to look for next?
>>>
>>> --
>>> John Bliss - http://www.linkedin.com/in/jbliss
>>>
>>>
>>>
>>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357702
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Upgrading CF9 Hotfixes

[Richard White]

OK thanks Steve, I'll give it a go and hopefully it will overcome the initial 
issue.
Thanks

> Most of them say they are cumulative, but I've always found it best to 
> 
> do them one at a time.
> 
> Steve 'Cutter' Blades
> Adobe Community Professional
> Adobe Certified Expert
> Advanced Macromedia ColdFusion MX 7 Developer
> 
> http://cutterscrossing.com
> 
> 
> Co-Author "Learning Ext JS 3.2" Packt Publishing 2010
> https://www.packtpub.
com/learni> 
ng-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book
> 
> "The best way to predict the future is to help create it"
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357701
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404's

[John M Bliss]

I don't have a web.config. Also, this is IIS.


On Wed, Feb 19, 2014 at 9:29 AM, Russ Michaels  wrote:

>
> you don;t have any rewrite rules in your web.config do you which may be
> causing this
>
>
> On Tue, Feb 18, 2014 at 8:44 PM, John M Bliss 
> wrote:
>
> >
> > Just installed a legacy CF app under IIS, got index.cfm to run fine with
> a
> > form submitting to another .cfm file. Upon submitting form, location bar
> > changes to http://my.domain.com/formhandler.cfm and that file is
> > definitely
> > in the webroot with the same permissions as index.cfm...but IIS returns a
> > 404 error.
> >
> > Any ideas about what to look for next?
> >
> > --
> > John Bliss - http://www.linkedin.com/in/jbliss
> >
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357700
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: 404's

[Russ Michaels]

you don;t have any rewrite rules in your web.config do you which may be
causing this


On Tue, Feb 18, 2014 at 8:44 PM, John M Bliss  wrote:

>
> Just installed a legacy CF app under IIS, got index.cfm to run fine with a
> form submitting to another .cfm file. Upon submitting form, location bar
> changes to http://my.domain.com/formhandler.cfm and that file is
> definitely
> in the webroot with the same permissions as index.cfm...but IIS returns a
> 404 error.
>
> Any ideas about what to look for next?
>
> --
> John Bliss - http://www.linkedin.com/in/jbliss
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357699
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Need a way to collect neighborhood directory info online

[Stephen Hait]

On Tue, Feb 18, 2014 at 10:18 AM, John Drake  wrote:

>
> Collecting info is easy - you could use Mailchimp, Formstack, Wufoo, etc.
>
> The problem comes when you want self-service editing.  How do you prove
> that the person making the edits is really editing their own data only?
>  That means passwords.
>

John, that's a good point that I know we need to keep in mind. Jotform lets
you send an auto-responder email to the user who has submitted a form. That
email can include a link to just that "record" so that user can update his
info later. That approach may have some drawbacks but it may provide a way
to address this issue. Any thoughts?


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357698
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Upgrading CF9 Hotfixes

[Steve 'Cutter' Blades]

Most of them say they are cumulative, but I've always found it best to 
do them one at a time.

Steve 'Cutter' Blades
Adobe Community Professional
Adobe Certified Expert
Advanced Macromedia ColdFusion MX 7 Developer

http://cutterscrossing.com


Co-Author "Learning Ext JS 3.2" Packt Publishing 2010
https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book

"The best way to predict the future is to help create it"



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357697
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Setting Cookie Secure Domain and Path

[Richard White]

Hi,

How would I set the the CFID and CFTOKEN secure, domain and path attributes for 
a specific application in the cfapplication.cfc file? I have done some searches 
but cannot seem to find how to do it.

Many thanks
Richard 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357696
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Setting Cookie Secure, Domain, Path

[Richard White]

Hi,

Is there a way to set the secure, domain and path values for session CFID and 
CFTOKEN cookies in the application.cfc page of CF9?

I have done some searches but cannot seem to find an answer.

Many thanks,
Richard 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357694
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Upgrading CF9 Hotfixes

[Richard White]

Thanks Carl, that helped alot!

So, I'd just to like check, if I run the hotfixes for 9.0.1 do i need to do 
them one at a time, or does the latest hotfix have all the previous hotfixes 
bundled in?

Many thanks,
Richard


> 9.02 is not an update - it is a full install (see Charlie Arehart's 
> blog 
> entry for an excellent explanation 
>  cfm/2013/8/19/understanding_ColdFusion_9.0.2_a_FAQ>). 
> As such, it cannot be installed over the top of 9.0 or 9.0.1.
> -Carl V.
> 
> On 2/13/2014 9:19 AM, Richard White wrote:
> > Just to double check, is it OK to install 9.02 update instead of all 
> the 9.01 hot fixes. I am sure 9.02 will contain all the fixes but just 
> wanted to make sure
> > thanks
> > Richard
> >
> >> Some of those updates in CF 9 were pretty tricky. I would checkout 
> the
> >>
> >> cfUpdater project for RIAForge. It can handle a lot of that 
> craziness
> >>
> >> for you.
> >>
> >> http://cfupdater.riaforge.org/
> >>
> >> Steve 'Cutter' Blades
> >> Adobe Community Professional
> >> Adobe Certified Expert
> >> Advanced Macromedia ColdFusion MX 7 Developer
> >> 
> >> http://cutterscrossing.com
> >>
> >>
> >> Co-Author "Learning Ext JS 3.2" Packt Publishing 2010
> >> https://www.packtpub.
> > com/learni> 
> ng-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book
> >> "The best way to predict the future is to help create it"
> >>
> > 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357695
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

form design issues; cfinput autosuggest vs cfgrid

[Michael Gueterman]

(sorry in advance is this is a double post)

I've got a form layout with a header on top that includes a cfinput using 
autosuggest, then below that a cflayout type="tab".  The drop down produced by 
the autosuggest normally appears fine unless the cflayoutarea contains a 
cfgrid.  In that case, the drop down seems to appear "behind" the cfgrid 
instead of in front of it (which makes it a bit hard to select an item!).  Any 
thoughts on getting the autosuggest list to always appear "in front" of the 
cfgrid?

Sample code:

 
 
  
   

   
  
 


*Note: Replace the cfgrid with something else like simply HTML and the 
autosuggest list appears over the cflayoutarea.  With the cfgrid in place, the 
autosuggest list appears truncated or "behind" the cfgrid.

TIA! 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357693
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Need a way to collect neighborhood directory info online

[John Drake]

Collecting info is easy - you could use Mailchimp, Formstack, Wufoo, etc.

The problem comes when you want self-service editing.  How do you prove that 
the person making the edits is really editing their own data only?  That means 
passwords.

The directory also sounds like something marketers and spammers would love to 
get their hands on.

Sorry to be paranoid, but if you are collecting and hosting this data, you'll 
need to make efforts to protect it.

Google Docs might be something to look at for this. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357691
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Possible to optimise CFHTTP Response Time?

[Mack]

On Thu, Feb 13, 2014 at 4:57 PM, Craig Brown  wrote:

> I have an API running on my server where I can receive an average ping
> response to the host server of 1ms yet when I make a CFHTTP request to the
> host server it takes anywhere from 300-500ms to return a response.


Are you by any chance on Amazon AWS ? Or maybe some other virtualized XEN
solution ?

-- 
Mack


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357690
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

cfform layout issues. cfinput autosuggest vs cfgrid

[Michael Gueterman]

I've got a form layout with a header on top that includes a cfinput using 
autosuggest, then below that a cflayout type="tab".  The drop down produced by 
the autosuggest normally appears fine unless the cflayoutarea contains a 
cfgrid.  In that case, the drop down seems to appear "behind" the cfgrid 
instead of in front of it (which makes it a bit hard to select an item!).  Any 
thoughts on getting the autosuggest list to always appear "in front" of the 
cfgrid?

Sample code:

 
 
  
   

   
  
 


*Note: Replace the cfgrid with something else like simply HTML and the 
autosuggest list appears over the cflayoutarea.  With the cfgrid in place, the 
autosuggest list appears truncated or "behind" the cfgrid.

TIA! 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357692
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

404's

[John M Bliss]

Just installed a legacy CF app under IIS, got index.cfm to run fine with a
form submitting to another .cfm file. Upon submitting form, location bar
changes to http://my.domain.com/formhandler.cfm and that file is definitely
in the webroot with the same permissions as index.cfm...but IIS returns a
404 error.

Any ideas about what to look for next?

-- 
John Bliss - http://www.linkedin.com/in/jbliss


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357689
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Need a way to collect neighborhood directory info online

[Stephen Hait]

We put out a printed directory of families in our neighborhood who choose
to be included and distribute an updated version each year. Currently one
person has compiled this data manually using a spreadsheet.

Do you have any suggestions for a better way to accomplish this data
gathering and management task? We'd like residents to be able to enter and
modify their data themselves via a simple online form and provide a way for
anyone to opt in or out of being included in the directory. When it comes
time to print the directory we'd like to be able to dump the info that's
been entered to use for that purpose.

We have between 300 and 400 families currently who would need to be
accommodated, usually with multiple e-mail addresses and phone numbers
associated with an address. So far, Mailchimp looks like it might offer one
possible solution.

Does anyone have experience with a similar project? If so, how have you
gone about it?

I'd appreciate any constructive comments or experiences you might be
willing to share.

Regards,
Stephen Hait


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357688
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm