changing coldfusion 9 standard license
0 down vote favorite I understand Coldfusion 9 is not supported, but being used for some systems till we migrate to Coldfusion 10. We were using a hosting provider who was providing us the Coldfusion 9 standard license and charging us for it. We found a unused license key(for Coldfusion 9 standard) and want to use that instead of getting charged a leasing fee from the hosting provider. I understand the steps are to log-in to CF Admin, click on System Information icon, enter the new license key. Anything else we need to be aware of so that there are no unexpected issues? Thanks ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360094 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Please post our Web Developer Position
https://careers-megapath.icims.com/jobs/2851/web-developer-4/job Web Developer - Seattle, WA 98101 Position Description and Responsibilities: As a member of the Marketing Web Production team at MegaPath, the Web Developer has a critical role in helping us achieve lead-acquisition and usability goals. The Developer's responsibilities are primary related to back-end development of web applications. To be successful, the candidate must have strong proficiency in writing and debugging ColdFusion Components (CFCs) and custom CFML functions hosted on Adobe ColdFusion servers and/or Railo servers. This role is vital to team success because it supports and sustains the work of senior developers and producers. The best candidates will be those who demonstrate a commitment to learning new technologies and have the ability to analyze, troubleshoot and repair issues. We want a self-motivated Web Developer willing to work on projects ranging from very simple to very complex. Qualifications: The Web Developer must: * Develop and maintain current and future web applications written using CFML * Develop CFML-based templates and custom components for Mura CMS * Have proficiency with JavaScript * Write and debug ColdFusion Components (CFCs) and custom CFML functions hosted on Adobe ColdFusion servers and/or Railo servers * Understand the JQuery framework including client-server transactions using JSON, and/or AJAX * Create and consume RESTful web services including SOAP XML and JSON * Have proficiency with SQL, including experience with SQL Server Management Studio or other database management tools * Have a strong understanding of the Document Object Model (DOM), and best practices in regard to HTML, CSS, and Rapid Application Development (RAD) * Troubleshoot and debug performance and user experience issues * Analyze, scope, estimate, code, test, and deploy functional and content updates to multiple websites * Experience with JavaScript libraries such as Bootstrap, ShadowBox, and ProtoType * 5+ years' experience creating websites compliant with contemporary web standards * Experience with Agile development processes and source control applications * Experience building and updating sites with Content Management Systems * Be able to work well within a team, and independently * Have good communication skills * Be adaptable and flexible when requirements change Nice to Have: * Working experience with the CFML-based Mura content management system * Working experience with Railo in a Windows/IIS environment * Familiarity with Salesforce.com, SharePoint, or Marketo * Experience with site performance monitoring software, like FusionReactor Employee Benefits: MegaPath offers a full suite of benefits, including full medical, dental, and vision coverage; a 401(K) plan with a company matching contribution; and many other excellent perks. **\/**\/**\/**\/**\/**\/** Chris Atkinson Recruiter Connect on LinkedInhttp://www.linkedin.com/pub/chris-atkinson/0/30a/5a3 MegaPath T 408.824.1205 F 408.849.4929 C 408.439.6830 E chris.atkin...@megapath.commailto:chris.atkin...@megapath.com www.megapath.comhttp://www.megapath.com/ Voice * Data * Security Privileged/confidential Information may be contained in this message. It is not for use or disclosure outside MegaPath Inc. without a written proprietary agreement. If you are not the addressee indicated in this message, or agent responsible for delivery, you may not copy or deliver this message to anyone. Please notify the sender as soon as possible and immediately destroy this message and its attachments in their entirety. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-jobs-talk/message.cfm/messageid:4655 Subscription: http://www.houseoffusion.com/groups/cf-jobs-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-jobs-talk/unsubscribe.cfm
Web Developer (Cold Fusion/Railo) Seattle
MegaPath has an immediate opening for a web developer whose responsibilities are primary related to back-end development of web applications. You must have strong proficiency in writing and debugging ColdFusion Components (CFCs) and custom CFML functions hosted on Adobe ColdFusion servers and/or Railo servers. We want a self-motivated web developer willing to work on projects ranging from very simple to very complex. Send interest to: chris.atkin...@megapath.com Thanks in advance! ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-jobs-talk/message.cfm/messageid:4656 Subscription: http://www.houseoffusion.com/groups/cf-jobs-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-jobs-talk/unsubscribe.cfm
Re: postParametersLimit in CF11
Nathan, Russ, thanks for the comments. The application with all the post parameters definitely needs a rewrite. Our involvement is only in hosting it. The current owners want it to run ... and we have to justify why the settings should or should not be modified sigh. best regards, Chris On Thu, Dec 11, 2014 at 4:08 PM, Russ Michaels r...@michaels.me.uk wrote: Also you need to consider why this limit exits. What would happen if your form with 2000 fields was dos attacked for example, have you tested it under load? If I wanted to take someone's site down, a form like That would be an easy target. On Thu, Dec 11, 2014 at 18:36 PM, Nathan Strutz str...@gmail.com wrote: I'm sorry that I don't have an answer to your question or a solution to your problem, but I just have to ask, is it possible that your application just needs to adapt to what is a fairly standard security practice across the industry? It sounds like one of those jokes that ends in just because you can, it doesn't mean you should. What is this process that forces you to submit over one thousand form fields in one POST? Perhaps you can serialize it into one big string that's parsed out on the server? You say it's for importing a spreadsheet - couldn't you import the whole spreadsheet file and use cfspreadsheet to do individual fields? I have trouble believing a user can even see 1000 items on a single page - did you set up the whole spreadsheet as a grid with form fields like a1, a2, b1, b2? Can you piecemeal it and send partials via ajax, live, as the user updates them? You don't really have to answer, as interesting as it may be, but maybe you can ask these questions internally and find some better kind of architecture to solve the problem. Good luck! On Thu Dec 11 2014 at 12:31:18 PM Chris 0404tow...@gmail.com javascript:; wrote: Hi, we see the postParametersLimit (post request parameters) in CF11 is 100, the same as in CF9. This is from the CF11 Lockdown Guide. Can anyone confirm the default limit is 100? That seems low, but perhaps Adobe did not change the hash methods or hash collision resolution methods. We set postParametersLimit to 1,100 for CF9, and now have an application that wants 2,000! This is for regularly importing spreadsheets into a database :-( thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359836 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
postParametersLimit in CF11
Hi, we see the postParametersLimit (post request parameters) in CF11 is 100, the same as in CF9. This is from the CF11 Lockdown Guide. Can anyone confirm the default limit is 100? That seems low, but perhaps Adobe did not change the hash methods or hash collision resolution methods. We set postParametersLimit to 1,100 for CF9, and now have an application that wants 2,000! This is for regularly importing spreadsheets into a database :-( thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359833 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: bypassing the site-wide error handler
Thanks Dave, Rodney. That really helped. It turned out our issue was the same cfscript in the application's header and the sitewide error handler's header. When the second instance of cfscript tried to run, it broke the error handler, thus presenting the raw error to the user. best, Chris On Mon, Dec 8, 2014 at 10:02 PM, Rodney Enke renk...@gmail.com wrote: The site wide error handler will not run if there is a local error handler, such as CFTRY/CFCATCH or CFERROR, unless the CFTRY/CFCATCH block rethrows the error. - Rodney On Mon, Dec 8, 2014 at 8:52 PM, Dave Watts dwa...@figleaf.com wrote: Hi, when can an application bypass the CF v9 site-wide error handler? We host an app, that uses cftry/catch, but that appears to not handle the errors correctly. The errors do not trigger the site-wide error handler, and the errors are displayed to the users. The site-wide error handler works fine for other applications, and testing. I don't think the application can, by itself, bypass the site-wide error handler. I'd take a look at the code in the site-wide error handler to see if there's anything in there that would prevent it from doing anything when an error occurs. You might also look at how you're using CFTRY/CFCATCH - maybe you are catching the error after all, and your error trapping code doesn't do anything useful. Finally, the site-wide error handler will only catch run-time exceptions, I think. I could be wrong about this, as I haven't worked with the site-wide error handler in a while, but if this is the case and you have a compile-time error in your code, it's going to be displayed. This is something that used to be handled with the CFERROR tag (type=request), but you really just shouldn't have any compile-time errors anyway. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business (SDVOSB) on GSA Schedule, and provides the highest caliber vendor- authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359797 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
bypassing the site-wide error handler
Hi, when can an application bypass the CF v9 site-wide error handler? We host an app, that uses cftry/catch, but that appears to not handle the errors correctly. The errors do not trigger the site-wide error handler, and the errors are displayed to the users. The site-wide error handler works fine for other applications, and testing. Thanks for any insight! Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359774 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Using caching and threading to load a page quickly
Thanks Jonah, I am sorry for the late reply. The WordPress's RSS feed is stable but due to excessive resource usage, the newswebsite has been suspended a few times after which we had to call the Hosting company to restore it. To have the rest of the page load and then the feed display later, you'll have to use AJAX to pull in a separate CF page clientside. (You'd still use caching in the feed.cfm so it'd only be slow occasionally.) Would the following code http://collabedit.com/tmjwj/history function as expected in an environment with less users than actual production? If the newswebsite is suspended because it is using too many resources on shared hosting, the thread reading the feed will timeout in 30 seconds, so there will be no results. Will News feed not available be shown? Or, since the variable #feedResult.entriesNews# had a value from the last successful read, those results will be displayed? Another approach would have the feed fetching functionality in a separate template which is run as a scheduled task every 2 minutes. That task can shove the parsed (and potentially formatted) feed into the application scope. (With a lock.) And then your main page can output that variable (with a lock). Then your home page would load as fast as it would as if the feed were local. So, as you suggest, I need to get the feed, write to the machine running CF server which will be used if the RSS feed is unavailable, in case the newswebsite is suspended again. I will make the feed loading a scheduled task and have to call it in the Application.cfm(I know most people have already moved to Application.cfc) and if no response is used, use the previous feed obtained from the past successful fetch. I appreciate your assistance and time. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359404 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Using caching and threading to load a page quickly
Hi All, I have a main index page which is in ColdFusion which gets a RSS feed from another website(Newswebsite which is a WordPress 3.9.2 website running on shared hosting). The Newswebsite is on shared hosting so takes about 7 seconds to load(a little slow, I know, but the decision to go with a shared hosting was done to save on costs by the purchasing people). Now, people don't want the main index page to take 7 seconds to load. I estimate using caching of the RSS feed so that updates are retrieved from the feed only every 2 minutes and having a thread so that the main index page loads(in 2 seconds or less) without waiting for the RSS feed can alleviate the issue. The thread which fetches the data from RSS feed can display the feeds on the main index page after the data is retrieved. 1. If the idea is viable, would something like the below work? - cftry cfset rssUrl = http://www.testsite.com/?feed=rss2; !--- Caching the RSS feed from newssite so that it is checked every 2 minutes only--- cfcache action = cache timespan = #createtimespan(0,0,2,0)# !--- Start a thread and wait for it to read the RSS feed from newssite --- cfthread action=run name=thread1 cffeed action=read source=#rssUrl# query=entriesNews properties=info timeout = 180 /cfthread cfthread action=join name=thread1 timeout=7000 / cfset feedResult=cfthread[thread1] !--- Display feed information if it was obtained in 7 seconds --- cfif isDefined(feedResult.entriesNews) ul cfoutput query=entriesNews startrow=1 maxrows=3 cfset tempTextNews = #title# cfif len(tempTextNews) gt '75' li a class=NewsEvents href=#rssLink# target=_blank#Left(tempTextNews, 75)#...more/a /li cfelse li a class=NewsEvents href=#rssLink# target=_blank#title#...more/a /li /cfif /cfoutput /cfif /cfcache cfcatch type=any !--cfdump var=#entriesNews# --- !--cfdump var=#info# --- News Feed not available /cfcatch /ul /cftry - 2. Are there other better ways to tackle the issue? I want the other parts of the main index page which is in ColdFusion to load and not get delayed because getting data from the RSS feed of news website takes 7 seconds. Any suggestions would be appreciated. Thanks ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359368 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
That was my original suggestion was to check the firewall of the receiving server :-) I agree Robert, but I told them to check and they responded there was nothing in the firewall blocking that IP address. I appreciate your assistance and time with this thread. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359367 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Hi Dave, The server hosting WordPress was blocking the IP address of server running ColdFusion because it was seeing too much traffic for the news feeds from the server running ColdFusion. I just wish the hosting company which was running WordPress had told me this before. I appreciate all your assistance and time. Packets can leave which server? Your CF server? The relevant question here (to me) is: what happens when you ping the WP server from the CF server console? What happens when you run a traceroute to the WP server from the CF server console? Anyway, I appreciate all your assistance and time. You're welcome! Good luck! Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359360 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Using caching for a RSS feed
Hi All, Below is the code which is being used for reading a RSS feed from a Wordpress(WP) site running Wordpress 3.9.1 -- cftry cfset rssUrl = http://www.testsite.com/?feed=rss2;; cfcache action = cache timespan = #createtimespan(0,0,2,0)# cffeed action=read source=#rssUrl# query=entriesNews properties=info timeout = 180 ul cfoutput query=entriesNews startrow=1 maxrows=3 cfset tempTextNews = #title# cfif len(tempTextNews) gt '75' lia class=NewsEvents href=#rssLink# target=_blank#Left(tempTextNews, 75)#...more/a/li cfelse li a class=NewsEvents href=#rssLink# target=_blank#title#...more/a /li /cfif /cfoutput /cfcache cfcatch type=any !--cfdump var=#entriesNews# --- !--cfdump var=#info# --- News Feed Temporarily Unavailable /cfcatch /ul /cftry -- For Application Server Caching, we have Cache Template in Request and Save Class Files enabled. Since lot of files are in ColdFusion, Trusted Cache is disabled. I added a basic cache so that the server running ColdFusion 9 reaches out to the server hosting Wordpress site every 2 minutes 1. If 10(or 1000) people visit the webpage in an hour, where the above code exists, will it connect to the server hosting Wordpress site every 2 minutes for the RSS feed? 2. Or, will it be sooner if the RSS feed on WordPress changes between the 2 minute interval? Thanks ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359362 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Wow. How in hell did you figure that out? Ben Hi Ben, I asked for the firewall logs of the server running WordPress and saw that the IP address of server running ColdFusion was blocked. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359363 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Thanks Dave. This is no longer a programming issue, though. It has nothing to do with reading and displaying the RSS feeds at this point. Instead, it has to do with fixing the connectivity problem between the two machines. People on a mailing list are not going to be able to help you do this effectively. And, you should be able to demonstrate to a network administrator somewhere (your organization, the hosting company where your CF server is) that this is not a CF problem but rather a networking problem. I agree, but here is where it becomes strange. They(hosting company where your CF server is) claim packets can leave the server, but then they are getting lost on the route so tell me to check with the hosting company where the wordpress website who say that they are not blocking any requests from the machine running CF server. I need to dive into it and solve it. Anyway, I appreciate all your assistance and time. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359339 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Thanks Robert, but don't think they(hostingcompanyA) would block a particular IP address(server running CF which belongs to hosting company B) Yes, they would if they detected something funny coming your server... like a bunch of pings or form bots or something... for that matter a bunch of unexpected reads of the RSS file your reading could have set off some kind of alarm that caused them to block the IP. It depends on them and what they see as an intrusion. A lot of hosting companies are great professional companies that can really analyze threats... a lot of them are some guy with a server or two in basement too and anything odd they see they block. Yes, it's possible they blocked you intentionally if they saw a lot of unexplained requests coming from your server. I checked with the hosting company(hostingcompanyA) who host the website my machine running CF is trying to access and they told, they are not blocking the IP address of the server running CF. try displaying it in a browser that shows the same external IP address as your server How do I do that? If the server is at a separate location (hosting company), you may have to ask them for help with this. Yes, that is with hosting company B and they say we are not blocking the website your CF server is trying to read. Honestly, at this point with what you know this does not sound like a job for a programming issue and it may not be best for a programmer to be troubleshooting it. You should get a network engineer to take a look. Hosting company B says we are not blocking the website your CF server is trying to read. They say all is well with the machine running CF server. We went with a hosting company because network engineers in our organization did not have time for such things. Reading the RSS feeds and getting them to display is my task. I appreciate all your assistance and time. Robert Harrison Director of Interactive Services Austin Williams Advertising I Branding I Digital I Direct 125 Kennedy Drive, Suite 100 I Hauppauge, NY 11788 T 631.231.6600 X 119 F 631.434.7022 http://www.austin-williams.com Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter. com/austi ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359284 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Thanks Dave, Just to clarify: from the machine running CF, if you use a browser, can you get to the site correctly? No, I cannot access the site from the machine running CF. If the server admin can't tell you why a machine he or she manages can't get to a remote server, you need to replace your server admin. I am not the decision maker who can replace server admins. The server admin told me they do not restrict outbound traffic nor there are any rules in firewall blocking that site. I already checked the localhosts file and nothing in it also could be stopping it. Well, the CF service was restarted and so was the server, so if the DNS entry changed, CF should have updated its cache. 1. Should I change the below line in C:\ColdFusion9\runtime\jre\lib\security\java.security #networkaddress.cache.ttl=-1 to something like networkaddress.cache.ttl= 14400 2. Also, does CF9 cache a positive lookup forever? Meaning if http://www.testsite.com/?feed=rss2 was on IP address A.B.C.1 when CF cached it, it will not update its cache when the feed's IP address changes to A.B.C.10 If you can't get to the site from a browser on the machine running CF, I wouldn't bother messing with CF - the problem isn't with CF. If you can get to the site from a browser on the machine running CF, but CF itself can't get to it, there's probably some sort of DNS caching issue within CF itself. I appreciate your assistance and time. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359273 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Thanks Russ, you need to do some basic tests, which your server admin should have already done. for a start ping the domain from the cf server, does this work and do you get the right IP, if not then it is a dns issue. make sure that someone has not created an entry in the local hosts file. I did a ping and the request timed out. All data packets were lost. The server admin told me they do not restrict outbound traffic nor there are any rules in firewall blocking that site. I already checked the localhosts file and nothing in it also could be stopping it. I appreciate your assistance and time. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359274 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
If I use a browser, I can see the feeds. Using a feed reader in Google Chrome browser, I can notice the feeds load correctly. Are you using a browser from the machine running CF? No, the machine running CF cannot access the website. I get a message that the request timed out. But, the server admin cannot tell me what could be causing it. 1000's of people can access the website properly from their computers. Just to clarify: from the machine running CF, if you use a browser, can you get to the site correctly? From the machine running CF, if I use a browser(Firefox or Internet Explorer), I cannot get to the site. I get a message that connection timed out. If the server admin can't tell you why a machine he or she manages can't get to a remote server, you need to replace your server admin. Well, the CF service was restarted and so was the server, so if the DNS entry changed, CF should have updated its cache. 1. Should I change the below line in C:\ColdFusion9\runtime\jre\lib\security\java.security #networkaddress.cache.ttl=-1 to something like networkaddress.cache.ttl= 14400 2. Also, does CF9 cache a positive lookup forever? Meaning if http://www.testsite.com/?feed=rss2 was on IP address A.B.C.1 when CF cached it, it will not update its cache when the feed's IP address changes to A.B.C.10 If you can't get to the site from a browser on the machine running CF, I wouldn't bother messing with CF - the problem isn't with CF. If you can get to the site from a browser on the machine running CF, but CF itself can't get to it, there's probably some sort of DNS caching issue within CF itself. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359275 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Thanks Dave, OK, this is good! This means it's not a CF problem. But - and now I'm being completely serious - the server admin should be able to diagnose the problem preventing the server that he manages from connecting to this other server. This is clearly not a CF problem. This could be caused by many things. Here's what I'd try to look at, if I were you (assuming you have console access): Do you get the correct IP address when you ping the server? Yes, the site I am trying to access is hosted by HostingcompanyA so I get the name of that company when I type the IP address in a browser on another computer. On the browser of machine running CF, if I try the IP address, I get connection timed out. Where does it fail if you do a traceroute to the server? It times out from the first to 30th hop. All I see is hop count, asteriks on doing a traceroute. Are other servers from the same network able to connect to the server? I do not have access so will have to ask the serveradmin to try those. The machine running CF belongs to HostingCompany B. I appreciate your assistance and time. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359278 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Thanks Robert, Just to clarify: from the machine running CF, if you use a browser, can you get to the site correctly? No, I cannot access the site from the machine running CF. It's possible the issue is not on your side. It could be on the side of the site you are trying to read from. You can't display the site in a browser on the CF machine... try displaying it in a browser that shows the same external IP address as your server. It's possible your IP has been blocked by the firewall on the sending side. If that's the issue it will have to be fixed on their side. The CF server is managed by HostingCompanyB and the site I am trying to read from is by HostingcompanyA. try displaying it in a browser that shows the same external IP address as your server How do I do that? It's possible your IP has been blocked by the firewall on the sending side. If that's the issue it will have to be fixed on their side. Well, it worked fine till some 9 days ago. I know both(machine running CF and site being hosted) are maintained by different hosting companies, but don't think they(hostingcompanyA) would block a particular IP address(server running CF which belongs to hostingcompanyB). I appreciate your assistance and time. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359279 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Not able to read a RSS feed from a WordPress website
Thanks Dave, If I use a browser, I can see the feeds. Using a feed reader in Google Chrome browser, I can notice the feeds load correctly. Are you using a browser from the machine running CF? No, the machine running CF cannot access the website. I get a message that the request timed out. But, the server admin cannot tell me what could be causing it. 1000's of people can access the website properly from their computers. Message:Connection refused by the specified host on the specified port. ... 1. What could have caused a working WordPress RSS feed which was parsed correctly by ColdFusion till last week to stop suddenly? 2. How can I resolve the issue? Looks like the CF server can't connect to that host on that port. This could be all kinds of things, but it probably doesn't actually have anything to do with CF itself. Perhaps the CF server is on a network segment that can't access this server. Perhaps the DNS entry changed for the WP server, and the CF server hasn't updated its cache. Etc, etc, etc. Well, the CF service was restarted and so was the server, so if the DNS entry changed, CF should have updated its cache. 1. Should I change the below line in C:\ColdFusion9\runtime\jre\lib\security\java.security #networkaddress.cache.ttl=-1 to something like networkaddress.cache.ttl= 14400 2. Also, does CF9 cache a positive lookup forever? Meaning if http://www.testsite.com/?feed=rss2 was on IP address A.B.C.1 when CF cached it, it will not update its cache when the feed's IP address changes to A.B.C.10 I appreciate your assistance and time. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359266 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Not able to read a RSS feed from a WordPress website
Hi All, Below is the code which was working fine till yesterday for reading a RSS feed from a Wordpress site running Wordpress 3.9.1 -- cftry cfset rssUrl = http://www.testsite.com/?feed=rss2; cffeed action=read source=#rssUrl# query=entriesNews properties=info timeout = 180 ul cfoutput query=entriesNews startrow=1 maxrows=3 cfset tempTextNews = #title# cfif len(tempTextNews) gt '75' lia class=NewsEvents href=#rssLink# target=_blank#Left(tempTextNews, 75)#...more/a/li cfelse lia class=NewsEvents href=#rssLink# target=_blank#title#...more/a/li /cfif /cfoutput cfcatch type=any !--cfdump var=#entriesNews# --- !--cfdump var=#info# --- News Feed Temporarily Unavailable /cfcatch /ul /cftry -- http://www.testsite.com/?feed=rss2 is a valid RSS feed and I confirmed that with http://validator.w3.org/feed/ www.testsite.com is something I am using here for posting instead of the actual website which provides the feed. If I use a browser, I can see the feeds. Using a feed reader in Google Chrome browser, I can notice the feeds load correctly. If the above code is loaded in a page called testfeed.cfm, I get the message News Feed Temporarily Unavailable. We are using ColdFusion 9 on a Windows server with IIS. The details of error are Detail: Check if the specified host on the port is accessible. Message:Connection refused by the specified host on the specified port. StackTrace: coldfusion.syndication.FeedReader$ConnectionRefusedException: Connection refused by the specified host on the specified port. at coldfusion.syndication.FeedReader.getInputStream(FeedReader.java:394) 1. What could have caused a working WordPress RSS feed which was parsed correctly by ColdFusion till last week to stop suddenly? 2. How can I resolve the issue? Any suggestions would be appreciated. Thanks ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359245 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Random Number Generator is FIPS186PRNG not FIPS186Random
We've been following up on Adobe's blog entry and Pete Freitag's post (thanks Pete!) regarding the default random number generator. Strangely, our CFv9.0.1 Enterprise has the FIPS186PRNG Random Number Generator, not the not FIPS186Random, as reported. I guess as long as we don't have one of the ECDRBG# RNG's we're okay. Also, the jvm.config setting -Dcoldfusion.jsafe.defaultalgo= makes no difference on our configuration. Has anybody else run into this? thanks, Chris http://www.petefreitag.com/item/827.cfm http://blogs.coldfusion.com/post.cfm/unsafe-random-bit-generation-algorithmshttp://www.petefreitag.com/item/827.cfm ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357727 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Adding Coldfusion to an existing J2EE java system
On Sun, Feb 9, 2014 at 1:25 PM, Dave Watts dwa...@figleaf.com wrote: Can you be more specific about what you're trying to do? You can certainly deploy CF on a J2EE server running BlazeDS and your custom J2EE applications, but it's going to be a separate application. There are 2 things I'm thinking of: 1) since you can load any Java jar file from within CF, I wanted know if you can do it the other way around 2) have a mix of remote calls to either java or cf components Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: TBD Date: Monday, 24th February Details and RSVP on http://www.meetup.com/Sydney-Adobe-Platform-User-Group ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357634 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Adding Coldfusion to an existing J2EE java system
Has anyone had any success in adding coldfusion to an existing application built on Java (J2ee server) and Blazds? Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: TBD Date: Monday, 24th February Details and RSVP on http://www.meetup.com/Sydney-Adobe-Platform-User-Group ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357631 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: danger in increasing PostParameterLimit ?
Thanks for the comments on the design. Agreed completely about needing a better one! This one is for importing a spreadsheet. As always, there are tradeoffs ... so I'm looking for justification to keep the PostParameterLimit at 1,100 or the risk of increasing it to 2,000. Perhaps the risk is too specific to make general comments about it. thanks, Chris On Sun, Jan 19, 2014 at 11:07 PM, Brook Davies cft...@logiforms.com wrote: Umm - maybe its a big form??! -Original Message- From: Casey Dougall - Uber Website Solutions [mailto:ca...@uberwebsitesolutions.com] Sent: January-19-14 5:07 PM To: cf-talk Subject: Re: danger in increasing PostParameterLimit ? On Fri, Jan 17, 2014 at 10:52 AM, Chris 0404tow...@gmail.com wrote: How dangerous is increasing PostParameterLimit in CFv9 ? We have increased from the default 100 to 1,100 to meet applications' needs. We are now requested to consider increasing it to 2,000. The developers are reviewing updating the design to use fewer PostParameters. They should update the design to us XML or JSON for all those parameters. I don't understand the need for all those post parameters where you could be using json or xml in one parameter. -- Casey Dougall Über Website Solutions (518) 633-1621 Saratoga Springs, NY http://uberwebsitesolutions.com/ ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357497 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
danger in increasing PostParameterLimit ?
How dangerous is increasing PostParameterLimit in CFv9 ? We have increased from the default 100 to 1,100 to meet applications' needs. We are now requested to consider increasing it to 2,000. The developers are reviewing updating the design to use fewer PostParameters. I don't have a good feel for how dangerous this could be. Comments? Tomcat, Microsoft, and Adobe seem to have quite different considerations of the danger, based on their default number of post parameters: ASP.net1,000 Tomcat 10,000 ColdFusion 100 ColdFusion: ColdFusion Security Hotfix APSB12-06 http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html Understanding HashDos and postParameterLimit http://www.petefreitag.com/item/808.cfm HashDOS and ColdFusion http://www.petefreitag.com/item/801.cfm thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357471 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 9 and Java 1.7 ?
Hi all, Just thought I'd check back in about compatibility CF9 and Java JDK v1.7 (now up to 1.7.0_45). It looks like 1.7 is fine with CF9. Anybody have any issues? many thanks, Chris On Tue, Aug 13, 2013 at 3:21 PM, Chris 0404tow...@gmail.com wrote: Thanks Wil, very helpful. And good news, too! Chris On Tue, Aug 13, 2013 at 3:17 PM, Wil Genovese jugg...@trunkful.comwrote: We've been converting out CF9 and CF10 to Java 1.7 at CF Webtools. Here is what I wrote up about it. http://www.trunkful.com/index.cfm/2013/8/8/ColdFusion-on-Java-17 Regards, Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com wilg...@trunkful.com www.trunkful.com On Aug 13, 2013, at 2:11 PM, Chris 0404tow...@gmail.com wrote: Hi, are many people using CF 9 and Java 1.7 ? With Cumulative HotFix 4, CF9 should now support Java 1.7. Just wondering how it's working. I see a couple issues in https://bugbase.adobe.com thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357357 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
ColdFusion Developer / Mobile Application Developer - Linthicum, MD
We are looking for: 5+ years experience in ColdFusion 5+ years experience in MS SQL server 1+ years experience with HTML5 1+ years experience with CSS3 3+ years experience with JavaScript 3+ years experience with jQuery Some experience working with mobile application development PhoneGap is a PLUS You will be the lead developer on a team of 4. You will be the main point of contact for all ColdFusion related issues the more junior developers are having. Interested parties should send their resume to clo...@anchortechnical.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-jobs-talk/message.cfm/messageid:4641 Subscription: http://www.houseoffusion.com/groups/cf-jobs-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-jobs-talk/unsubscribe.cfm
ColdFusion Developer / Mobile Application Developer - Linthicum, MD
We are looking for: 5+ years experience in ColdFusion 5+ years experience in MS SQL server 1+ years experience with HTML5 1+ years experience with CSS3 3+ years experience with JavaScript 3+ years experience with jQuery Experience with mobile application development (any framework) PhoneGap experience is a PLUS You will be the lead developer on a team of 4. You will be the main point of contact for all ColdFusion related issues the more junior developers are having. Interested parties should send their resume to clo...@anchortechnical.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-jobs-talk/message.cfm/messageid:4642 Subscription: http://www.houseoffusion.com/groups/cf-jobs-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-jobs-talk/unsubscribe.cfm
Oracle TDE and ColdFusion v9 ?
Hi, is anybody using, or know of issues with Oracle TDE and ColdFusion v9 ? A customer wants to use Oracle Transparent Data Encryption on 11g RAC. We use ColdFusion v9.0.1, with the native drivers (type=Other, with a JDBC URL). We are investigating Oracle JDBC drivers and Oracle Thin Client, but have not implemented them yet. thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356795 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Location of custom channel endpoint URI
For a specific CF server, I've been asked to use the following channel definition:- channel-definition id=custom-secure-polling-amf class=mx.messaging.channels.SecureAMFChannel endpoint uri=https://{server.name}:{server.port}{context.root}/flex2gateway/customsecurepollingamf; class=flex.messaging.endpoints.SecureAMFEndpoint/ properties !--add-no-cache-headersfalse/add-no-cache-headers-- polling-enabledtrue/polling-enabled polling-interval-seconds8/polling-interval-seconds invalidate-session-on-disconnecttrue/invalidate-session-on-disconnect /properties /channel-definition I'm trying to find information where and how this URI [1] is defined and how to define my own. [1] https://{server.name }:{server.port}{context.root}/flex2gateway/customsecurepollingamf Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: Geoff Bowers: Topic to be determined Date: Monday, 30th Sep Details and RSVP on http://www.meetup.com/Sydney-Adobe-Platform-User-Group ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356626 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
CF 9 and Java 1.7 ?
Hi, are many people using CF 9 and Java 1.7 ? With Cumulative HotFix 4, CF9 should now support Java 1.7. Just wondering how it's working. I see a couple issues in https://bugbase.adobe.com thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356453 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 9 and Java 1.7 ?
Thanks Wil, very helpful. And good news, too! Chris On Tue, Aug 13, 2013 at 3:17 PM, Wil Genovese jugg...@trunkful.com wrote: We've been converting out CF9 and CF10 to Java 1.7 at CF Webtools. Here is what I wrote up about it. http://www.trunkful.com/index.cfm/2013/8/8/ColdFusion-on-Java-17 Regards, Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com wilg...@trunkful.com www.trunkful.com On Aug 13, 2013, at 2:11 PM, Chris 0404tow...@gmail.com wrote: Hi, are many people using CF 9 and Java 1.7 ? With Cumulative HotFix 4, CF9 should now support Java 1.7. Just wondering how it's working. I see a couple issues in https://bugbase.adobe.com thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356455 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CFQUERY immediately throws blank CF error and HTTP 500 code when more than 50 records will be returned (CF6)
Not sure.. we don't handle much of the system software/hardware on the box. Do you know what that may affect or how to check when it was updated? Has anyone updated the java version by any chance Russ Michaels www.michaels.me.uk On 9 Jul 2013 23:11, Chris Johnson ejohn...@directalliance.com wrote: ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356161 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
CFQUERY immediately throws blank CF error and HTTP 500 code when more than 50 records will be returned (CF6)
Really odd issue we've been having.. We have a scheduled task that hits another database server to get a full list of employees. It then runs through the user accounts for this specific app and adds or updates accounts as needed. We weren't aware that it had been broken, so we don't know exactly what change on the server side could have done it (virtual instance). If the query looks like: select TOP 5 somecolumn from employees - the query runs If the query looks like: select somecolumn from employees - a blank CF error (no message or details) is thrown immediately without trying to run the query I've upped the TOP 5 to about ~50 and around that and above, it either throws the immediate CF error or attempts to run and then brings down ColdFusion. On one of our other CF boxes with less memory (4gb vs 512mb), the query runs and returns the 18,000 rows within seconds. Looking at Task Manager, I don't see any spikes in memory or CPU when the page is ran. The error is thrown immediately, almost like the server just refused to bother. It seems like ColdFusion is either trying to allocate resources and not liking the info it gets or is somehow otherwise sizing up what will be needed for the call. I can't think of any other reason why it wouldn't run and time out like other queries. The CF error returned is blank and thrown immediately. We've created a new DSN using the fully qualified domain name, IP address, and even changed the query to a stored proc that should have resulted in less overhead on CF and nothing seems to help. If we don't specify a TOP XX number or specify one that's too large (50+), we get this strange result. Otherwise it runs or at least attempts to run just fine. Being that we're using an long outdated version of CF, it's been hard to find support specific to this issue and I need to try to throw our server folks a bone as these issues tend to become IT hot potato games (not the server, it's CF... not CF, it's the database, etc.). Anyone experience a similar issue? I've created tons of queries in the last 10 years, crashed tons of CF instances, and written tons of bad SQL, but this issue is so odd that I've never encountered it in the wild. In the CF Admin settings, the CF version on the trouble server is showing as 6,1,0,83762. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356143 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
multiple identical requests
We are seeing multiple identical requests from apparently one HTTP GET request to a .cfm page. It's almost like the user rapidly entered the same URL and parameters 3 to 6 times. In one case, according to Fusion Reactor, 3 identical CF threads were started at exactly the same time (down to 1/1000th second). So that's not likely the user. Has anyone seen anything like this? thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355735 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
CFSchedule runs 2nd task on its own
We have a client's CFSchedule task with a 4 minute request timeout. The task always takes longer than 4 minutes. The task's cfm page sets requesttimeout=15000. CFSchedule starts the task, and at the end of 4 minutes CFSchedule announces the timeout and task rescheduling, then runs the same task again. Both tasks run to finish, as monitored in FusionReactor. Has anybody ever seen this? thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355710 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Database inserts seem to timeout
Hi, I have an application which takes a variety of temperature and pressure readings and runs them through a set of calculations, which are then saved to the database. Scheduled tasks also do periodic calculations, averaging the results over a calendar month, quarter or year. Both new periods (months) and new calculations have been added to these routines, and as a result, I need to recalculate several years' worth of data. Since even the existing periods (quarters and years) must be recalculated to incorporate the new, additional calcs, I'm choosing to simply recalculate everything and insert it into new tables, which will then replace the old ones. However, when I run the routine that will recalc all this data, the inserts run fine for some period of time, then stop. There's no error returned from CF, and in fact, the page never returns at all. I've set a very long CF timeout so that the routine can continue. The inserts simply stop happening. I see no memory or CPU problems on the server when this runs. Does anyone have any insight into what might be happening here? -- Thanks, Tom Tom McNeer MediumCool http://www.mediumcool.com 1735 Johnson Road NE Atlanta, GA 30306 404.589.0560 Generally it is quicker to store everything you need into an array of some sort, then when you go to do your insert loop over that array. For MySQL insert into temperature (thisTemp) VALUES cfloop from=1 to=#arrayLen(tempArray)# index=itempArray[#i#]cfif i lt arrayLen(tempArray),/cfif Oracle would be a little different. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355712 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CFSchedule runs 2nd task on its own
Thanks Russ. No, I know 'requesttimeout doesn't actual time it out. My real concern is why CFSchedule appears to be starting a second task on its own. It's bad enough one of these long-running tasks runs so long ... but two of them is ... uh ... twice as bad. Chris On Fri, May 10, 2013 at 4:34 PM, Russ Michaels r...@michaels.me.uk wrote: Are you saying you want it to time-out but it isn't? Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On 10 May 2013 21:13, Chris 0404tow...@gmail.com wrote: We have a client's CFSchedule task with a 4 minute request timeout. The task always takes longer than 4 minutes. The task's cfm page sets requesttimeout=15000. CFSchedule starts the task, and at the end of 4 minutes CFSchedule announces the timeout and task rescheduling, then runs the same task again. Both tasks run to finish, as monitored in FusionReactor. Has anybody ever seen this? thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355717 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: postParametersLimit in CHF4
Thanks for your comments, Pete, Dave. Good links, Pete, that really helped me understand what's going on. Interesting to see such variation in default number of postParameters in ASP.net (1,000), Tomcat (10,000) and ColdFusion (100). We identified that most of the 1,006 postParameters in that one application are actually blank ( !! ). And yes, we think a rewrite is in order. Regards, Chris On Thu, Apr 4, 2013 at 11:53 PM, Pete Freitag p...@foundeo.com wrote: The vulnerability is caused by hash collisions, so if two strings hash to the same value, for example the result of java's hashCode() function on the name of a form field, then the hash table data structure becomes very inefficient. ColdFusion uses some sort of hash table algorithm to store the form fields (as well as url fields, cookies, etc but these are typically limited in size which makes them less of a target for this attack). CF was not the only technology to get hit by this issue many others including ASP.NET, node.js, j2ee/Tomcat, etc. Typically a hash table algorithm will account for collisions by putting all objects with the same hash code in a bucket, and then does a comparison of each value in the bucket to fetch the correct one, or to see if it is a duplicate when adding a new entry. You can see how the bucket could get very big, and operations on it get slower and slower with each collision added to the bucket if an attacker crafts a request with thousands of input variables whose names all collide to the same hash code. Under normal circumstances having 1000 form fields will not cause any collisions at all, and hash table lookups are quite fast. You may still want to limit the overall size of a request, but the HashDOS can be relatively small (eg 1-2mb) so that is why limiting the number of fields is considered the best protection. I wrote a blog entry on this a while back that also explains it as well: http://www.petefreitag.com/item/808.cfm -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting Products http://hackmycf.com - Is your ColdFusion Server Secure? http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10 minutes On Thu, Apr 4, 2013 at 5:23 PM, Russ Michaels r...@michaels.me.uk wrote: So what actually causes the collision? Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 4, 2013 10:10 PM, Pete Freitag p...@foundeo.com wrote: Just to give you an idea with 80,000 post params that caused a hash collision it took my quad core desktop 31 minutes to respond to the request, sending a larger number of post params 120,000 that did not have a collision executed in 3 seconds. So what is safe really depends on your tolerance and CPU processing power. With 1000 colliding params you can probably cause a few seconds of processing time on the server. -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting Products http://hackmycf.com - Is your ColdFusion Server Secure? http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10 minutes On Thu, Apr 4, 2013 at 4:57 PM, Chris 0404tow...@gmail.com wrote: How many is too many post parameters? We've had a few applications fail with the new postParametersLimit in CHF4 (the included Security Hotfix APSB12-06, http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html) Even increasing postParametersLimit from 100 to 200 isn't enough -- one application uses 1006 post parameters ( !! ) So given that this is a denial of service attack prevention, how risky is it letting 1100 post parameters go through with every request? I'm figuring a real DoS attack would have a lot more than 1100 parameters, but setting post parameters for 11 times the security update value sounds like poor practice. thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355293 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
postParametersLimit in CHF4
How many is too many post parameters? We've had a few applications fail with the new postParametersLimit in CHF4 (the included Security Hotfix APSB12-06, http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html ) Even increasing postParametersLimit from 100 to 200 isn't enough -- one application uses 1006 post parameters ( !! ) So given that this is a denial of service attack prevention, how risky is it letting 1100 post parameters go through with every request? I'm figuring a real DoS attack would have a lot more than 1100 parameters, but setting post parameters for 11 times the security update value sounds like poor practice. thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355281 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: same URL if moving app to new CF instance ?
Thanks, all. Good ideas for testing. Regards, Chris On Fri, Mar 15, 2013 at 6:05 PM, Dave Watts dwa...@figleaf.com wrote: We have a number of applications running on one instance of CF9, coming through three IIS v6 Web Sites (host headers separate the requests which are to three different Fully Qualified Domain Names(FQDNs)). As I understand, with the Web Server Configuration Tool I'm mapping one or more IIS Web Sites to one and only one CF instance. So if we move the high-resource app from its current CF instance to a new instance, I need to do something so the IIS Web Site knows which CF instance to send the request. But if the IIS Web Site is mapped to only one CF instance, I can't do that. Our customer would like the URL (FQDN and directories) to remain the same. You'll have to run the Web Server Configuration tool (wsconfig) to disconnect your IIS virtual server from the existing CF instance, and connect it to the new CF instance. Nothing else needs to change in IIS, including URLs. It's possible that you currently have your existing instance connected using the All web sites option with IIS, in which case you'll need to use wsconfig to delete that configuration and create individual connections for each IIS virtual server. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355118 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
same URL if moving app to new CF instance ?
Is there any way an application can keep the same URL, when we move it to another ColdFusion instance on the same server? We need to separate one high-resource application out of the CF instance that runs all the other applications. We can create a new IIS Web Site, we can create a new CF instance ... but is there a way to keep the same URL? thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355038 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: same URL if moving app to new CF instance ?
Hi Russ, Matt, We have a number of applications running on one instance of CF9, coming through three IIS v6 Web Sites (host headers separate the requests which are to three different Fully Qualified Domain Names(FQDNs)). As I understand, with the Web Server Configuration Tool I'm mapping one or more IIS Web Sites to one and only one CF instance. So if we move the high-resource app from its current CF instance to a new instance, I need to do something so the IIS Web Site knows which CF instance to send the request. But if the IIS Web Site is mapped to only one CF instance, I can't do that. Our customer would like the URL (FQDN and directories) to remain the same. I feel like I'm missing something simple and basic ... hope I'm not over-thinking this! Feel free to page-slap me with a really helpful URL :-) thanks, Chris On Fri, Mar 15, 2013 at 5:46 PM, Russ Michaels r...@michaels.me.uk wrote: What instance a website is using has nothing at all to do with the URL, so your url would not change. The instance your website is using is controlled by the handler mappings. On Fri, Mar 15, 2013 at 9:24 PM, Chris 0404tow...@gmail.com wrote: Is there any way an application can keep the same URL, when we move it to another ColdFusion instance on the same server? We need to separate one high-resource application out of the CF instance that runs all the other applications. We can create a new IIS Web Site, we can create a new CF instance ... but is there a way to keep the same URL? thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355041 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
anybody using Oracle RAC 11g R2 ?
Is anybody using Oracle RAC 11g R2 ? How do you connect the ColdFusion datasources? Our customer is updating to 11g R2. The only official support I see is for 11g R1: http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/coldfusion9-support-matrix-4-ue.pdf I've seen enough on the 'net to figure we can use R2, though maybe without the advanced features like SCAN. thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354865 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
use SCAN with Oracle RAC 11g R2 ?
Is anybody using SCAN (Single Client Access Name) with Oracle RAC 11g R2 ? We're not able to connect to the SCAN address itself, only the individual servers. - CF 9.01, - using the Other driver and JDBC URL (from connecting to Oracle RAC 10g (Oracle driver supports only SID, and we need to use the ServiceName to connect to the RAC itself). - we have the DataDirect drivers, v4.0 SP1. thanks! Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354845 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: danger of Flash files?
On Thu, Feb 28, 2013 at 8:55 PM, Dave Watts dwa...@figleaf.com wrote: What danger is there in having Flash FLV files in with your application code? I know about Flash player vulnerabilities, but are there any issues with the FLV files themselves? Generally we like to keep code and content separate, but the question came up about security, too. There is no danger to you in having FLV files in the same directory as server-side code. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Thanks Dave. Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354759 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
know this Oracle JDBC error? Message 1018 not found
Does anybody know what this error is? Not getting any help Googling. [Macromedia][Oracle JDBC Driver](Internal Error) Message 1018 not found It happened after a request with 2 queries ran for a very long time (basically, the query is hung and the ColdFusion request is frozen). - A DBA checked the query in a SQL Optimizer and it ran fine. - One query returned 248 rows, the other query never returned anything (see below). - The user got a generic InternetExplorer timeout error page. Thank you, Chris Message [Macromedia][Oracle JDBC Driver](Internal Error) Message 1018 not found. SQLState HY000 StackTrace java.sql.SQLException: [Macromedia][Oracle JDBC Driver](Internal Error) Message 1018 not found. at macromedia.jdbc.base.BaseExceptions.createException(Unknown Source) at macromedia.jdbc.base.BaseExceptions.getException(Unknown Source) at macromedia.jdbc.oracle.net8.OracleDataProvider.receivePiggybackPacket(Unknown Source) at macromedia.jdbc.oracle.net8.OracleDataProvider.readByte(Unknown Source) at macromedia.jdbc.oracle.net8.OracleNet8NSPTDAPacket.getNextTTCCode(Unknown Source) at macromedia.jdbc.oracle.OracleImplStatement.processBufferedReply(Unknown Source) at macromedia.jdbc.oracle.OracleImplStatement.fetchNext(Unknown Source) at macromedia.jdbc.oracle.OracleImplStatement.fetchNext2(Unknown Source) at macromedia.jdbc.oracle.OracleImplStatement.execute(Unknown Source) at macromedia.jdbc.base.BaseStatement.commonExecute(Unknown Source) at macromedia.jdbc.base.BaseStatement.executeInternal(Unknown Source) at macromedia.jdbc.base.BaseStatement.execute(Unknown Source) at com.intergral.fusionreactor.jdbc.h.execute(StatementSurrogate.java:55) at coldfusion.server.j2ee.sql.JRunStatement.execute(JRunStatement.java:348) at coldfusion.sql.Executive.executeQuery(Executive.java:1364) at coldfusion.sql.Executive.executeQuery(Executive.java:1127) at coldfusion.sql.Executive.executeQuery(Executive.java:1058) at coldfusion.sql.SqlImpl.execute(SqlImpl.java:341) at coldfusion.tagext.sql.QueryTag.executeQuery(QueryTag.java:915) at coldfusion.tagext.sql.QueryTag.doEndTag(QueryTag.java:590) at cfsearchinspections2ecfm757494456.runPage(F:\pool\content\Scripts\RH\search\searchinspections.cfm:143) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:231) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:416) at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2722) at cfdefault2ecfm2142669457.runPage(F:\pool\content\Scripts\RH\search\default.cfm:38) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:231) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:416) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:381) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:94) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62) at coldfusion.filter.RequestThrottleFilter.invoke(RequestThrottleFilter.java:126) at coldfusion.CfmServlet.service(CfmServlet.java:200) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at com.intergral.fusionreactor.filter.FusionReactorFilter.c(FusionReactorFilter.java:428) at com.intergral.fusionreactor.filter.FusionReactorFilter.d(FusionReactorFilter.java:262) at com.intergral.fusionreactor.filter.FusionReactorFilter.doFilter(FusionReactorFilter.java:171) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool
danger of Flash files?
What danger is there in having Flash FLV files in with your application code? I know about Flash player vulnerabilities, but are there any issues with the FLV files themselves? Generally we like to keep code and content separate, but the question came up about security, too. thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354697 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
error: [Macromedia][Oracle JDBC Driver](Internal Error) Message 1018 not found
error: [Macromedia][Oracle JDBC Driver](Internal Error) Message 1018 not found Anybody know what this error is? It happened after a request with 2 queries ran for a very long time (basically, the query is hung and the ColdFusion request is frozen). - A DBA checked the query in a SQL Optimizer and it ran fine. - One query returned 248 rows, the other query never returned anything (see below). - The user got a generic InternetExplorer timeout error page. Thank you, Chris Message [Macromedia][Oracle JDBC Driver](Internal Error) Message 1018 not found. SQLState HY000 StackTrace java.sql.SQLException: [Macromedia][Oracle JDBC Driver](Internal Error) Message 1018 not found. at macromedia.jdbc.base.BaseExceptions.createException(Unknown Source) at macromedia.jdbc.base.BaseExceptions.getException(Unknown Source) at macromedia.jdbc.oracle.net8.OracleDataProvider.receivePiggybackPacket(Unknown Source) at macromedia.jdbc.oracle.net8.OracleDataProvider.readByte(Unknown Source) at macromedia.jdbc.oracle.net8.OracleNet8NSPTDAPacket.getNextTTCCode(Unknown Source) at macromedia.jdbc.oracle.OracleImplStatement.processBufferedReply(Unknown Source) at macromedia.jdbc.oracle.OracleImplStatement.fetchNext(Unknown Source) at macromedia.jdbc.oracle.OracleImplStatement.fetchNext2(Unknown Source) at macromedia.jdbc.oracle.OracleImplStatement.execute(Unknown Source) at macromedia.jdbc.base.BaseStatement.commonExecute(Unknown Source) at macromedia.jdbc.base.BaseStatement.executeInternal(Unknown Source) at macromedia.jdbc.base.BaseStatement.execute(Unknown Source) at com.intergral.fusionreactor.jdbc.h.execute(StatementSurrogate.java:55) at coldfusion.server.j2ee.sql.JRunStatement.execute(JRunStatement.java:348) at coldfusion.sql.Executive.executeQuery(Executive.java:1364) at coldfusion.sql.Executive.executeQuery(Executive.java:1127) at coldfusion.sql.Executive.executeQuery(Executive.java:1058) at coldfusion.sql.SqlImpl.execute(SqlImpl.java:341) at coldfusion.tagext.sql.QueryTag.executeQuery(QueryTag.java:915) at coldfusion.tagext.sql.QueryTag.doEndTag(QueryTag.java:590) at cfsearchinspections2ecfm757494456.runPage(F:\pool\content\Scripts\RH\search\searchinspections.cfm:143) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:231) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:416) at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2722) at cfdefault2ecfm2142669457.runPage(F:\pool\content\Scripts\RH\search\default.cfm:38) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:231) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:416) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:381) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:94) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62) at coldfusion.filter.RequestThrottleFilter.invoke(RequestThrottleFilter.java:126) at coldfusion.CfmServlet.service(CfmServlet.java:200) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at com.intergral.fusionreactor.filter.FusionReactorFilter.c(FusionReactorFilter.java:428) at com.intergral.fusionreactor.filter.FusionReactorFilter.d(FusionReactorFilter.java:262) at com.intergral.fusionreactor.filter.FusionReactorFilter.doFilter(FusionReactorFilter.java:171) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266
Future Proofing/Backward compatibility
Let's say I have a cfc I'm using to provide a service to multiple disparate clients. One of the arguments to a function is a struct. That struct is then used to pass values as individual arguments to a stored procedure on a database. Now the stored procedure is changed to add a new optional parameter and only one of the many disparate clients is updated to add that new field. How would you design that function to handle the fact that some clients are NOT passing the new field and there's no need to change the clients as it's optional? One idea is pass the value as :- value = #iif(StructKeyExists(struct,'new_field'),Evaluate(DE('struct.new_field')),0)# Is this the best way or there a better way of handling this? Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: TBD Date: Wednesday, 30th January at 6pm Details and RSVP on http://www.meetup.com/Sydney-Adobe-Platform-User-Group ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353370 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Future Proofing/Backward compatibility
On Thu, Dec 6, 2012 at 11:27 AM, .jonah jonah@creori.com wrote: value = structAppend( struct, { 'new_field' = 0 }, false ); Interesting solution, however, value needs to be struct.new_field, structAppend returns true/false and not the resultant struct. I'm trying to do this inline. It would be good if structAppend return the resultant struct so that:- value = structAppend( struct, { 'new_field' = 0 }, false ).new_field would return the passed in value or the default. On 12/5/12 3:50 PM, Chris Velevitch wrote: value = #iif(StructKeyExists(struct,'new_field'),Evaluate(DE('struct.new_field')),0)# Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: TBD Date: Wednesday, 30th January at 6pm Details and RSVP on http://www.meetup.com/Sydney-Adobe-Platform-User-Group ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353374 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: cfm files bypass permissions -- htm files get 401 unauthorized
Hi Russ, Yes ... I'll add a followup -- we did indeed have issues with cfCHART. Searching online, we identified a fix that requires a zero-byte file CFIDE\GraphData.cfm That fixed the missing-images generated by cfCHART. Regards, Chris On Fri, Oct 26, 2012 at 2:51 PM, Captain Obvious mr.happ...@gmail.comwrote: Chris - glad it worked out (this is jt) ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353247 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: cfm files bypass permissions -- htm files get 401 unauthorized
Oh, but the information lives on forever :-) On Mon, Nov 19, 2012 at 1:47 PM, Dave Watts dwa...@figleaf.com wrote: We've got a strange situation on IIS6 and ColdFusion7 on Windows Server 2003: cfm files bypass permissions -- htm file get 401 unauthorized A simple .cfm test file is displayed, despite Windows folder permissions that should prohibit it. The same test file saved as a .htm is correctly blocked with 401 unauthorized Do you have Check that file exists enabled within IIS? If not, you may have to enable that to get IIS file permissions to work properly. Aaand, I just realized that I was responding to a month-old post. D'oh! Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353252 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
latest Adobe-approved 1.6 JDK ?
Hi, our security folks have asked for something more recent that the Adobe approval for JDK 1.6.0_24 here http://helpx.adobe.com/coldfusion/kb/oracle-security-alert-cve-2010.html We haven't found anything yet, and am attempting to contact Adobe. What is the most recent version of 1.6 that Adobe has documented approval for? many thanks Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353109 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: latest Adobe-approved 1.6 JDK ?
Found an Adobe page from last month. Thanks everybody: http://helpx.adobe.com/coldfusion/kb/upgrading-java-coldfusion.html ColdFusion Help http://www.adobe.com/support/coldfusion/ / Upgrade Java for ColdFusion Issue Oracle releases Java updates periodically. How do you handle these updates in the context of ColdFusion? Go ahead and upgrade. All ColdFusion users can upgrade Java to the latest minor version for their ColdFusion servers. For example, ColdFusion customers using jdk 1.6.0_x can upgrade to the latest jdk 1.6.0_x update. (At the time of writing, the current version is jdk 1.6.0_35.) All future JDK 1.6.0_x releases are supported. For the supported ColdFusion versions, Adobe supports all minor releases of Java. For example, if ColdFusion supports JDK 1.6.0, all JDK 1.6.0_x updates are supported. JDK 1.7.0 is not considered a minor Java release. Unless explicitly stated that ColdFusion supports JDK 1.7.0, you cannot upgrade to any Java 1.7.0_x update. Keywords: cpsid_92330 It took a little while to find the Sun Java.com downloads page for 1.6.0_37 (the highest release for 1.6.0) http://www.oracle.com/technetwork/java/javase/downloads/jdk6u37-downloads-1859587.html Regards, Chris On Fri, Nov 9, 2012 at 1:13 PM, Matt Quackenbush quackfu...@gmail.comwrote: Adobe support anything 1.6. I don't have an official page to point you to, but if you search CF-Talk and/or Google I expect you'll find it pretty quickly. On Fri, Nov 9, 2012 at 12:10 PM, Chris 0404tow...@gmail.com wrote: Hi, our security folks have asked for something more recent that the Adobe approval for JDK 1.6.0_24 here http://helpx.adobe.com/coldfusion/kb/oracle-security-alert-cve-2010.html We haven't found anything yet, and am attempting to contact Adobe. What is the most recent version of 1.6 that Adobe has documented approval for? many thanks Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353119 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: JRun Console dies with ELContext error
Hi Dave, In the short term, all we need to do is configure a JRun datasource (to Oracle RAC, configuring it like the CF Other with a generic JDBC URL). I hadn't thought to do that outside of the console. I'll look around for info. In the long run we'd like to get the console working again, of course, and I like that way you're thinking. Chris On Thu, Nov 8, 2012 at 5:21 PM, Dave Watts dwa...@figleaf.com wrote: We have (another :-) weird thing happening -- the JRun Console doesn't work, and gives the below ELContext error. The cfusion, admin, and samples server instances are fine and run with no issue. But we can't manage anything from the JRun console. What are you trying to do from the JRun console exactly? Many tasks can be done without going in there. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353123 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
JRun Console dies with ELContext error
Hi, We have (another :-) weird thing happening -- the JRun Console doesn't work, and gives the below ELContext error. The cfusion, admin, and samples server instances are fine and run with no issue. But we can't manage anything from the JRun console. We seldom use the JRun Console, and fear this may be an old error from installation that we didn't catch at that time. We've compared the entire JRun4 folder structure with other working copies and see no significant differences. I've Googled around, but am not finding anything helpful. Any ideas? thanks, Chris The JMC has encountered a runtime error processing your last request. The error message is displayed below. Error message javax.servlet.jsp.JspException: javax.servlet.jsp.PageContext.getELContext()Ljavax/el/ELContext; at jrun.jsp.runtime.JSTTag.doEndTag(JSTTag.java:74) at jrun__welcome2ejspc._jspService(jrun__welcome2ejspc.java:2822) at jrun.jsp.runtime.HttpJSPServlet.service(HttpJSPServlet.java:43) at jrun.jsp.JSPServlet.service(JSPServlet.java:119) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at jrunx.jmc.filter.CrossScriptingFilter.doFilter(CrossScriptingFilter.java:28) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrunx.jmc.management.ServerAuthenticationServlet.doFilter(ServerAuthenticationServlet.java:88) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.security.StandardSecurityFilter.doFilter(StandardSecurityFilter.java:103) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.security.JSecurityCheckFilter.doFilter(JSecurityCheckFilter.java:70) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.http.WebService.invokeRunnable(WebService.java:172) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) javax.servlet.jsp.JspException: javax.servlet.jsp.PageContext.getELContext()Ljavax/el/ELContext; javax.servlet.jsp.PageContext.getELContext()Ljavax/el/ELContext; ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353099 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: cfm files bypass permissions -- htm files get 401 unauthorized
WE HAVE A WINNER! Yes, that's exactly what the fix is -- telling IIS to check the file exists before passing it to ColdFusion for processing. I don't know how our apps with folder permissions have (apparently) been trouble-free for years, but it looks like we've now fixed this issue. Perhaps using HTTPS for this new app is what surfaced the issue. So ColdFusion was going around IIS, not because ColdFusion had permission, but because IIS wasn't checking the .cfm file's existence before passing it to ColdFusion. Thanks Byron, and also Russ and others for the help. Chris On Thu, Oct 25, 2012 at 12:12 AM, Byron Mann byronos...@gmail.com wrote: There is somewhere in the handler mappings in iis to check if the file exists. If it is unchecked I do not think IIS touches the file system. Maybe? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353003 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: cfm files bypass permissions -- htm files get 401 unauthorized
Yes, we may have to change CF like that. A bit too hard now, we have an existing infrastructure and 200 applications with the current configuration. Odd to have everything okay until recently -- and the problem is only with InternetExplorer. We'll have to keep investigating. thanks for the help all, Chris On Tue, Oct 23, 2012 at 10:46 AM, Russ Michaels r...@michaels.me.uk wrote: the thing is that IE cannot get past permissions, unless you have it running as administrator or some other privileged user and that user has permissions on the server running CF. create a user called COLDFUSION and run cf as that user instead of system and see if that helps. You will need to give that user full permissions on the COLDFUSION install folder and the website root, and system temp folders. On Tue, Oct 23, 2012 at 3:31 PM, Chris 0404tow...@gmail.com wrote: Well! I'm going down the rabbit hold of unreality here ... I experimented, and havent got any closer to a solution: - With all groups removed, I could _not_ get to the .cfm file (as expected) - With only Administrators group, I could get to the .cfm file, and it noted I was logged in with my regular account not my privileged Administrators account. - With IUSR account set to DENY, I could get to the .cfm file. - Removed SYSTEM account, which ColdFusion uses, and could still get in. Its looking more and more like theres something screwy with IE and the PIV card login (PIV is our gov't chipped smart card for auto login). - IE still lets me in even after a full IE reset and SSL clear state and close all IE instances then reopen. This problem exists only with IE (Firefox is okay). I've tried IE reset, clear SSL st ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352991 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: cfm files bypass permissions -- htm files get 401 unauthorized
Well! I'm going down the rabbit hold of unreality here ... I experimented, and havent got any closer to a solution: - With all groups removed, I could _not_ get to the .cfm file (as expected) - With only Administrators group, I could get to the .cfm file, and it noted I was logged in with my regular account not my privileged Administrators account. - With IUSR account set to DENY, I could get to the .cfm file. - Removed SYSTEM account, which ColdFusion uses, and could still get in. Its looking more and more like theres something screwy with IE and the PIV card login (PIV is our gov't chipped smart card for auto login). - IE still lets me in even after a full IE reset and SSL clear state and close all IE instances then reopen. This problem exists only with IE (Firefox is okay). I've tried IE reset, clear SSL state. Thanks for the ideas Russ. Chris On Mon, Oct 22, 2012 at 6:11 PM, Russ Michaels r...@michaels.me.uk wrote: in IIS the directory security should have only 1 box checked integrated windows authentication. This is all I have set on our servers to deny anonymous access to the cfadmin for example and it works.. You could try also specifically DENYING the internet guest account (IUSR_machine name) On Mon, Oct 22, 2012 at 10:50 PM, Chris 0404tow...@gmail.com wrote: Hi Russ, The folder's permissions are: Administrators (Full control) - my regular account is not privileged, and I have a privileged account that does let me in through this group. System (Full) - CF runs as the Local System account WorkstationAdmin (Modify) - domain account, the only group that should have access. I'm not in this group. The folder has Anonymous Login disabled, and Windows Authentication enabled. The server has an SSL certificate, and we are accessing through https. Interesting comments about CF bypassing folder permissions -- I thought first the HTTP request had to access the file through the web server, and then the web server would send the file to CF for processing. Many thanks! Chris On Fri, Oct 19, 2012 at 6:29 PM, Russ Michaels r...@michaels.me.uk wrote: What are the actual permissions you have on the folder? Regards Russ Michaels ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352979 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: cfm files bypass permissions -- htm files get 401 unauthorized
Hi Russ, The folder's permissions are: Administrators (Full control) - my regular account is not privileged, and I have a privileged account that does let me in through this group. System (Full) - CF runs as the Local System account WorkstationAdmin (Modify) - domain account, the only group that should have access. I'm not in this group. The folder has Anonymous Login disabled, and Windows Authentication enabled. The server has an SSL certificate, and we are accessing through https. Interesting comments about CF bypassing folder permissions -- I thought first the HTTP request had to access the file through the web server, and then the web server would send the file to CF for processing. Many thanks! Chris On Fri, Oct 19, 2012 at 6:29 PM, Russ Michaels r...@michaels.me.uk wrote: What are the actual permissions you have on the folder? Regards Russ Michaels ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352975 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
cfm files bypass permissions -- htm files get 401 unauthorized
We've got a strange situation on IIS6 and ColdFusion7 on Windows Server 2003: cfm files bypass permissions -- htm file get 401 unauthorized A simple .cfm test file is displayed, despite Windows folder permissions that should prohibit it. The same test file saved as a .htm is correctly blocked with 401 unauthorized Any ideas? thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352963 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: how risky is allowing java.security.AllPermission ?
Thanks Byron. I found Adobe® ColdFusion® 9 Server Lockdown Guide and will go through that. It looks pretty comprehensive. Thanks Jochem. What you say about the security layers, and the RMI policy overriding the previous .policy files, makes sense. Yes, this was related to our attempts to make the T3/RMI call to WebLogic. We ended up switching to WebServices to get around the whole issue. Regards, Chris On Fri, Sep 21, 2012 at 4:45 AM, Jochem van Dieten joch...@gmail.com wrote: On Thu, Sep 20, 2012 at 12:52 AM, Chris wrote: So ... a client wants to know just how risky it is to temporarily allow java.security.AllPermission ? I presume this is a followup to your Weblogic / RMI problem? It's clear it's not good, but how bad is it? What exactly could someone do to a server that's behind firewalls and load balancers? Probably it is inconsequential in the big picture. As always there is a layered security model. The access of the server running CF to other systems is limited by firewalls. The access of the JVM instance to the server is limited by the Windows account. The access of CF to the JVM instance is limited by the java.security.* security permissions. What I presume is happening is that by default CF runs with java.security.AllPermission already. (Have a look at the security policy in /WEB-INF/cfusion/lib/coldfusion.policy and /WEB-INF/cfusion/lib/neo_jaas.policy to see what CF ships with.) Then when some Weblogic RMI call is ran, some other security policy that is much more restricted is loaded, causing CF to fail. The new configuration would overrule that security policy and restore the original security from CF. If this presumption is right, you can tel them that from a CF perspective you are just restoring the original configuration. The only additional risk is not CF, but the Weblogic RMI running with additional proivileges. Jochem -- Jochem van Dieten http://jochem.vandieten.net/ ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352712 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: how risky is allowing java.security.AllPermission ?
Thanks for the comments Dave. We'll investigate the permissions. Any recommendations for a good info source? We have enough trouble keeping basic things running after somebody goes around hardening things. I'm all for security, but when their idea of security is an un-networked server in a locked room, it won't go over well with the users. Regards, Chris On Wed, Sep 19, 2012 at 11:52 PM, Dave Watts dwa...@figleaf.com wrote: Yes, CF runs under Local System. So CF has full system access. That's the danger from the applications on the server. What about an external attack -- what could be done, specifically? That really depends on what the applications do, and how well they're written. An attacker can run those applications, and potentially manipulate the inputs to those applications in a way that makes them behave differently than you want them to. Oh, and also: why don't you run CF with a less-privileged user account or security context? CF doesn't need to be SYSTEM to run, and can do well in most cases with significantly limited permissions and privileges. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352689 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
how risky is allowing java.security.AllPermission ?
So ... a client wants to know just how risky it is to temporarily allow java.security.AllPermission ? It's clear it's not good, but how bad is it? What exactly could someone do to a server that's behind firewalls and load balancers? thanks, Chris Here's what they're asking about enabling: \Jrun4\lib\jrun.policy // to grant wide-open security access to all code, uncomment this line // permission java.security.AllPermission; ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352671 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: how risky is allowing java.security.AllPermission ?
Yes, CF runs under Local System. So CF has full system access. That's the danger from the applications on the server. What about an external attack -- what could be done, specifically? thanks, Chris On Wed, Sep 19, 2012 at 7:21 PM, Russ Michaels r...@michaels.me.uk wrote: This depends what permissions your cf setvice runs under, if you jusy installed as default then cf has full system access via java. Regards Russ Michaels On Sep 19, 2012 11:53 PM, Chris 0404tow...@gmail.com wrote: So ... a client wants to know just how risky it is to temporarily allow java.security.AllPermission ? It's clear it's not good, but how bad is it? What exactly could someone do to a server that's behind firewalls and load balancers? thanks, Chris Here's what they're asking about enabling: \Jrun4\lib\jrun.policy // to grant wide-open security access to all code, uncomment this line // permission java.security.AllPermission; ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352673 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
CFCs stop working after call to WebLogic [access denied (java.io.FilePermission]
Our app makes a call to a WebLogic server. Then whether the connection is made or not, all our CFCs stop working. Apps using CFM pages are okay. In 5-10 minutes the servers grinds to a halt as error messages flood in. Immediately following the T3 (WebLogic RMI) call to the WebLogic server, these errors for ColdFusion CFC components come in. There are no errors in CFM files. Error Type=coldfusion.runtime.CfErrorWrapper ERROR TEMPLATE:[directories]/pmn.cfm ERROR DIAGNOSTICS:access denied (java.io.FilePermission [directories]\sqlprev.cfc execute) null brThe error occurred on line -1. error.message = access denied (java.io.FilePermission[directories]\sqlprev.cfc execute) error.rootCause = java.security.AccessControlException: access denied (java.io.FilePermission [directories]\sqlprev.cfc execute) The errors continue until we restart ColdFusion/JRun, then all is okay ... until the next call to WebLogic. Any ideas? thanks, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352663 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Populate Select List from JS
Hello everyone, So yesterday I figured out the JavaScript for my two selects. In the JS code below I have the information I need, Resort Name and Resort ID: script type = text/javascript function setOptions(opt) { var resortID = document.adminForm.resortID; resortID.options.length = 0; if ((opt == 0) || (opt == 1)){ resortID.options[resortID.options.length] = new Option(); } if ((opt == 2) || (opt == 2)) { cfoutput query=qSelectResorts resortID.options[resortID.options.length] = new Option('#Resort_Name#','#resort_ID#'); /cfoutput} } /script Here are the select lists: select name=adminID size=1 style=width: 150px onchange=setOptions(document.adminForm.adminID.options[document. adminForm.adminID.selectedIndex].value); option value=0 selectedSelect.../option option value=1Site Admin/option option value=2Resort Admin/option /select br / br / select name=resortID size=1 style=width: 150px option value = 0 /option/select The first list is hard coded as you can see and teh second one is dynamic. When you select Resort Admin then the second list populates with the resort names. What I need now is to get the resort ID's in the value and I don't know how to do that. If anyone can help me with this last part I would really appreciate it. Thanks in advance, Bruce ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352180 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Populate Select List from JS
Hello everyone, So yesterday I figured out the JavaScript for my two selects. In the JS code below I have the information I need, Resort Name and Resort ID: script type = text/javascript function setOptions(opt) { var resortID = document.adminForm.resortID; resortID.options.length = 0; if ((opt == 0) || (opt == 1)){ resortID.options[resortID.options.length] = new Option(); } if ((opt == 2) || (opt == 2)) { cfoutput query=qSelectResorts resortID.options[resortID.options.length] = new Option('#Resort_Name#','#resort_ID#'); /cfoutput} } /script Here are the select lists: select name=adminID size=1 style=width: 150px onchange=setOptions(document.adminForm.adminID.options[document. adminForm.adminID.selectedIndex].value); option value=0 selectedSelect.../option option value=1Site Admin/option option value=2Resort Admin/option /select br / br / select name=resortID size=1 style=width: 150px option value = 0 /option/select The first list is hard coded as you can see and teh second one is dynamic. When you select Resort Admin then the second list populates with the resort names. What I need now is to get the resort ID's in the value and I don't know how to do that. If anyone can help me with this last part I would really appreciate it. Thanks in advance, Bruce AJAX might be better here. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:352181 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
[ANN SYD AU] Tomorrow (Monday) Coldfusion 10 Launch
Tomorrow, Monday 28th April, 6pm for 6:30 start Richard Turner-Jones of Adobe will be showing us Coldfusion 10 along with Creative Suite 6 and Creative Cloud, from a developers perspective. Full synopsis to follow soon. Please RSVP to help with the catering numbers. You'll need to sign in and join the group to RVSP. The venue is courtesy of Rocketboots. Please RSVP to help with the catering numbers. You need to sign in and join the group to RSVP. Please RSVP at http://apugs.groups.adobe.com/index.cfm?event=post.displaypostid=42516 The venue is courtesy of Rocketboots. Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: CS6, Creative Cloud and CF120 Date: 28th May at 6pm for 6:30 start Details and RSVP on http://apugs.groups.adobe.com/index.cfm?event=post.displaypostid=42516 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351328 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: [ANN SYD AU] Tomorrow (Monday) Coldfusion 10 Launch
Yes, it is tonight Monday 28th May. Thanks for pointing that out. On Mon, May 28, 2012 at 6:33 AM, Maureen mamamaur...@gmail.com wrote: Shouldn't that be May 28 as April 28 is long past. On Sun, May 27, 2012 at 5:12 AM, Chris Velevitch chris.velevi...@gmail.com wrote: Tomorrow, Monday 28th April, 6pm for 6:30 start Richard Turner-Jones of Adobe will be showing us Coldfusion 10 along with Creative Suite 6 and Creative Cloud, from a developers perspective. Full synopsis to follow soon. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351331 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
[ANN SYD] Tonight (Monday) Coldfusion 10 Launch
Tonight, Monday 28th May, 6pm for 6:30 start Richard Turner-Jones of Adobe will be showing us Coldfusion 10 along with Creative Suite 6 and Creative Cloud, from a developers perspective. Full synopsis to follow soon. Please RSVP to help with the catering numbers. You'll need to sign in and join the group to RVSP. The venue is courtesy of Rocketboots. Please RSVP to help with the catering numbers. You need to sign in and join the group to RSVP. Please RSVP at http://apugs.groups.adobe.com/index.cfm?event=post.displaypostid=42516 The venue is courtesy of Rocketboots. Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: CS6, Creative Cloud and CF120 Date: 28th May at 6pm for 6:30 start Details and RSVP on http://apugs.groups.adobe.com/index.cfm?event=post.displaypostid=42516 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351332 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion developers in Australia
On Mon, Apr 30, 2012 at 16:34, Martin Parry martin.pa...@beetrootstreet.com wrote: Hey guys - I'm trying to get a ColdFusion developer community going in Australia - Go to http://www.coldfusion.com.au and register your interest.. We will have project sharing and profiles available once I know the interest level is there. There is already a CF developer community in Australia. Just look at Adobe groups and you'll see a large number of already established groups in most major capital cities. I see from your web site that you are based in North Wales, so I'm assuming you are still there. But if you are actually here in Australia, we are quite happy to have you involved. Just contact you nearest community manager to discuss how you would like to participate. Also, WebDU[1] is happening this week (Thurs, Fri) in Sydney and CF.Objective (ANZ)[2] in Melbourne on 1 2 November, so please come and join us. [1] http://www.webdu.com.au [2] http://www.cfobjective.com.au Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: TBA Date: 28th May at 6pm for 6:30 start Details coming soon ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350906 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: ColdFusion developers in Australia
On Tue, May 1, 2012 at 10:57, Mike Kear afpwebwo...@gmail.com wrote: Chris, in the last 12 months, the Sydney usergroup has had only one CF related topic (and as it happens, it was on a day I couldnt attend). The Usergroup is not interested in ColdFusion as far as I can see. And WebDU doesn't have the word ColdFusion anywhere on the agenda. No CF topics at all. Mike, the user group is still interested in Coldfusion, and I'm keen on any topic ideas and speaker suggestions you may have or from anyone else in the Sydney for that matter. And just for the record we've had 2 CF topics, one of them was at the Short Talks night where there CFWheels as one of the short talks. Looking forward to your ideas and suggestions. Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney Topic: TBA Date: 28th May at 6pm for 6:30 start Details comin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:350909 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: How to respond to a job thread?
The developer's post is from October. I signed up to the list, but I don't have access to that old message in order to reply. I tried responding to his post on the site, but was rejected by the admin. As a company trying to hire a CF dev, I was hoping the process would be simpler. Chris Um - why not sign up and post a reply now? On Fri, Nov 11, 2011 at 10:01 PM, Chris Vinson ch...@bandzoogle.com wrote: Pardon my ignorance. I'd like to respond to a CF developer looking for contract work in the CF-Jobs list. But I was not a mailing list subscriber at the time of the post. How can I contact that person? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348695 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
How to respond to a job thread?
Pardon my ignorance. I'd like to respond to a CF developer looking for contract work in the CF-Jobs list. But I was not a mailing list subscriber at the time of the post. How can I contact that person? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348691 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Query of Queries and GROUP - use CFLOOP?
I am using a cfloop condition approach to perform a standard branched tree operation. I have four tables and my query is pretty straight forward. The output is not working though. It is returning the correct amount of results and is organizing them properly but the values displayed are repeating. I've looked over it again and again. It returns the proper fields and order in MSSQL Server Management Studio Express... Any ideas? Here's my query SELECT FFState.StateID, FFState.StateName, FFStateRegion.RegionID, FFStateRegion.StateID AS Expr1, FFStateRegion.StateRegion, FFRegionCounty.CountyID, FFRegionCounty.RegionID AS Expr2, FFRegionCounty.StateID AS Expr3, FFRegionCounty.LocationName, FFPropertyLocation.PropertyLocationID, FFPropertyLocation.RegionCountyID, FFPropertyLocation.RegionStateRegionID, FFPropertyLocation.RegionStateID, FFPropertyLocation.PropertyLocationName FROM FFState INNER JOIN FFStateRegion ON FFState.StateID = FFStateRegion.StateID INNER JOIN FFRegionCounty ON FFStateRegion.RegionID = FFRegionCounty.RegionID INNER JOIN FFPropertyLocation ON FFRegionCounty.CountyID = FFPropertyLocation.RegionCountyID ORDER BY FFState.StateName ASC, FFStateRegion.RegionID ASC, FFRegionCounty.CountyID ASC, FFPropertyLocation.PropertyLocationName ASC ( I know the syntax as posted may not be preserved but it is in dreamweaver. ) Here's the output as I got it from another post. I did modify this a bit to fit the query and four loops instead of three loops. cfset i = 1 cfloop condition=i LTE #GetStates.recordcount# cfset StateGroup = GetStates.StateID[i] #GetStates.StateName# #GetStates.StateID# - cfloop condition=i LTE GetStates.recordcount AND StateGroup IS #GetStates.StateID[i]# cfset RegionGroup = GetStates.RegionID[i] #GetStates.StateRegion# #GetStates.RegionID#BR / cfloop condition=i LTE GetStates.recordcount AND RegionGroup IS #GetStates.RegionID[i]# cfset CountyGroup = GetStates.CountyID[i] #GetStates.LocationName# #GetStates.PropertyLocationID#BRimg src=images/1x1black.gif width=100% height=1 vspace=2 /BR / cfloop condition=i LTE GetStates.recordcount AND CountyGroup IS #GetStates.CountyID[i]# A HREF=property1.cfm?PropertyLocationID=#GetStates.PropertyLocationID# class=leftnav#GetStates.PropertyLocationName#/ABR /img src=images/1x1black.gif width=100% height=1 vspace=2 /BR / cfset i = i + 1 /cfloop cfset i = i + 1 /cfloop cfset i = i + 1 /cfloop cfset i = i + 1 /cfloop ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346469 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Query of Queries and GROUP - use CFLOOP?
I am using a cfloop condition approach to perform a standard branched tree operation. I have four tables and my query is pretty straight forward. The output is not working though. It is returning the correct amount of results and is organizing them properly but the values displayed are repeating. I've looked over it again and again. It returns the proper fields and order in MSSQL Server Management Studio Express... Any ideas? Here's my query SELECT FFState.StateID, FFState.StateName, FFStateRegion.RegionID, FFStateRegion.StateID AS Expr1, FFStateRegion.StateRegion, FFRegionCounty.CountyID, FFRegionCounty.RegionID AS Expr2, FFRegionCounty.StateID AS Expr3, FFRegionCounty.LocationName, FFPropertyLocation.PropertyLocationID, FFPropertyLocation.RegionCountyID, FFPropertyLocation.RegionStateRegionID, FFPropertyLocation.RegionStateID, FFPropertyLocation.PropertyLocationName FROM FFState INNER JOIN FFStateRegion ON FFState.StateID = FFStateRegion.StateID INNER JOIN FFRegionCounty ON FFStateRegion.RegionID = FFRegionCounty.RegionID INNER JOIN FFPropertyLocation ON FFRegionCounty.CountyID = FFPropertyLocation.RegionCountyID ORDER BY FFState.StateName ASC, FFStateRegion.RegionID ASC, FFRegionCounty.CountyID ASC, FFPropertyLocation.PropertyLocationName ASC ( I know the syntax as posted may not be preserved but it is in dreamweaver. ) Here's the output as I got it from another post. I did modify this a bit to fit the query and four loops instead of three loops. cfset i = 1 cfloop condition=i LTE #GetStates.recordcount# cfset StateGroup = GetStates.StateID[i] #GetStates.StateName# #GetStates.StateID# - cfloop condition=i LTE GetStates.recordcount AND StateGroup IS #GetStates.StateID[i]# cfset RegionGroup = GetStates.RegionID[i] #GetStates.StateRegion# #GetStates.RegionID#BR / cfloop condition=i LTE GetStates.recordcount AND RegionGroup IS #GetStates.RegionID[i]# cfset CountyGroup = GetStates.CountyID[i] #GetStates.LocationName# #GetStates.PropertyLocationID#BRimg src=images/1x1black.gif width=100% height=1 vspace=2 /BR / cfloop condition=i LTE GetStates.recordcount AND CountyGroup IS #GetStates.CountyID[i]# A HREF=property1.cfm?PropertyLocationID=#GetStates.PropertyLocationID# class=leftnav#GetStates.PropertyLocationName#/ABR /img src=images/1x1black.gif width=100% height=1 vspace=2 /BR / cfset i = i + 1 /cfloop cfset i = i + 1 /cfloop cfset i = i + 1 /cfloop cfset i = i + 1 /cfloop ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346470 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
CF 301 Redirect on an HTML page
Hello all- I have a rather strange request. I have old web pages that Google is still finding links for so I want to utilize this power. These old links have new equivalents. The problem is, the old links are so old that they are .htm files. My site is now CF8 hosted. Doing a simple 301 redirect is proving quite difficult. The complications: I am on a shared server, so I don't have access to .htaccess. That option is gone for a redirect. I tried to put cflocation tags on the old links, but because they are .htm files, the server won't execute the cflocation tags. I asked the server to tell CF to process all .htm extensions as .cfm, but they can't do this because it's a shared server and it could cause problems. So, I tried to put the following code in my application.cfm file. cfif #CGI.SCRIPT_NAME# EQ old-page.htm cflocation url=new-page.cfm addToken=yes statusCode=301/cfif However, this doesn't seem to be working either. I think because the old links are .htm files, application.cfm isn't even running when I attempt to go to the old links and test the code. Any thoughts? Thanks in advance. -Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:344273 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CFContent failing on large files since moving to ColdFusion 9
This is a known bug, please log in at the Adobe site and vote for getting it fixed: http://cfbugs.adobe.com/cfbugreport/flexbugui/cfbugtracker/main.html#bugId=83425 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342913 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CFContent failing on large files since moving to ColdFusion 9
This is a known bug, please log in at the Adobe site and vote for it: http://cfbugs.adobe.com/cfbugreport/flexbugui/cfbugtracker/main.html#bugId=83425 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342914 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Coldfusion app using MySQL - Is moving the MySql to Amazon RDS feasible/efficient?
Stumbled onto Amazon RDS (link: http://aws.amazon.com/rds/) and the concept from what I'm reading at least, sounds great. I currently use shared hosting with CF and MySQL. I'm pouring over the documentation but most of it is over my head as I'm not familiar with Amazon web services and/or MySQL server administration. From what I'm getting though, I can create the MySQL database there, import data into it, and then connect to it from the CF server during CFQUERY calls. Has anyone looked into this or tried something like this? I'm skeptical and imagine there'd be overhead that would make it unusable but I'm not finding anything to back that up.. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342419 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Basic mySQL workbench question
Rob, You might want to join this list: http://lists.mysql.com/gui-tools Rob Voyle said the following on 1/3/2011 9:05 AM: I have created a table in mysql and need to modify the column attributes. Using mysql workbench I can create the model and modify the columns but how do I save the changes to the table columns. -- Best regards, Chris Montgomery ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:340356 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: index.cfm being hacked (now application.cfm)
Yep same thing here, someone at my company had their laptop compromised - changing his FTP password didn't work, had to just lock out his account, setup a separate one for use in the office, now he just can't FTP from home... There are ways to prevent even this sort of thing...use key pairs, so that you'd need the ssl key as well as your regular login, use a token system, etc - obviously these are not trivial things to implement though depending on the size of the organization. I went through this last year. It's a nightmare of possibilities. I can save you all a TON of time right here. I thought they were targeting just files named index.cfm so I changed all my home page filenames to something else. Whatever the process was it got wise to it within days. I changed file and folder permissions, I changed this and that, I even shut off Cold Fusion to see what would happen. It's not coming from the server side It's coming right through your FTP channel. Simple and clever. If you don't want to have to fight security go through the front door. That's what they are doing. If you visit an infected site it silently downloads through their javascript a worm to your computer. It looks for FTP configuration files. Cute, Dreamweaver, whatever, if it's FTP this worm finds it. Then every 24 hours it, or someone, logs in to your sites using FTP and carefully appends your default pages with the malicious hijack script (the script has been getting more and more sophisticated it changes all the time so detecting a pattern is impossible. The client calls you in anger, you find it, freak out, replace the files with good ones, even turn off write access to the file, and in a day or so you it happens again. You can spend the better part of your lives trying to figure out how the attacker is getting onto the server. The answer is under your nose. Wipe and reload the OS on any computer in your company that has FTP access to the infected sites. I haven't found a scanner that will detect this thing yet. Better safe than sorry. Wipe and reload. THEN - make it a policy to NEVER store an FTP password again. I manually enter all my FTP passwords now. It's a few seconds here and there, sometimes it's a pain, but I haven't had a problem with an infected site since. If you find this helpful please let me know off-list. Thank you. Nick Is the site in question on a SHARED Server? I had this issue a while ago and it wasn't my site, but someone else's and it rewrote every default page on the entire server no matter what language. Just a thought. They could have modified the exploit to not only do index.html, index.cfm, etc. but say, application.cfm, etc. It took the hosting company a while to track down the actual site that got hacked. Terry AFAIK (kinda guessing here) Google doesn't sniff the files themselves, they just hit a link and sniff the resulting HTML. So anything that's output to the resultant page, whether on the index.cfm or application.cfm, will be picked up by Google. -- Josh thanks for that mary. this seems like a good idea. i will contact hostek today to try and have the ftp restricted. because they are modifying just the application file now, i think it must be an auto script as when they were attacking the index file the links were very visible to google. it doesn't make sense now to include their links in ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:340062 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Vmware and CF 8+
Correct - ESXi only supports two processors, neither of the relatively cheap SMB packages support more than two procs either (i'm in the midst of doing this myself...but with a dual proc machine). Microsoft hyper-V does not have this limitation (although in general it seems VMware is favored over MS - biggest problem with hyper-v is that service packs and critical fixes that require a reboot of the underlying OS means you have to reboot however many VM's are running on your box too). Would it make sense to do this? Absolutely! Several months ago we began consolidating some of our older servers on to a Dell 2950 with 32GB and lots of RAIDed hard drive space. We installed VMware ESXi on the base machine and then copied the ISO images for our server installs. We use vSphere to manage it remotely. It doesn't have all of the features of the paid VMware solutions, but it's enough to run a bunch of virtual machines which all hum along nicely without any trouble. I believe that ESXi only supports two processors though, so you likely wouldn't be able to take full advantage with the free version. -Justin Scott ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:337211 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Vmware and CF 8+
yep you are correct (I could swear I just looked at this page, but whatever:) http://www.vmware.com/products/vsphere/buy/small_business_editions_comparison.html however, strangely, both of the SBS solutions do limit you to 2 procs/server...which is a bit odd - considering you are going from a free to a paid product! Which means if you want free...no problem, if you want to add say...vMotion for under 5 figures with a 4 proc machine you are out of luck... the whole back and forth between MS and VMware will be good for all of us though as it'll drive features down the chain:) I think ESXi supports more processors now in vSphere 4.1 that was released back in July. I would send a tweet to @VMwareCares on Monday, Rick Blythe who runs that account can help you out on a lot of your VMware Tech questions. If you don't get the results there, send me an email lkilpatr...@vmware.com or post your question on the VMware Communities, there are many people there that can answer your questions too. Here are a few links that might help you out. http://communities.vmware.com/home.jspa - VMware Community http://www.vmware.com/resources/compatibility/search.php - Compatibility Guide http://www.vmware.com/support/vsphere4/doc/vsp_41_new_feat.html - New Features in vSphere 4.1 Hope this helps, Luke Kilpatrick Social Media Producer VMware, Inc. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:337216 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Vmware and CF 8+
true...I knew that, I think I meant more that nearly every month MS has at least one patch that requiresa reboot, rarely do I go through a patch tuesday without some critical fix... I saw a timeline somewhere where there are far more patches that require rebooting on the MS side - which is only to be expected as it's a full blown OS running there...as opposed to a stripped down kernel, just running what needs to be run for the one function. biggest problem with hyper-v is that service packs and critical fixes that require a reboot of the underlying OS means you have to reboot however many VM's are running on your box too). I use ESXi myself, and to be fair to Microsoft, when a critical patch for ESXi is release it requires the same process (shut down the VMs and reboot the hypervisor). Since I deployed ESXi there has been one patch I needed to install and that was four months ago. Most of the patches that come out are related to the CLI which ESXi doesn't ship with, so they're not relevant. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:337217 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Resources for contracting out work/services/freelancing?
Can you give me a site you had good luck with? I've tried bidding before and you're absolutely right, it's just not a market for folks like me. I'd make more with a night job bagging groceries :) I am more interested in the steps needed to do it outside of recruiters. I'd like to advertise locally and understand how to properly determine the size of a retainer, how much folks typically secure up front, etc. I did 1099/telecommute almost all of last year. I worked through recruiters. The problem that I found was that you wind up spending an extra four hours a day marketing and lining up your next assignments. Telecommute jobs ebb and flow, depending on alot of factors. Be wary of the the sites that have you sign up and bid on projects, because you're up against the low ball guys from overseas, you won't get any interest if you bid at US competitive rates.. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:333733 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Stack overflow in self nested custom tag
On Wed, Mar 10, 2010 at 02:31, Dave Watts dwa...@figleaf.com wrote: Instead of having the processing done in the child tags, you can simply pass the data from those tags back to the parent tag during its end execution mode, using the CFASSOCIATE tag. This will let you do things that are a bit harder to do in the nested tag itself. Doesn't that depend on what you're trying to achieved? I can image that's a good solution for simple nesting of tags, but not for highly complex nesting of an indeterminate number of different child tags, child of child tags and recursive nesting. Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney March 2010: ColdFusion Application Architecture for the Impatient and Using jQuery when Flash is Overkill Date: 29nd Mar 6pm for 6:30 start Details and RVSP on http://groups.adobe.com/posts/148c9056a4 ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:331504 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Stack overflow in self nested custom tag
I'm using CF7.02 and I'm trying to create a custom tag that will be self nested, like:- cf_ct1 cf_ct2 cf_ct2 /cf_ct2 /cf_ct2 /cf_ct1 And in cf_ct2, I'm trying to get the data of the parent tag and assigning to a variable in the current tags state:- cfset lvData=GetBaseTagData(ListGetAt(GetBaseTagList(),2)) But the assignment creates a stack overflow and I don't understand why? Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney March 2010: ColdFusion Application Architecture for the Impatient and Using jQuery when Flash is Overkill Date: 29nd Mar 6pm for 6:30 start Details and RVSP on http://groups.adobe.com/posts/148c9056a4 ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:331454 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Stack overflow in self nested custom tag
On Tue, Mar 9, 2010 at 18:18, Barney Boisvert bboisv...@gmail.com wrote: I haven't tested this, but I'd imagine that the CURRENT tag is on the tag stack (as it is with exceptions). Since getBaseTagData operates on names rather than offsets/indexes, it's going to match the current tag, and then return it's own data. So lvData is pointing at one of it's own scopes, which then has to be copied into lvData, and well you can see the problem. However, getBaseTagData accepts an optional second parameter for how many matches it should find before returning, simply moving the , 2 to the right by one parenthesis will probably solve your problem. Again, I haven't actually tested, but that's what I'd try first. That worked. Thanks. Chris -- Chris Velevitch Manager - Adobe Platform Users Group, Sydney m: 0415 469 095 www.apugs.org.au Adobe Platform Users Group, Sydney March 2010: ColdFusion Application Architecture for the Impatient and Using jQuery when Flash is Overkill Date: 29nd Mar 6pm for 6:30 start Details and RVSP on http://groups.adobe.com/posts/148c9056 ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:331456 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: AJAX Question
Also, if you're using CF9's AJAX implementation, putting ?cfdebug at the end of your URL will show the AJAX debugger (assuming that feature is enabled in the CF Admin). Chris -Original Message- From: Scott Stewart [mailto:sstwebwo...@bellsouth.net] Sent: Friday, January 22, 2010 8:21 AM To: cf-talk Subject: RE: AJAX Question Matt here's a quick one using JQuery: First off, you need to load the JQuery libraries in the head of the page. script type=text/javascript $(document).ready(function() { $(#button name).live(click, function(){ $.ajax({ type:post, url:url of processing page, data:$(#form name).serialize(), cache:false, success: function(){$(#receiving div).load(page to load on sucess)}, error: function(){ error functionality here; } }); }); )} /script From the top, $(document).ready(function() { This ensures that everything inside is as soon as the DOM is loaded, while not as important here, if you're using JQuery for layout manipulation it's critical, so make a habit of wrapping all JQuery code in it. $(#button name).live(click, function(){ This script is triggered off of a button, make sure the button tag has an id, this is what you'll trigger on. url:url of processing page, this is url of whatever actions you're going to call, hijacks the action attribute of the form tag success: function(){$(#receiving div).load(page to load on sucess)}, The page that you want to load after processing, and the div that it should be placed in error: function(){error functionality here;} error functionality, error pages etc. This is quick and dirty, there's an entire form plugin for JQuery that may be better suited to what you need. To debug any AJAX stuff, if you haven't already downloaded Firefox, do it and get the firebug plugin, along with the JQuery plugins that are available. The NET tab in firebug will show you all of the behind the scenes stuff going on. Hope this helps sas -Original Message- From: Matthew Allen [mailto:a.matthe...@yahoo.com] Sent: Friday, January 22, 2010 9:48 AM To: cf-talk Subject: AJAX Question Can anyone please give me pointers or real life example of how to insert simple form field values into a database using AJAX. Many thanks. Matt ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330018 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: AJAX Question
You're probably right. Your note about using firebug reminded me of the built in debugger with CF9, so I figured it would be worth letting Matthew know about it if he was using cfajaxproxy. Chris -Original Message- From: Scott Stewart [mailto:sstwebwo...@bellsouth.net] Sent: Friday, January 22, 2010 8:50 AM To: cf-talk Subject: RE: AJAX Question Chris, I'm not sure how well the debugger works with non cf ajax.. I've just stuck with firebug. -Original Message- From: Chris Dicamillo [mailto:ch...@warnercnr.colostate.edu] Sent: Friday, January 22, 2010 10:38 AM To: cf-talk Subject: RE: AJAX Question Also, if you're using CF9's AJAX implementation, putting ?cfdebug at the end of your URL will show the AJAX debugger (assuming that feature is enabled in the CF Admin). Chris -Original Message- From: Scott Stewart [mailto:sstwebwo...@bellsouth.net] Sent: Friday, January 22, 2010 8:21 AM To: cf-talk Subject: RE: AJAX Question ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:330022 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
cfchart - stacked bar chart
I just upgraded from CF7 MX to CF9 and now my stacked bar charts are incorrect. Here is my query: SELECT a.account_type, a.dept_num, count(a.ids) AS counter FROM accounts a WHERE a.dept_num between 1401 AND 1499 GROUP BY a.account_type,a.dept_num ORDER BY a.dept_num, a.account_type ASC The table of data looks like this: Dept_numcounter account_type 14011 Faculty 140140 Staff 147225 Faculty 14722 Professor 147259 Staff 147417 Faculty 14742 Professor 147469 Staff Previously with CF7, the chart had all account totals stacked in their appropriate departments. Like 1401 had 41 accounts (40+1 stacked), 1472 had 86 accounts (25+2+59 stacked), etc. Now running the same code with CF9, it's taking all of the totals and stacking them into each dept so the total accounts is the same in every department. 1401 has 215 accounts; 1+40+25...+69 stacked. 1472 also has 215 accounts... etc. Here's the code: cfchart format=jpg xaxistitle=Department: showlegend=yes seriesplacement=stacked yaxistitle=Accounts: fontSize=9 chartHeight=400 chartWidth=800 cfloop query=accttype2 cfchartseries type=Bar seriesLabel=#accttype2.account_type# cfchartdata item=#accttype2.dept_num# value=#accttype2.counter# /cfchartseries /cfloop /cfchart I'm out of ideas on how to fix this. Anyone have some suggestions? Thanks, Chris ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329690 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
cfchart - stacked bar chart
I just upgraded from CF7 MX to CF9 and now my stacked bar charts are incorrect. Here is my query: SELECT a.account_type, a.dept_num, count(a.ids) AS counter FROM accounts a WHERE a.dept_num between 1401 AND 1499 GROUP BY a.account_type,a.dept_num ORDER BY a.dept_num, a.account_type ASC The table of data looks like this: Dept_numcounter account_type 14011 Faculty 140140 Staff 147225 Faculty 14722 Professor 147259 Staff 147417 Faculty 14742 Professor 147469 Staff Previously with CF7, the chart had all account totals stacked in their appropriate departments. Like 1401 had 41 accounts (40+1 stacked), 1472 had 86 accounts (25+2+59 stacked), etc. Now running the same code with CF9, it's taking all of the totals and stacking them into each dept so the total accounts is the same in every department. 1401 has 215 accounts; 1+40+25...+69 stacked. 1472 also has 215 accounts... etc. Here's the code: cfchart format=jpg xaxistitle=Department: showlegend=yes seriesplacement=stacked yaxistitle=Accounts: fontSize=9 chartHeight=400 chartWidth=800 cfloop query=accttype2 cfchartseries type=Bar seriesLabel=#accttype2.account_type# cfchartdata item=#accttype2.dept_num# value=#accttype2.counter# /cfchartseries /cfloop /cfchart I'm out of ideas on how to fix this. Anyone have some suggestions? Thanks, Chris ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329691 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Need help figuring out how to bill for on-call support I provide to an ex-employer...
In a unique situation here (well, hopefully not)... I've been helping a friend get his company automated and we've developed a damned fine management system that handles mostly everything internally. I've been working full-time for him on a very reduced salary for the past year due to being in a pinch after being laid off last year and also wanting to finish this project we started several years ago but never had the chance to spend the right amount of time on. The system is built, but being on a shared server (there's not enough in the budget to justify dedicated at the moment), there are occasional kick the box support services they need me to be on-call for. There will also be additions and upgrades. I have a good idea on what to charge for those. But the on-call billing is throwing me for a loop. I'm stuck between a fixed amount and some usage-based amount. Anyone run into something like this? My friend was bought by a slightly larger company so he's letting me be a little creative to make sure I'm fully compensated. I already have a base amount I receive per month for normal tasks like database updates, slight changes that don't qualify as projects, etc. The on-call would be on top of that and for the life of me I can't figure out how to bill it. Thanks in advance :) ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:328586 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Need help figuring out how to bill for on-call support I provide to an ex-employer...
Rick, that actually sounds like what I've been banging around in my head. My friend was thinking of an emergency on call rate for that reason, but if it was a call saying the server was down and it involved a 10 minute call to the hosting center, I would have to break out that hourly rate into increments and it starts getting messy. Also, for the slow months, if I rely at all on this income, I'm left needing to make it up and a retainer keeps me open and invested in the program. It's almost completely guaranteed it'd be using it all, but these sorts of things don't work well when one party is assuming. We actually deal with attorneys a good bit and a retainer should be something that is easy to sell on its own merit. I think I'm going to do something like: Retainer: XXX/month (with dev time billed against half of it like you mentioned). Development: XX/hr Maintenance: XXX/month Maintenance includes a fixed cost for backups, some manual labor that needs to be done between their dev and live servers, etc. Menial, but any shared hosting company charges something similar for database backups, code backups, etc. For on-call service, I would have what most lawyers do for their corporate clients...a retainer. I would set a monthly rate to have me on-call and then, if they did actually call me in for some work, I would charge my normal hourly rate for service and take the first half of the charges out of the retainer fee *for that month*. For instance, if I charge $50 an hour for service and they pay a retainer of $200 per month to keep me on-call, the first $100 or two hours of work would come from the retainer. After that it's an additional $50 per hour. Of course the retainer is paid monthly and there are no roll-over hours. Previous months' retainers do not apply to the current month's charges. Also, I would have different rates for after-hours on-call service than I would for 9-5 service. Probably double my 9-5 rate...call me at 10pm and it's $100 per hour. Seems reasonable and fair... Thoughts? Rick ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:328590 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Another quick update to CFJS
Hey folks, I've made another quick update to the DateFormat function in CFJS. You can read about it on my blog if you like (http://cjordan.us/index.cfm/CFJS). It's at version 1.1.12, and as always is available from http://cfjs.riaforge.org. Cheers! Chris ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:327333 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4