from:"Cameron"


On Thu, Apr 10, 2014 at 7:18 PM, Bryan Stevenson wrote:

 Thanks Dave.not exactly, but that does spark another idea.  Any idea
 if the URL can specify URL params as well (I assume so...just have not
 really used them much)??


Bryan-

We are scoping out a project with similar requirements right now. The goal
would be that QR Codes could be used to help in data entry in a form that
has other fields in it too. It's for an stock/inventory management app.

I don't know if this helps you out at all because I haven't tested anything
yet to see what's possible, but we're hoping to build the QR codes as URLs
so that any outside QR scanning app hitting the code would send the user
to an appropriate deep link in the mobile site for that item.

Additionally, we hope to eventually embed QR scanning in either a mobile
site or app that would allow the user to scan item(s) now as part of a
larger process. In this case, we would like to intercept the QR string
within our app and disassemble it in the app (instead of redirecting the
user to the URL). In that case we would just pull out the URL params to
populate the form and disregard the fact that it's a web link.

I think that this should be possible in theory but I don't know yet what's
possible within a mobile website vs an app. In a native app I am sure it's
possible, the mobile site I am still unsure.

We are also investigating handheld BlueTooth QR scanners that may be able
to send the inputs to the app as a string - simulating keyboard entry.
We've had success with connecting up credit card swipers and 2d barcode
scanners this way in the past so I am hopeful this will be no different.

I would be interested in hearing about anything you find.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358312
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: (ot) barcodes and mobile sites


On Fri, Apr 11, 2014 at 9:41 AM, Dave Watts wrote:

 If you're building a native app on Android, you can certainly do this
 with the ZXing library:
 https://github.com/zxing/zxing

 I don't think you'll be able to do that with a mobile site, though.


This company has already chosen iOS as their platform of choice and we have
already told them they should expect to buy bluetooth scanning hardware.
I'm still going to play with the mobile site though and see if I can make
anything at all work. The project is still at the very start.

WWDC is also in June, the theoretical middle of this project. I haven't
been paying attention enough to know what may be released around that time
but I've always thought it's feasible that a QR Code input could be built
into Safari eventually, someday. I think that's a very long shot, but it's
in the back of my mind since this project started.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358314
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Extending Application.CFC


On Fri, Apr 11, 2014 at 12:58 PM, Donnie Carvajal wrote:

 I have an application with a root application.cfc and a subfolder for IVR
 access that also has an application.cfc which extends the root
 application.cfc.  There are certain Application variables that I only need
 in the IVR subfolder, so I added an onApplicationStart method to the
 subfolder application.cfc.  I'm running into an issue in my IVR access
 indicating that the IVR specific variables are not available.  This is
 because the root application.cfc ran before the sub and the
 onApplicationStart method in the sub application.cfc did not.

 Would you suggest putting all application variables in the Root
 onApplicationStart method or add a check in subfolder onRequest method for
 variables and call subfolder onApplicationStart if missing?

 Any best practices I'm missing?


Assuming that both App.cfc files share the same Application name, it's
really all one application regardless of which fires first. So you aren't
really getting much benefit from what it sounds like you are trying to do,
unless App.cfc is doing some other things too.

A few ways you could do this. Here are some ideas:

1) Use some sort of BeanFactory/Parent SubFactories to populate these
beans. DI/1 is a good one...

https://github.com/framework-one/di1

2) You could pull out some of the Application.cfc code and abstract it into
other files. Then you have the option to include things your IRV needs or
not, without extending. Mura CMS does this. Start at line 48/67/79 here to
see a few examples of how:

https://github.com/blueriver/MuraCMS/blob/develop/Application.cfc

3) I've used a very lightweight SingletonFactory.cfc before to create files
on demand. This is similar to some things DI/1 does but super dumbed down
and without the Dependency Injection part. you ask it for a CFC and it
optionally creates it if needed and stores it in the application scope. If
it's already in Application scope it just returns it.

A quick example is here:

https://gist.github.com/cameroncf/10487348

You call it something like this:

ivrSettings = createObject('component','path.to.model.SingletonFactory')
  .init()
  .getObject('path.to.model.IVR.Settings');

You can obviously abstract out some of that init code but that's
essentially how it's used in a one line example.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358323
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Extending Application.CFC


On Fri, Apr 11, 2014 at 3:42 PM, Donnie Carvajal wrote:

 What are the pros and cons for using separate application names?  Are
 there any caveats I should be aware of if I decide to use separate
 application names?


Separate application names result in separate applications.

There are no pros/cons. If you want two distinct applications, use
different names. If not, use the same name.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358325
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Very disappointed in Viviotech

2014-04-01 Thread Cameron Childress


On Mon, Mar 31, 2014 at 11:46 PM, Mike K wrote:

 We got me set up for managed support and in the mean time he had
 researched the answer to my problem, and we went on from there. Also,
 Jordan Michaels the co-owner of Viviotech wanted to talk to me too.I
 thought he was going to give me a lecture about patience (he'd have been
 justified ) but no, he was ready to listen and understood my issue entirely.


I'm glad you got things worked out. I've had to call VivioTech support a
few times myself and they always answer the phone quickly and are helpful.
The managed support is worth it when you are trying to troubleshoot a
problem and for the handful of my customers who are hosted there, I always
suggest that they get the managed plan.

They have even helped me once or twice with I didn't have a managed plan,
but I asked super nice knowing they didn't have to help me.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358265
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CAN THIS PLEASE BE THE END? Re: The long tail of ColdFusion fail

2014-03-30 Thread Adam Cameron

Why would you try to stifle people's conversation?

That's not like you.

I'm still getting stuff (read: thought exercises) from all the content on
this thread.

If you personally don't like this thread, maybe take responsibility for your
own situation and filter it out; rather than trying to force your will on other
people.

--
Adam

Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote:

Good Gawd! Some of you are like a dog with a bone.

The facts:
1) Something Happened
2) It Got Publicized
3) There Are A Lot of Ticked Off People

We can debate who is at fault until we are blue in the face. The fact
of
the matter is, all of it is in the past. We can not change the past.
Adobe (the CF product team) is aware of everyone's concerns, and are
evaluating strategy *for the future*. You have all said your piece
here,
in the very public openness of the web, where Google will pick it up
and
run, and allow the naysayers to say see, even their own community...

Review the install of the now public beta. Write down a list of
faults/suggestions. Go file it in the bug report tool. Let everyone
know
that it's there for vote and comment. Everyone then go vote and
comment.
If you do it right, and you give it full court press, maybe we can get
at least partial response before they take the server to full product.

I promise you that it is a much more valuable use of your time, and
your
valid, constructive criticism might actually get met with an official
response and/or action.

Now, you are welcome to flame me here, but *I* promise *you*, you will
just be wasting keystrokes. Spend 'em in the bug tracker.

Steve 'Cutter' Blades
Adobe Community Professional
Adobe Certified Expert
Advanced Macromedia ColdFusion MX 7 Developer

http://cutterscrossing.com

Co-Author Learning Ext JS 3.2 Packt Publishing 2010
https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book

The best way to predict the future is to help create it

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358238
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

nput solicited: List function support as member functions in CFML

2014-03-28 Thread Adam Cameron


G'day:
I'm concerned about how Adobe have implemented the list-oriented member 
functions in ColdFusion 11. And I was hopeing to capture some community input 
as to what other people think, before raising it with Adobe:
 
http://cfmlblog.adamcameron.me/2014/03/survey-lists-in-cfml-and-naming-of-list.html
 
It'd be cool if you could take the time to complete the survey.

Thanks.
 
--
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358169
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail

2014-03-28 Thread Adam Cameron


Sorry, forgot to come back to this.

 This is not a false analogy because [etc]

But it *is* a false analogy because it's generally a government requirement for 
people to be licensed to drive a car before they can use one, so it's 
reasonable to assume from the outset of the sale process that a minimum level 
of education is already in place regarding how a car works.

This is not the case with CFML.

I think, on the whole, physical object analogies made in the context of IT 
considerations have a lovely superficial warmth to them, but generally end up 
being pretty specious.

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358170
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Moving part of my hosting business - thoughts about my plan please ...

2014-03-28 Thread Cameron Childress


On Fri, Mar 28, 2014 at 5:21 AM, Mike K wrote:

 I am thinking of a virtual server in the cloud,  moving to Linux and Railo
 from Windows2003 Server and ColdFusion.


We are working on a similar move with a client right now and here's what
advise I can give based on the decisions we made.

Only change one thing at a time. You're contemplating changing 3 things at
a time. If you are going to most hosts, move hosts and stay on Win/CF for
now. If the site is important to your business (and it sounds like it is)
am a big proponent of only changing one thing at a time.

It sounds like your real immediate problem is hosting, I would solve that
problem first. If you want to manage the servers yourself, look at Amazon
or RackSpace or one of the cloud providers and move to windows VMs running
there. Moving to a VM should be relatively straightforward and since this
is the most urgent thing, I would do this one first. It should be the
quickest, though you may have to deal with things like getting outbound
email routed/whitelisted properly.

I would bet you are thinking about moving to Linux/Railo since you're about
to be responsible for license costs all the sudden that you don't have and
are not cheap. Valid reason, but I would wait. Pay the extra money for the
short term and move the code over to Linux/Railo later.

Moving to Linux/Railo is not a bad move at all, and you can probably do
these at the same time. However, you're probably going to want to spend
some quality time with the code first. Sometimes it's easy as cake and no
modifications are required tot he code at all. Sometimes it's more complex.

I'm guessing you'll want to move to something like MySQL or another lower
cost DB server as well. Just make sure that you give yourself some time to
play with the Linux/Railo setup before you make the final move.

Lastly, you might take a quick peek at RightScale for cloud server
management / configuration management. It's basically Chef/Puppet scripts
you can glue together to automate server deployments across various cloud
platforms. The single user version is free last time I checked.

http://www.rightscale.com/

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358174
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail


If it only works on localhost *by default*, then this mitigates most of the
problem just like that.

-- 
Adam


On 26 March 2014 14:17, Dave Watts dwa...@figleaf.com wrote:


  What I mean is that Adobe recommands that CFIDE should be moved to a
 safer place, but, after several
  versions, CFIDE is still installed the same way.

 Of course it is. If It were somewhere else, you wouldn't be able to
 administer CF after an out-of-the-box install. It's up to you to
 understand how web servers and web applications work, and set it up
 properly after it's installed.

 Dave Watts, CTO, Fig Leaf Software
 1-202-527-9569
 http://www.figleaf.com/
 http://training.figleaf.com/

 Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
 GSA Schedule, and provides the highest caliber vendor-authorized
 instruction at our training centers, online, or onsite.

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358112
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail


On 26 March 2014 13:57, Dave Watts dwa...@figleaf.com wrote:


  CF should install locked down out of the box, there really should be no
  need to follow a complex lockdown guide to make it secure.

 [...]

 If you really think Adobe is responsible for your server's security,
 and should be installed locked down out of the box, you must have a
 different idea of what locked down means than I do.

 Adobe is responsible for vulnerabilities in the CF Administrator, but
 you are responsible for ensuring that the CF Administrator isn't
 exposed to untrusted networks. It's a web application, just like any
 other.


From a system security perspective, the approach is generally the default
is *no access*, and then access has to be specifically granted.

Adobe has taken the opposite approach simply to make life easy, which has
proven to be a foolhardy decision. Repeatedly. For years.

You (and Adobe both) are labouring under some perfect world scenario in
which admins actually *do* know what they're doing by default. This simply
isn't true. Adobe need to accept reality and deal with it, rather than
going well in the perfect world then [this]. But we actually no it's not
a perfect world, so why start the position from there?

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358113
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail




 In the case where everything's locked down by default, nothing works,
 and admins need to learn how to remove security to allow access to a
 web application.

 I'm not sure I see much difference there. Either way, someone needs to
 know how web application security works. If you're in the business of
 building web applications, this is a fundamental part of your job.


The difference is that - via the current way - the admin *doesn't* need to
know about web security. That's the difference.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358118
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail


The doors are locked by default though, aren't they?

Plus it's a bit of a false
analogyhttp://en.wikipedia.org/wiki/False_analogyanyhow.


On 26 March 2014 14:44, DURETTE, STEVEN J sd1...@att.com wrote:


 I like this analogy... You buy a new Ford Fusion. Ford tells you about how
 closing the doors and locking it is a security feature.
 Then, you go park in a high crime area with the car running, keys in the
 ignition and the doors wide open.

 So who is responsible when the car gets stolen?

 (The media would report an issue with Ford door locks.)  :)

 Steve



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358120
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail


On 26 March 2014 14:54,  wrote:


  It's up to you to understand how web servers and web applications work,
 and set it up

 My point is that I'm pretty sure everything I've done by hand to move
 CFIDE/administrator and declare a virtual directory to some special web
 site could be done by the installer.


Well quite. And if it's so bloody insecure a thing to do, then *don't do it*
.

It's daft to facilitate the [potentially dangerous thing], then advise
people to not do that. Simply don't bloody do it in the first place!

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358121
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail


On 18 March 2014 10:05, Maureen mamamaur...@gmail.com wrote:


 Hating CF is like hating a hammer.  Hating PHP is like hating a huge
 rock you are forced to use on the nails because the client won't let
 you use a hammer.



Fantastic.

That's put a smile on my face today.

Thanks.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358005
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail

2014-03-18 Thread Cameron Childress


On Tue, Mar 18, 2014 at 12:04 AM, Gerald Guido wrote:

 What is the deal with the bias and, at times, the flat out bigotry toward
 CF? Could someone explain this to me?


Everything makes more sense when you think of programming languages as
religions. Each has it's own moderates and some have extremists who would
love nothing more than a holy war.

Choose to be secular.

-Cameron

...


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358014
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

CFML tags was: The long tail of ColdFusion fail




  so some people think it is not real code

 ... and these people are real morons ;-)
 Being tag oriented, compatible with HTML, makes CF the most developper
 friendly language ever.


Give it's unlike any other language one might already know, how is it being
tag-oriented a dev-friendly thing?

Tag-based code is godawful anywhere other than in a view, or some other
situation in which text-processing is needed. Which does not describe an
awful lot of CFML code out there.

That Macromedia/Adobe pushed the tag side of CFML over the script side is
probably the worst strategic move they ever made.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358017
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CFML tags was: The long tail of ColdFusion fail



  how is it being tag-oriented a dev-friendly thing?

 Just because the code and the HTML it is intended to produced are
 integrated within the same syntax.
 That makes any template looks like ONE program written in ONE language,
 not a program written in one language and another program in another
 language embeded in strings in the first language.


Which describes your views, and that's fine to have the odd control
statement etc within them.

But the bulk of your *code* should be separate from your views. So be
nowhere *near* HTML. So, accordingly, the reason for having tag-based
constructs in CFML should not be relevant in almost all your code.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358022
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CFML tags was: The long tail of ColdFusion fail


On 18 March 2014 14:53, Phillip Vector vec...@mostdeadlygame.com wrote:


  But the bulk of your *code* should be separate from your views. So be
 nowhere *near* HTML. So, accordingly, the reason for having tag-based
 constructs in CFML should not be relevant in almost all your code.

 Presuming you are doing a MVC framework.

 Well... presuming you organise your code AT ALL. It doesn't need to be via
a framework.

But I guess you've got even bigger code challenges if yer *not* using a
framework of some description.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358024
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail

2014-03-18 Thread Cameron Childress


On Tue, Mar 18, 2014 at 10:21 AM, wrote:

 Excuse my ignorance, but what is CC?


Creative Cloud. Adobe's software rental program.

-Cameron

...


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358027
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF to groovy, awe man wth...


Why would you not want to learn it?


On 17 March 2014 13:28, morchella morchella.delici...@gmail.com wrote:


 so we have some people at the top here wanting us to switch from cf to
 groovy.
 i have no control other then will support all apps until this thing
 happens.

 so was curious if any one here has done any groovy stuff, and what advice
 they could give to a old man who has done cf since 1998.

 i don't want to learn it. but have to.
 so any good books or resources that you know of?

 hoping it doesn't happen, or that i find another cf shop before it does.


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357944
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF to groovy, awe man wth...


Absolutely. I'd KILL for an opportunity like that (that said, we're being
cross-trained to C#, which I am also looking fwd to).


On 17 March 2014 13:39, Raymond Camden raymondcam...@gmail.com wrote:


 No kidding. Being forced to learn something new - on the clock - sounds
 like a win win.


 On Mon, Mar 17, 2014 at 8:35 AM, Adam Cameron dacc...@gmail.com wrote:

 
  Why would you not want to learn it?
 
 
  On 17 March 2014 13:28, morchella morchella.delici...@gmail.com wrote:
 
  
   so we have some people at the top here wanting us to switch from cf to
   groovy.
   i have no control other then will support all apps until this thing
   happens.
  
   so was curious if any one here has done any groovy stuff, and what
 advice
   they could give to a old man who has done cf since 1998.
  
   i don't want to learn it. but have to.
   so any good books or resources that you know of?
  
   hoping it doesn't happen, or that i find another cf shop before it
 does.



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357947
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: CF to groovy, awe man wth...


On 17 March 2014 13:49, Raymond Camden raymondcam...@gmail.com wrote:


 Ok, I think he gets the idea now. :) Can anyone recommend books, classes,
 etc for him? I believe I used an ORA book a few years ago that was good. In
 general, ORA books are *always* a good idea.


TBH, I'd just google groovy tutorial or some variation thereupon, and go
from there to start with. Before outlaying for a book.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357950
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail

2014-03-17 Thread Cameron Childress


There are a ton of sites out there with insecure CFAdmins, some running
CFMX6!!!

Google for inurl:cfide/administrator to find a few.

-Cameron

...


On Mon, Mar 17, 2014 at 4:30 PM,  wrote:


 I think this hack is known since a long time ago. I remember having
 installed my CF administrator in a safe place at least 2 or 3 years ago.
 The adobe document which describes what to do is dated Mai 2010, almost 4
 years old.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357973
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail


+... err... one.


On 17 March 2014 19:21, Matt Quackenbush quackfu...@gmail.com wrote:


 On Mon, Mar 17, 2014 at 3:11 PM, Phillip Vector
 vec...@mostdeadlygame.comwrote:

 
  We're not releasing any more CF sites and are converting those site we
 can
  to PHP.
 
  Oh yeah. Change from a closed source to an open source. What can possibly
  go wrong. :)
 
 
 That has to be one of the most uneducated posts I have ever read.

 For those reading this in the future, please never succumb to the
 ridiculous thought that closed source equates to security or that open
 source equates to insecurity. the fact of the matter is that neither
 closed- nor open-source is inherently more or less secure than the other.
 Do your homework and never listen to uneducated opinions/statements like
 the one espoused by the poster I quoted above.




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357986
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: The long tail of ColdFusion fail


On 17 March 2014 21:49,  wrote:


  and then when their site gets owned, CF gets the blame.

 On another hand, why Adobe hasn't change the way CF is installed if its
 not safe?


backwards compatibility, and general lack of taking security seriously.
They offer lipservice to security, but are too paralysed at the thought of
alienating their more uniformed install base that they have dragged their
heels when it comes to this sort of thing.

That said... all the exploits last year would not have been possible to
utilise if the people administering the CF servers actually did their jobs
professionally. I'm the first one to blame Adobe for shitty exploitable
code, but it's the idiots that leave well identified vectors open to abuse
that have caused all the problems recently.

But I will swing back towards Adobe (and Macromedia before them) being to
blame here for engendering this idea that one can be a plank and still use
CF. So now we have a community full of planks (and we *seriously* do). It
was/is irresponsible for Macromedia/Adobe to commercially exploit this. IMO.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357987
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Honest question about cfform

2014-03-04 Thread Cameron Childress


On Mon, Mar 3, 2014 at 10:42 PM, Gerald Guido wrote:

 My bad: Why are people so vehemently opposed to CFForm?


Rule of thumb: Anything that is built into CF and spits out Java,
Javascript, Flash, or any other client side parsed in the browser stuff
should be avoided. Adobe has a roughly 18 month cycle on releases of
ColdFusion so it will be at least 18 months out of date as some point,
maybe 36 month if they skip updating it in a release.

That's essentially a lifetime on the client side.

You control the server side. So that code gets old and crufty, who cares?

You do not control the client side, it needs to be able to grow and adapt
alongside browsers as they evolve. Not on a 18-36 month release cycle
dictated by an outside vendor.

-Cameron

PS: Cough, cough, PhoneGap integration, cough, cough, bleagh

...


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357842
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: array2.equals(array1) how to show difference?


Bear in minf that when you sue the .equals() method, you are using a *Java*
method, so it will also be considering differences in type too (eg: Long vs
Double, etc). Plus casing differences too.

To check stuff at a CFML level, write a recursive function which takes both
arrays, and which loops over the array, either doing a compare() if the
value is simple (output both values, and the comparison result), or
re-calling itself if it's an array.

I'm interested to know what your data is in that you've found a
two-dimensional array is the best fit for a data-type. That's pretty rare
in business applications (which most CFML apps are, so assuming yours is
too).

-- 
Adam


On 28 February 2014 11:29, Byron Mann byronos...@gmail.com wrote:


 Is it possible there is whitespace appended to some of the array values?

 Byron Mann
 Lead Engineer  Architect
 HostMySite.com
 On Feb 27, 2014 7:32 PM, morchella morchella.delici...@gmail.com
 wrote:

 
  hey guys i have two, 2 dimensional arrays.
  they have 3 columns.
 
  i have used #array2.equals(array1)# to show when they are difference and
  then
  just continue with normal logic.
 
  but now i have an instance where they say no the don't equal.
  but for the life of me i cant visually see the difference in the query's
 
 
  i am using cf9 locally and 10 on the server.
  how can i force the different record(S) to display.
 
  thanks a bunch, -m
 
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357788
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: array2.equals(array1) how to show difference?


Just a note:  cfprocessingdirective pageencoding=UTF-8 has no bearing
whatsoever on the content of DATA, it only relates to the code within the
file itself, so will not be relevant unless you are populating of of the
arrays via actual code (which you are not, based on what you say here).

-- 
Adam


On 28 February 2014 14:41, morchella morchella.delici...@gmail.com wrote:


 ok that may be it.
 i have trinmed and lcased every thing, stripped out the html et.

 one array is populated from oracle, the other from mysql.
 weeks ago i had to put cfprocessingdirective pageencoding=UTF-8
 in my cfc due to charecters coming in with odd junk.

 my reg cf comparison shows my data to be equal.
 just not using the .equals thingy
 i kinda dont trust it now...

 Thanks!
 -m


 On Fri, Feb 28, 2014 at 6:47 AM, Adam Cameron dacc...@gmail.com wrote:

 
  Bear in minf that when you sue the .equals() method, you are using a
 *Java*
  method, so it will also be considering differences in type too (eg: Long
 vs
  Double, etc). Plus casing differences too.
 
  To check stuff at a CFML level, write a recursive function which takes
 both
  arrays, and which loops over the array, either doing a compare() if the
  value is simple (output both values, and the comparison result), or
  re-calling itself if it's an array.
 
  I'm interested to know what your data is in that you've found a
  two-dimensional array is the best fit for a data-type. That's pretty rare
  in business applications (which most CFML apps are, so assuming yours is
  too).
 
  --
  Adam
 
 
  On 28 February 2014 11:29, Byron Mann byronos...@gmail.com wrote:
 
  
   Is it possible there is whitespace appended to some of the array
 values?
  
   Byron Mann
   Lead Engineer  Architect
   HostMySite.com
   On Feb 27, 2014 7:32 PM, morchella morchella.delici...@gmail.com
   wrote:
  
   
hey guys i have two, 2 dimensional arrays.
they have 3 columns.
   
i have used #array2.equals(array1)# to show when they are difference
  and
then
just continue with normal logic.
   
but now i have an instance where they say no the don't equal.
but for the life of me i cant visually see the difference in the
  query's
   
   
i am using cf9 locally and 10 on the server.
how can i force the different record(S) to display.
   
thanks a bunch, -m
   
   
   
  
  
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357793
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Best practices for xss security in CMS?


Also bear in mind that is only half the work. Whatever pre-validation or
UX tweaks one does on the client, one still needs to do the actual
validation on the server too.


On 1 March 2014 06:38, Russ Michaels r...@michaels.me.uk wrote:


 with any decent editor including CKeditor and tinyMCE, you can specify down
 to a granular level which html tags and attributes are allowed/not allowed,
 just check the docs and there should be a config file somewhere in your CMS
 that instantiates the editor where you can modify these settings.
 So it is pretty easy to do as you need.
 It is also a good idea to restrict other tags to avoid numpty editors from
 just copying and pasting content which screws up the layout.



 On Fri, Feb 28, 2014 at 4:29 PM, Dave Watts dwa...@figleaf.com wrote:

 
   I'm very interested in your feedback on best practices when 1) trying
 to
   mitigate risk of XSS and other hacks while 2) providing CMS
 functionality
   that includes a web editor that clients use to publish web pages.
   For example, there are many tags like style, iframe, and embed
 that
   are considered risks by OWASP and others but are also typically needed
 by
   CMS users to create web pages, embed youtube videos, and the like.
   We're thinking through how to manage the trade offs so that we protect
   clients but don't frustrate them in making their web pages.
   I'd love to know how others are managing these issues effectively.  Our
   users who are creating web pages with an editor (FCKeditor) are
 generally
   working behind a login as administrators, so there is that login
  security -
   not anyone can use the editor to create a web page.  But, we have
  generally
   had a lot more security than that.
   I'm assuming that there are users of Mura, Farcry and other CMS's on
 this
   list and I'd love to know how you have addressed these risks.
 
  While Pete's responses are great (as always), you might also consider
  whether you can apply more traditional network access controls to
  the problem. For example, you might be able to separate authoring from
  publishing entirely, so that authors go to one server and viewers just
  go to the production publishing server. We do this for quite a few of
  our customers. This isn't necessarily a replacement for client
  injection risk mitigation, but it can be a great complement.
 
  Dave Watts, CTO, Fig Leaf Software
  1-202-527-9569
  http://www.figleaf.com/
  http://training.figleaf.com/
 
  Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
  GSA Schedule, and provides the highest caliber vendor-authorized
  instruction at our training centers, online, or onsite.
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357799
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Best practices for xss security in CMS?


That's a bit narrow-sighted.

Hackers don't disable JS to bypass clientside pre-validation, they just
post the form directly. Often the server code is not coded in such a way to
be aware how a post is made (via a legit form, or just by a POST request).

*Always* consider client-side pre-validation a nice to have and really
more a UX (hey, you malformed that phone number, wanna try again? sort of
thing) consideration than actual validation. And *always *do validation on
the server.

-- 
Adam




On 1 March 2014 07:44, Russ Michaels r...@michaels.me.uk wrote:


 although these days if a user has javascript disabled they wont be able to
 use the cms at all as it is a requirement for the editor and all the AJAXy
 stuff.
 but what you can do, is apply filtering to all form fields at a global
 level, so any form submission any page will have anything dodgy removed.
 I believe FuseGuard will do this for you.


 On Fri, Feb 28, 2014 at 6:34 PM, Adam Cameron dacc...@gmail.com wrote:

 
  Also bear in mind that is only half the work. Whatever pre-validation
 or
  UX tweaks one does on the client, one still needs to do the actual
  validation on the server too.
 
 
  On 1 March 2014 06:38, Russ Michaels r...@michaels.me.uk wrote:
 
  
   with any decent editor including CKeditor and tinyMCE, you can specify
  down
   to a granular level which html tags and attributes are allowed/not
  allowed,
   just check the docs and there should be a config file somewhere in your
  CMS
   that instantiates the editor where you can modify these settings.
   So it is pretty easy to do as you need.
   It is also a good idea to restrict other tags to avoid numpty editors
  from
   just copying and pasting content which screws up the layout.
  
  
  
   On Fri, Feb 28, 2014 at 4:29 PM, Dave Watts dwa...@figleaf.com
 wrote:
  
   
 I'm very interested in your feedback on best practices when 1)
 trying
   to
 mitigate risk of XSS and other hacks while 2) providing CMS
   functionality
 that includes a web editor that clients use to publish web pages.
 For example, there are many tags like style, iframe, and
 embed
   that
 are considered risks by OWASP and others but are also typically
  needed
   by
 CMS users to create web pages, embed youtube videos, and the like.
 We're thinking through how to manage the trade offs so that we
  protect
 clients but don't frustrate them in making their web pages.
 I'd love to know how others are managing these issues effectively.
   Our
 users who are creating web pages with an editor (FCKeditor) are
   generally
 working behind a login as administrators, so there is that login
security -
 not anyone can use the editor to create a web page.  But, we have
generally
 had a lot more security than that.
 I'm assuming that there are users of Mura, Farcry and other CMS's
 on
   this
 list and I'd love to know how you have addressed these risks.
   
While Pete's responses are great (as always), you might also consider
whether you can apply more traditional network access controls to
the problem. For example, you might be able to separate authoring
 from
publishing entirely, so that authors go to one server and viewers
 just
go to the production publishing server. We do this for quite a few of
our customers. This isn't necessarily a replacement for client
injection risk mitigation, but it can be a great complement.
   
Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/
   
Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.
   
   
  
  
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357801
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Best practices for xss security in CMS?


Sorry, I only read as far as disabling Javascript and was commenting on
that. The fact remains that anything done *clientside* is not reliable. It
seems we're not disagreeing there,

Certainly having a WAF is borderline essential on anything other than a
trivial site. I'm not entirely sure doing @ CF level is the correct place
to do it, but that's an aside.

Sorry for confusion.

-- 
Adam


On 1 March 2014 07:59, Russ Michaels r...@michaels.me.uk wrote:


 I disagree 100%
 scanning All form fields globally for any dodgy content is the complete
 opposite of narrow sighted, it is a much more efficient way to make sure
 nothing gets through rather than instead trying to do these checks in
 multiple different places and potentially missing one.



 On Fri, Feb 28, 2014 at 6:56 PM, Adam Cameron dacc...@gmail.com wrote:

 
  That's a bit narrow-sighted.
 
  Hackers don't disable JS to bypass clientside pre-validation, they just
  post the form directly. Often the server code is not coded in such a way
 to
  be aware how a post is made (via a legit form, or just by a POST
 request).
 
  *Always* consider client-side pre-validation a nice to have and really
  more a UX (hey, you malformed that phone number, wanna try again? sort
 of
  thing) consideration than actual validation. And *always *do validation
 on
  the server.
 
  --
  Adam
 
 
 
 
  On 1 March 2014 07:44, Russ Michaels r...@michaels.me.uk wrote:
 
  
   although these days if a user has javascript disabled they wont be able
  to
   use the cms at all as it is a requirement for the editor and all the
  AJAXy
   stuff.
   but what you can do, is apply filtering to all form fields at a global
   level, so any form submission any page will have anything dodgy
 removed.
   I believe FuseGuard will do this for you.



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357803
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: URL is specified in wrong format

2014-02-26 Thread Cameron Childress


As a side note, when you get a chance I would change that variable name
from var to something else, unless that was just dummy info for the list.

Since var means something special inside functions it could be reserved
now or in the future.

-Cameron

On Tue, Feb 25, 2014 at 10:23 PM, John M Bliss wrote:


 That's what I typed. I did not think it mattered that my value was actually
 an email address:

 var=cf-talk@houseoffusion.com

 Versions of CF before 10 did not complain about that it a task URL.


 On Tue, Feb 25, 2014 at 10:12 PM, Raymond Camden raymondcam...@gmail.com
 wrote:

 
  I think GMail is mucking it up. This is what I saw:
 
 
 
 https://www.evernote.com/shard/s3/sh/8e0fdc74-d3a1-4384-b8ca-f3c99c6c87a7/30019c7b1b44d51381e339d16d4a1f40
 
 
  On Tue, Feb 25, 2014 at 9:06 PM, John M Bliss bliss.j...@gmail.com
  wrote:
 
  
   No. I wrote, 
  
 
 http://www.SiteOnThisServer.com/index.cfm?fuseaction=fuse.actionvar=value
   
  
 
 http://www.siteonthisserver.com/index.cfm?fuseaction=fuse.actionvar=value
   
   
  
   CF earlier than v10 was fine with:
  
   var=va...@gmail.com
  
  
   On Tue, Feb 25, 2014 at 10:03 PM, Raymond Camden 
  raymondcam...@gmail.com
   wrote:
  
   
Was there a @ in your original post?
   
   
On Tue, Feb 25, 2014 at 9:01 PM, John M Bliss bliss.j...@gmail.com
wrote:
   

 In:

 var=value

   
  
 
 http://www.siteonthisserver.com/index.cfm?fuseaction=fuse.actionvar=value
 

 ...it was not allowing an @ in the value. Instead, I had to use
 %40


 On Tue, Feb 25, 2014 at 5:39 PM, Russ Michaels 
 r...@michaels.me.uk
 wrote:

 
  Yea its neo-cron.xml I think
 
  Russ Michaels
  www.michaels.me.uk
  cfmldeveloper.com
  cflive.net
  cfsearch.com
  On 25 Feb 2014 21:52, John M Bliss bliss.j...@gmail.com
 wrote:
 
  
   Anyone? Is there an .xml file I can edit?
  
  
   On Tue, Feb 25, 2014 at 2:24 PM, John M Bliss 
   bliss.j...@gmail.com
   wrote:
  
ACF 10,0,12,286680
   
I have a Scheduled Task imported from ACF 9 which works fine.
 However,
   now
when I edit it, change the schedule (but not the URL), and
  click
 Save,
   I'm
getting:
   
URL is specified in wrong format.
   
URL (which I know works) is:
   
   
  
 

   
  
 
 http://www.SiteOnThisServer.com/index.cfm?fuseaction=fuse.actionvar=value
   
Any idea why it doesn't like that URL?
   
--
John Bliss - http://www.linkedin.com/in/jbliss
   
  
  
  
   --
   John Bliss - http://www.linkedin.com/in/jbliss
  
  
  
 
 


   
   
  
  
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:35
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Possible time out

2014-02-13 Thread Cameron Childress


On Thu, Feb 13, 2014 at 11:08 AM, Steve 'Cutter' Blades wrote:

 I don't know if it was a great blog post... (Thanks Matt) ;)


I am JUST dealing with the postparam problem with a client (yes that
client) and came across this post from you about 10 minutes ago in my
searching. It's a real tough problem to figure out sometimes.

See also: http://www.petefreitag.com/item/808.cfm

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357679
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: # in variables

2014-02-07 Thread Adam Cameron


On 7 February 2014 18:07, Jon Clausen jon_clau...@silowebworks.com wrote:


 Bryan,

 For clarification, how are the comments content being evaluated by CF and
 causing it to choke?  It seems to me that those should be handled as
 strings and that they wouldn't be evaluated by CF, unless they are wrapped
 in an eval().


Seconded. I think people are suggesting treating a symptom here, rather
than the problem.

How is this problem of yours manifesting itself? CF chokes on the single
pound in the variable is not a very clear description of what's going
wrong.

Can you pls clarify?

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357624
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Jrun Restarts Itself Every Few Minutes - CF 8

2014-02-06 Thread Cameron Childress


My very first reaction (and there will probably be 20 other people who say
this) is to instal and use FusionReactor to trouble shoot the root cause of
this problem.

-Cameron


On Thu, Feb 6, 2014 at 10:12 AM, E Cohen eron_co...@yahoo.com wrote:


 Hello All,

 I am having a problem with one of my ColdFusion 8 production servers.
  JRUN seems to be the issue--it is restarting itself every few minutes and
 I don't know why.  This is the error I find in the Windows Server 2008 R2
 Application error log:

 Faulting application name: jrun.exe, version: 4.0.7.43137, time stamp:
 0x47d937de
 Faulting module name: MSVCR100.dll, version: 10.0.30319.1, time stamp:
 0x4ba220dc
 Exception code: 0xc417
 Fault offset: 0x0007038c
 Faulting process id: 0x14e8
 Faulting application start time: 0x01cf234798a16348
 Faulting application path: C:\ColdFusion8\runtime\bin\jrun.exe
 Faulting module path: C:\Windows\system32\MSVCR100.dll
 Report Id: 28eeef4c-8f3b-11e3-95a9-80ee73328ead

 I have tried uninstalling and re-installing ColdFusion but the problem
 continues.  Can anyone give me any other ideas of where to look or how to
 troubleshoot this?

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357599
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: cflocation mystery

2014-02-02 Thread Cameron Childress


fileExists() accepts a filename on the filesystem, not a URL.

-Cameron


On Sun, Feb 2, 2014 at 11:41 AM, Rob Voyle robvo...@voyle.com wrote:


 Hi Folks

 I have a basic .html site that I have converted to a coldfusion site.

 since there are many old .html links out there I added the following to my
 notFound.cfm file:

 cfif notFoundUrl contains .html 
 cfset newUrl=http://www.mydomain.com; 
 replace(notFoundUrl,.html,.cfm)
 cfif fileExists(newUrl) is yes
 cflocation url=#newUrl#
 cfelse
 cflocation url=http://www.mydomain.com;
 /cfif
 /cfif

 Works fine if the file exists but throws an error if the file doesn't
 exist rather than
 redirecting.

 Also which log file would have the error in it as I can't find the error
 in any of the
 logs

 What am I missing?

 Thanks
 Rob



 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357572
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: (ot) Anyone know how to clear your google details from a browser?

2014-01-31 Thread Cameron Childress


On Fri, Jan 31, 2014 at 2:07 AM, Mike K wrote:

 Does anyone know how to clear your login details from a browser if you've
 logged into gmail on someone else's computer?


1) Always use incognito mode.
2) Turn on Two Factor Authentication on your GMail account so that it
requires more than just a password.
3) On your own computer, log into GMail in the browser, scroll to the
bottom where it says Last account Activity and click Details. Click log
out all other sessions and it will kill other browser sessions.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357552
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Secure application code from host

2014-01-28 Thread Cameron Childress


On Tue, Jan 28, 2014 at 8:35 AM, Byron Mann wrote:

 I would suggest working with an attorney to make sure you have a proper
 licensing agreement in place.


An attorney who understands IP law in this country without internet.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357505
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Help me with some statistics gathering, if you have a moment

2014-01-02 Thread Adam Cameron


G'day:
i'm just gathering some information about people's opinions of some mooted
CFML syntax. If you could complete this survey (one multi-choice, one
optional comment), that'd be really cool:
http://cfmlblog.adamcameron.me/2014/01/a-quick-survey-about-tags-script-in.html

Cheers.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357386
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings

2013-12-19 Thread Adam Cameron


I am trying to set up some local mappings (CF9) and it doiesn't seem to
recognize it.  I have this as part of several variables that are set before
the 1st function in my application.cfc...

cfset this.mappings[ /cup ] = #application.cuproot#/cup

What ended up happening with this?

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357366
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: TEST IGNORE (2)

2013-12-04 Thread Adam Cameron



 Would be easier to switch to google groups maybe


Seconded.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357266
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: TEST IGNORE (2)

2013-12-04 Thread Adam Cameron



 Unless Google Groups can send email and can act exactly like a mailing
 list, please don't move it there.


Yeah it can. And a lot better than this implementation does.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357267
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: isValid - numeric vs. float

2013-12-03 Thread Adam Cameron


It's a bug. There's no reason 1,000.00 should validate as a numeric value
of any kind; and float is a subset of numeric.

Railo returns false for both. As does OpenBD.

-- 
Adam




On 3 December 2013 22:05, Scott Brady dsbr...@gmail.com wrote:


 The docs for isValid() imply that the type numeric and float are
 equivalent, in that they're listed together.  However, they can yield
 different results:
 isValid(numeric,1,000.00) returns false
 isValid(float,1,000.00) returns true

 This came up as we're dealing with an issue of users entering 1,000.00
 [or something similar] into a field, which can cause problems in one area
 of code where we need that value to be a valid number (i.e., we want to use
 it in a calculation, which results in an error).  We can use
 lsParseNumber(0 around the value, but first we need to make sure it's a
 valid number anyway. So, we're somewhat forced into using
 isValid(float,) which is fine.

 But, is this a bug with the actual isValid() function or is it more of a
 documentation error (i.e., behind the scenes, float and numeric are
 different and 1,000.00 is not a valid numeric but is a valid float)?

 Scott

 --
 -
 Scott Brady
 http://www.scottbrady.net/


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357257
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings

2013-12-02 Thread Cameron Childress


On Tue, Nov 26, 2013 at 6:15 PM, Eric Roberts wrote:

 Thank you Cam...now this .png is getting called from a cfm page
 (header.cfm)  So wouldn't the application.cfc be applied?


In this scenario the browser makes two requests. 1) to a cfm page and 2) to
a png file.

Application.cfc is only executed on the cfm page request.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook http://www.facebook.com/cameroncf |
twitterhttp://twitter.com/cameronc |
google+ https://profiles.google.com/u/0/117829379451708140985


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357218
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

TEST IGNORE


Having trouble posting via email.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357208
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

TEST IGNORE (2)


(second attempt)
Having trouble posting via email.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357209
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: TEST IGNORE (2)


I've been monitoring it for over a year, and have been a member for
about... perhaps not ten years (because I doubt it's been around that long,
but for ages). I have just seldom had need to reply, and had not noticed
what few replies I had made had disappeared into the ether.

But I seem to have fixed the disconnect between my email address and what
HoF thought my email address was (PEBCAK on my part).

That said, yesterday's performance put me off a bit.

-- 
Adam



On 27 November 2013 10:37, Russ Michaels r...@michaels.me.uk wrote:


 I see you have given in to the dark side and joined the evil cf-talk :-)


 On Wed, Nov 27, 2013 at 10:23 AM, Adam Cameron dacc...@gmail.com wrote:

 
  (second attempt)
  Having trouble posting via email.
 
  --
  Adam
 
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357211
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings



 So Eric, unless you have modified some tomcat settings or IIS or Apache
 settings, then what you are saying is not true.


That is, basically, the bottom line. It could be either of those, but we
can't move the answer forward unless we identify which.

If it *is* actually behaving the way you claim, then there is something
about your config you have not told us, Eric, because CF - out of the box -
simply does not work the way you're suggesting. That's the long and the
short of it.

Can you post full config details of your server somewhere, Eric? Was it you
who installed it? Did you do _anything_ other than install apache, install
CF, run the connector between the two? Anything at all. Do not think that
anything is inconsequential or irrelevant.

-- 
Adam


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357215
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Adobe take over a MONTH to advise me my credit card details are stolen

2013-11-26 Thread Cameron Childress


On Tue, Nov 26, 2013 at 8:28 AM, Bruce Sorge wrote:

 Same here John. Emails stating that my password might have been
 compromised as well.


I got a few emails to various addresses. Some arrived right after the
breach and others much later (a month maybe). IIRC, none were about credit
card data, only about UN/PW breach.

Sounds like they were not using a tokenization service and were storing the
PCI directly? Odd that they would be stored in the same location as the
UN/PW (assuming they are both part of the same breach). Usually vendors
with Payment Card volume as high as Adobe are required to keep PCI on
totally isolated systems. But then, you'd assume that about the source code
that was stolen as well.

So the breach was 1) authentication information AND 2) Payment Card
Information AND 3) source code? Presumably all available via the same
breach? Each of which should have been isolated systems. Someone got pwned.

Not Adobe's finest hour.

-Cameron

...


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357144
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


I am trying to set up some local mappings (CF9) and it doiesn't seem to
recognize it.  I have this as part of several variables that are set before
the 1st function in my application.cfc...

cfset this.mappings[ /cup ] = #application.cuproot#/cup



For instance...when I try to access an image in a directory (the path from
the root is /cup/images/image.png), I call img src=/cup/images/image.png
/, instead of mapping it like i would expect it to, it just appends the
server url and i get something like

ColdFusion mappings are used by the ColdFusion server to locate files in the 
file system, for like cfinclude and CFC pathing. They've got nothing to do 
with URLs.  You want to be setting up a web server virtual directory, so when 
the browser requests a file on a given URL, the web server knows where to find 
them.

Reading this - to understand how CF / web server / client interact - might 
help: 
http://cfmlblog.adamcameron.me/2012/10/the-coldfusion-requestresponse-process.html

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357149
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


I know that...I was referring to what is rendered after the fact.When i
click on image information, the image info should display the url with /er/
in it...not the other as that is part of the path from the root.

NO, you don't quite seem to get it actually. When I said CF has got nothing to 
do with it... it serious has NOTHING to do with it.

You have this IMG tag:
img src=/cup/images/image.png /

As far as CF is concerned that's all just text, it doesn't process it at all. 
Like I said, CF mappings are only for CF to find files in its own file system. 
It's got *nothing* (NOTHING) to do with URLs. That being the case, there is 
going to be no magic transformation of img src=/cup/images/image.png / to 
img src=/er/cup/images/image.png / simply because you have a *ColdFusion* 
mapping set up.

If you want to send the URL /er/cup/images/image.png down to the browser (where 
er is a value stored in application.cuproot, then you need to code for that, 
eg:

img src=/#application.cuproot#/images/image.png /

You have to understand that CF (and CFML) have no knowledge of the concept of 
HTML or client browsers or anything like that, All CF does is accept a request 
for a file from the web server, assembles some data to send back via processing 
some CFML (kinda), and that's it. It has no idea you want your image tags to 
have different URLs from the ones you tell it... it just does what it's told.

It really would help if you read that doc I linked to before.

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357154
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


Yes...cf does evaluate the img tag...

No. It absolutely does not. You are mistaken.

I'm not vaguely speculating as to what your problem might be: I know what your 
problem is, and I know how it is you're mistaken about things. It's a fairly 
common misconception people have. And both John and I are explaining the 
problem, and giving you the answer. The other problem we're now faced with is 
you're simply not listening for some reason.

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357157
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


no...it's not the standalone server.  It's going through Apache.  This is
exactly what mappings are used for...

No they're not.

 just as they are used the same way if
you specify this in Apache.  If it works when i set up up in cf
admin...then the per application setting should work the same way but only
be defined as such in the application.That is how it has always worked.

Perform this experiment now.

1) remove your Application.cfc mappings;
2) put the same mapping in CFAdmin;
3) do NOTHING ELSE;
4) browse to the page concerned.

You will not see any difference.

You might coincidentally have had an unnecessary CF mapping at some point when 
you ALSO had the appropriate web server virtual directory, but... deep 
breath... CF mappings have nothing to do with URLs.

John reminds me that if one sets up a mapping in jrun-web.xml then those work 
as both CF mappings (kinda) and JWS mappings at the same time, but that's not 
relevant here. But that is the only situation where a CF mapping have even the 
most passing connection to web server mappings.

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357159
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


again...if it works with a cf mapping in cf admin...how is it not parsing
the img tag?

There are two possibilities here:
1) you have a very special unique version of CF in which a CF mapping setting 
in CFAdmin will magically change a URL in an image tag.
2) you're mistaken.

Those are the only two options.

If you have the unique magic version of CF... I'm afraid I'm not able to help 
you (and I suspect no-one else will be either).

However if it's just a case of you being mistaken, you could simply follow the 
advice already given here.

I have nothing to add to the advice, so I guess it's down to you at some stage 
deciding to follow it.

I'm done.

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357161
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


 OK,
 
 Just ran a test and I cant duplicate your server mapping 
 functionality with a standard Apache/CF Connector server setup but I 
 *can* duplicate that functionality when I tell Apache to serve an 
 image MIME type (e.g. - .jpg, .png) through Coldfusion.  Is this how 
 your setup is configured?  If so, yowsers on a few levels. 

Oh god no.

That could well be it though. If it is, sorry Eric... that's - generally - such 
a terrible approach to take it did not even occur to me that it might be the 
case!

But, please, tell me that's not the way you've got your site configured?

-- 
Adam

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357166
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


Matt...where did I say I was executing a non-cfm file?

When you said this:

 For instance...when I try to access an image in a directory (the path from
 the root is /cup/images/image.png), I call img src=/cup/images/image.png
 /,

Say you have this in your eric.cfm file:

cfset msg = Hi Eric
cfoutput#msg#/cfoutput
img src=/cup/images/image.png /

CF does not know that you want it to do something special with 
/cup/images/image.png, because that's just text. So what CF will send back to 
the web server is just this:

Hi Eric
img src=/cup/images/image.png /

And the web server will send that to the client browser. And the client browser 
will render the mark-up, and it will also go looking for an image @ 
/cup/images/image.png. It will reuse the same domain name that the rest of the 
file came from, if you don't specify it, so it'll go fetch 
http://yourdomain.com/cup/images/image.png or something.

The request for the image is a completely separate request from the original 
request to eric.cfm. CF has finished its job as far as any of this goes.

The web server receives the request, resolves /cup/images/image.png relative to 
its base directory (eg: /var/htdocs), or if it has a virtual directory set up 
for eg /cup pointing to another dir, then it will fetch the file from there 
instead. And send it back to the browser. The browser then renders the image. 
As I mentioned above, CF plays no part in this request. So it doesn't matter 
what your CF mappings say.

The only way that CF can possibly know about /cup/images/image.png (so as to 
maybe remap /cup to be /er/cup) is if you have configured your WEB SERVER to 
pass png requests to CF as well. According to John's research, then CF will 
resolve a mapping.  I dunno whether it'll process ones in Application.cfc, but 
the Application.cfc would need to be somewhere on the /er/cup/images path for 
it to be picked up. If indeed it was picked up at all.

But the fact remains that the original CF request will do nothing to the URL in 
the image tag, and the web server won't either.

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357181
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


Adam...as i stated several times...when I do the cf mapping in cf
admin...it works just fine...so I have already done your experiment...

Please... do it again, and perform only the steps I listed.

Then you will see you're mistaken, and we can move on.

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357182
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


it parses html in a cfm file...it parses it to see if there are any cf
elements in it that it needs to render...like variables and mappings...

No it doesn't. CF only parses the CFML part of any file. It completely ignores 
anything else. This is easy to see if you decompile the compiled class file... 
you'll see all the plain text stuff (ie: everything that's not CFML) simply 
being echoed back, untouched.

Eric, you need to accept you're mistaken here. Why do you think we (all) would 
be suggesting you are if you're not? There's no conspiracy here. We just 
actually know what we're talking about. Seriously.

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357183
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


That's a good explanation / demonstration Matt.

-- 
Adam

No, it doesn't. You're flat out wrong. CF does not, has not, and never will
parse HTML.

It only looks for CFML code to parse, and handles it accordingly.

Ex.

img src=/foo/bar/image.png /  !---// never parsed by CF ---

img src=/#foo#/bar/image.png /  !---// never parsed by CF ---

cfoutput

img src=/foo/bar/image.png /  !---// never parsed by CF ---

img src=/#foo#/bar/image.png /  !---// CF only parses #foo#, and only
because it's within a cfoutput ---

/cfoutput

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357184
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


Then why does it work when i set up the mapping in cfadmin?  No one seems
to want to answer that...

I suspect it's because you're mistaken about that too.

Do you perform those steps I asked you to? I mean again, now, this evening, 
after I asked you to. And after you said I don't have to because I've done it 
before.

Just... pls... do it again. Following my steps, with no other steps at all.

And then what do you see?

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357194
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings


when i do that...the image is broken.  If I add the per app setting it is
broken.  if I add the mapping in cf admin it works...

And did you go an TEST THAT just now, or are you running from memory or 
describing what you recall from past experience?

-- 
Adam 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357198
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: per application settings