RE: Encryption differences in ColdFusion 4.5 and 5.0?
On the subject of encryption in Cold Fusion, does anyone know what algorithm
is used by Cold Fusion to encrypt and decrypt the data? Is it an accepted
algorithm like RC4 or Blowfish or something like that or is it proprietary?
If anyone could let me know, I would appreciate it.
-Original Message-
From: Jon Hall [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 27, 2001 3:47 PM
To: CF-Talk
Subject:Re: Encryption differences in ColdFusion 4.5 and 5.0?
I've posted this snippet before, and I'll post it again. I got it from
this list originally many moons ago...
This produces a db safe string
cfset secret_word_encrypted=
ToBase64(encrypt(#string2beEncrypted#,#key#))
This decrypts the string
cfset secret_word_decrypted=
decrypt(tostring(tobinary(#secret_word_encrypted#)),#key#)
This string will still produce characters that are not url safe, but
that's not really the point anyway...I cant remember if this produces a
static length string, but a little routine to pad the string would fix that.
jon
Tyson Vanek wrote:
Ray and all,
The issue with the out-of-the-box ColdFusion encrypt/decrypt functions is
that it doesn't limit itself to safe characters when doing the
encrypting.
Specifically, there's the possibility that the encrypt() function will
generate an encrypted string with single quotes ('), spaces ( ), pound
signs
(#), line feeds or line breaks.Once an encrypted string with any of
these characters has been generated, it can cause problems when trying to
decrypt and get the original string. In some cases, this throws the
all-too-familiar The value to be decrypted is not valid error message.
Most of the time, this occurs when you take your string, encrypt it, stuff
it into the database, retrieve the value from the database and attempt to
decrypt it.
If the encrypt() function were a little less dangerous, perhaps more people
would use it. The headaches caused by this function can also be evidenced
by going to the Allaire site and searching the ColdFusion Support Forums
for
encrypt and decrypt - you'll find tons of messages that describe this
very same problem and recommend, as an alternative, to use the undocumented
cfusion_encrypt() and cfusion_decrypt() functions.
Unfortunately, the release of ColdFusion 5.0 apparently has not corrected
this problem either.
Hope this helps,
Tyson
Tyson Vanek, Technical Lead
duoDesign, The eBusiness Architects
Building your business online
847.491.3000 main | [EMAIL PROTECTED]
847.491.3100 fax | www.duodesign.com
847.491.4270 direct | www.chicagoangels.org
Come to our free 2-hour seminar The eBusiness Squeeze
http://www.duodesign.com/squeeze/seminar.html
~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
ASP for Cold Fusion Disciples
I am a Cold Fusion disciple and am currently working with ASP and JSP. Does anyone know of any web sites that teach ASP and JSP from the perspective of someone that has been writing web apps in Cold Fusion? It just seems that I have been taking things like client variables and IsDefined for granted. Thanks for your help. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Ouput in 2 colums of a table
Tables inside of tables work great for this table tr td table cfoutput cfloop from="1" to="100" index="number" cfif number is 50 /table /td td table /cfif tr td #number# /td /tr /cfloop /cfoutput /table /td /tr /table -Original Message- From: WebMaster [mailto:[EMAIL PROTECTED]] Sent: Friday, April 13, 2001 3:21 PM To: CF-Talk Subject: Ouput in 2 colums of a table How can I get the output from a query to line up side-by-side in 2 columns of a table? Like this: Example: 1 4 2 5 3 6 Also, can this be done dynamically, so if the list changes it will reorganize dynamically? For instance, if someone added 3 more entries, the output of the list above would automatically readjust to this: 1 6 2 7 3 8 4 9 5 Anyone done this before? Thanks, Mike ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: cfoutput lists Alphabetically
cfset Variables.InitialLetter="" cfoutput query="queryName" cfif InitialLetter is not LEFT(field,1) cfset Variables.InitialLetter= LEFT(field,1) #InitialLetter#br /cfif #field# /cfoutput -Original Message- From: Christine Kelley [mailto:[EMAIL PROTECTED]] Sent: Thursday, April 12, 2001 11:28 AM To: CF-Talk Subject: cfoutput lists Alphabetically Hi! How do I output a whole list of names from a query grouped alphabetically? Output example: A Allen, Bob Ames, John B Book, Sam Briant, Max I'm thinking it's by somehow using the group attribute of the cfoutput tag or looping through the query, but I'm not sure exactly how to get these results. Thank-you for any help! Christine ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: sql 7.0 vs. sql 2000
SQL Server has 3 advantages to SQL Server 7 1) Functions (A true lifesaver) 2) XML Support (Both into and out of the database) 3) Stability (although I have never had any problems with 7's stability) -Original Message- From: Mike [mailto:[EMAIL PROTECTED]] Sent: Monday, April 09, 2001 1:21 PM To: CF-Talk Subject: sql 7.0 vs. sql 2000 sql 7.0 vs. sql 2000 What are the advantage and disadvantages? Thanks Mike ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: CF Time off by an hour?
We are having the same problem with one of our servers. According to Allaire, it is a problem with the Visual C++ that was used to create Cold Fusion. It doesn't recognize April 1st as the first day of Daylight Savings. It recognizes April 8th. This means that it should correct itself on Sunday. The other fix is to upgrade to 4.5.1 because the problem has been fixed since that version. http://forums.allaire.com/DevConf/Thread.cfm?Message_ID=691270_#Message69 1270 http://forums.allaire.com/DevConf/Thread.cfm?Message_ID=690790_#Message69 0790 -Original Message- From: Scott Becker [mailto:[EMAIL PROTECTED]] Sent: Friday, April 06, 2001 7:08 AM To: CF-Talk Subject: CF Time off by an hour? Our Windows NT 4 Server, running Cold Fusion 4.01 switched over with daylight savings time, yet Cold Fusion seems to still be an hour off.. The system time itself is correct, but running a script which outputs #now()# reports an hour behind. Has anybody else encountered this problem and have a fix for it? We've rebooted the machine, as well as stopped and started the Cold Fusion services, but it doesn't seem to have any effect... Thanks, Scott Becker Web Developer : ConnectWise, Inc. www.ConnectWise.com ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
OT: Oracle Client Tools
I understand that this is off topic, but does anyone know of a client tool that has a similar look and feel as the SQL Server 2000 Query Analyzer or the Sybase Query Tool that will allow for queries to the Oracle database. From working with the client tools that Oracle has included with Oracle 8i, they leave a lot to be desired in terms of functionality and speed. I have used the SQL Server Client Tools and absolutely love them, but they cannot connect to an Oracle database (at least as far as I know, if anyone has any knowledge contrary to this, I would love to hear it.) Thank you in advance for your help. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: CF Books
Wrox is supposed to have a Professional Cold Fusion book out in May, but I will only believe it when I see it. It has been in the Vaporware stages fro a few months now. -Original Message- From: Julie Clegg [mailto:[EMAIL PROTECTED]] Sent: Monday, March 19, 2001 9:06 AM To: CF-Talk Subject: CF Books Hello, Can anyone recommend a good CF developers book...we will be building a new application using CF 4.5 and I need something that will be a good reference book for a new CF developer! Thanks, Julie ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Java
Thinking in Java is an excellent base for Java Programming. It covers the basics very well. -Original Message- From: Phoeun Pha [mailto:[EMAIL PROTECTED]] Sent: Monday, March 19, 2001 2:40 PM To: CF-Talk Subject: OT: Java Sorry for the OT topic (DONT STONE ME!), but i was hoping some of you guys are also java programmers. I'd thankful a friend recommended the CF 4.5 web applications book by Ben Forta, or else I'd be stuck with CF 4.5 for dummies. I hope I get lucky twice, and maybe recommend me a good Java book! P.S. i lied to a friend I know Java, and now I have a week to make a program that does a boolean text search on documents. I'm hoping i learn enough Java to make though (although i seriously SERIOUSLY doubt it!) ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Variable Names with -
The problem with this is that I am working with a Microsoft product that has
a mind of its own. The SQL statement looks like this:
SELECT
*
FROM
TABLE
for xml auto,elements
It returns a one column result whose name is
XML_F52E2B61-18A1-11d1-B105-00805F49916B and the xml is broken up to a
certain number of characters per line. What I want to do is to put that back
together as a single xml string that I can get my hands on, but because of
the name that Microsoft creates, I can't loop through it with Cold Fusion.
If anyone has any suggestions on how to get at this strange Microsoft column
with Cold Fusion, I would greatly appreciate it. Thanks.
-Original Message-
From: Scott, Andrew [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 17, 2001 9:37 PM
To: CF-Talk
Subject: RE: Varaible Names with "-"
You could do the following if you don't have control of the DB:-)
cfquery name="qtest: datasource="datasource"
select `field-name` as FieldName from TableName
/cfquery
Notice the ` which is located under the tilda(~) key this will return the
fieldname as it was written in the DB. However you can't use this with CF,
so using the as command this will rename the field to anything you want it
to be.
So you could then reference it instead of qtest.field-name, but as
qtest.FieldName instead.
Hope this helps:-)
regards
Andrew Scott
Senior Cold Fusion Application Developer
ANZ Business eCommerce
* Ph 8615 6018
* [EMAIL PROTECTED]
---
This e-mail and any attachments to it (the "Communication") is
confidential and is for the use only of the intended recipient. The
Communication may contain copyright material of Australia and New Zealand
Banking Group Limited ABN 11 005 357 522 ("ANZ"), or any of its related
entities or of third parties. If you are not the intended recipient of the
Communication, please notify the sender immediately by return e-mail, delete
the Communication, and do not read, copy, print, retransmit, store or act in
reliance on the Communication. Any views expressed in the Communication are
those of the individual sender only, unless expressly stated to be those of
ANZ. ANZ does not guarantee the integrity of the Communication, or that it
is free from errors, viruses or interference.
-Original Message-
From: Warrick, Mark [mailto:[EMAIL PROTECTED]]
Sent: 18 January 2001 10:09
To: CF-Talk
Subject: RE: Varaible Names with "-"
This probably isn't the answer you're looking for, but you should rename the
column. That's just plain bad database design to begin with. And there's
no need to add on another layer of unnecessary programming when all you've
gotta do is rename the field.
---mark
--
Mark Warrick
Phone: (714) 547-5386
Fax: (714) 972-2181
Personal Email: [EMAIL PROTECTED]
Personal URL: http://www.warrick.net
Business Email: [EMAIL PROTECTED]
Business URL: http://www.fusioneers.com
ICQ: 346566
------
-Original Message-
From: Troy Hiltbrand [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 17, 2001 10:00 AM
To: CF-Talk
Subject: Varaible Names with "-"
Is there any way to pull out the information about a query column
that has a
"-" in it? The problem is that with SQL Server 2000, when you do a "for
xml" select statement, the column name that is returned has "-"s in it.
From the documentation in SQL Server 2000, I am not seeing a name
to rename
that. I am trying to pull out the xml from this query, but in order to do
this, I need to get at the data with a column name that has a "-"
in it. If
anyone has any suggestions, please let me know. Thanks.
~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Varaible Names with -
Is there any way to pull out the information about a query column that has a - in it? The problem is that with SQL Server 2000, when you do a for xml select statement, the column name that is returned has -s in it. From the documentation in SQL Server 2000, I am not seeing a name to rename that. I am trying to pull out the xml from this query, but in order to do this, I need to get at the data with a column name that has a - in it. If anyone has any suggestions, please let me know. Thanks. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: OT STORED PROCEDURES
In SQL Server, you can do this. select * from member where membernumber0 test= case @active when 'y' then 'yes' else 'no' END order by membernumber -Original Message- From: William J Wheatley [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 09, 2001 1:47 PM To: CF-Talk Subject: RE: OT STORED PROCEDURES is there anyway to do the if in the query of a stored procedure without using a Cursor. and this is what i wanted Select * from member where membernumber0 and active='y' and test='no' order by membernumber by using this type logic select * from member where membernumber0 IF @active is 'y' and active='y' END IF @test is 'y' and test='no' END order by membernumber so that by using a stored procedure i can say is active is N then the (and active='y') wont run properly. =) hope that helps @ Here's an example script I was given that show how you can loop through a query using a cursor. Hope it helps. Rick USE Master GO DECLARE @DBname VarChar(50) DECLARE DBCursor SCROLL CURSOR FOR SELECT Name FROM Master..SysDatabases ORDER BY Name -- ORDER BY DBID -- Sys DBIDs: 1 - 6 ; User DBIDs = 7 OPEN DBCursor FETCH NEXT FROM DBCursor INTO @DBName WHILE (@@FETCH_STATUS = 0) -- 0:fetch successful -1:fetch failed -2:row mia BEGIN PRINT @DBname -- do stuff FETCH NEXT FROM DBCursor INTO @DBName END CLOSE DBCursor DEALLOCATE DBCursor This one adds a little bit of Dynamic SQL, which I often find it necessary to use. /* MinimalCursor+DynoSQL.sql */ /* JWM 200011013 */ USE Master GO DECLARE @DBname VarChar(50) DECLARE @SQLString VarChar(255) SET NOCOUNT ON DECLARE DBCursor SCROLL CURSOR FOR SELECT Name FROM Master..SysDatabases ORDER BY DBID -- ORDER BY DBID -- Sys DBIDs ~= 1 - 6 ; User DBIDs ~= 7 IF EXISTS ( SELECT * FROM Information_Schema.Tables WHERE Table_Name = 'tmpUserTable' ) DROP TABLE tmpUserTable CREATE TABLE tmpUserTable ( Users VarChar(50) ) OPEN DBCursor FETCH NEXT FROM DBCursor INTO @DBName WHILE (@@FETCH_STATUS = 0) -- 0:fetch successful -1:fetch failed -2:row mia BEGIN TRUNCATE TABLE tmpUserTable PRINT '*** ' + @DBname + ' Database ***' -- do stuff SET @SQLString = 'INSERT INTO tmpUserTable SELECT ' + '[Name]' + ' FROM ' + @DBName + '..SysUsers' EXEC (@SQLString) PRINT @SQLString SELECT * FROM tmpUserTable FETCH NEXT FROM DBCursor INTO @DBName END CLOSE DBCursor DEALLOCATE DBCursor SET NOCOUNT OFF -Original Message- From: William J Wheatley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 24, 2001 12:20 PM To: CF-Talk Subject: OT SQL STORED PROCEDURES WITH THE IF/ELSE/ on Stored Procedures is there a way to write a storedproc so it was like this SELECT * from member where membernumber 0 IF @name is "0" and name='blah' end if @this eq "that" and that='test' end to make it only run certain things if certain values are set Bill Wheatley Director of Development AEPS INC Allaire ColdFusion Consulting Partner Allaire Certified ColdFusion Developer http://www.aeps.com ICQ: 417645 http://www.aeps2000.com 954-472-6684 X303 IMPORTANT NOTICE: This e-mail and any attachment to it is intended only to be read or used by the named addressee. It is confidential and may contain legally privileged information. No confidentiality or privilege is waived or lost by any mistaken transmission to you. If you receive this e-mail in error, please immediately delete it from your system and notify the sender. You must not disclose, copy or use any part of this e-mail if you are not the intended recipient. The RTA is not responsible for any unauthorized alterations to this e-mail or attachment to it ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: cfif : Okay within cfinput tag?
Use the iif() statement inside the cfinput cfinput type = "Radio" name = "language" checked = " #iif(variablefromdb is 'english','Yes','No')#" -Original Message- From: Paul Sinclair [mailto:[EMAIL PROTECTED]] Sent: Friday, January 05, 2001 3:20 PM To: CF-Talk Subject: cfif : Okay within cfinput tag? I've got a cfform with a couple cfinput type = "Radio" tags in it. I'm trying to put a cfif statement within the cfinput type = "Radio" tag but I keep getting an error. I'm not sure if my syntax is wrong or whether this is just not allowed. The code is along the lines of: cfinput type = "Radio" name = "language" cfif variablefromdb is 'english' checked = "Yes"/cfif The error always references the opening left caret ( ) that begins the cfif statement. It seems like you should certainly be able to use cfif conditions inside cfinput tags but I can't get it working. When I take out the cfif statements, it works fine. Thanks for help. Paul Sinclair ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Select Distinct problems
SELECT DISTINCT EMail FROM (SELECT EMail FROM EMAILS UNION SELECT email2 as email FROM EMAILS2) -Original Message- From: W Luke [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 27, 2000 12:39 PM To: CF-Talk Subject: Select Distinct problems Hi, I've used SELECT DISTINCT email FROM EMAILS successfully, but now I am trying to select 2 columns from 2 different tables, as follows, to obtain x unique email address from the columns "email" and "email2", part of the tables "EMAILS" and "EMAILS2" respectively. cfquery name="getemails" datasource="emails" SELECT distinct email,email2 FROM EMAILS,EMAILS2 /cfquery After a lot of crunching from my server, it just timed out, and I needed to restart CF App server to operate the comp again as it had tied up all the resources. I suppose I'm using the wrong SQL - could someone explain what I have to do? Cheers Will ~ Paid Sponsorship ~ Get Your Own Dedicated Win2K Server! Instant Activation for $99/month w/Free Setup from SoloServer PIII600 / 128 MB RAM / 20 GB HD / 24/7/365 Tech Support Visit SoloServer, https://secure.irides.com/clientsetup.cfm. Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Another debate
I would definately take a look at this e-mail about the eWeek article and the eWeek article. You might want to anonymously slip the article on his desk too. A recent issue of E-Week (Oct. 30 2000 Vol. 17 #44) did a comparison of 4 programming languages for the purpose of creating dynamic sites. They tested .cfm, .asp, .jsp and .php applications on similar systems. The jist of the articles is as follows: Speed: CFM - 29 pages/second JSP - 13 pages/second ASP - 43 pages/second PHP - 47 pages/second Grading API, Back-End Connectivity, Cost (Developer Time), Cost (Price), Installation, Performance, Portability and Tools: CFM - 3 A's, 5 B's JSP - 3 A's, 4 C's, 1 D ASP - 2 A's, 4 B's, 1 C, 1 D PHP - 2 A's, 2 B's, 3 C's, 1 D Although the 4 1/2 page reports/articles did well in showing strengths and weaknesses of each item, the overall winner for most productive choice was (no surprise) CFM. Here is a link to PART of the articles. http://www.zdnet.com/eweek/stories/general/0,11011,2646051,00.html The grading is shown here: http://www.zdnet.com/eweek/stories/general/0,11011,2646423,00.html Be sure to look at the other links listed under "In this report". I found it pretty interesting and informative. -Original Message- From: Kelly Shepard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 13, 2000 10:14 AM To: CF-Talk Subject: Another debate The new boss has arrived in my department and of course he wants everyone to switch from the awesome and all mighty cold fusion to PHP. We do need some other strengths in our department for those clients who don't want us to host their application or don't have cf on their server, but, he wants a complete switch. Here is a glimpse into his last email: "It could be argued that both technologies have their strengths and weaknesses. However, in the corporate IT department, CF is usually not an option due to cost and security problems. I realize that changing perceptions and old habits are sometimes difficult, but necessary. Especially in our industry (high-tech). The need to deliberate the issue further is a mute point." Does anyone have any opinions on his security problems comment? It seems that alliare is pretty good about getting patches up - or we have just been lucky and not had any problems. And, would you agree that in the corporate IT department cf is "usually" not an option? Thanks in advance for any input. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Suppressing the Output in a Custom Tag
I am trying to create a tag that will encapsulate all of my page formatting that looks like this. cf_PageFormat This is a test /cf_PageFormat Everything to do with formatting is inside of the custom tag. The problem is that when I run it, it outputs the "This is a test" , then it outputs the formatting and content in the correct place and so I have this stray content at the top. Is there a way to suppress the "This is a test" from the top page making it only output in the specified place in the custom tag where it is formatted. Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists or send a message with 'unsubscribe' in the body to [EMAIL PROTECTED]
