Re: Azure Storage

2015-04-01 Thread Bobby

Sorry about the double post. The list was acting up yesterday.

On 3/30/15, 9:49 AM, Bobby bo...@acoderslife.com wrote:


Anyone managed to get Azure blob storage working in CF? There are very few
examples out there and virtually none in CF.

I©öm mostly just having issues with the authorization header
formatting/encoding and wondered if anyone had any working examples.

Unfortunately, this is a CF8 project.





~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360339
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: (ot) JavaScript detecting foreign scripts

2015-04-01 Thread UXB Internet

  Please don't do it off-list, several of us could be interested.

In case anyone is interested, as Claude recommended, It was relatively easy
to check for the foreign script injection by myturfads.com.   There is a
test page with the code located at http://www.uxb.net/adtest/ that will look
to see if your client is seeing the Google ad being replaced by the
myturfads.com 

In case you are wondering what I am talking about.   Some ISP's are using a
proxy technology that in real time intercepts the Google Ad JavaScript code
and replaces it with their own advertising from a company (MyTurf -
www.myturfads.com) that specializes in injecting local advertising into
existing ad spaces for Local ISP's.They replace the google or double
click JS code with their own and can add/inject  pop-up and video ads into
sites that only use text or image advertising from Google. Very Annoying!

Based on the testing I have done with one of my more trafficked sites that
have ads on them (hce.halomaps.org) there are at least two ISP's that are
using the ad-replacement proxy technology in three different regions:
Brewster NY, Denver CO.  and  Boise ID.  NY and CO were Comcast and  ID was
CenturyLink.  I am seeing multiple IPS from each area, mostly in the same B
and C blocks.

The way the test page works is that after loading it looks for any script
called from myturfads.com on the page and then lists the scripts and warns
if one was found.  If one was found it performs an AJAX call and sends me an
email with the client IP. 

I have contacted and opened a case with Google about this and they were very
interested, but of course I only get to deal with the front line support
person so I have no idea what they intend.  I also contacted a copyright law
firm and they were interested but because it is Google's Code and not mine
that is being replaced an infringement case would be tough.  Not only that
but apparently there is no case law that says the ISP cannot replace or
inject scripts. To proceed further it would require I cover legal research
costs to see  if there was a case to be had.It gets all muddy,
especially now with the FCC's new Net Neutrality regulations still not fully
defined and already under legal attack.

I find this behavior on the part of the ISP's abhorrent and dangerous.
Right now they are replacing advertising and stealing revenue from the
advertiser and Web Publisher. But they could just as easily replace articles
or any real content on the fly as well.  And the worst of it is that there
is apparently no legal precedent to the contrary. 

Thanks for listening.


Dennis Powers
UXB Internet - A website Design and Hosting Company 
P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844
W: http://www.uxbinternet.com
W: http://www.ctbusinesslist.com



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360348
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Sudden error with CFHTTP ans SSL

2015-04-01 Thread Claude Schnéegans

 you need to import the certificate to the java
cacerts as a trusted certificate to by-pass the security matching.

That was the trick. I imported the Paypal certificate and now it works.
Thanks a lot.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360349
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Michael Grant

This sounds like it could be the Poodle vulnerability that I faced a few
months back when Chase Paymentech disabled SSL 3.0. What version of Java is
the server running? Java 7 allows SSL 3.0 to negotiate using TLS. I had to
convince my host to update from Java 6.



On Mon, Mar 30, 2015 at 1:33 PM,  wrote:


 Hi,
 I have an application under CF 9 with a paiment module using Paypal.
 At the end of the process, Paypal acknowledges the paiement and my app
 calls a Paypal page to validate the whole operation. This is done with a
 CFHTTP call
 This application has been working fine for years with no modification, bur
 all of a sudden starting March 23rd, I get this error:
 I/O Exception: peer not authenticated
 It appears to be an error with the SSL certificate, but how come ?
 The Paypal site is verified by Verisign.
 What ca I do?


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360340
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Test

2015-04-01 Thread Michael Grant

Not working. Please try again.


On Mon, Mar 30, 2015 at 10:29 PM,  wrote:


 Is this list working?


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360341
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


File Upload/Management

2015-04-01 Thread Robert Harrison

I have a client who wants to be able to manage a file library on the server
with multi-file uploads, file renaming, and directory organization.

I've used Plupload and it's a good tool for multi file uploads, but I'm not
really familiar with any tools that allows for directory management on the
server. They want to be able to browse, upload, rename, and add descriptions
of files; almost like an FTP program but something that runs in the browser
and can be integrated into forms.

Anyone familiar with any plugs-ins or third-party packages that may be
useful...  any links to any packages you may know of would be helpful.

Thanks

Robert Harrison
Full Stack Developer
AIMG
rharri...@aimg.com
Main Office: 704-321-1234  ext.118
Direct Line: 516-302-4345
www.aimg.com



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360343
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Sudden error with CFHTTP and SSL

2015-04-01 Thread Kurt Kaptein

Try taking the restricted ip addresses out of your paypal account - we ran
into this as well and after 2 days of battling it, this did fix the issue
for us

Sincerely,

Kurt Kaptein
President
Spectrum Net Designs, Inc
PO Box 806
Grandville, MI 49468

Ph: 616-538-2914
Toll Free: 866-773-2638
Fax: 616-538-5691

Visit our Website: www.spectrumnetdesigns.com
Email: k...@spectrumnetdesigns.com

-Original Message-
From: Michael Grant [mailto:mgr...@modus.bz] 
Sent: Wednesday, April 1, 2015 3:29 PM
To: cf-talk
Subject: Re: Sudden error with CFHTTP and SSL


This sounds like it could be the Poodle vulnerability that I faced a few
months back when Chase Paymentech disabled SSL 3.0. What version of Java is
the server running? Java 7 allows SSL 3.0 to negotiate using TLS. I had to
convince my host to update from Java 6.



On Mon, Mar 30, 2015 at 1:33 PM,  wrote:


 Hi,
 I have an application under CF 9 with a paiment module using Paypal.
 At the end of the process, Paypal acknowledges the paiement and my app 
 calls a Paypal page to validate the whole operation. This is done with 
 a CFHTTP call This application has been working fine for years with no 
 modification, bur all of a sudden starting March 23rd, I get this 
 error:
 I/O Exception: peer not authenticated
 It appears to be an error with the SSL certificate, but how come ?
 The Paypal site is verified by Verisign.
 What ca I do?


 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360342
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: File Upload/Management

2015-04-01 Thread Russ Michaels

There is a cffilemanager, also if you look on the Ckeditor site they also
do a file manager, don't recall if there is a xf version. Tinymce also do
one I believe.


On Wed, Apr 1, 2015 at 21:03 PM, Robert Harrison rharri...@aimg.com wrote:


I have a client who wants to be able to manage a file library on the server
with multi-file uploads, file renaming, and directory organization.

I've used Plupload and it's a good tool for multi file uploads, but I'm not
really familiar with any tools that allows for directory management on the
server. They want to be able to browse, upload, rename, and add descriptions
of files; almost like an FTP program but something that runs in the browser
and can be integrated into forms.

Anyone familiar with any plugs-ins or third-party packages that may be
useful...  any links to any packages you may know of would be helpful.

Thanks

Robert Harrison
Full Stack Developer
AIMG
rharri...@aimg.com javascript:;
Main Office: 704-321-1234  ext.118
Direct Line: 516-302-4345
www.aimg.com





~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360345
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Russ Michaels

I suspect they disabled various ssl protocols due to poodle, you should ask
them. The default response ro poodle was to disable everything except
latest tls version, which is not supported out of the box by the jvm that
ships with cf9.


On Mon, Mar 30, 2015 at 18:33 PM,  wrote:


Hi,
I have an application under CF 9 with a paiment module using Paypal.
At the end of the process, Paypal acknowledges the paiement and my app
calls a Paypal page to validate the whole operation. This is done with a
CFHTTP call
This application has been working fine for years with no modification, bur
all of a sudden starting March 23rd, I get this error:
I/O Exception: peer not authenticated
It appears to be an error with the SSL certificate, but how come ?
The Paypal site is verified by Verisign.
What ca I do?




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360346
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Sudden error with CFHTTP and SSL

2015-04-01 Thread Wil Genovese

If they have disable the older SSL protocols here are two blog posts I did on 
how to handle that with CFHTTP and your Java version.

Java Version
http://www.trunkful.com/index.cfm/2014/11/24/ColdFusion-JVM-SSL-CA-CERTS-and-POODLE

CFHTTP and JVM switches 
http://www.trunkful.com/index.cfm/2014/12/8/Preventing-SSLv3-Fallback-in-ColdFusion

If they have disabled TLSv1.0 then we could have bigger troubles.

Regards,
Wil



Wil Genovese
Sr. Web Application Developer/
Systems Administrator
CF Webtools
www.cfwebtools.com

wilg...@trunkful.com
www.trunkful.com

 On Apr 1, 2015, at 5:41 PM, Russ Michaels r...@michaels.me.uk wrote:
 
 
 I suspect they disabled various ssl protocols due to poodle, you should ask
 them. The default response ro poodle was to disable everything except
 latest tls version, which is not supported out of the box by the jvm that
 ships with cf9.
 
 
 On Mon, Mar 30, 2015 at 18:33 PM,  wrote:
 
 
 Hi,
 I have an application under CF 9 with a paiment module using Paypal.
 At the end of the process, Paypal acknowledges the paiement and my app
 calls a Paypal page to validate the whole operation. This is done with a
 CFHTTP call
 This application has been working fine for years with no modification, bur
 all of a sudden starting March 23rd, I get this error:
 I/O Exception: peer not authenticated
 It appears to be an error with the SSL certificate, but how come ?
 The Paypal site is verified by Verisign.
 What ca I do?
 
 
 
 
 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360347
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm