Re: Problem with Client Variables not persisting.

2011-07-28 Thread Eric Cobb

I really don't have any idea what LB they're using.  Whatever it is, 
they're having problems with it so I blame it on that.  :)

Sure thing, I'll get up with you this weekend.  :)



From: "J.J. Merrick" 
Sent: Thursday, July 28, 2011 9:48 AM
To: "cf-talk" 
Subject: Re: Problem with Client Variables not persisting.

Eric, What LB product are you using? I have used pound in the past and 
with
no sticky sessions the client vars persisted just fine.

Oh and can I borrow your saw and drill next week? I want to make some
nightstands :-D

-J.J.

On Thu, Jul 28, 2011 at 7:41 AM, Eric Cobb  wrote:

>
> I've got a strange problem here that I need some help figuring out.  We
> have a site running on 8 load balanced CF 9 servers.  We're doing a lot 
of
> stuff with Client Variables, and all of our code works fine in
> development/staging, but in production none of the client variables
> persist.  After digging in to it, I find that we're getting a new
> CFID/CFTOKEN on every page request, which explains why the variables
> don't persist from page to page.
>
> My question is, could this be a problem at the load balancer?  If sticky
> sessions were not enabled or configured correctly, wouldn't it cause
> this?  My gut tells me "yes", but I wanted to see if any of you have run
> into this.
>
> Thanks!
>
> Eric.
> http://www.cfgears.com
>
>
>
>
> 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346389
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Problem with Client Variables not persisting.

2011-07-28 Thread Eric Cobb

Thanks Pete,

Our host said they are having problems with the load balancer, so it looks like 
that's the problem.

I was thinking about putting something out there to identify which server I was 
hitting.  I'll probably put some type of small flag in a comment on the pages 
so I can just view source any time and know which server I'm on.  



From: "Pete Freitag" 
Sent: Thursday, July 28, 2011 9:34 AM
To: "cf-talk" 
Subject: Re: Problem with Client Variables not persisting.

Hi Eric,

Yes if sticky sessions were not working or configured properly on your load
balancer that would certainly cause you to get new CFID/CFTOKEN on each
request.

As of the ColdFusion security patch for session fixation (APSB11-04) if the
CFID/CFTOKEN values do not correspond to a valid session on the server it
will return new ones. In prior versions of CF it would just create a new
session with the CFID/CFTOKEN values that were sent. The problem with that
is that your session id's can last a long long time. You can actually
disable the session fixation patch by adding a JVM
argument: –Dcoldfusion.session.protectfixation=false but I'm not sure that
you want to, first I'd double check that your load balancer has sticky
sessions setup properly.

One way you could validate that would be to create a page that returned
something unique to each server in the cluster (eg it's IP address, or CF
serial number) then hit that page, if it keeps changing then you are hitting
different servers.

--
Pete Freitag - Adobe Community Professional
http://foundeo.com/ - ColdFusion Consulting & Products
http://petefreitag.com/ - My Blog
http://hackmycf.com - Is your ColdFusion Server Secure?

On Thu, Jul 28, 2011 at 8:41 AM, Eric Cobb  wrote:

>
> I've got a strange problem here that I need some help figuring out.  We
> have a site running on 8 load balanced CF 9 servers.  We're doing a lot of
> stuff with Client Variables, and all of our code works fine in
> development/staging, but in production none of the client variables
> persist.  After digging in to it, I find that we're getting a new
> CFID/CFTOKEN on every page request, which explains why the variables
> don't persist from page to page.
>
> My question is, could this be a problem at the load balancer?  If sticky
> sessions were not enabled or configured correctly, wouldn't it cause
> this?  My gut tells me "yes", but I wanted to see if any of you have run
> into this.
>
> Thanks!
>
> Eric.
> http://www.cfgears.com
>
>
>
>
> 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346388
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Problem with Client Variables not persisting.

2011-07-28 Thread J.J. Merrick

Eric, What LB product are you using? I have used pound in the past and with
no sticky sessions the client vars persisted just fine.


Oh and can I borrow your saw and drill next week? I want to make some
nightstands :-D



-J.J.



On Thu, Jul 28, 2011 at 7:41 AM, Eric Cobb  wrote:

>
> I've got a strange problem here that I need some help figuring out.  We
> have a site running on 8 load balanced CF 9 servers.  We're doing a lot of
> stuff with Client Variables, and all of our code works fine in
> development/staging, but in production none of the client variables
> persist.  After digging in to it, I find that we're getting a new
> CFID/CFTOKEN on every page request, which explains why the variables
> don't persist from page to page.
>
> My question is, could this be a problem at the load balancer?  If sticky
> sessions were not enabled or configured correctly, wouldn't it cause
> this?  My gut tells me "yes", but I wanted to see if any of you have run
> into this.
>
> Thanks!
>
> Eric.
> http://www.cfgears.com
>
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346387
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Problem with Client Variables not persisting.

2011-07-28 Thread Pete Freitag

Hi Eric,

Yes if sticky sessions were not working or configured properly on your load
balancer that would certainly cause you to get new CFID/CFTOKEN on each
request.

As of the ColdFusion security patch for session fixation (APSB11-04) if the
CFID/CFTOKEN values do not correspond to a valid session on the server it
will return new ones. In prior versions of CF it would just create a new
session with the CFID/CFTOKEN values that were sent. The problem with that
is that your session id's can last a long long time. You can actually
disable the session fixation patch by adding a JVM
argument: –Dcoldfusion.session.protectfixation=false but I'm not sure that
you want to, first I'd double check that your load balancer has sticky
sessions setup properly.

One way you could validate that would be to create a page that returned
something unique to each server in the cluster (eg it's IP address, or CF
serial number) then hit that page, if it keeps changing then you are hitting
different servers.

--
Pete Freitag - Adobe Community Professional
http://foundeo.com/ - ColdFusion Consulting & Products
http://petefreitag.com/ - My Blog
http://hackmycf.com - Is your ColdFusion Server Secure?




On Thu, Jul 28, 2011 at 8:41 AM, Eric Cobb  wrote:

>
> I've got a strange problem here that I need some help figuring out.  We
> have a site running on 8 load balanced CF 9 servers.  We're doing a lot of
> stuff with Client Variables, and all of our code works fine in
> development/staging, but in production none of the client variables
> persist.  After digging in to it, I find that we're getting a new
> CFID/CFTOKEN on every page request, which explains why the variables
> don't persist from page to page.
>
> My question is, could this be a problem at the load balancer?  If sticky
> sessions were not enabled or configured correctly, wouldn't it cause
> this?  My gut tells me "yes", but I wanted to see if any of you have run
> into this.
>
> Thanks!
>
> Eric.
> http://www.cfgears.com
>
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346386
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Problem with Client Variables not persisting.

2011-07-28 Thread Matthew Williams

I (used to) maintain a server with an app that did this as well.  The 
code on staging worked, but was at CF9 with no patches.  The production 
server was at 901.  Staging had no firewall, but production is in a 
DMZ.  We never did determine a "why" for this happening, and it ONLY 
happened on calls made by the server to itself (cfhttp, cfdocument, 
etc).  We boiled it down to something that changed with CF901 that's not 
documented.  My only recommendation was to move off of client variables 
to a different shared session scope.



-- 
Matthew Williams
Geodesic GraFX
www.geodesicgrafx.com/blog
twitter.com/ophbalance


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346385
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Problem with Client Variables not persisting.

2011-07-28 Thread Eric Cobb

I've got a strange problem here that I need some help figuring out.  We
have a site running on 8 load balanced CF 9 servers.  We're doing a lot of
stuff with Client Variables, and all of our code works fine in
development/staging, but in production none of the client variables
persist.  After digging in to it, I find that we're getting a new
CFID/CFTOKEN on every page request, which explains why the variables
don't persist from page to page.

My question is, could this be a problem at the load balancer?  If sticky
sessions were not enabled or configured correctly, wouldn't it cause
this?  My gut tells me "yes", but I wanted to see if any of you have run
into this.

Thanks!

Eric.
http://www.cfgears.com




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346384
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


ODBC Data Source for Client Variables

2010-11-16 Thread Donnie Carvajal

Has anyone tried setting up Client Variables though an ODBC datasource on 2 
different servers running 2 different versions of ColdFusion and they both 
point to the same datasource?  Can this be done?

I have an app running CF 5.5 that needs changes before it can be upgraded to 
any version of MX and I would like to make AJAX calls to a CF MX server.  I 
need to access a web service so the AJAX calls need to run an MX version of 
ColdFusion.  I would like to use Client variables to authenticate the AJAX 
calls instead of passing credentials in the URL.

Thanks,

Donnie 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339289
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Where in the registry does ColdFusion 9 store client variables?

2010-11-08 Thread Russ Michaels

I have `checked and That is still the same registry key for CF9.

On Mon, Nov 8, 2010 at 7:59 AM, Philip Kaplan  wrote:

>
> Thanks, but ColdFusion 9 doesn't have a "Macromedia" key.  And the "Adobe"
> key hardly has anything in it.
>
> See:
> http://img.skitch.com/20101108-qfgikqx7fr41hnmjyhppsd7r42.jpg
>
> On Sun, Nov 7, 2010 at 8:19 PM, Philip Kaplan  wrote:
>
> > I accidentally had registry client variables turned on for a few days,
> and
> > now my server is slow.  I suspect overgrown registry filled with CF
> client
> > variables is the cause.
> >
> > Anyone know how to purge them from the registry?
> >
> > CF9
> >
> >
> >
> >
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338936
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Where in the registry does ColdFusion 9 store client variables?

2010-11-08 Thread Philip Kaplan

Thanks, but ColdFusion 9 doesn't have a "Macromedia" key.  And the "Adobe"
key hardly has anything in it.

See:
http://img.skitch.com/20101108-qfgikqx7fr41hnmjyhppsd7r42.jpg

On Sun, Nov 7, 2010 at 8:19 PM, Philip Kaplan  wrote:

> I accidentally had registry client variables turned on for a few days, and
> now my server is slow.  I suspect overgrown registry filled with CF client
> variables is the cause.
>
> Anyone know how to purge them from the registry?
>
> CF9
>
>
>
>


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338935
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Where in the registry does ColdFusion 9 store client variables?

2010-11-07 Thread Kym Kovan

On 8/11/2010 15:19, Philip Kaplan wrote:
>
> I accidentally had registry client variables turned on for a few days, and
> now my server is slow.  I suspect overgrown registry filled with CF client
> variables is the cause.
>
> Anyone know how to purge them from the registry?

Try setting the purge time to the minimum in CF Admin.



-- 

Yours,

Kym Kovan
mbcomms.net.au


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338934
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Where in the registry does ColdFusion 9 store client variables?

2010-11-07 Thread Russ Michaels

Hi Philip,

read this, it does have the key at the end, but the rest may be useful for
you to stop this happening again.

http://russ.michaels.me.uk/index.cfm/2007/12/7/Security-bug-with-client-variables

--
Russ Michaels
www.cfmldeveloper.com - Supporting the CF community since 1999
FREE ColdFusion/Railo hosting for developers.

blog: www.michaels.me.uk


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338933
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Where in the registry does ColdFusion 9 store client variables?

2010-11-07 Thread Philip Kaplan

I accidentally had registry client variables turned on for a few days, and
now my server is slow.  I suspect overgrown registry filled with CF client
variables is the cause.

Anyone know how to purge them from the registry?

CF9


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338932
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Turning off client variables

2010-06-30 Thread Dave Watts

> AFAIK I am not using any client variables on a site (i.e., any variables in
> scope client.myvar). I am using session variables (scope session.myvar).
>
> I'd like to turn off client variables (to satisfy a host with no CF
> experience). Are there any unforeseen problems I should be looking for if I
> do that. Is there anything CF may be using that I don't know about?

No, assuming you're just going to turn this off in Application.cfc/cfm.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:334971
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Turning off client variables

2010-06-30 Thread Alan Rother

Nope, you should be fine.

=]

On Wed, Jun 30, 2010 at 11:20 AM, Robert Harrison <
rob...@austin-williams.com> wrote:

>
> AFAIK I am not using any client variables on a site (i.e., any variables in
> scope client.myvar). I am using session variables (scope session.myvar).
>
> I'd like to turn off client variables (to satisfy a host with no CF
> experience). Are there any unforeseen problems I should be looking for if I
> do that. Is there anything CF may be using that I don't know about?
>
> Thanks,
> Robert
>
>
> Robert B. Harrison
> Director of Interactive Services
> Austin & Williams
> 125 Kennedy Drive, Suite 100
> Hauppauge NY 11788
> P : 631.231.6600 Ext. 119
> F : 631.434.7022
> http://www.austin-williams.com
>
> Great advertising can't be either/or.  It must be &.
>
> Plug in to our blog: A&W Unplugged
> http://www.austin-williams.com/unplugged
>
>
>
> __ Information from ESET Smart Security, version of virus signature
> database 5241 (20100630) __
>
> The message was checked by ESET Smart Security.
>
> http://www.eset.com
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:334969
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Turning off client variables

2010-06-30 Thread Robert Harrison

AFAIK I am not using any client variables on a site (i.e., any variables in
scope client.myvar). I am using session variables (scope session.myvar). 

I'd like to turn off client variables (to satisfy a host with no CF
experience). Are there any unforeseen problems I should be looking for if I
do that. Is there anything CF may be using that I don't know about?

Thanks,
Robert


Robert B. Harrison
Director of Interactive Services
Austin & Williams
125 Kennedy Drive, Suite 100 
Hauppauge NY 11788
P : 631.231.6600 Ext. 119 
F : 631.434.7022
http://www.austin-williams.com 

Great advertising can't be either/or.  It must be &.

Plug in to our blog: A&W Unplugged
http://www.austin-williams.com/unplugged

 

__ Information from ESET Smart Security, version of virus signature
database 5241 (20100630) __

The message was checked by ESET Smart Security.

http://www.eset.com
 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:334967
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: ColdFusion Client Variables - HITCOUNT

2009-09-03 Thread Cameron Childress

Since you have turned off global client variable updates, never.

On Thu, Sep 3, 2009 at 10:06 AM, Bob Hendren wrote:
> Here's an oldie but a goodie:
>
> I long ago drank the Kool-Aid on Client variables being stored in a DB and
> disabling global client variable updates.  No problems there.  But I'm just
> wondering when exactly are HITCOUNT and LVISIT updated in this situation?
> Is it on the first page of a return visit?  If so, exactly how does CF 
> determine
> a 'return' vis

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:325991
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


ColdFusion Client Variables - HITCOUNT

2009-09-03 Thread Bob Hendren

Here's an oldie but a goodie:

I long ago drank the Kool-Aid on Client variables being stored in a DB and 
disabling global client variable updates.  No problems there.  But I'm just 
wondering when exactly are HITCOUNT and LVISIT updated in this situation?  Is 
it on the first page of a return visit?  If so, exactly how does CF determine a 
'return' visit?


~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:325988
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


ColdFusion Client Variables

2009-09-02 Thread Bob Hendren

Here's an oldie but a goodie:

I long ago drank the Kool-Aid on Client variables being stored in a DB 
and disabling global client variable updates.  No problems there.  But 
I'm just wondering when exactly are HITCOUNT and LVISIT updated in this 
situation?  Is it on the first page of a return visit?  If so, exactly 
how does CF determine a 'return' visit?

-- 
Bob Hendren
President/CEO
ListingWare, Inc.
Phone/Fax: 800.867.4707
Email: bhend...@listingware.com
http://smartcall.me/bobhendren

ListingWare Support: supp...@listingware.com


~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:325968
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Client Variables database problem

2009-08-24 Thread Laura Norris

i know i've gotten this error before and found a fix for it before, but for the 
life of me i can not find how to fix it.  I'm getting the following error at 
the bottom of my pages:

500 Operation failed on the data source named "ClientVariables".
Operation failed on the data source named "ClientVariables".

this is CF7 on a windows machine.  i installed the hotfix yesterday, so i'm 
unsure if that is what started this error.

unfortunately the client variables are not really being used by the site, but i 
need to keep them active for legacy applications that need to be upgraded.

anyone remember what the quick fix is?

Thanks,
Laura
cfGothChic 

~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:325633
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client Variables to Session Variables

2009-04-03 Thread Richard White

you have two input fields (3rd and 4th) where name attribute is "name3" and the 
first 2 input fields need to have id tags






> Hi All,
> 
> I am trying to merge three textfield values (month,day and year for 
> DOB)into one and trying to store in a session. Javascript is a client 
> side variable and I am unable to store it to session variable . Can 
> anyone help me with this?
> 
> See below is the code I am trying to do and I also used hidden fields 
> to display the date but it could not work.
> 
> 

Client Variables to Session Variables

2009-03-30 Thread Priya Koya

Hi All,

I am trying to merge three textfield values (month,day and year for DOB)into 
one and trying to store in a session. Javascript is a client side variable and 
I am unable to store it to session variable . Can anyone help me with this?

See below is the code I am trying to do and I also used hidden fields to 
display the date but it could not work.


Re: client variables log database is huge

2008-11-20 Thread John P
Thanks to both of you for the information. 

John




> > I suspect that there may be a problem with our ClientStorage_log 
> database as it's currently
> > at 11.5 gigs and has to be cleared out once a month or so. I freed 4.
> 5 gigs of space on this
> > server by moving files off 2 days ago and within 24 hours that space 
> was filled again. Could
> > this be a security hole that is allowing our clientStorage_log db to 
> get filled so quickly? I don't
> > know the size of the clientStorage_log prior to moving the files off 
> the server but it's by far the
> > largest recently modified file in the past 4 days.
> 
> If you're using MS SQL Server to store Client variables, the recovery
> model you've chosen for the database will control what happens when
> the database is backed up by scheduled maintenance task. It sounds
> like you've chosen full or bulk-logged, in which case you are
> responsible for truncating the transaction log. If you choose the
> simple recovery model, the transaction log should be truncated
> automatically, if I recall correctly.
> 
> You can also reduce the number of database writes by disabling the
> option in CF to keep track of Client.Hitcount and Client.LastVisit. 
> If
> you're not using those variables, you should disable that option.
> 
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> 
> Fig Leaf Software provides the highest caliber vendor-authorized
> instruction at our training centers in Washington DC, Atlanta,
> Chicago, Baltimore, Northern Virginia, or on-site at your location.
> Visit http://training.figleaf.com/ for more 
information! 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f

Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:315711
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: client variables log database is huge

2008-11-20 Thread John P
Thanks to both of you for the information. 

John




> > I suspect that there may be a problem with our ClientStorage_log 
> database as it's currently
> > at 11.5 gigs and has to be cleared out once a month or so. I freed 4.
> 5 gigs of space on this
> > server by moving files off 2 days ago and within 24 hours that space 
> was filled again. Could
> > this be a security hole that is allowing our clientStorage_log db to 
> get filled so quickly? I don't
> > know the size of the clientStorage_log prior to moving the files off 
> the server but it's by far the
> > largest recently modified file in the past 4 days.
> 
> If you're using MS SQL Server to store Client variables, the recovery
> model you've chosen for the database will control what happens when
> the database is backed up by scheduled maintenance task. It sounds
> like you've chosen full or bulk-logged, in which case you are
> responsible for truncating the transaction log. If you choose the
> simple recovery model, the transaction log should be truncated
> automatically, if I recall correctly.
> 
> You can also reduce the number of database writes by disabling the
> option in CF to keep track of Client.Hitcount and Client.LastVisit. 
> If
> you're not using those variables, you should disable that option.
> 
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> 
> Fig Leaf Software provides the highest caliber vendor-authorized
> instruction at our training centers in Washington DC, Atlanta,
> Chicago, Baltimore, Northern Virginia, or on-site at your location.
> Visit http://training.figleaf.com/ for more 
information! 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f

Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:315710
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: client variables log database is huge

2008-11-20 Thread Dave Watts
> I suspect that there may be a problem with our ClientStorage_log database as 
> it's currently
> at 11.5 gigs and has to be cleared out once a month or so. I freed 4.5 gigs 
> of space on this
> server by moving files off 2 days ago and within 24 hours that space was 
> filled again. Could
> this be a security hole that is allowing our clientStorage_log db to get 
> filled so quickly? I don't
> know the size of the clientStorage_log prior to moving the files off the 
> server but it's by far the
> largest recently modified file in the past 4 days.

If you're using MS SQL Server to store Client variables, the recovery
model you've chosen for the database will control what happens when
the database is backed up by scheduled maintenance task. It sounds
like you've chosen full or bulk-logged, in which case you are
responsible for truncating the transaction log. If you choose the
simple recovery model, the transaction log should be truncated
automatically, if I recall correctly.

You can also reduce the number of database writes by disabling the
option in CF to keep track of Client.Hitcount and Client.LastVisit. If
you're not using those variables, you should disable that option.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f

Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:315706
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: client variables log database is huge

2008-11-20 Thread Gaulin, Mark
It sounds like you are referring to the transaction log portion of a
database, and you can definitely expect the transaction log for Client
variables database to grow very quickly because they are updated on
every hit.  Database transaction logs need to be checkpointed or cleared
on backup or whatever, but they will grow and this one will grow like
crazy.  Your DBA needs to handle it.

Thanks
Mark

-Original Message-
From: John P [mailto:[EMAIL PROTECTED] 
Sent: Thursday, November 20, 2008 11:51 AM
To: cf-talk
Subject: client variables log database is huge

I suspect that there may be a problem with our ClientStorage_log
database as it's currently at 11.5 gigs and has to be cleared out once a
month or so. I freed 4.5 gigs of space on this server by moving files
off 2 days ago and within 24 hours that space was filled again. Could
this be a security hole that is allowing our clientStorage_log db to get
filled so quickly? I don't know the size of the clientStorage_log prior
to moving the files off the server but it's by far the largest recently
modified file in the past 4 days. 

Coldfusion MX7 server.

Thanks 



~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f

Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:315705
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


client variables log database is huge

2008-11-20 Thread John P
I suspect that there may be a problem with our ClientStorage_log database as 
it's currently at 11.5 gigs and has to be cleared out once a month or so. I 
freed 4.5 gigs of space on this server by moving files off 2 days ago and 
within 24 hours that space was filled again. Could this be a security hole that 
is allowing our clientStorage_log db to get filled so quickly? I don't know the 
size of the clientStorage_log prior to moving the files off the server but it's 
by far the largest recently modified file in the past 4 days. 

Coldfusion MX7 server.

Thanks 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f

Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:315703
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Expiration Settings of Client Variables

2007-10-04 Thread Brian Kotek
I wrote a custom tag a long, long time ago that will do something like this.
However, I haven't looked at it in about 8 years so you're on your own as
far as how well it actually works! ;-)

http://www.adobe.com/cfusion/exchange/index.cfm?event=extensionDetail&extid=1000977


On 10/4/07, Brian Kotek <[EMAIL PROTECTED]> wrote:
>
> I'm pretty sure client variables don't work like that (though it's been so
> long since I used them that I could be mistaken). I'm pretty sure all the
> purge interval does is set the frequency that the server will actually check
> to see if it should purge anything, not the time that a given client
> variable will exist. In other words, I'm pretty sure that if a user hits
> your app 1 minute before the next purge is set to run, their client
> variables will be deleted in the next minute. If you want granular control
> less than a day, you're going to have to write your own code to do it. You
> could set a client variable with a time stamp each time they run a request.
> Then, you can compare that timestamp to the current time, and if it is
> greater than the internal you want to set (2 hours I'm assuming), then you
> can delete the client variables yourself (and probably redirect the user to
> a login page or something).
>
> On 10/4/07, Alex Ismail <[EMAIL PROTECTED]> wrote:
> >
> > We are in need to expire client variables at the same rate as session
> > variables. In our case this is 2 hours.
> >
> > Unfortunately, our client variables expire randomly well before 2 hours
> > are passed.
> > What are correct settings to achieve this?
> >
> > Our configuration:
> > - Client variables are stored in their own separate database.
> > - The checkbox 'Purge data for clients that remain unvisited for 0 days'
> > is checked and days is set to 0.
> > - The checkbox 'Disable global client variable updates' is not checked.
> > - The 'Purge Interval' is set to 2 hours and 0 minutes.
> >
> > Thank you,
> >
> > Alex Ismail
> >
> >
> > 

~|
Check out the new features and enhancements in the
latest product release - download the "What's New PDF" now
http://download.macromedia.com/pub/labs/coldfusion/cf8_beta_whatsnew_052907.pdf

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:290224
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Expiration Settings of Client Variables

2007-10-04 Thread Brian Kotek
I'm pretty sure client variables don't work like that (though it's been so
long since I used them that I could be mistaken). I'm pretty sure all the
purge interval does is set the frequency that the server will actually check
to see if it should purge anything, not the time that a given client
variable will exist. In other words, I'm pretty sure that if a user hits
your app 1 minute before the next purge is set to run, their client
variables will be deleted in the next minute. If you want granular control
less than a day, you're going to have to write your own code to do it. You
could set a client variable with a time stamp each time they run a request.
Then, you can compare that timestamp to the current time, and if it is
greater than the internal you want to set (2 hours I'm assuming), then you
can delete the client variables yourself (and probably redirect the user to
a login page or something).

On 10/4/07, Alex Ismail <[EMAIL PROTECTED]> wrote:
>
> We are in need to expire client variables at the same rate as session
> variables. In our case this is 2 hours.
>
> Unfortunately, our client variables expire randomly well before 2 hours
> are passed.
> What are correct settings to achieve this?
>
> Our configuration:
> - Client variables are stored in their own separate database.
> - The checkbox 'Purge data for clients that remain unvisited for 0 days'
> is checked and days is set to 0.
> - The checkbox 'Disable global client variable updates' is not checked.
> - The 'Purge Interval' is set to 2 hours and 0 minutes.
>
> Thank you,
>
> Alex Ismail
>
>
> 

~|
ColdFusion 8 - Build next generation apps
today, with easy PDF and Ajax features - download now
http://download.macromedia.com/pub/labs/coldfusion/cf8_beta_whatsnew_052907.pdf

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:290220
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Expiration Settings of Client Variables

2007-10-04 Thread Alex Ismail
We are in need to expire client variables at the same rate as session 
variables. In our case this is 2 hours.

Unfortunately, our client variables expire randomly well before 2 hours are 
passed.
What are correct settings to achieve this?

Our configuration:
- Client variables are stored in their own separate database.
- The checkbox 'Purge data for clients that remain unvisited for 0 days' is 
checked and days is set to 0.
- The checkbox 'Disable global client variable updates' is not checked.
- The 'Purge Interval' is set to 2 hours and 0 minutes.

Thank you,

Alex Ismail 


~|
Check out the new features and enhancements in the
latest product release - download the "What's New PDF" now
http://download.macromedia.com/pub/labs/coldfusion/cf8_beta_whatsnew_052907.pdf

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:290218
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


client variables not working in Apache and CF8

2007-10-02 Thread Matthew Smith
I have Apache and CF8 set up with multiple virtual hosts locally for
development(win xp pro, apache 2.2.4)
 
Client variables are not working.  I can log into CF administrator
fine(not sure if authentication uses client variables or not).  Any site
that I work on that uses client variables behaves as if the variable is
not defined after setting it then going to another page that checks for
its existence.
 
Thanks for any help/



~|
ColdFusion is delivering applications solutions at at top companies 
around the world in government.  Find out how and where now
http://www.adobe.com/cfusion/showcase/index.cfm?event=finder&productID=1522&loc=en_us

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:289960
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Clearing the Cookie that gets set when using Client variables.

2007-07-25 Thread Aaron Wolfe
It should have been (removed the Not):

  

  

or if you want to clear the whole session struct for that user:

  


-Aaron

~|
Get the answers you are looking for on the ColdFusion Labs
Forum direct from active programmers and developers.
http://www.adobe.com/cfusion/webforums/forum/categories.cfm?forumid-72&catid=648

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:284579
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Clearing the Cookie that gets set when using Client variables.

2007-07-25 Thread Aaron Wolfe
It should have been (removed the Not):

  

  

or if you want to clear the whole session struct for that user:

  


-Aaron

~|
Create robust enterprise, web RIAs.
Upgrade to ColdFusion 8 and integrate with Adobe Flex
http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJP

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:284578
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: Clearing the Cookie that gets set when using Client variables.

2007-07-25 Thread Aaron Wolfe
Che,
You should also run this code to clear out the session for that user:





-Aaron

-Original Message-
From: Aaron Wolfe [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 25, 2007 3:09 PM
To: CF-Talk
Subject: RE: Clearing the Cookie that gets set when using Client
variables.

Che,
Here is one way to do it.  Use the code within this tag   to expire the login:


























 



 

If you want it to be more robust, you can read the cookie variables in
and then loop over the variables to expire them.

-Aaron

 

-Original Message-
From: Che Vilnonis [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 25, 2007 10:31 AM
To: CF-Talk
Subject: Clearing the Cookie that gets set when using Client variables.

 

This should be and easy question. How do I programmatically clear/remove
the

browser's cookie that gets set when using Client variables?

I need to generate a new CFID/CFTOKEN when a user logs out of and older

application.

 

Thanks, Che

 

 

 





~|
Check out the new features and enhancements in the
latest product release - download the "What's New PDF" now
http://download.macromedia.com/pub/labs/coldfusion/cf8_beta_whatsnew_052907.pdf

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:284572
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Clearing the Cookie that gets set when using Client variables.

2007-07-25 Thread Aaron Wolfe
Che,

Here is one way to do it.  Use the code within this tag   to expire the login:







 







 

































 







 



 

If you want it to be more robust, you can read the cookie variables in
and then loop over the variables to expire them.

-Aaron

 

-Original Message-
From: Che Vilnonis [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 25, 2007 10:31 AM
To: CF-Talk
Subject: Clearing the Cookie that gets set when using Client variables.

 

This should be and easy question. How do I programmatically clear/remove
the

browser's cookie that gets set when using Client variables?

I need to generate a new CFID/CFTOKEN when a user logs out of and older

application.

 

Thanks, Che

 

 

 



~|
Get the answers you are looking for on the ColdFusion Labs
Forum direct from active programmers and developers.
http://www.adobe.com/cfusion/webforums/forum/categories.cfm?forumid-72&catid=648

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:284559
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Clearing the Cookie that gets set when using Client variables.

2007-07-25 Thread Tom Chiverton
On Wednesday 25 Jul 2007, [EMAIL PROTECTED] wrote:
> This should be and easy question. How do I programmatically clear/remove
> the browser's cookie that gets set when using Client variables?
> I need to generate a new CFID/CFTOKEN when a user logs out of and older
> application.

Use cfcookie to write a cookie with the same name and value, but set to expire 
when the user closes the app (I think that's the default).


-- 
Tom Chiverton



This email is sent for and on behalf of Halliwells LLP.

Halliwells LLP is a limited liability partnership registered in England and 
Wales under registered number OC307980 whose registered office address is at St 
James's Court Brown Street Manchester M2 2JF.  A list of members is available 
for inspection at the registered office. Any reference to a partner in relation 
to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law 
Society.

CONFIDENTIALITY

This email is intended only for the use of the addressee named above and may be 
confidential or legally privileged.  If you are not the addressee you must not 
read it and must not use any information contained in nor copy it nor inform 
any person other than Halliwells LLP or the addressee of its existence or 
contents.  If you have received this email in error please delete it and notify 
Halliwells LLP IT Department on 0870 365 8008.

For more information about Halliwells LLP visit www.halliwells.com.


~|
Download the latest ColdFusion 8 utilities including Report Builder,
plug-ins for Eclipse and Dreamweaver updates.
http;//www.adobe.com/cfusion/entitlement/index.cfm?e=labs%5adobecf8%5Fbeta

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:284554
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Clearing the Cookie that gets set when using Client variables.

2007-07-25 Thread Che Vilnonis
This should be and easy question. How do I programmatically clear/remove the
browser's cookie that gets set when using Client variables?
I need to generate a new CFID/CFTOKEN when a user logs out of and older
application.

Thanks, Che



~|
Create robust enterprise, web RIAs.
Upgrade to ColdFusion 8 and integrate with Adobe Flex
http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJP

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:284542
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Preferred clientstorage setting for client variables

2007-04-25 Thread Dave Watts
> What is the "best" way to store client variables? We are in 
> the process of completely redesigning our website and 
> considering changing the "clientstorage" attribute in 
> cfapplication from a named SQL datasource to "Cookie" to 
> prevent having 100,000's of records pile up on our SQL server. 
> 
> The primary use of this would really just be to allow the 
> user to have their login status "remembered" so they would 
> not have to log into our site every time.
> 
> Any arguments one way or the other?

I would generally recommend the use of database storage, if you have a
reliable database. SQL Server is certainly reliable enough for this. Just
make sure you purge records as appropriate, and disable global client
variable updates if they're not needed.

There are several problems with using cookies to store any significant data:
you don't have any control over them, they can become large and unwieldy
over time, they may get lost or truncated for unexpected reasons.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!

This email has been processed by SmoothZap - www.smoothwall.net


~|
Create robust enterprise, web RIAs.
Upgrade & integrate Adobe Coldfusion MX7 with Flex 2
http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJP

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:276267
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Preferred clientstorage setting for client variables

2007-04-25 Thread Dave Watts
> Writing to the db.  As robust as your db is.  Nobody loves a 
> thing that executes a db read and write at every page 
> request, but at least there are no vultures circling your 
> server when you do it this way. The problems you will cause 
> will be manageable, one way or the other.

Unless you need to track the system-generated Client variables (hitcount,
lastvisit), you can avoid an update for each page that doesn't otherwise
change Client variables by disabling the appropriate option in the CF
Administrator.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!

This email has been processed by SmoothZap - www.smoothwall.net


~|
Macromedia ColdFusion MX7
Upgrade to MX7 & experience time-saving features, more productivity.
http://www.adobe.com/products/coldfusion?sdid=RVJW

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:276266
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Preferred clientstorage setting for client variables

2007-04-25 Thread Ariel Jakobovits
dont forget that these days people have their browsers configured to remember 
stuff for them, so they may not need a cookie to do that

- Original Message 
From: james carberry <[EMAIL PROTECTED]>
To: CF-Talk 
Sent: Wednesday, April 25, 2007 2:58:06 PM
Subject: Preferred clientstorage setting for client variables

What is the "best" way to store client variables? We are in the process of 
completely redesigning our website and considering changing the "clientstorage" 
attribute in cfapplication from a named SQL datasource to "Cookie" to prevent 
having 100,000's of records pile up on our SQL server. 

The primary use of this would really just be to allow the user to have their 
login status "remembered" so they would not have to log into our site every 
time.

Any arguments one way or the other?

Thx!

-James Carberry
ColdFusion MX Certified Developer and Instructor



~|
Upgrade to Adobe ColdFusion MX7
The most significant release in over 10 years. Upgrade & see new features.
http://www.adobe.com/products/coldfusion?sdid=RVJR

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:276265
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Preferred clientstorage setting for client variables

2007-04-25 Thread Matt Robertson
On 4/25/07, james carberry wrote:
> What is the "best" way to store client variables?

Better way to phrase that is "what is the least bad way?" :-)

Cookies are a disaster.  To make a long story short  you can't count
on them being present all the time, and you have to wait for a trip to
the client and back before you can use one thats been set (unless that
behavior has changed over the years).  Plus they can be hacked ore
easily, being client-side.  All of the true nightmares I have
experienced with cvars have been when I discovered the site owner was
storing them in cookies.

Writing to the registry... It works, but horrific consequences
possible if a write goes bad.  Other nasties possible.  For example
your site gets hit by an ill-behaved bot two zillion times and it
creates two zillion entries... in your registry.  Your
now-uber-bloated registry.  'nuff said.

Writing to the db.  As robust as your db is.  Nobody loves a thing
that executes a db read and write at every page request, but at least
there are no vultures circling your server when you do it this way.
The problems you will cause will be manageable, one way or the other.

Lest you think I hate cvars, I do not.  I still use them at least to
some degree, although mostly in legacy apps.  I try to rely on session
vars.

-- 
[EMAIL PROTECTED]
Janitor, The Robertson Team
mysecretbase.com

~|
Upgrade to Adobe ColdFusion MX7
The most significant release in over 10 years. Upgrade & see new features.
http://www.adobe.com/products/coldfusion?sdid=RVJR

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:276264
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Preferred clientstorage setting for client variables

2007-04-25 Thread Andrew Scott
Database here.

Stay away from storing in cookies as much as possible.


On 4/26/07, james carberry <[EMAIL PROTECTED]> wrote:
>
> What is the "best" way to store client variables? We are in the process of
> completely redesigning our website and considering changing the
> "clientstorage" attribute in cfapplication from a named SQL datasource to
> "Cookie" to prevent having 100,000's of records pile up on our SQL server.
>
> The primary use of this would really just be to allow the user to have
> their login status "remembered" so they would not have to log into our site
> every time.
>
> Any arguments one way or the other?
>
> Thx!
>
> -James Carberry
> ColdFusion MX Certified Developer and Instructor
>
> 

~|
Macromedia ColdFusion MX7
Upgrade to MX7 & experience time-saving features, more productivity.
http://www.adobe.com/products/coldfusion?sdid=RVJW

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:276263
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Preferred clientstorage setting for client variables

2007-04-25 Thread james carberry
What is the "best" way to store client variables? We are in the process of 
completely redesigning our website and considering changing the "clientstorage" 
attribute in cfapplication from a named SQL datasource to "Cookie" to prevent 
having 100,000's of records pile up on our SQL server. 

The primary use of this would really just be to allow the user to have their 
login status "remembered" so they would not have to log into our site every 
time.

Any arguments one way or the other?

Thx!

-James Carberry
ColdFusion MX Certified Developer and Instructor

~|
Create Web Applications With ColdFusion MX7 & Flex 2. 
Build powerful, scalable RIAs. Free Trial
http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJS 

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:276262
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Application.cfc and Client Variables

2007-03-17 Thread Randy Johnson
Hello,

Here is the code I have at the top of my Application.cfc file:






In my Queue.cfc file I am getting this error when trying to use a client 
variable:
The requested CLIENT scope is not enabled.
The Application.cfc file and the Queue.cfc file are in the same directory.

In my ViewVariables.cfm page I can do a   and it will show client variables
I am not sure what is going on here, It looks pretty straight forward.  Any 
ideas?
Thanks!

Randy 


~|
Upgrade to Adobe ColdFusion MX7
The most significant release in over 10 years. Upgrade & see new features.
http://www.adobe.com/products/coldfusion?sdid=RVJR

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:272910
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-16 Thread Dinner
On 2/16/07, Jochem van Dieten <[EMAIL PROTECTED]> wrote:

> should use the industry standard, peer reviewed, time tested design of
> HTTP Digest Authentication. See RFC 2617 for details.

Hey!  Apache still marks that as "experimental"!  =]

~|
ColdFusion MX7 and Flex 2 
Build sales & marketing dashboard RIA’s for your business. Upgrade now
http://www.adobe.com/products/coldfusion/flex2

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:270032
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-16 Thread Jochem van Dieten
Mike Kear said:
>
> Anyway, he says there's a security issue with using a token
> throughout for a session, so each page view has to issue a new
> token, and expire the last one.

What he wants is called "replay protection". It is considered a solved
problem. Instead of using the half-baked design of your client, you
should use the industry standard, peer reviewed, time tested design of
HTTP Digest Authentication. See RFC 2617 for details.

And the good news: it is build in to most browsers and webservers and
you can build a custom client variables solution on top of it.

Jochem




~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269985
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: Client variables? reliable enough?

2007-02-16 Thread Hugo Ahlenius
| From: Matt Robertson [mailto:[EMAIL PROTECTED] 
| By exposing the cfid and cftoken you are announcing to the world what
| your session identifier is.  In turn you are giving someone the
| opportunity to more easily manipulate it.  Sure someone can accept a
| cookie, read the value off the hard drive and then have the same info
| (I suppose you could make the read more difficult by not writing a
| cookie to disk and only using a session cookie) but by passing it via
| the url you are making the job as easy as possible for the attacker.

Another possible security issue is if people e-mail a link from the URL
bar to each other, that link will contain the cfid/cftoken then... It
doesn't look very clean, and if someone clicks the link before the
session has expired, then they are continuing someone elses session.

I have a feeling that the client is meaning something else - like no
username/password in the cookie or something. Having multiple users
sharing the same IP has nothing to do with cookies btw.

/Hugo

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269983
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Matt Robertson
On 2/15/07, John Blayter <[EMAIL PROTECTED]> wrote:
> My $0.02 is that you are going to
> end up with something that is damn close to client variables.

Seems that way.

I consider it obsolete but maybe ont in this case: the first custom
tag I wrote is SessionMonger.  Done back in the bad old days when I
was running CF 3.x on Interland (those bastages!) servers... that
rebooted themselves about every three minutes, so CF sessions were
worth dookie and I had to have something that survived even a cold
reboot.

It has expirrations and takes a halfway decent shot at making itself
unique.  Works without cookies.  Don't laugh too hard.  This was a
long time ago when I first wrote it up:

http://cfdj.sys-con.com/read/42032.htm

And the tag at Adobe:

http://tinyurl.com/2juvou

The ancient page for the tag:

http://mysecretbase.com/SessionMonger_Home.cfm

I'd read that last one first.

-- 
[EMAIL PROTECTED]
Janitor, The Robertson Team
mysecretbase.com

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269978
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread John Blayter
Even if you pass around the session.urlToken around in the URL if you must
use cookies if you want to use session replication. If you can't use
cookies, client variables and you must have session replication you are left
with rolling your own state management. My $0.02 is that you are going to
end up with something that is damn close to client variables.

On 2/15/07, Mike Kear <[EMAIL PROTECTED]> wrote:
>
> His issue about the new token each time is mainly prompted by the
> issue of corporate users sharing the same IP.This is an app where
> there may be many users in a building accessing the site, and each
> will have his/her own permissions set.   So he doesnt want one person
> having higher access than they deserve by accident.  They could grant
> their management unit product they havent been approved for.
>
> So it kind of makes sense.
>
> This is a product where the unit values are very high and a large
> organisation will buy lots of licenses, and one senior person in the
> organisation will allow the various operational units to have
> specified numbers of licenses and they'll be logging in to manage the
> licenses they have a right to.
>
> So he's not being silly about it, I can see where his mind is on it.
> Not quite sure how it's all going to work, that's the problem.
>
>
> Cheers
> Mike Kear
> Windsor, NSW, Australia
> Adobe Certified Advanced ColdFusion Developer
> AFP Webworks
> http://afpwebworks.com
> ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month
>
>
> On 2/16/07, Dinner <[EMAIL PROTECTED]> wrote:
> > On 2/15/07, Matt Robertson <[EMAIL PROTECTED]> wrote:
> > > On 2/15/07, Dinner <[EMAIL PROTECTED]> wrote:
> > > > Lot of work for not much difference.  Might as well set the session
> > > > timeout really really low or something, right?
> > >
> > > If I were trying to find sanity in the desired approach, I'd first
> > > have to accept the fact that you *cannot* have cookies.  In an
> > > environment where site customers are all corporate, and an entire
> > > building's worth of buyers could all be sharing the same cookie thanks
> > > to some fascist security scheme, the use of cookies can be
> > > catastrophic.  Been there.  So I understand the requirement although I
> > > pity to poor guy who has to comply with it.
> >
> > So we've got to keep it going from request to request, via form or url
> > params-- doable, but needs strict "form" to accomplish well (and length
> > may be an issue-- thus, the custom token).
> >
> > Or a smart "render-er", I guess.  Pipe normal code thru, out comes
> > tokened code?  Hrm... pretty damn hard to make [well  =].
> >
> > > Given that, a short session timeout would not solve the problem.  If I
> > > was stuck passing url tokens of some kind, a continuously morphing one
> > > sounds like a step up from a static one; at least on the surface.
> >
>
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269976
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Mike Kear
His issue about the new token each time is mainly prompted by the
issue of corporate users sharing the same IP.This is an app where
there may be many users in a building accessing the site, and each
will have his/her own permissions set.   So he doesnt want one person
having higher access than they deserve by accident.  They could grant
their management unit product they havent been approved for.

So it kind of makes sense.

This is a product where the unit values are very high and a large
organisation will buy lots of licenses, and one senior person in the
organisation will allow the various operational units to have
specified numbers of licenses and they'll be logging in to manage the
licenses they have a right to.

So he's not being silly about it, I can see where his mind is on it.
 Not quite sure how it's all going to work, that's the problem.


Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month


On 2/16/07, Dinner <[EMAIL PROTECTED]> wrote:
> On 2/15/07, Matt Robertson <[EMAIL PROTECTED]> wrote:
> > On 2/15/07, Dinner <[EMAIL PROTECTED]> wrote:
> > > Lot of work for not much difference.  Might as well set the session
> > > timeout really really low or something, right?
> >
> > If I were trying to find sanity in the desired approach, I'd first
> > have to accept the fact that you *cannot* have cookies.  In an
> > environment where site customers are all corporate, and an entire
> > building's worth of buyers could all be sharing the same cookie thanks
> > to some fascist security scheme, the use of cookies can be
> > catastrophic.  Been there.  So I understand the requirement although I
> > pity to poor guy who has to comply with it.
>
> So we've got to keep it going from request to request, via form or url
> params-- doable, but needs strict "form" to accomplish well (and length
> may be an issue-- thus, the custom token).
>
> Or a smart "render-er", I guess.  Pipe normal code thru, out comes
> tokened code?  Hrm... pretty damn hard to make [well  =].
>
> > Given that, a short session timeout would not solve the problem.  If I
> > was stuck passing url tokens of some kind, a continuously morphing one
> > sounds like a step up from a static one; at least on the surface.
>

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269974
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-15 Thread Dinner
On 2/15/07, Matt Robertson <[EMAIL PROTECTED]> wrote:
> On 2/15/07, Dinner <[EMAIL PROTECTED]> wrote:
> > Lot of work for not much difference.  Might as well set the session
> > timeout really really low or something, right?
>
> If I were trying to find sanity in the desired approach, I'd first
> have to accept the fact that you *cannot* have cookies.  In an
> environment where site customers are all corporate, and an entire
> building's worth of buyers could all be sharing the same cookie thanks
> to some fascist security scheme, the use of cookies can be
> catastrophic.  Been there.  So I understand the requirement although I
> pity to poor guy who has to comply with it.

So we've got to keep it going from request to request, via form or url
params-- doable, but needs strict "form" to accomplish well (and length
may be an issue-- thus, the custom token).

Or a smart "render-er", I guess.  Pipe normal code thru, out comes
tokened code?  Hrm... pretty damn hard to make [well  =].

> Given that, a short session timeout would not solve the problem.  If I
> was stuck passing url tokens of some kind, a continuously morphing one
> sounds like a step up from a static one; at least on the surface.

Well, it would achieve the same thing as having a really low session time
out-- perhaps not even that much, because the session would time out
after a set time, vs. the "manual" session, that presumably just hangs
out until the next token comes in (course, you could go that extra mile,
and add timeouts, etc..  Might as well do it right, right! ;).

The reason you keep it morphing is to prevent someone from stealing
it from someplace where it's exposed (hopefully not google) and using
it to "impersonate" the "real" session.

A low session timeout would accomplish the same thing, sorta.

> 'course, I haven't seen "the problem" since a health care industry job
> I did like six years ago, so for all I know firewalls are a hell of a
> lot smarter now and this client is living in the past and solving a
> problem that doesn't exist anymore.

Heh.  That's a good point.  Worthy of talking over w/ d client, fer sure.

> Glad its not my job and all I have to do is idly speculate without
> really thinking it thru :-)

You know what they say about idle hands...  ;-)

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269973
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-15 Thread Matt Robertson
On 2/15/07, Dinner <[EMAIL PROTECTED]> wrote:
> Lot of work for not much difference.  Might as well set the session
> timeout really really low or something, right?

If I were trying to find sanity in the desired approach, I'd first
have to accept the fact that you *cannot* have cookies.  In an
environment where site customers are all corporate, and an entire
building's worth of buyers could all be sharing the same cookie thanks
to some fascist security scheme, the use of cookies can be
catastrophic.  Been there.  So I understand the requirement although I
pity to poor guy who has to comply with it.

Given that, a short session timeout would not solve the problem.  If I
was stuck passing url tokens of some kind, a continuously morphing one
sounds like a step up from a static one; at least on the surface.

'course, I haven't seen "the problem" since a health care industry job
I did like six years ago, so for all I know firewalls are a hell of a
lot smarter now and this client is living in the past and solving a
problem that doesn't exist anymore.

Glad its not my job and all I have to do is idly speculate without
really thinking it thru :-)

-- 
[EMAIL PROTECTED]
Janitor, The Robertson Team
mysecretbase.com

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269972
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Dinner
On 2/15/07, Matt Robertson <[EMAIL PROTECTED]> wrote:

> On 2/15/07, Dinner <[EMAIL PROTECTED]> wrote:
> > In theory, it's exactly the same thing as using tokens.  So you
> > change it with every request-- you've still got to get the old token
> > in!  Lots of added complexity for the same end result.
>
> Not the same thing.  Whatever hack is in progress would not be able to
> count on a constant cfid and cftoken value after the initial read.

I was more thinking "in process"-- all you need is one token, and
then you submit it back before the "real" user does.

Lot of work for not much difference.  Might as well set the session
timeout really really low or something, right?

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269971
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Matt Robertson
On 2/15/07, Josh Nathanson <[EMAIL PROTECTED]> wrote:
> Matt, can you explain exactly what the security issues are.

By exposing the cfid and cftoken you are announcing to the world what
your session identifier is.  In turn you are giving someone the
opportunity to more easily manipulate it.  Sure someone can accept a
cookie, read the value off the hard drive and then have the same info
(I suppose you could make the read more difficult by not writing a
cookie to disk and only using a session cookie) but by passing it via
the url you are making the job as easy as possible for the attacker.

Its only one thin layer on the onion, but I'd rather have that layer
on along with every other one I can get my hands on.

On 2/15/07, Dinner <[EMAIL PROTECTED]> wrote:
> In theory, it's exactly the same thing as using tokens.  So you
> change it with every request-- you've still got to get the old token
> in!  Lots of added complexity for the same end result.

Not the same thing.  Whatever hack is in progress would not be able to
count on a constant cfid and cftoken value after the initial read.
Since it keeps changing the hack would have to adapt to this.  The job
would be more difficult but its certainly not going to solve the
problem of exposing the key pair and make the app bulletproof, by any
stretch.

-- 
[EMAIL PROTECTED]
Janitor, The Robertson Team
mysecretbase.com

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269969
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Dinner
On 2/15/07, Matt Robertson <[EMAIL PROTECTED]> wrote:

> His solution is ... well ... mind-boggling.  In theory it should work.

In theory, it's exactly the same thing as using tokens.  So you
change it with every request-- you've still got to get the old token
in!  Lots of added complexity for the same end result.

Why not use your own token (thus avoiding same IP/etc. combos)
and use some stuff to make sure it's the same IP with each
request, etc., so it'll be a little bit protected from session stealing?

Something along those lines perhaps...

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269967
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-15 Thread Josh Nathanson
> He's right... if you take the step of saying no cookies allowed you
> have to pass the token around from link to link, exposing it via the
> url and that is a security issue.

Matt, can you explain exactly what the security issues are.  Are you talking 
about sniffing it over the network (would https help that)?  Wouldn't you 
have to have admin access to the server anyway to do anything with that 
information, in which case security is compromised already?  I don't know 
much about security so I'm curious - I don't see exactly how having the 
session id alone would compromise security.

-- Josh



~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269966
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-15 Thread Matt Robertson
good lord that sounds positively insane.

He's right... if you take the step of saying no cookies allowed you
have to pass the token around from link to link, exposing it via the
url and that is a security issue.  Caused by the draconian no cookie
requirement but its an issue alright.  And if its a B2B he may have a
higher likelihood of users who are behind firewalls and sharing a
single cookie and IP.  So he may not be as insane as all that.

His solution is ... well ... mind-boggling.  In theory it should work.
 But holy crap talk about making things as difficult as possible.
Lets reinvent the wheel and further specify that the wheel cannot
simply be round, but rather must travel forward by folding space.

Kind of an interesting brain teaser though.

-- 
[EMAIL PROTECTED]
Janitor, The Robertson Team
mysecretbase.com

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269965
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-15 Thread Mike Kear
I've not quite got it figured out myself.  But the cilent has a bit of
experience with coldfusion, going back to CF1 and up to CF5.2.  So he
knows something of what he speaks, but his technical knowledge is
dated.

Anyway, he says there's a security issue with using a token throughout
for a session, so each page view has to issue a new token, and expire
the last one.

SO i suppose that means in the applicatoin.cfc I have to add something
like this (pseudo code) to the onrequeststart() method:

gettoken()
  retrieve state from the database
  createUUID()
  set token to be the new UUID

I'm not sure how to do it yet.   I'm still trying to convince him to
let me use client vars!


Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month


On/16/07, Eric Haskins <[EMAIL PROTECTED]> wrote:
> "And to add to the fun of it all, we have to have a
> new session variable each page request."
>
> Can you explain this a bit?? What do you mean?
>
>
>

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269941
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Client variables? reliable enough?

2007-02-15 Thread Che Vilnonis
This is absolutley true. There is a DB performance hit with using client
vars. But, if your site is not a high volume site or if you are on a shared
server with limited Ram, client cariables may be beneficial.

~Ché

-Original Message-
From: Eric Haskins [mailto:[EMAIL PROTECTED] 
Sent: Thursday, February 15, 2007 2:27 PM
To: CF-Talk
Subject: Re: Client variables? reliable enough?


Coming over from php I have always used Session Vars to start off. I have
uncovered issues with the Client Vars here in my current position. If you do
high volume and have a large customer base you can experience a performance
hit with Client Var lookups.

Eric




~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269940
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Eric Haskins
"And to add to the fun of it all, we have to have a
new session variable each page request."

Can you explain this a bit?? What do you mean?


~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269937
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-15 Thread Eric Haskins
Coming over from php I have always used Session Vars to start off. I have
uncovered issues with the Client Vars here in my current position. If you do
high volume and have a large customer base you can experience a performance
hit with Client Var lookups.

Eric


~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269935
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Mike Kear
I have never had to use URLSessionformat() before but it sounds like
it's going to be very helpful in this case.

Oh and this is a business-to-business shopping cart app, so we do have
to maintain state.  And to add to the fun of it all, we have to have a
new session variable each page request.

The server is going to have a lot of grunt and relatively low traffic,
so i'm not too worried about dipping into the database every page but
it would be better without.  And having to wddx structs isnt much of a
problem because i dont pass them from page to page much any more.
Instead i use beans, which are even harder to pass through client
vars.   In fact i'd say they're pretty well impossible and will
probably need to be persisted to the database and rebuilt each page
view.

Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month

On 2/16/07, Matt Robertson <[EMAIL PROTECTED]> wrote:
> if you're bidding on a job he has just added a nice fat increase to
> your bid expense.  You will have to pass the key pair around for
> everything.  All cflocations, form posts, url links.  The works.  And
> exposing the key pair has security implications that imho cannot be
> overcome.  You basically create an attack surface that otherwise
> doesn't exist.
>
> urlsessionformat() is going to be your friend, sadly.
>
> As for client vars, I echo what was said with respect to the fact that
> it works fine if you design your app to use it from scratch, and
> realize its limitations (i.e. no structs unless you want to use cfwddx
> to plug them in, which is crazy overhead).
>
> Cvars are the right tool for SOME jobs but not all of them.  Every hit
> to your server will generate a hit to your database as the lvisit and
> hitcount vars are updated, at minimum.  Fine if you plan for it and
> know what you're getting into, but session vars are probably a better
> option.  Since the advent of CF MX I have tried to stay away from
> cvars if I can and stick to session vars.
>
> --
> [EMAIL PROTECTED]
> Janitor, The Robertson Team
> mysecretbase.com
>
>

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269933
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Matt Robertson
if you're bidding on a job he has just added a nice fat increase to
your bid expense.  You will have to pass the key pair around for
everything.  All cflocations, form posts, url links.  The works.  And
exposing the key pair has security implications that imho cannot be
overcome.  You basically create an attack surface that otherwise
doesn't exist.

urlsessionformat() is going to be your friend, sadly.

As for client vars, I echo what was said with respect to the fact that
it works fine if you design your app to use it from scratch, and
realize its limitations (i.e. no structs unless you want to use cfwddx
to plug them in, which is crazy overhead).

Cvars are the right tool for SOME jobs but not all of them.  Every hit
to your server will generate a hit to your database as the lvisit and
hitcount vars are updated, at minimum.  Fine if you plan for it and
know what you're getting into, but session vars are probably a better
option.  Since the advent of CF MX I have tried to stay away from
cvars if I can and stick to session vars.

-- 
[EMAIL PROTECTED]
Janitor, The Robertson Team
mysecretbase.com

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269928
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Client variables? reliable enough?

2007-02-15 Thread Andy Matthews
With no cookies then you'd never have a way of knowing if you have a
returning user. Is he okay with that? Is he willing to sacrifice the
convenience of his users for this insistence?


Andy matthews


-Original Message-
From: Che Vilnonis [mailto:[EMAIL PROTECTED] 
Sent: Thursday, February 15, 2007 12:52 PM
To: CF-Talk
Subject: RE: Client variables? reliable enough?

AFAIK, with NO cookies, you would need to pass the CFID and CFTOKEN in the
URL for each request.

-Original Message-
From: Mike Kear [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 15, 2007 1:46 PM
To: CF-Talk
Subject: Re: Client variables? reliable enough?


Still negotiating with my client about Clientvars.  He's finally said this -
what do you make of it 

[quote]
I don't care too much about client vars and how they are implemented as long
as there are NO COOKIES used. But be warned, if we have issues with the site
in production, they will need to be fixed at your cost. [/quote]


Well i dont have a problem with standing behind my own work . i'd expect to
have to fix anythign that didnt work properly anyway.  But what do you make
of the insistence that there can't be any cookies?

How do you maintain state, with NO cookies at all?  surely as a
minimum you have to have a session cookie, dont you?   How else do you
keep track of sessions?

Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month


On 2/8/07, John Beynon <[EMAIL PROTECTED]> wrote:
> i'm using client variables stored in cookies across two load balanced 
> boxes with dual cf instancesyet to see a problem - running like 
> this for 2 years! I don't see what the fuss is all about
>
> john.
>





~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269927
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-15 Thread Josh Nathanson
You will have to pass them in the url, so every link would need to have CFID 
and CFTOKEN appended to it.  It's a pain but it can be done.

If your client wants to have no cookies set at all, even if the user accepts 
them, don't use URLSessionFormat: this will place a cookie if the user 
accepts them, or append the CFID/CFTOKEN/jsessionid if they don't.

Too bad cookies got such a bad rap.  The public at large is terrified of 
them.  I'm sure your client probably has no idea what they are or how they 
work, and how helpful they can be for developers.

-- Josh


- Original Message - 
From: "Mike Kear" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Thursday, February 15, 2007 10:46 AM
Subject: Re: Client variables? reliable enough?


> Still negotiating with my client about Clientvars.  He's finally said
> this - what do you make of it 
>
> [quote]
> I don't care too much about client vars and how they are implemented
> as long as there are NO COOKIES used. But be warned, if we have issues
> with the site in production, they will need to be fixed at your cost.
> [/quote]
>
>
> Well i dont have a problem with standing behind my own work . i'd
> expect to have to fix anythign that didnt work properly anyway.  But
> what do you make of the insistence that there can't be any cookies?
>
> How do you maintain state, with NO cookies at all?  surely as a
> minimum you have to have a session cookie, dont you?   How else do you
> keep track of sessions?
>
> Cheers
> Mike Kear
> Windsor, NSW, Australia
> Adobe Certified Advanced ColdFusion Developer
> AFP Webworks
> http://afpwebworks.com
> ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month
>
>
> On 2/8/07, John Beynon <[EMAIL PROTECTED]> wrote:
>> i'm using client variables stored in cookies across two load balanced
>> boxes with dual cf instancesyet to see a problem - running like
>> this for 2 years! I don't see what the fuss is all about
>>
>> john.
>>
>
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269926
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Client variables? reliable enough?

2007-02-15 Thread Che Vilnonis
AFAIK, with NO cookies, you would need to pass the CFID and CFTOKEN in the
URL for each request.

-Original Message-
From: Mike Kear [mailto:[EMAIL PROTECTED] 
Sent: Thursday, February 15, 2007 1:46 PM
To: CF-Talk
Subject: Re: Client variables? reliable enough?


Still negotiating with my client about Clientvars.  He's finally said this -
what do you make of it 

[quote]
I don't care too much about client vars and how they are implemented as long
as there are NO COOKIES used. But be warned, if we have issues with the site
in production, they will need to be fixed at your cost. [/quote]


Well i dont have a problem with standing behind my own work . i'd expect to
have to fix anythign that didnt work properly anyway.  But what do you make
of the insistence that there can't be any cookies?

How do you maintain state, with NO cookies at all?  surely as a
minimum you have to have a session cookie, dont you?   How else do you
keep track of sessions?

Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month


On 2/8/07, John Beynon <[EMAIL PROTECTED]> wrote:
> i'm using client variables stored in cookies across two load balanced 
> boxes with dual cf instancesyet to see a problem - running like 
> this for 2 years! I don't see what the fuss is all about
>
> john.
>



~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269924
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-15 Thread Mike Kear
Still negotiating with my client about Clientvars.  He's finally said
this - what do you make of it 

[quote]
I don't care too much about client vars and how they are implemented
as long as there are NO COOKIES used. But be warned, if we have issues
with the site in production, they will need to be fixed at your cost.
[/quote]


Well i dont have a problem with standing behind my own work . i'd
expect to have to fix anythign that didnt work properly anyway.  But
what do you make of the insistence that there can't be any cookies?

How do you maintain state, with NO cookies at all?  surely as a
minimum you have to have a session cookie, dont you?   How else do you
keep track of sessions?

Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month


On 2/8/07, John Beynon <[EMAIL PROTECTED]> wrote:
> i'm using client variables stored in cookies across two load balanced
> boxes with dual cf instancesyet to see a problem - running like
> this for 2 years! I don't see what the fuss is all about
>
> john.
>

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269921
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Client variables? reliable enough?

2007-02-08 Thread John Beynon
i'm using client variables stored in cookies across two load balanced
boxes with dual cf instancesyet to see a problem - running like
this for 2 years! I don't see what the fuss is all about

john.

On 2/8/07, Mike Kear <[EMAIL PROTECTED]> wrote:
> Neil, can you be a bit more specific please?What sort of issues do you
> get with client vars?   ( have to make a fundamentail architecture decision
> in the next few days - whether or not to use client vars).  I need to know
> if the issues you had also apply in my situation.
>
>
> Cheers
> Mike Kear
> Windsor, NSW, Australia
> Adobe Certified Advanced ColdFusion Developer
> AFP Webworks
> http://afpwebworks.com
> ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month
>
>
> On 2/6/07, Robertson-Ravo, Neil (RX) <[EMAIL PROTECTED]>
> wrote:
> >
> > << > if you
> > store them in a DB, I would avoid them if you had the choice.>>>>
> >
> > As for no sticky sessions, that only leaves you session replication with
> > ColdFusion under J2EE.
> >
> >
>
>
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269122
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-07 Thread Mike Kear
Neil, can you be a bit more specific please?What sort of issues do you
get with client vars?   ( have to make a fundamentail architecture decision
in the next few days - whether or not to use client vars).  I need to know
if the issues you had also apply in my situation.


Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month


On 2/6/07, Robertson-Ravo, Neil (RX) <[EMAIL PROTECTED]>
wrote:
>
> << if you
> store them in a DB, I would avoid them if you had the choice.
>
> As for no sticky sessions, that only leaves you session replication with
> ColdFusion under J2EE.
>
>


~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269104
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-07 Thread Mike Kear
The last time i worked on a site with multiple servers, they had a simple
scheduled task set up to run every half hour or so.  It looks for files in
an upload directory, and if it finds anything, copies the files over to the
production servers, creating new folders if necessary, then deleting the
file from the uploads directory..   So to deploy to production all we
developers had to do was dump the new file in this 'uploads' folder.

The only time we had to go from server to server was in the rare case if the
change was to delete a file where there was no new file.

It's not perfect, but it's simple, and takes care of the vast majority of
code deployment tasks on a working productoin web site, leaving only a few
jobs to be done manually.

Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month



On 2/8/07, Andrew Tyrone <[EMAIL PROTECTED]> wrote:
>
> > My company currently has multiple load balanced web servers.
> > Each time we
> > deploy code, we have to manually FTP it to each server. We'd
> > love to be able
> > to upload (or SVN) code to one location and have an automated
> > process to
> > replicate the code to the other servers.
>
> I've used Super Flexible File Synchronizer on a couple of projects:
>
> http://www.superflexible.com/
>
> Andy
>
>
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269100
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-07 Thread Andrew Tyrone
> My company currently has multiple load balanced web servers. 
> Each time we
> deploy code, we have to manually FTP it to each server. We'd 
> love to be able
> to upload (or SVN) code to one location and have an automated 
> process to
> replicate the code to the other servers.

I've used Super Flexible File Synchronizer on a couple of projects:

http://www.superflexible.com/

Andy


~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:269040
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Eric Haskins
That SNAP server was the similar solution. Windows boxes can access it as a
Mapped Drive or in our case the SNAP server is in the domain so it is a UNC
share. The linux boxes access it via NFS  so we have one repository for all
our files. Now if I can get Serena Mover setup and running it would handle
deployment to the File Server.

That will require us to get Staging/QA up and running :)

Eric


On 2/6/07, Russ <[EMAIL PROTECTED]> wrote:
>
> I originally set up everything using UNC shares with DFS, but I felt it
> was
> a bit slow.  I've since ended up using DFS just to replicate the data, and
> I
> still access all the data locally.
>
> We don't have a huge amount of data though... Lots of files, but total
> maybe
> <5gb.
>
> Russ
>
>


~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:26
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Russ
I originally set up everything using UNC shares with DFS, but I felt it was
a bit slow.  I've since ended up using DFS just to replicate the data, and I
still access all the data locally.  

We don't have a huge amount of data though... Lots of files, but total maybe
<5gb.  

Russ

> -Original Message-
> From: Eric Haskins [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, February 06, 2007 2:49 PM
> To: CF-Talk
> Subject: Re: Uploading files to one server, propgating them to many. Was:
> Client variables? reliable enough?
> 
> We use UNC shares in our current enviroment but now we are integrating
> Linux
> Apache boxes on the front end so in the interim we have a 1TB File (750Mb
> Raid 5) Server that does NFS and CIFS shares. We are moving to a Netapps
> Filer in a bit so we just picked up a SNAP Server to hold us over
> 
> Eric
> 
> 
> On 2/6/07, Paul Vernon <[EMAIL PROTECTED]> wrote:
> >
> > > We use SVN to deploy to code to a single server, and then we
> > > use DFS to automatically propagate the changes.
> >
> > That of course is the better option if your environment supports it :)
> >
> > Paul
> >
> >
> >
> >
> >
> 
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268881
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Russ
And as long as you have Windows and your servers are members of the domain,
then your environment should support it.  I'm still looking for a similar
thing for linux. 

Russ

> -Original Message-
> From: Paul Vernon [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, February 06, 2007 11:32 AM
> To: CF-Talk
> Subject: RE: Uploading files to one server, propgating them to many. Was:
> Client variables? reliable enough?
> 
> > We use SVN to deploy to code to a single server, and then we
> > use DFS to automatically propagate the changes.
> 
> That of course is the better option if your environment supports it :)
> 
> Paul
> 
> 
> 
> 
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268880
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Eric Haskins
We use UNC shares in our current enviroment but now we are integrating Linux
Apache boxes on the front end so in the interim we have a 1TB File (750Mb
Raid 5) Server that does NFS and CIFS shares. We are moving to a Netapps
Filer in a bit so we just picked up a SNAP Server to hold us over

Eric


On 2/6/07, Paul Vernon <[EMAIL PROTECTED]> wrote:
>
> > We use SVN to deploy to code to a single server, and then we
> > use DFS to automatically propagate the changes.
>
> That of course is the better option if your environment supports it :)
>
> Paul
>
>
>
>
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268873
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Paul Vernon
> We use SVN to deploy to code to a single server, and then we 
> use DFS to automatically propagate the changes. 

That of course is the better option if your environment supports it :)

Paul




~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268869
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Paul Vernon
 
> You mentioned a program called Robocopy in this post. Can you 
> provide some additional information?
> 

Robocopy is in the Windows Resource Kit AFAIK, it's a pretty powerful
command line tool that you can script to keep folders in sync. 

As an example, 

robocopy C:\source \\server\C$\source *.cf* /E /XD .svn

This would copy *everything* from C:\source to the destination that matched
the *.cf* file pattern and would "eXclude Directories" that have .svn in
their names. 

You could use the /MIR command to mirror a directory structure too...

If you are deploying to multiple servers, you'd still have to FTP (but only
to one) then script a batch file using robocopy to mirror the latest code to
all the other servers Eg to mirror to 3 servers your batch file would
look something like this...

robocopy C:\source \\server1\C$\source *.* /MIR
robocopy C:\source \\server2\C$\source *.* /MIR
robocopy C:\source \\server3\C$\source *.* /MIR

Of course robocopy is a very powerful tool and I haven't even scratched the
surface of what it can do here... It also requires that you have full
control over your servers so you can run scripts on them and that they can
all see each other in a Windows Network and can access shares (hidden or
not).

If it were possible though, I really would recommend using SVN or similar...
So many less headaches so much more spare time!

Paul



~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268868
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Russ
If you use SVN + DFS, you will only pull the files you need from a remote
server  (SVN) once, and then DFS will propagate only the changes between
your local servers.  Doing svn update on every server will load the changes
once for every server from the remote location (unless your svn server is on
site there as well).  

Either way, the beauty of DFS is that it auto replicates things without your
intervention, unless it breaks.  

Russ

> -Original Message-
> From: Richard Kroll [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, February 06, 2007 11:23 AM
> To: CF-Talk
> Subject: RE: Uploading files to one server, propgating them to many. Was:
> Client variables? reliable enough?
> 
> > My company currently has multiple load balanced web servers. Each time
> we
> > deploy code, we have to manually FTP it to each server. We'd love to
> be
> > able
> > to upload (or SVN) code to one location and have an automated process
> to
> > replicate the code to the other servers.
> 
> We currently have a similar setup and are looking to use SVN to automate
> this portion of our process.  We're currently looking to use a bat file
> to SVN Update / Checkout the code on the remote servers.
> 
> We have an integration server where we currently checkout our repository
> to then copy the code to the remote servers.  We are trying to do away
> with this method as we are using a large amount of bandwidth that is not
> really necessary.  Using the SVN update / Checkout method, only the
> files that are needed will be transmitted to the production servers, or
> at least that is our thought.
> 
> Is there something we're missing with this method?
> 
> Rich Kroll
> 
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268843
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Richard Kroll
> My company currently has multiple load balanced web servers. Each time
we
> deploy code, we have to manually FTP it to each server. We'd love to
be
> able
> to upload (or SVN) code to one location and have an automated process
to
> replicate the code to the other servers.

We currently have a similar setup and are looking to use SVN to automate
this portion of our process.  We're currently looking to use a bat file
to SVN Update / Checkout the code on the remote servers.  

We have an integration server where we currently checkout our repository
to then copy the code to the remote servers.  We are trying to do away
with this method as we are using a large amount of bandwidth that is not
really necessary.  Using the SVN update / Checkout method, only the
files that are needed will be transmitted to the production servers, or
at least that is our thought.

Is there something we're missing with this method?

Rich Kroll

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268840
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Russ
Andy, 

We use SVN to deploy to code to a single server, and then we use DFS to
automatically propagate the changes.  Once you set it up, it doesn't require
any intervention, unless it breaks, which happened to me a few times to
date.  It is, however, very useful in that once you push the code to one of
the servers through svn, unless you are changing a bunch of files, the files
are replicated almost instantly to the other server. 

Russ

> -Original Message-
> From: Andy Matthews [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, February 06, 2007 11:11 AM
> To: CF-Talk
> Subject: Uploading files to one server, propgating them to many. Was:
> Client variables? reliable enough?
> 
> Paul...
> 
> My company currently has multiple load balanced web servers. Each time we
> deploy code, we have to manually FTP it to each server. We'd love to be
> able
> to upload (or SVN) code to one location and have an automated process to
> replicate the code to the other servers.
> 
> You mentioned a program called Robocopy in this post. Can you provide some
> additional information?
> 
> 
> Andy matthews
> 
> -Original Message-
> From: Paul Vernon [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, February 06, 2007 4:13 AM
> To: CF-Talk
> Subject: RE: Client variables? reliable enough?
> 
> We solved the bandwidth issue by moving the source code onto the web
> servers
> instead of them using the filestore server and used robocopy to keep them
> in
> sync... Nowadays I'd use SVN to deploy :)
> 
> 
> 

~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268837
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Uploading files to one server, propgating them to many. Was: Client variables? reliable enough?

2007-02-06 Thread Andy Matthews
Paul... 

My company currently has multiple load balanced web servers. Each time we
deploy code, we have to manually FTP it to each server. We'd love to be able
to upload (or SVN) code to one location and have an automated process to
replicate the code to the other servers.

You mentioned a program called Robocopy in this post. Can you provide some
additional information?


Andy matthews

-Original Message-
From: Paul Vernon [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 06, 2007 4:13 AM
To: CF-Talk
Subject: RE: Client variables? reliable enough?

We solved the bandwidth issue by moving the source code onto the web servers
instead of them using the filestore server and used robocopy to keep them in
sync... Nowadays I'd use SVN to deploy :)


~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268836
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: Client variables? reliable enough?

2007-02-06 Thread Paul Vernon
> > What do you make of what the client said?   Does it have any merit in
> > current versions?   Can anyone attest to reliability (or 
> > otherwise)  of
> > client vars in CF7?   (I should also add there is no chance 
> > we're going to
> > use the registry to store client vars - it's going to be in 
> > the database if we use them)
> >
> 
> My experience has always been bad, they are pretty clunky. 
> Even worse if you store them in a DB, I would avoid them if 
> you had the choice.
> 
> As for no sticky sessions, that only leaves you session 
> replication with ColdFusion under J2EE.
> 

I haven't used client vars in quite some time... No need. But when I did it
was with a 4 server CF5 NLB array with an active/passive SQL2000 cluster.
The CF machines had a separate SQL instance dedicated to client storage and
to be honest, the only problem we had was dealing with the extra bandwidth
that the back end needed when we got into the realms of 3000 simultaneous
users...

In the end, it wasn't the client var traffic that was causing the problem.
We solved the bandwidth issue by moving the source code onto the web servers
instead of them using the filestore server and used robocopy to keep them in
sync... Nowadays I'd use SVN to deploy :) 

Once we had solved the bandwidth problems, everything was fine. We never had
any issues at all with client storage but I will say this... We designed the
app from the very beginning to use client storage. We didn't port the code
from session etc. I think when you do the latter, you are asking for
trouble... As long as you plan well and understand the limits of the client
var scope then you should be fine.

As an aside, watching SQL profiler do it's thing on a live database with
3000 users on the site is a great way to scare yourself! The speed of the
transactions going through is something else!

Paul



~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268780
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: Client variables? reliable enough?

2007-02-05 Thread Robertson-Ravo, Neil (RX)
My experience has always been bad, they are pretty clunky. Even worse if you
store them in a DB, I would avoid them if you had the choice.

As for no sticky sessions, that only leaves you session replication with
ColdFusion under J2EE.




"This e-mail is from Reed Exhibitions (Gateway House, 28 The Quadrant,
Richmond, Surrey, TW9 1DN, United Kingdom), a division of Reed Business,
Registered in England, Number 678540.  It contains information which is
confidential and may also be privileged.  It is for the exclusive use of the
intended recipient(s).  If you are not the intended recipient(s) please note
that any form of distribution, copying or use of this communication or the
information in it is strictly prohibited and may be unlawful.  If you have
received this communication in error please return it to the sender or call
our switchboard on +44 (0) 20 89107910.  The opinions expressed within this
communication are not necessarily those expressed by Reed Exhibitions." 
Visit our website at http://www.reedexpo.com

-Original Message-
From: Mike Kear
To: CF-Talk
Sent: Tue Feb 06 06:50:37 2007
Subject: Client variables? reliable enough?

I sat in a client briefing yesterday, and he said something that made me sit
up and take notice,could he be right?

I havent used Client variables since CF5, so I dont know if they are good
now or not, but i didnt have a problem back in the CF5 days but here's what
my client said (he has a lot of experience with CF going back to CF1, but he
hasnt done much CF coding since CF5.1)

He said, "dont use client variables, because they seem ok but in practice
they always cause problems.I want you to write your own state
maintenance stuff.   I don't want you to use sticky sessions either because
if a server goes down the other machine doesnt know the state."

The environment is going to be two or three servers running CF7 enterprise,
not sure if we're going Linux or Windows yet.

What do you make of what the client said?   Does it have any merit in
current versions?   Can anyone attest to reliability (or otherwise)  of
client vars in CF7?   (I should also add there is no chance we're going to
use the registry to store client vars - it's going to be in the database if
we use them)

-- 

Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month




~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268778
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Client variables? reliable enough?

2007-02-05 Thread Mike Kear
I sat in a client briefing yesterday, and he said something that made me sit
up and take notice,could he be right?

I havent used Client variables since CF5, so I dont know if they are good
now or not, but i didnt have a problem back in the CF5 days but here's what
my client said (he has a lot of experience with CF going back to CF1, but he
hasnt done much CF coding since CF5.1)

He said, "dont use client variables, because they seem ok but in practice
they always cause problems.I want you to write your own state
maintenance stuff.   I don't want you to use sticky sessions either because
if a server goes down the other machine doesnt know the state."

The environment is going to be two or three servers running CF7 enterprise,
not sure if we're going Linux or Windows yet.

What do you make of what the client said?   Does it have any merit in
current versions?   Can anyone attest to reliability (or otherwise)  of
client vars in CF7?   (I should also add there is no chance we're going to
use the registry to store client vars - it's going to be in the database if
we use them)

-- 
Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month


~|
Upgrade to Adobe ColdFusion MX7 
Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs 
http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:268777
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Loosing client variables

2006-10-30 Thread Darren Buchanan
We have an application that has is dropping client variables on about 5 percent 
of the machines that use it.  When I manually track CFID and CFTOKEN, they are 
staying the same.

This ONLY happens when the user is using Internet Explorer.  When checking the 
machines that this happens on, IE (ver. 6.x) is setup to allow cookies.  When 
Firefox (not an option to make FF a requirement) is used there are no problems.

Has anyone else seen this.

Thanks,

db

~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:258513
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: How do I set client variables timeout?

2006-07-10 Thread Dave Watts
> Right, but I'm interested in having the user's session 
> timeout after 60 minutes of inactivity.

Then, you might either (a) use Session variables, or (b) write code to
disconnect clients after 60 minutes of inactivity by deleting their cookies.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:245920
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: How do I set client variables timeout?

2006-07-10 Thread Jon Block
Right, but I'm interested in having the user's session timeout after 60
minutes of inactivity.

Jon

-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED] 
Sent: Friday, July 07, 2006 3:16 PM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

> Why the *heck* doesn't  have a clienttimeout attribute?

> None of the programmers here can guess as to why there would be a 
> sessiontimeout but no clienttimeout. *sigh*...

Session variables are stored in memory, which is very fast but
relatively limited. So, you don't want to persist sessions longer than
you have to.
Client variables, on the other hand, persist on disk somewhere, and
there's no significant cost to keeping them for a long time - often
across multiple visits from a user. You can get rid of Client variables
by purging them periodically, which is the rough equivalent to the time
out you're looking for.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta, Chicago,
Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!




~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:245916
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: How do I set client variables timeout?

2006-07-10 Thread Peter Tilbrook
Turn on J2EE session variables. And USE session variables. Client vars are 
supposed to persist (like cookies). Session vars are not.

~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:245906
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


Re: How do I set client variables timeout?

2006-07-10 Thread Tom Chiverton
On Friday 07 July 2006 19:50, Jon Block wrote:
> Why the *heck* doesn't  have a clienttimeout attribute?
> None of the programmers here can guess as to why there would be a
> sessiontimeout but no clienttimeout. *sigh*...

How do you timeout a client-stored cookie on a web browser that may never 
connect again ?

-- 
Tom Chiverton



This email is sent for and on behalf of Halliwells LLP.

Halliwells LLP is a limited liability partnership registered in England and 
Wales under registered number OC307980 whose registered office address is at St 
James's Court Brown Street Manchester M2 2JF.  A list of members is available 
for inspection at the registered office. Any reference to a partner in relation 
to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law 
Society.

CONFIDENTIALITY

This email is intended only for the use of the addressee named above and may be 
confidential or legally privileged.  If you are not the addressee you must not 
read it and must not use any information contained in nor copy it nor inform 
any person other than Halliwells LLP or the addressee of its existence or 
contents.  If you have received this email in error please delete it and notify 
Halliwells LLP IT Department on 0870 365 8008.

For more information about Halliwells LLP visit www.halliwells.com.


~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:245904
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: How do I set client variables timeout?

2006-07-07 Thread Snake
If client vars are stored in the DB, and that table is big (lots of client
vars) I have seen the performance bomb quite a a lot. Regular purging is
recommended, the default 90 days is too long on a busy server.

Snake 

-Original Message-
From: Dave Watts [mailto:[EMAIL PROTECTED] 
Sent: 07 July 2006 20:16
To: CF-Talk
Subject: RE: How do I set client variables timeout?

> Why the *heck* doesn't  have a clienttimeout attribute? 
> None of the programmers here can guess as to why there would be a 
> sessiontimeout but no clienttimeout. *sigh*...

Session variables are stored in memory, which is very fast but relatively
limited. So, you don't want to persist sessions longer than you have to.
Client variables, on the other hand, persist on disk somewhere, and there's
no significant cost to keeping them for a long time - often across multiple
visits from a user. You can get rid of Client variables by purging them
periodically, which is the rough equivalent to the time out you're looking
for.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized instruction
at our training centers in Washington DC, Atlanta, Chicago, Baltimore,
Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!




~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:245755
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: How do I set client variables timeout?

2006-07-07 Thread Dave Watts
> Why the *heck* doesn't  have a clienttimeout 
> attribute? None of the programmers here can guess as to why 
> there would be a sessiontimeout but no clienttimeout. *sigh*...

Session variables are stored in memory, which is very fast but relatively
limited. So, you don't want to persist sessions longer than you have to.
Client variables, on the other hand, persist on disk somewhere, and there's
no significant cost to keeping them for a long time - often across multiple
visits from a user. You can get rid of Client variables by purging them
periodically, which is the rough equivalent to the time out you're looking
for.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:245728
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


RE: How do I set client variables timeout?

2006-07-07 Thread Jon Block
Why the *heck* doesn't  have a clienttimeout attribute?
None of the programmers here can guess as to why there would be a
sessiontimeout but no clienttimeout. *sigh*...

I'll just write my own implementation for that...

Jon

-Original Message-
From: Snake [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 05, 2006 9:57 AM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

The purge interval is actually how often the schedule runs to do the
purging, not how ten they purged.

The timeout is specified by choosing your client storage Mechanism  and
setting it there. 

Purge data for clients that remain unvisited for

And specify how many days the client variables should remain active for.

-
Snake

-Original Message-
From: Peterson, Chris [mailto:[EMAIL PROTECTED]
Sent: 05 July 2006 14:52
To: CF-Talk
Subject: RE: How do I set client variables timeout?

Its called 'Purge Interval' and is under Server Settings > Client
Variables, at the bottom of the page.

Chris

-Original Message-
From: Jon Block [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 05, 2006 9:45 AM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

Clearly I'm missing something.. On which cfide admin page do I set the
timeout for client variables?

Jon 



-Original Message-
From: Snake [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 29, 2006 4:36 PM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

That's because a sessiontimeout is for session variables as the name
implies not client variables.
Client variables will expire as pe rthe settings in the coldfusion
administrator.

Snake 

-Original Message-
From: Jon Block [mailto:[EMAIL PROTECTED]
Sent: 29 June 2006 20:08
To: CF-Talk
Subject: How do I set client variables timeout?

My CFApplication tag looks like this:
 

 
However, my client variables do not seem to timeout after 1 hour. 
 
Any ideas?
Jon


This electronic message transmission contains information from
Collegiate Funding Services, LLC or its subsidiaries or affiliates that
may be confidential or privileged. The information is intended to be for
the use of only the individual or entity named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is strictly prohibited. If
you have received this electronic transmission in error, please notify
the sender by reply e-mail @cfsloans.com immediately and delete this
e-mail and any attachments from your system and any copies you may have
made, electronic or otherwise.













~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/cf_lists/message.cfm/forumid:4/messageid:245719
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: How do I set client variables timeout?

2006-07-05 Thread Snake
The purge interval is actually how often the schedule runs to do the
purging, not how ten they purged.

The timeout is specified by choosing your client storage Mechanism  and
setting it there. 

Purge data for clients that remain unvisited for

And specify how many days the client variables should remain active for.

-
Snake

-Original Message-
From: Peterson, Chris [mailto:[EMAIL PROTECTED] 
Sent: 05 July 2006 14:52
To: CF-Talk
Subject: RE: How do I set client variables timeout?

Its called 'Purge Interval' and is under Server Settings > Client Variables,
at the bottom of the page.

Chris

-Original Message-
From: Jon Block [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 05, 2006 9:45 AM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

Clearly I'm missing something.. On which cfide admin page do I set the
timeout for client variables?

Jon 



-Original Message-
From: Snake [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 29, 2006 4:36 PM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

That's because a sessiontimeout is for session variables as the name implies
not client variables.
Client variables will expire as pe rthe settings in the coldfusion
administrator.

Snake 

-Original Message-
From: Jon Block [mailto:[EMAIL PROTECTED]
Sent: 29 June 2006 20:08
To: CF-Talk
Subject: How do I set client variables timeout?

My CFApplication tag looks like this:
 

 
However, my client variables do not seem to timeout after 1 hour. 
 
Any ideas?
Jon


This electronic message transmission contains information from Collegiate
Funding Services, LLC or its subsidiaries or affiliates that may be
confidential or privileged. The information is intended to be for the use of
only the individual or entity named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is strictly prohibited. If you have received
this electronic transmission in error, please notify the sender by reply
e-mail @cfsloans.com immediately and delete this e-mail and any attachments
from your system and any copies you may have made, electronic or otherwise.











~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:245396
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How do I set client variables timeout?

2006-07-05 Thread Peterson, Chris
Its called 'Purge Interval' and is under Server Settings > Client
Variables, at the bottom of the page.

Chris

-Original Message-
From: Jon Block [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 05, 2006 9:45 AM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

Clearly I'm missing something.. On which cfide admin page do I set the
timeout for client variables?

Jon 



-Original Message-
From: Snake [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 29, 2006 4:36 PM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

That's because a sessiontimeout is for session variables as the name
implies not client variables.
Client variables will expire as pe rthe settings in the coldfusion
administrator.

Snake 

-Original Message-
From: Jon Block [mailto:[EMAIL PROTECTED]
Sent: 29 June 2006 20:08
To: CF-Talk
Subject: How do I set client variables timeout?

My CFApplication tag looks like this:
 

 
However, my client variables do not seem to timeout after 1 hour. 
 
Any ideas?
Jon


This electronic message transmission contains information from
Collegiate Funding Services, LLC or its subsidiaries or affiliates that
may be confidential or privileged. The information is intended to be for
the use of only the individual or entity named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is strictly prohibited. If
you have received this electronic transmission in error, please notify
the sender by reply e-mail @cfsloans.com immediately and delete this
e-mail and any attachments from your system and any copies you may have
made, electronic or otherwise.









~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:245393
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How do I set client variables timeout?

2006-07-05 Thread Jon Block
Clearly I'm missing something.. On which cfide admin page do I set the
timeout for client variables?

Jon 



-Original Message-
From: Snake [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 29, 2006 4:36 PM
To: CF-Talk
Subject: RE: How do I set client variables timeout?

That's because a sessiontimeout is for session variables as the name
implies not client variables.
Client variables will expire as pe rthe settings in the coldfusion
administrator.

Snake 

-Original Message-
From: Jon Block [mailto:[EMAIL PROTECTED]
Sent: 29 June 2006 20:08
To: CF-Talk
Subject: How do I set client variables timeout?

My CFApplication tag looks like this:
 

 
However, my client variables do not seem to timeout after 1 hour. 
 
Any ideas?
Jon


This electronic message transmission contains information from
Collegiate Funding Services, LLC or its subsidiaries or affiliates that
may be confidential or privileged. The information is intended to be for
the use of only the individual or entity named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is strictly prohibited. If
you have received this electronic transmission in error, please notify
the sender by reply e-mail @cfsloans.com immediately and delete this
e-mail and any attachments from your system and any copies you may have
made, electronic or otherwise.







~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:245392
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: How do I set client variables timeout?

2006-06-29 Thread Snake
That's because a sessiontimeout is for session variables as the name implies
not client variables.
Client variables will expire as pe rthe settings in the coldfusion
administrator.

Snake 

-Original Message-
From: Jon Block [mailto:[EMAIL PROTECTED] 
Sent: 29 June 2006 20:08
To: CF-Talk
Subject: How do I set client variables timeout?

My CFApplication tag looks like this:
 

 
However, my client variables do not seem to timeout after 1 hour. 
 
Any ideas?
Jon


This electronic message transmission contains information from Collegiate
Funding Services, LLC or its subsidiaries or affiliates that may be
confidential or privileged. The information is intended to be for the use of
only the individual or entity named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is strictly prohibited. If you have received
this electronic transmission in error, please notify the sender by reply
e-mail @cfsloans.com immediately and delete this e-mail and any attachments
from your system and any copies you may have made, electronic or otherwise.





~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:245092
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


How do I set client variables timeout?

2006-06-29 Thread Jon Block
My CFApplication tag looks like this:
 

 
However, my client variables do not seem to timeout after 1 hour. 
 
Any ideas?
Jon


This electronic message transmission contains information from Collegiate 
Funding Services, LLC or its subsidiaries or affiliates that may be 
confidential or privileged. The information is intended to be for the use of 
only the individual or entity named above. If you are not the intended 
recipient, be aware that any disclosure, copying, distribution or use of the 
contents of this information is strictly prohibited. If you have received this 
electronic transmission in error, please notify the sender by reply e-mail 
@cfsloans.com immediately and delete this e-mail and any attachments from your 
system and any copies you may have made, electronic or otherwise.



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:245089
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Passing Client Variables Across Servers

2006-05-25 Thread Kamie Curfman
I've got a login on one server.  If successful, some client variables are set 
and the user is sent over to another server.  When I dump the client variables 
on the second server, CFID and CFTOKEN are showing up just fine, but none of 
the client variables that I set on the first server are carrying over.  Why 
not?  Both servers are using the same database for client storage.  Thanks.

Kamie

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:241452
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Client Variables in MySQL

2006-04-10 Thread Thomas Chiverton
On Friday 07 April 2006 23:58, Jim McAtee wrote:
> But does CF5 utilize transactions (if available) for client variable
> storage?

Hope so.

-- 

Tom Chiverton 
Advanced ColdFusion Programmer

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:237326
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Client Variables in MySQL

2006-04-08 Thread Jochem van Dieten
Jim McAtee wrote:
> - Original Message - 
> From: "Jochem van Dieten" <[EMAIL PROTECTED]>
> To: "CF-Talk" 
> Sent: Saturday, April 08, 2006 2:13 AM
> Subject: Re: Client Variables in MySQL
> 
> 
>> Jim McAtee wrote:
>>> Are there any good reasons to use InnoDB for CF client varible storage 
>>> in
>>> MySQL, or are MyISAM tables sufficient?
>> Yes:
>> http://dev.mysql.com/doc/refman/4.1/en/internal-locking.html?ff=nopfpls
> 
> 
> Yes, what?  A or B?

Locking can be a good reason to use InnoDB. MyISAM always locks 
the entire table, InnoDB locks individual rows.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:237250
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Client Variables in MySQL

2006-04-08 Thread Jim McAtee
- Original Message - 
From: "Jochem van Dieten" <[EMAIL PROTECTED]>
To: "CF-Talk" 
Sent: Saturday, April 08, 2006 2:13 AM
Subject: Re: Client Variables in MySQL


> Jim McAtee wrote:
>> Are there any good reasons to use InnoDB for CF client varible storage 
>> in
>> MySQL, or are MyISAM tables sufficient?
>
> Yes:
> http://dev.mysql.com/doc/refman/4.1/en/internal-locking.html?ff=nopfpls


Yes, what?  A or B?


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:237241
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


  1   2   3   4   5   6   7   >