SSL and CFContent 'Problem'
A web-app I inherited generates pdf's on the fly and delivers them to the browser.The application contains reasonably robust security checking within the application.cfm template. However, seeing that the final pdf's were presented via a parent.location.href="" statement, blatantly displayed in the location bar, I felt this to be a serious security lapse - it would be easy to bookmark the final pdf or possibly even guess other pdf names. I reworked the app, removing web access from the pdf directory and using a cfcontent tag to deliver the pdf, believing this increased security, by incorporating the application.cfm security framework and it works fine. The client decided to deploy SSL on the site and now, as the pdf is delivered, the user is always greeted with the dialog 'This page contains both secure and insecure content.Do you wish to display the insecure content?'The client does not want to see this message. Near as I can tell, this message is completely bogus in this context - still, the only way I have found to remove it is to revert to the former *insecure* code. The app is running on NT and CF4.5 with little hopes of an upgrade soon. I've seen a few postings here and there about similar problems.The ENTIRE site uses SSL. Is this a known bug?Any work-arounds?I've tried various hacks with cfheader, cffile and cfoutput to no avail.Suggestions, please! Thanks in advance. Chuck McElwee [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
RE: cfsearch question
unsubscribe _ From: Jerry Johnson [mailto:[EMAIL PROTECTED] Sent: Friday, March 12, 2004 3:01 PM To: CF-Talk Subject: cfsearch question Is there any way to sort the results for a cfsearch? In the search97 exe version, it can pre-sort the result by using the sortfield and sortorder params. Jerry Johnson _ [Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
Apache 2.0.40 MSI Installer needed
I am having trouble getting CFMX and updater 2 to run with Apache 2.0. under Win XP Pro. Dave, if you're listening and 2.0.40 is still the best bet and you have the MSI installer, please email it to me a [EMAIL PROTECTED] If there is more current advice than your post from December, let me know. Many thanks! Chuck [EMAIL PROTECTED] I installed Apache 2.0.43 on my Windows XP machine and I'm trying to get CF MX integrated. I've installed the CFMX Updater but I'm still getting the same error message: Event Type: Error Event Source: Apache Service Event Category: None Event ID: 3299 Date: 12/2/2002 Time: 11:58:27 AM User: N/A Computer: LAPTOP1 Description: The Apache service named reported the following error: Apache.exe: module mod_jrun20.c is not compatible with this version of Apache (found 20020612, need 20020903). . I know that the updater was intended for Apache 2.0.40 but I cannot find anywhere to download that version. Any ideas? To the best of my knowledge, CFMX Updater won't work with Apache 2.0.43, so you'll have to find 2.0.40. You can download the 2.0.40 source at http://www.apache.org/dist/httpd/old/, but you'll have to compile that. I imagine that if you look hard enough, you might be able to find a compiled version. If you need it, I have the non-SSL-enabled 2.0.40 MSI binary handy, and can send that to you. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribeforumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Apache 2.0.40 MSI Installer needed
My email has been down almost all day. Aargh. I found two apache_connector.bat files. Copied the one from the cfms_updater_02\bin\connectors directory to the CFusionMX\bin\connectors directory and edited it to look for D:\Program Files\Apache Group\Apache2\conf. This seemed like the smart thing to do, but the script failed with java error messages. Not knowing what else to do, I edited the original one in CFusionMX\bin\connectors the same way and ran that. Voila! I'm cooking! Many, many thanks! - Chuck I love this list... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Sunday, January 19, 2003 4:26 PM To: CF-Talk Subject: Re: Apache 2.0.40 MSI Installer needed Charles, I currently have Apache 2.0.43 working with CFMX. What I had to do was the following: 1. Uninstall CFMX 2. Uninstall Apache 3. Reboot 4. Install CFMX in standalone mode 5. Install UPDATER2 6. Install Apache 2.0.43 7. Run APACHE_CONNECTOR.BAT 8. Reboot This worked for me. -Novak - Original Message - From: Charles McElwee [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Sent: Sunday, January 19, 2003 12:17 PM Subject: Apache 2.0.40 MSI Installer needed I am having trouble getting CFMX and updater 2 to run with Apache 2.0. under Win XP Pro. Dave, if you're listening and 2.0.40 is still the best bet and you have the MSI installer, please email it to me a [EMAIL PROTECTED] If there is more current advice than your post from December, let me know. Many thanks! Chuck [EMAIL PROTECTED] I installed Apache 2.0.43 on my Windows XP machine and I'm trying to get CF MX integrated. I've installed the CFMX Updater but I'm still getting the same error message: Event Type: Error Event Source: Apache Service Event Category: None Event ID: 3299 Date: 12/2/2002 Time: 11:58:27 AM User: N/A Computer: LAPTOP1 Description: The Apache service named reported the following error: Apache.exe: module mod_jrun20.c is not compatible with this version of Apache (found 20020612, need 20020903). . I know that the updater was intended for Apache 2.0.40 but I cannot find anywhere to download that version. Any ideas? To the best of my knowledge, CFMX Updater won't work with Apache 2.0.43, so you'll have to find 2.0.40. You can download the 2.0.40 source at http://www.apache.org/dist/httpd/old/, but you'll have to compile that. I imagine that if you look hard enough, you might be able to find a compiled version. If you need it, I have the non-SSL-enabled 2.0.40 MSI binary handy, and can send that to you. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribeforumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
CFMX Admin Does Not Accept Password
I've just installed CFMX with the stand-alone web server and admin would not let me login. I edited the neo-security file and set the admin.security.enabled property to false and I got right in after restarting the Application Server service. But when I go into the CF Admin Password page to set the password, the update fails - I see a quick message 'Unable to set admin password' and then I'm thrown to the login screen. The neo-security.xml file is not changed to true. I do not know where the password itself is stored. If I again restart the app-server service, I get in and bypass the login. Interestingly, I can enable/disable the RDS password without a problem and see the changes in the security file. Does anyone have any ideas? It does not seem to be a permissions issue (CFMX is running under the system account), but then again, I am not sure. Thanks, all. - Chuck McElwee ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribeforumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: CFMX Admin Does Not Accept Password
Update: This is quite odd. My problem appears to be Zone Alarm. After much trial and error, I found that turning 'Ad Blocking' and 'Cookie Control' both off permits me to log into CF Admin. Turn either on or setting any custom level for those two 'privacy' features and no dice. BUT ONLY IF I ACCESS ADMIN WITH A URL OF LOCALHOST OR MY NETWORK IP; if instead I use my computer name, I can turn on both cookie control and ad blocking and log in without a problem. If anyone can explain this, I'm all ears... - Chuck -Original Message- From: Charles McElwee [mailto:[EMAIL PROTECTED]] Sent: Saturday, January 18, 2003 12:14 PM To: CF-Talk Subject: CFMX Admin Does Not Accept Password I've just installed CFMX with the stand-alone web server and admin would not let me login. I edited the neo-security file and set the admin.security.enabled property to false and I got right in after restarting the Application Server service. But when I go into the CF Admin Password page to set the password, the update fails - I see a quick message 'Unable to set admin password' and then I'm thrown to the login screen. The neo-security.xml file is not changed to true. I do not know where the password itself is stored. If I again restart the app-server service, I get in and bypass the login. Interestingly, I can enable/disable the RDS password without a problem and see the changes in the security file. Does anyone have any ideas? It does not seem to be a permissions issue (CFMX is running under the system account), but then again, I am not sure. Thanks, all. - Chuck McElwee ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribeforumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Can this be done?
Haven't tried this, but I think you can go into the Internet Services Manager under Admin Tools, go the Properties for the Default Web Site (or sub directory), choose the Home Directory tab and click on the Configuration button. Under Application Mappings, add .htm and point it to the same .dll used by the version of CF you are using. You should see the mappings already set up for the .CFM files there. I've played around with this to have CF process .css style sheets... Chuck McElwee Macromedia Certified Advanced ColdFusion Developer www.etechsolutions.com [EMAIL PROTECTED] -Original Message- From: Joel Blanchette [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 29, 2002 4:24 PM To: CF-Talk Subject: Can this be done? Hello All, Wondering if there is a way to make the html files to using cold fusion on a windows server 2000 iis5? I need to map all the html in a site to cold fusion. I don't really feel like changing all the html extensions to cfm. Thanks. Joel __ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: group by date question
It depends on the database, of course. Assuming you're using some version of SQL Server (or Sybase) you might want to try something like: SELECT logdate, convert(char(14), logdate, 111) as doy, COUNT(*) as count_ttl FROM customer_log WHERE logdate BETWEEN #start# AND #end# GROUP BY convert(char(14), logdate, 111) ORDER BY logdate Chuck McElwee Macromedia Certified Advanced ColdFusion Developer www.etechsolutions.com [EMAIL PROTECTED] -Original Message- From: S. Isaac Dealey [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 29, 2002 6:08 PM To: CF-Talk Subject: Re: group by date question I'm trying to group my query results by day. The field I'm grabbing from has a date/time stamp in it so what I'm getting are results grouped by time. I tried to fix this with this code which obviously doesn't work. How can I group this by date and ignore the time stamp? cfquery name=contact_count_ttl datasource=#heinz.dsn# SELECT logdate, DATEPART(dy, logdate) as doy, COUNT(*) as count_ttl FROM customer_log WHERE logdate BETWEEN #start# AND #end# GROUP BY doy ORDER BY logdate /cfquery I remember somebody else on the list saying you could group by convert(datetime,convert(int,doy)) and that would convert the date to an integer representation of the day and then back to a datetime value and truncate the time from the date... Or maybe he was using CAST ... I don't remember precisely, but it sounded to me like a really elegant hack. :) In the past I've generally added a 2nd date column to the table and simply inserted the date from coldfusion discluding the time. Which from the db perspective is liable to be more efficient, although if the date column ever gets updated outside of CF you might wind up with a situation where the two date columns don't match. Isaac Certified Advanced ColdFusion 5 Developer www.turnkey.to 954-776-0046 __ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Show debug output (easy slice of cheese to the winner)
Actually, you're IP must be listed ONLY if any IPs are listed. If no IPs are listed, then all users will see debug output. - Chuck -Original Message- From: Mark A. Kruger - CFG [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 01, 2002 4:53 PM To: CF-Talk Subject: RE: Show debug output (easy slice of cheese to the winner) 2 things, first, you have to enable debug in the CF administrator AND you have to add your IP address to the list of Ips enabled for debugging. You will see the debug info without having to use the cfsetting showdebugoutput=yes setting. Instead, you will use this attribute to turn debugging OFF when you want to see what the page looks like without it. the yes setting is only useful as a placeholder for the tag (so you don't have to keep commenting it out everytime you want to see the debug). -mk -Original Message- From: Eric Hoffman [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 01, 2002 3:28 PM To: CF-Talk Subject: Show debug output (easy slice of cheese to the winner) cfsetting showdebugoutput=Yes Put in my application.cfm, the templates do not append the debug info at the end of the templates. What have I missed? Regards, Eric J Hoffman DataStream Connexion www.datastreamconnexion.com Delivering Creative Data Solutions __ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: CFERROR e-mail
Thank you Dave Matt for clarifying this for me... I have found that it is good to use both cferror tags; most error WILL be caught by the exception tag and you will be automatically notified. Some errors (I've never figured out exactly which ones) slip through and your user may click on the mailto link. Not all errors are exceptions. An exception is a specific type of error that happens only at runtime. Other errors may happen before runtime; for example, if you misspell a CFML tag, the server won't be able to parse the page, and you'll get an error before runtime. Generally speaking, the difference between an error and an exception is that you can programmatically recover from an exception, but not an error. __ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
CFMX, Apache 2.0.39 'Server' Crashes
I'm running a small peer-to-peer network at home and working with MX and Apache. With earlier versions of CF and using IIS, I was able to develop on my laptop and deploy to my desktop. Then, from my laptop, I could check the results using the desktop as a server, using either the machine name or IP in the address bar of the browser on the laptop. When I do that now, the 'server' machine breaks! It will generally serve up several pages, then begin acting flakey and eventually blue-screen and crash! If I browse the site using the browser on the server, all is well. The problem only occurs while browsing the desktop from the laptop OR vice-versus. I am running XP Pro and Win2K on the desktop and laptop machines, respectively. Otherwise, I have CFMX version 6,0,0,48097 and Apache 2.0.39 on both machines. Any ideas? - Chuck __ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
