RE: Help Adobe plan the future of ColdFusion (along that line)
Right on.. -Original Message- From: James Holmes [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:03 PM To: CF-Talk Subject: Re: Help Adobe plan the future of ColdFusion (along that line) Sure, but not Java. Flex does this really well and fits better with CF as an adobe product: http://www.adobe.com/devnet/coldfusion/articles/multifile_upload.html On Thu, Mar 13, 2008 at 7:42 AM, Azadi Saryev [EMAIL PROTECTED] wrote: yes +1 to better file upload. start with built-in tag-based multiple file upload. a nice built-in java applet for selecting multiple files or whole folders to upload will be nice, too... especially one that can be called with a tag and an upload progress bar -- mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301148 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Help Adobe plan the future of ColdFusion (along that line)
Don, I was responding to your suggestion and I got carried away and wrote about 5 paragraphs So instead of cluttering up the list I put it in a blog post: http://www.coldfusionmuse.com/index.cfm/2008/3/13/cf8.catch.22 As a practical note specifically for you, I would mention that you are free to use FCK editor without the Adobe implementation - and it is just as easy. You can download the latest and greatest from the web. There is even a custom component (and a custom tag think) you can use. You can strip it down to the bones as needed. We use it all the time for many applications on CF 6 through CF 8. Also I was interested in your off the cuff comment regarding scary script kiddie attacks (or kitties if you like). If I hear you correctly you mean that you want to make sure the editor doesn't make it too easy to attempt attacks. Keep in mind that there is no protection (none, zero, zilch, nada, bupkis) provided by any client side code against attack. Validating user input is always always always (did I mention always) a server side task - and therefore it has little to do with which editor you use. Client side code and validation is about convenience and the user experience - but user submitted data must be religiously vetted on the server regardless of what you are doing on the client. Of course CF provides some global server side protection for XSS but not for things like HTML or SQL injection. No client side code can protect against such attacks because, once that HTML buffer leaves your server and is sent to the browser it is out of your control. Oh! Thanks for letting me stand in for Ben. I'm also open to speaking for Ray when he's in the john - or Dave Watts when he's busy on the phone with Bill Gates (ha). Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Don L [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 6:48 PM To: CF-Talk Subject: Re: Help Adobe plan the future of ColdFusion (along that line) Hey Mark, I'm just tossing an idea around, absolutely no pressure on Adobe. But I do hope Adobe would come up with fix/patch for theirI FckEditor integration very quickly, my beta users like its WYSIWG feature but are getting mad with me for its slow rendering and some times it fails (cf8 standard)... some of the alternative solutions was either only able to work in a very simple environment or scary, script kittie attack... I understand this is a first-cut but Data Capture is a critical element for any business application... Hope you would agree. I don't like to bug Ben all the time... ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301150 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Help Adobe plan the future of ColdFusion (along that line)
On 3/12/08, Azadi Saryev [EMAIL PROTECTED] wrote: file upload. a nice built-in java applet for selecting multiple files or dear god NO! No java applet! Ack. Rick ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301159 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Help Adobe plan the future of ColdFusion (along that line)
what exactly do you mean by security check? check for what? Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Don L wrote: I think File Upload is an important feature. Non-intranet apps (and maybe even intranet apps as well) would definitely need security check for uploaded file, so, if Adobe could build such security check upon file upload capability I think it would be a great service. Also it's very desirable to have lean design, if that's already there, I miss it... my apology. Thanks. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301107 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Help Adobe plan the future of ColdFusion (along that line)
A Word document may have Trojan Horse embedded, other type of file, PPT, JPG/JPEG, GIF... are all subject to destructive intention... You should have heard of them... Service like Yahoo email embeds this kind of file security into it, for instance, when you receive an attachment, yahoo would check that attachment for you before download... No, I'm not a security maniac but it's now part of life... what exactly do you mean by security check? check for what? Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Don L wrote: I think File Upload is an important feature. Non-intranet apps (and maybe even intranet apps as well) would definitely need security check for uploaded file, so, if Adobe could build such security check upon file upload capability I think it would be a great service. Also it's very desirable to have lean design, if that's already there, I miss it... my apology. Thanks. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301108 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Help Adobe plan the future of ColdFusion (along that line)
That should be the job of a server-side virus scanner. I don't think it's reasonable to expect Adobe to provide that kind of service (unless they go into the anti-virus business, I suppose). On Wed, Mar 12, 2008 at 7:09 PM, Don L [EMAIL PROTECTED] wrote: A Word document may have Trojan Horse embedded, other type of file, PPT, JPG/JPEG, GIF... are all subject to destructive intention... You should have heard of them... Service like Yahoo email embeds this kind of file security into it, for instance, when you receive an attachment, yahoo would check that attachment for you before download... No, I'm not a security maniac but it's now part of life... what exactly do you mean by security check? check for what? Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Don L wrote: I think File Upload is an important feature. Non-intranet apps (and maybe even intranet apps as well) would definitely need security check for uploaded file, so, if Adobe could build such security check upon file upload capability I think it would be a great service. Also it's very desirable to have lean design, if that's already there, I miss it... my apology. Thanks. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301110 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Help Adobe plan the future of ColdFusion (along that line)
Don, I'm with Sonny on the virus thing... But I do like the idea of better file upload... Like some of the java applets that are out there. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Sonny Savage [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 5:22 PM To: CF-Talk Subject: Re: Help Adobe plan the future of ColdFusion (along that line) That should be the job of a server-side virus scanner. I don't think it's reasonable to expect Adobe to provide that kind of service (unless they go into the anti-virus business, I suppose). On Wed, Mar 12, 2008 at 7:09 PM, Don L [EMAIL PROTECTED] wrote: A Word document may have Trojan Horse embedded, other type of file, PPT, JPG/JPEG, GIF... are all subject to destructive intention... You should have heard of them... Service like Yahoo email embeds this kind of file security into it, for instance, when you receive an attachment, yahoo would check that attachment for you before download... No, I'm not a security maniac but it's now part of life... what exactly do you mean by security check? check for what? Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Don L wrote: I think File Upload is an important feature. Non-intranet apps (and maybe even intranet apps as well) would definitely need security check for uploaded file, so, if Adobe could build such security check upon file upload capability I think it would be a great service. Also it's very desirable to have lean design, if that's already there, I miss it... my apology. Thanks. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301112 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Help Adobe plan the future of ColdFusion (along that line)
yes +1 to better file upload. start with built-in tag-based multiple file upload. a nice built-in java applet for selecting multiple files or whole folders to upload will be nice, too... especially one that can be called with a tag and an upload progress bar re security - definitely not Adobe's job... but maybe they could 'integrate' a server-side virus checker? like fckeditor and richtext textarea... Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Mark Kruger wrote: Don, I'm with Sonny on the virus thing... But I do like the idea of better file upload... Like some of the java applets that are out there. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Sonny Savage [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 5:22 PM To: CF-Talk Subject: Re: Help Adobe plan the future of ColdFusion (along that line) That should be the job of a server-side virus scanner. I don't think it's reasonable to expect Adobe to provide that kind of service (unless they go into the anti-virus business, I suppose). On Wed, Mar 12, 2008 at 7:09 PM, Don L [EMAIL PROTECTED] wrote: A Word document may have Trojan Horse embedded, other type of file, PPT, JPG/JPEG, GIF... are all subject to destructive intention... You should have heard of them... Service like Yahoo email embeds this kind of file security into it, for instance, when you receive an attachment, yahoo would check that attachment for you before download... No, I'm not a security maniac but it's now part of life... what exactly do you mean by security check? check for what? Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Don L wrote: I think File Upload is an important feature. Non-intranet apps (and maybe even intranet apps as well) would definitely need security check for uploaded file, so, if Adobe could build such security check upon file upload capability I think it would be a great service. Also it's very desirable to have lean design, if that's already there, I miss it... my apology. Thanks. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301113 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Help Adobe plan the future of ColdFusion (along that line)
Hey Mark, I'm just tossing an idea around, absolutely no pressure on Adobe. But I do hope Adobe would come up with fix/patch for their FckEditor integration very quickly, my beta users like its WYSIWG feature but are getting mad with me for its slow rendering and some times it fails (cf8 standard)... some of the alternative solutions was either only able to work in a very simple environment or scary, script kittie attack... I understand this is a first-cut but Data Capture is a critical element for any business application... Hope you would agree. I don't like to bug Ben all the time... Regards, Don Don, I'm with Sonny on the virus thing... But I do like the idea of better file upload... Like some of the java applets that are out there. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com That should be the job of a server-side virus scanner. I don't think it's reasonable to expect Adobe to provide that kind of service (unless they go into the anti-virus business, I suppose). On Wed, Mar 12, 2008 at 7:09 PM, D ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301114 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Help Adobe plan the future of ColdFusion (along that line)
Yes, a nice multi-file upload would be great. I've always loved the one at Costco.com's photo center. ..:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -Original Message- From: Mark Kruger [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 6:26 PM To: CF-Talk Subject: RE: Help Adobe plan the future of ColdFusion (along that line) Don, I'm with Sonny on the virus thing... But I do like the idea of better file upload... Like some of the java applets that are out there. -Mark Mark A. Kruger, CFG, MCSE (402) 408-3733 ext 105 www.cfwebtools.com www.coldfusionmuse.com www.necfug.com -Original Message- From: Sonny Savage [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 5:22 PM To: CF-Talk Subject: Re: Help Adobe plan the future of ColdFusion (along that line) That should be the job of a server-side virus scanner. I don't think it's reasonable to expect Adobe to provide that kind of service (unless they go into the anti-virus business, I suppose). On Wed, Mar 12, 2008 at 7:09 PM, Don L [EMAIL PROTECTED] wrote: A Word document may have Trojan Horse embedded, other type of file, PPT, JPG/JPEG, GIF... are all subject to destructive intention... You should have heard of them... Service like Yahoo email embeds this kind of file security into it, for instance, when you receive an attachment, yahoo would check that attachment for you before download... No, I'm not a security maniac but it's now part of life... what exactly do you mean by security check? check for what? Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Don L wrote: I think File Upload is an important feature. Non-intranet apps (and maybe even intranet apps as well) would definitely need security check for uploaded file, so, if Adobe could build such security check upon file upload capability I think it would be a great service. Also it's very desirable to have lean design, if that's already there, I miss it... my apology. Thanks. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301115 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: Help Adobe plan the future of ColdFusion (along that line)
re security - definitely not Adobe's job... but maybe they could 'integrate' a server-side virus checker? That's my POINT. Not reventing wheels. But making integration elegant, flexible and efficient NOT food on the table is good enough mentality... Sorry if it sounds ranting... yes +1 to better file upload. start with built-in tag-based multiple file upload. a nice built-in java applet for selecting multiple files or whole folders to upload will be nice, too... especially one that can be called with a tag and an upload progress bar re security - definitely not Adobe's job... but maybe they could 'integrate' a server-side virus checker? like fckeditor and richtext textarea... Azadi Saryev Sabai-dee.com http://www.sabai-dee.com/ Mark Kruger wrote: ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301116 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Help Adobe plan the future of ColdFusion (along that line)
Sure, but not Java. Flex does this really well and fits better with CF as an adobe product: http://www.adobe.com/devnet/coldfusion/articles/multifile_upload.html On Thu, Mar 13, 2008 at 7:42 AM, Azadi Saryev [EMAIL PROTECTED] wrote: yes +1 to better file upload. start with built-in tag-based multiple file upload. a nice built-in java applet for selecting multiple files or whole folders to upload will be nice, too... especially one that can be called with a tag and an upload progress bar -- mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301119 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Help Adobe plan the future of ColdFusion (along that line)
Yes, as a separate product. ..:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -Original Message- From: James Holmes [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 8:03 PM To: CF-Talk Subject: Re: Help Adobe plan the future of ColdFusion (along that line) Sure, but not Java. Flex does this really well and fits better with CF as an adobe product: http://www.adobe.com/devnet/coldfusion/articles/multifile_upload.html On Thu, Mar 13, 2008 at 7:42 AM, Azadi Saryev [EMAIL PROTECTED] wrote: yes +1 to better file upload. start with built-in tag-based multiple file upload. a nice built-in java applet for selecting multiple files or whole folders to upload will be nice, too... especially one that can be called with a tag and an upload progress bar -- mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:301120 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
