Re: SOT: Graphic Artist Software for HTML CSS

2013-02-22 Thread Maureen

Photoshop is very powerful for all aspects of image creation and
manipulation, but there is absolutely nothing intuitive about the
interface.  It was the hardest software for me to learn in all my years in
the industry.  Fortunately, I have a son who is a PS expert, so I can call
him when I get in over my head.

Fireworks is much easier to learn and use and works well for web stuff.

On Fri, Feb 22, 2013 at 12:53 PM, Bruce Sorge  wrote:

>
> I have been messing around with Fireworks CS6 and it does a really good
> job of slicing pages. I never really messed with Photoshop though so I
> cannot compare them.
>


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354645
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Graphic Artist Software for HTML CSS

2013-02-22 Thread Bruce Sorge

I have been messing around with Fireworks CS6 and it does a really good job of 
slicing pages. I never really messed with Photoshop though so I cannot compare 
them. 
On Feb 22, 2013, at 3:50 PM, Bobby  wrote:

> 
> In the beginning, I actually sliced designs. When I did, I used Image
> Ready. It was much better suited for the slicing part than Photoshop.
> 
> 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354642
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Graphic Artist Software for HTML CSS

2013-02-22 Thread Bobby

In the beginning, I actually sliced designs. When I did, I used Image
Ready. It was much better suited for the slicing part than Photoshop.


On 2/22/13 12:04 PM, "Gerald Guido"  wrote:

>
>In the past I have used Photoshop's Slice tool. It does a fairly decent
>job
>but I have always had to go in and massage it by hand. It does not by any
>means leave you with finished product out of the box but it takes care of
>a
>lions share of the grunt work.
>
>HTH
>G!
>
>On Fri, Feb 22, 2013 at 11:38 AM, Chad Gray  wrote:
>
>>
>> I have not kept track of all the graphic artist software adobe has come
>> out with to go from mockups to HTML/CSS.
>>
>>
>>
>> If I were to tell a graphic designer to design me some mockups for a web
>> site, what is the best adobe software that will export out to _CLEAN_
>> (looks like hand written J) HTML/CSS that I can inject my CF code easily
>> into?
>>
>>
>>
>> Muse?
>>
>>
>>
>> Thanks!
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> 
>
>

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354640
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Graphic Artist Software for HTML CSS

2013-02-22 Thread Bruce Sorge

Fireworks does a good job as well. 

Sent from my iPhone 4S. 

On Feb 22, 2013, at 12:04 PM, Gerald Guido  wrote:

> 
> In the past I have used Photoshop's Slice tool. It does a fairly decent job
> but I have always had to go in and massage it by hand. It does not by any
> means leave you with finished product out of the box but it takes care of a
> lions share of the grunt work.
> 
> HTH
> G!
> 
> On Fri, Feb 22, 2013 at 11:38 AM, Chad Gray  wrote:
> 
>> 
>> I have not kept track of all the graphic artist software adobe has come
>> out with to go from mockups to HTML/CSS.
>> 
>> 
>> 
>> If I were to tell a graphic designer to design me some mockups for a web
>> site, what is the best adobe software that will export out to _CLEAN_
>> (looks like hand written J) HTML/CSS that I can inject my CF code easily
>> into?
>> 
>> 
>> 
>> Muse?
>> 
>> 
>> 
>> Thanks!
> 
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354633
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: SOT: Graphic Artist Software for HTML CSS

2013-02-22 Thread Gerald Guido

In the past I have used Photoshop's Slice tool. It does a fairly decent job
but I have always had to go in and massage it by hand. It does not by any
means leave you with finished product out of the box but it takes care of a
lions share of the grunt work.

HTH
G!

On Fri, Feb 22, 2013 at 11:38 AM, Chad Gray  wrote:

>
> I have not kept track of all the graphic artist software adobe has come
> out with to go from mockups to HTML/CSS.
>
>
>
> If I were to tell a graphic designer to design me some mockups for a web
> site, what is the best adobe software that will export out to _CLEAN_
> (looks like hand written J) HTML/CSS that I can inject my CF code easily
> into?
>
>
>
> Muse?
>
>
>
> Thanks!
>
>
>
>
>
>
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354632
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


SOT: Graphic Artist Software for HTML CSS

2013-02-22 Thread Chad Gray

I have not kept track of all the graphic artist software adobe has come out 
with to go from mockups to HTML/CSS.

 

If I were to tell a graphic designer to design me some mockups for a web site, 
what is the best adobe software that will export out to _CLEAN_ (looks like 
hand written J) HTML/CSS that I can inject my CF code easily into?

 

Muse?

 

Thanks!

 

 

 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354629
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-25 Thread Tom Small

Hi Mark

I initially wanted to know if there was an alternative to UML for a large 
project, and although we have reviewed Argile, we will be using UML.

We are using MVC framework and the UI designs can be modelled using UML (design 
pattern). Sorry if my initial post caused any confusion.

Tom 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351704
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-25 Thread Mark Mandel

So I'm still confused - you've mentioned UML diagramming tools, and then
talked about Software development life-cycle processes as a way of solving
your diagramming tool issues.

There seems to be a disconnect somewhere here?

Maybe if you could outline the issues you are having further, we could help
narrow down a solution.

Mark

On Tue, Jun 26, 2012 at 7:49 PM, Tom Small  wrote:

>
> Hi Mark
>
> Due to the size of the project we were looking an alternative UML
> diagramming
> tools. A lot of people have suggested reviewing Agile to management a
> large software project.
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351696
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-25 Thread Cameron Childress

On Tue, Jun 26, 2012 at 5:49 AM, Tom Small  wrote:
> Due to the size of the project we were looking an alternative UML
> diagramming tools. A lot of people have suggested reviewing Agile
> to management a large software project.

UML is fine on large projects. Just make sure you break the diagrams
down into smaller chunks and you should be fine.

Perhaps you can describe in more detail what it is specifically about
UML that's a challenge in your large projects. That way list can help
come up with better alternatives for you.

-Cameron

-- 
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook | twitter | googl

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351686
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Software Project Development Process

2012-06-25 Thread Will Swain

Hi Tom,

I suppose it depends on what you call a large project. We've used it on 6
figure projects and it's been fine. But it's worth a look at least to see if
it fits the requirements.

Cheers

Will

-Original Message-
From: Tom Small [mailto:t...@re-base.net] 
Sent: 26 June 2012 11:57
To: cf-talk
Subject: Re: Software Project Development Process


Hi Will, 

Thanks and will take a look although it might not be suitable for a large
project. 




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351685
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-25 Thread Tom Small

Hi Will, 

Thanks and will take a look although it might not be suitable for a large 
project. 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351683
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-25 Thread Will Swain

Gmail has a nice plugin called LucidCharts. Found it pretty good, but not
sure it will meet your needs on a large project.

Worth a look maybe.

Will

On 26 June 2012 10:49, Tom Small  wrote:

>
> Hi Mark
>
> Due to the size of the project we were looking an alternative UML
> diagramming
> tools. A lot of people have suggested reviewing Agile to management a
> large software project.
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351681
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-25 Thread Tom Small

Hi Mark

Due to the size of the project we were looking an alternative UML diagramming
tools. A lot of people have suggested reviewing Agile to management a large 
software project. 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351680
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-24 Thread Mark Mandel

What issues are you finding with UML itself? Or it is the UML diagramming
tool you are looking to replace?

UML is the OO modelling standard - I don't think anything else out there
really exists.

Mark

On Mon, Jun 25, 2012 at 11:36 PM, Tom Small  wrote:

>
> Hi
>
> We are about the start our first large project, and in the past I have
> with have been using UML although in my opinion it has its limitations and
> is not flexible for ColdFusion and ExtJS 4.
>
> Could anyone advise me on a standardize-general purpose modelling tool
> that can be used for ColdFusion/ ExtJS 4 project?
>
> Thanks
>
> Tom
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351674
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-24 Thread Tom Small

We use UML for object oriented analysis and design.. 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351669
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-24 Thread Mark Mandel

I'm confused - are you using uml for ui mockups or for object oriented
analysis and design?

Sent from my mobile doohickey.
On Jun 24, 2012 6:38 AM, "Tom Small"  wrote:

>
> Hi
>
> We are about the start our first large project, and in the past I have
> with have been using UML although in my opinion it has its limitations and
> is not flexible for ColdFusion and ExtJS 4.
>
> Could anyone advise me on a standardize-general purpose modelling tool
> that can be used for ColdFusion/ ExtJS 4 project?
>
> Thanks
>
> Tom
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351668
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-24 Thread Tom Small

Hi Cameron

Thanks for your email greatly appreciated. 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351667
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-24 Thread Cameron Childress

On Mon, Jun 25, 2012 at 9:36 AM, Tom Small  wrote:

> Could anyone advise me on a standardize-general purpose modelling tool
> that can be used for ColdFusion/ ExtJS 4 project?
>

Check out Balsamiq for wireframing up the Sencha and web parts

http://www.balsamiq.com/products/mockups

For the CF side, UML really is fine. I'd also look into Agile before you
 bite of a big design up front:

http://en.wikipedia.org/wiki/Agile_software_development

Last, if you are really brave, read Eric Ries's Lean Startup book. you may
be scratching your head on that one, but it has alot of thoughtful insight
into product and software development in general that I think would be
informational to anyone before starting a big project.

http://www.amazon.com/dp/0307887898

-Cameron

--
Cameron Childress
--
p:   678.637.5072
im: cameroncf
facebook <http://www.facebook.com/cameroncf> |
twitter<http://twitter.com/cameronc> |
google+ <https://profiles.google.com/u/0/117829379451708140985>


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351666
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-24 Thread Tom Small

Hi Russ 

Thanks for the email although 'pencil' does not offer the flexibly that we 
require. 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351665
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-24 Thread Tom Small

Hi Russ I will give it a try 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351664
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Software Project Development Process

2012-06-24 Thread Russ Michaels

How about wireframing? I have recently been using a free tool called pencil
which is a Firefox plugin or also comes standalone.
I found it better than most of the paid tools.

Regards
Russ Michaels
On Jun 24, 2012 2:38 PM, "Tom Small"  wrote:

>
> Hi
>
> We are about the start our first large project, and in the past I have
> with have been using UML although in my opinion it has its limitations and
> is not flexible for ColdFusion and ExtJS 4.
>
> Could anyone advise me on a standardize-general purpose modelling tool
> that can be used for ColdFusion/ ExtJS 4 project?
>
> Thanks
>
> Tom
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351663
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Software Project Development Process

2012-06-24 Thread Tom Small

Hi 

We are about the start our first large project, and in the past I have with 
have been using UML although in my opinion it has its limitations and is not 
flexible for ColdFusion and ExtJS 4. 

Could anyone advise me on a standardize-general purpose modelling tool that can 
be used for ColdFusion/ ExtJS 4 project?

Thanks

Tom 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351662
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Azadi Saryev

http://neverblog.net/save-and-share-results-from-chromes-developer-tools-network-panel/

Azadi Saryev

On 08/08/2011 09:41 , Ben Conner wrote:
> Wow.  Impressive.  Is there somewhere I can disable caching?  Can this timing
> report be printed and/or saved?
>
> --Ben
>
> On 8/7/2011 6:30 PM, Azadi Saryev wrote:
>> wrench - tools - developer tools
>>
>> Azadi

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346583
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Kevin Pepperman

'Sloppy' is another good tool if you want to simulate page loads with slower
network speeds.

http://www.dallaway.com/sloppy/


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346582
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Nathan Strutz

Ben,

There is a Firebug plugin (yes, a plugin for a plugin) called YSlow (from
Yahoo!) that will show you download speeds from uncached files. I don't know
if you can export from YSlow, but I know it gives you a very complete view
of why a page is slow. Another one that seems less complete (to me) is
Google Page Speed, again, a plugin for firebug, and this one I know you can
export.

After digging a little, I noticed they both work for chrome and firefox.

Also, your web log files may have an upload time, that is, how long it took
to send a given file from the web server to a client. It could be that you
don't have to have your user install anything. Just a thought.

nathan strutz
[www.dopefly.com] [hi.im/nathanstrutz] [about.me/nathanstrutz]


On Sun, Aug 7, 2011 at 6:41 PM, Ben Conner  wrote:

>
> Wow.  Impressive.  Is there somewhere I can disable caching?  Can this
> timing
> report be printed and/or saved?
>
> --Ben
>
> On 8/7/2011 6:30 PM, Azadi Saryev wrote:
> > wrench - tools - developer tools
> >
> > Azadi
>
> --
> Ben Conner  b...@webworldinc.com
> Web World, Inc. 888-206-6486 or
> PO Box 1122 480-704-2000
> Queen Creek, AZ 85142
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346581
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Ben Conner

Wow.  Impressive.  Is there somewhere I can disable caching?  Can this timing 
report be printed and/or saved?

--Ben

On 8/7/2011 6:30 PM, Azadi Saryev wrote:
> wrench - tools - developer tools
>
> Azadi

-- 
Ben Conner  b...@webworldinc.com
Web World, Inc. 888-206-6486 or
PO Box 1122 480-704-2000
Queen Creek, AZ 85142



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346579
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Azadi Saryev

wrench - tools - developer tools

Azadi

On 08/08/2011 09:25 , Ben Conner wrote:
> How do you access the timing information in Chrome?
>
> --Ben
>
> On 8/7/2011 5:55 PM, Michael Grant wrote:
>> Chrome has these tools built right in. And, as a bonus, it's a better
>> browser too.
>>
>>
>> On Sun, Aug 7, 2011 at 8:50 PM, Kevin Pepperman   wrote:
>>
>>> Firebug for Firefox has tools for this type of thing.
>>>
>>> http://getfirebug.com/network
>>>
>>>
>>>
>>> --
>>> /Kevin Pepperman
>>>
>>> "*Never memorize what you can look up in books*."
>>> --Albert_Einstein
>>>
>>>
>>>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346578
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Ben Conner

How do you access the timing information in Chrome?

--Ben

On 8/7/2011 5:55 PM, Michael Grant wrote:
> Chrome has these tools built right in. And, as a bonus, it's a better
> browser too.
>
>
> On Sun, Aug 7, 2011 at 8:50 PM, Kevin Pepperman  wrote:
>
>> Firebug for Firefox has tools for this type of thing.
>>
>> http://getfirebug.com/network
>>
>>
>>
>> --
>> /Kevin Pepperman
>>
>> "*Never memorize what you can look up in books*."
>> --Albert_Einstein
>>
>>
>>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346577
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Ben Conner

Thanks much!  That's probably why I didn't find it: was looking for stand-alone 
software.

Will check both out.

--Ben

On 8/7/2011 5:55 PM, Michael Grant wrote:
> Chrome has these tools built right in. And, as a bonus, it's a better
> browser too.
-- 
Ben Conner  b...@webworldinc.com
Web World, Inc. 888-206-6486 or
PO Box 1122 480-704-2000
Queen Creek, AZ 85142



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346575
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Michael Grant

Chrome has these tools built right in. And, as a bonus, it's a better
browser too.


On Sun, Aug 7, 2011 at 8:50 PM, Kevin Pepperman  wrote:

>
> Firebug for Firefox has tools for this type of thing.
>
> http://getfirebug.com/network
>
>
>
> --
> /Kevin Pepperman
>
> "*Never memorize what you can look up in books*."
> --Albert_Einstein
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346574
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: timing software

2011-08-07 Thread Kevin Pepperman

Firebug for Firefox has tools for this type of thing.

http://getfirebug.com/network



-- 
/Kevin Pepperman

"*Never memorize what you can look up in books*."
--Albert_Einstein


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346573
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


timing software

2011-08-07 Thread Ben Conner

Hi,

I have a client whose website we host and maintain, written in CF.  He's 
getting 
varying results loading web pages in terms of responsiveness.  I'd like to find 
out in more detail what elements loaded, the size of those elements, and the 
time taken for each one.

I've seen a couple of websites that do that, but that kind of defeats the 
purpose--I want to see the timing from */his /*computer...not somewhere else on 
the 'net.  Thought this would be a fairly easy thing to find, but haven't 
turned 
up much.  His environment is a typical Win XP box.

Anyone know of any such tools available?

Thanks!

--Ben

-- 
Ben Conner  b...@webworldinc.com
Web World, Inc. 888-206-6486 or
PO Box 1122 480-704-2000
Queen Creek, AZ 85142



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346571
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Email Management Software

2011-07-22 Thread Russ Michaels

If you want to keep it all in-house then try www.phplist.com, this is a very
robust "host it yourself" bulk mailing solution.
I do not know of anything built in CF that comes close.


On Fri, Jul 22, 2011 at 8:01 PM, UXB  wrote:

>
> >>> What does everybody else do or any recommendations?
>
> We use a product called Mailxpert http://www.xtreeme.com/mailxpert/ for
> both
> discussion and broadcast lists.  It's primary feature was that it was very
> inexpensive $125.00 US but has proven to be fairly robust.  It is
> configurable but is not what I would say feature rich, it uses its own
> database so there is no API for interfacing with it.  We have build CF
> email
> forms for subscriptions and un-subscriptions to control it and it is
> accessed via email for broadcasts or with a local only editor.  We have
> several opt in lists in excess of 200,000 each and the only problem has
> been
> that I have had to throttle back the send to not saturate my bandwidth.  It
> has been easy to use and great for the price.
>
>
> Dennis Powers
> UXB Internet - A website Design and Hosting Company
> P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844
> W: http://www.uxbinternet.com
> W: http://www.ctbusinesslist.com
>
>
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346315
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: Email Management Software

2011-07-22 Thread UXB

>>> What does everybody else do or any recommendations?

We use a product called Mailxpert http://www.xtreeme.com/mailxpert/ for both
discussion and broadcast lists.  It's primary feature was that it was very
inexpensive $125.00 US but has proven to be fairly robust.  It is
configurable but is not what I would say feature rich, it uses its own
database so there is no API for interfacing with it.  We have build CF email
forms for subscriptions and un-subscriptions to control it and it is
accessed via email for broadcasts or with a local only editor.  We have
several opt in lists in excess of 200,000 each and the only problem has been
that I have had to throttle back the send to not saturate my bandwidth.  It
has been easy to use and great for the price.


Dennis Powers
UXB Internet - A website Design and Hosting Company
P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844
W: http://www.uxbinternet.com
W: http://www.ctbusinesslist.com





~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346312
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Email Management Software

2011-07-22 Thread Larry Lyons

+100 for mailchimp. Its very good at what it does, very flexible and most 
importantly very flexible. I've used it to manage email campaigns that have 
gone out to 10,000+ recipients. There's also a pretty sweet CFC wrapper for the 
MailChimp API, http://mailchimp.riaforge.org/

hth,
larry

>You really should look outside the coldfusion box on this one.
>take a look at www.mailchimp.com
>It is free for lists up to 500 users.
>It has an API and is pretty easy to integrate with and also has a
>Gmail/Google Apps plugin.
>
>I'm sure many others will back me up on how good Mailchimp is.
>
>
>--
>
>Russ Michaels
>
>www.bluethunderinternet.com  : Business hosting services & solutions
>www.cfmldeveloper.com: ColdFusion developer community
>www.michaels.me.uk   : my blog
>www.cfsearch.com : ColdFusion search engine
>**
>*skype me* : russmichaels 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346305
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Email Management Software

2011-07-22 Thread Stefan Richter

If you are on a Mac you could give Direct Mail a try. 
http://ethreesoftware.com/directmail/index.php

I've bought the Pro version and have been using it to manage lists with more 
than 20,000 subscribers for several years to send monthly newsletters.
I like the fact that it can connect directly to your database server, meaning 
you can run simple queries inside the tool. It also handles the usual tasks 
like mail merge, bounces and reporting.  

It may not be the best tool on the market but as far as value for money goes 
I'm very happy as managing large lists can be quite costly using hosted 
services (which btw Direct Mail also offers - you can have them send your 
emails).

Regards,

Stefan
 



On 22 Jul 2011, at 03:18, Matt Quackenbush wrote:

> 
> I have no experience with MailChimp or ExactTarget, but I bought a copy of
> Admin Pro Tools Mail List Manager a number of years back.  It was a complete
> waste of money (we ran it for about 1 week), and their support was
> non-existent.  I would certainly steer well clear of that.
> 
> /.02
> 
> 
> On Thu, Jul 21, 2011 at 4:53 PM, Jason Fisher  wrote:
> 
>> 
>> If you're doing large volumes, I recommend ExactTarget.  CF can't
>> actually manage things like bounce-backs, since that's all on the email
>> server-side.  You could write all those hooks yourself, if your email
>> server allows you to embed applications, but it's more efficient to let
>> the pro's handle it for you, at least in my experience.  Subscriptions
>> you can certainly do with CF, but you can just as easily have your CF
>> subscription system write back to ExactTarget when necessary, so they're
>> not exclusive, depending on your needs.
>> 
>> 
>> On 7/21/2011 5:05 PM, Russ Michaels wrote:
>>> You really should look outside the coldfusion box on this one.
>>> take a look at www.mailchimp.com
>>> It is free for lists up to 500 users.
>>> It has an API and is pretty easy to integrate with and also has a
>>> Gmail/Google Apps plugin.
>>> 
>>> I'm sure many others will back me up on how good Mailchimp is.
>>> 
>>> 
>>> --
>>> 
>>> Russ Michaels
>>> 
>>> www.bluethunderinternet.com  : Business hosting services&  solutions
>>> www.cfmldeveloper.com: ColdFusion developer community
>>> www.michaels.me.uk   : my blog
>>> www.cfsearch.com : ColdFusion search engine
>>> **
>>> *skype me* : russmichaels
>>> 
>>> 
>>> 
>> 
>> 
> 
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346303
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Email Management Software

2011-07-21 Thread Matt Quackenbush

I have no experience with MailChimp or ExactTarget, but I bought a copy of
Admin Pro Tools Mail List Manager a number of years back.  It was a complete
waste of money (we ran it for about 1 week), and their support was
non-existent.  I would certainly steer well clear of that.

/.02


On Thu, Jul 21, 2011 at 4:53 PM, Jason Fisher  wrote:

>
> If you're doing large volumes, I recommend ExactTarget.  CF can't
> actually manage things like bounce-backs, since that's all on the email
> server-side.  You could write all those hooks yourself, if your email
> server allows you to embed applications, but it's more efficient to let
> the pro's handle it for you, at least in my experience.  Subscriptions
> you can certainly do with CF, but you can just as easily have your CF
> subscription system write back to ExactTarget when necessary, so they're
> not exclusive, depending on your needs.
>
>
> On 7/21/2011 5:05 PM, Russ Michaels wrote:
> > You really should look outside the coldfusion box on this one.
> > take a look at www.mailchimp.com
> > It is free for lists up to 500 users.
> > It has an API and is pretty easy to integrate with and also has a
> > Gmail/Google Apps plugin.
> >
> > I'm sure many others will back me up on how good Mailchimp is.
> >
> >
> > --
> >
> > Russ Michaels
> >
> > www.bluethunderinternet.com  : Business hosting services&  solutions
> > www.cfmldeveloper.com: ColdFusion developer community
> > www.michaels.me.uk   : my blog
> > www.cfsearch.com : ColdFusion search engine
> > **
> > *skype me* : russmichaels
> >
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346302
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Email Management Software

2011-07-21 Thread Jason Fisher

If you're doing large volumes, I recommend ExactTarget.  CF can't 
actually manage things like bounce-backs, since that's all on the email 
server-side.  You could write all those hooks yourself, if your email 
server allows you to embed applications, but it's more efficient to let 
the pro's handle it for you, at least in my experience.  Subscriptions 
you can certainly do with CF, but you can just as easily have your CF 
subscription system write back to ExactTarget when necessary, so they're 
not exclusive, depending on your needs.


On 7/21/2011 5:05 PM, Russ Michaels wrote:
> You really should look outside the coldfusion box on this one.
> take a look at www.mailchimp.com
> It is free for lists up to 500 users.
> It has an API and is pretty easy to integrate with and also has a
> Gmail/Google Apps plugin.
>
> I'm sure many others will back me up on how good Mailchimp is.
>
>
> --
>
> Russ Michaels
>
> www.bluethunderinternet.com  : Business hosting services&  solutions
> www.cfmldeveloper.com: ColdFusion developer community
> www.michaels.me.uk   : my blog
> www.cfsearch.com : ColdFusion search engine
> **
> *skype me* : russmichaels
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346301
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Email Management Software

2011-07-21 Thread Russ Michaels

You really should look outside the coldfusion box on this one.
take a look at www.mailchimp.com
It is free for lists up to 500 users.
It has an API and is pretty easy to integrate with and also has a
Gmail/Google Apps plugin.

I'm sure many others will back me up on how good Mailchimp is.


--

Russ Michaels

www.bluethunderinternet.com  : Business hosting services & solutions
www.cfmldeveloper.com: ColdFusion developer community
www.michaels.me.uk   : my blog
www.cfsearch.com : ColdFusion search engine
**
*skype me* : russmichaels


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346299
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Email Management Software

2011-07-21 Thread Jacob

I am looking for a ColdFusion based email list manager. I found one that
looked great, but I guess they are no longer around.

http://adminprotools.com/detail/index.cfm?nPID=2&cid=3

I am looking to manage our customer newsletters in a more efficient way and
be able to track conversions. Also be able to manage subscriptions and
bounce backs.

What does everybody else do or any recommendations?

Thanks
Jacob


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346298
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-17 Thread Russ Michaels

Someone beat you to the punch Sean, sorry :-)
The original comment made it sound like a new feature as in NEW (not old)
rather than the word new.

Although as I said it will be gr8 if it gets round the need for
CreateObject(java) but even  so then sadly this won't be useful until all
the frameworks rewrite the code to use it and customers do the same.
Sandboxing in CF has improved very slowly over the years and the CF9 changes
do at least allow you to isolate some Java methods, which is something I
have been suggesting for years, but I think CF probably needs to take a
whole new approach to security.
Obviously the Railo method of separate contexts with their own admin is the
best solution, but they could augment this further to also sandbox any JAVA
calls so that there can be no I/O activity outside the context root at all
unless expressly permitted.

Russ

-Original Message-
From: Sean Corfield [mailto:seancorfi...@gmail.com] 
Sent: 17 November 2010 01:48
To: cf-talk
Subject: Re: CF Blog software


On Sat, Nov 13, 2010 at 4:19 AM, Russ Michaels  wrote:
> This new function

It's not a function :)

I read your email and thought "What new function? Why can't Russ be more
specific?" :)

So now CFML has a 'new' keyword that works just like 'new' in other
languages:

a = new SomeType(42); // equivalent to a = createObject( 'component',
'SomeType' ).init( 42 );
--
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/ An Architect's View --
http://corfield.org/

"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339303
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-16 Thread Sean Corfield

On Sat, Nov 13, 2010 at 4:19 AM, Russ Michaels  wrote:
> This new function

It's not a function :)

I read your email and thought "What new function? Why can't Russ be
more specific?" :)

So now CFML has a 'new' keyword that works just like 'new' in other languages:

a = new SomeType(42); // equivalent to a = createObject( 'component',
'SomeType' ).init( 42 );
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339300
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-14 Thread Russ Michaels

Ah could potentially be useful as long as it doesn't internally require
cfreateobject(java) like cfdump does.
Obviously it would  require all the frameworks to be rewritten to use this
before it will be helpful to hosts and allow them to keep createobject(java)
disabled.

RUss

-Original Message-
From: James Holmes [mailto:james.hol...@gmail.com] 
Sent: 14 November 2010 01:43
To: cf-talk
Subject: Re: CF Blog software


http://help.adobe.com/en_US/ColdFusion/9.0/Developing/WS61C07B60-3D65-4d71-8
F2A-8411D8010E60.html

--
WSS4CF - WS-Security framework for CF
http://wss4cf.riaforge.org/



On 13 November 2010 20:19, Russ Michaels  wrote:
>
> This new function
>
> -Original Message-
> From: Sean Corfield [mailto:seancorfi...@gmail.com]
> Sent: 13 November 2010 07:44
> To: cf-talk
> Subject: Re: CF Blog software
>
>
> On Thu, Nov 11, 2010 at 1:40 AM, Russ Michaels 
wrote:
>> could we have an example ?
>
> An example of what?
> --
> Sean A Corfield -- (904) 302-SEAN
> Railo Technologies, Inc. -- http://getrailo.com/
> An Architect's View -- http://corfield.org/
>
> "If you're not annoying somebody, you're not really alive."
> -- Margaret Atwood
>
>
>
> 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339191
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-13 Thread James Holmes

http://help.adobe.com/en_US/ColdFusion/9.0/Developing/WS61C07B60-3D65-4d71-8F2A-8411D8010E60.html

--
WSS4CF - WS-Security framework for CF
http://wss4cf.riaforge.org/



On 13 November 2010 20:19, Russ Michaels  wrote:
>
> This new function
>
> -Original Message-
> From: Sean Corfield [mailto:seancorfi...@gmail.com]
> Sent: 13 November 2010 07:44
> To: cf-talk
> Subject: Re: CF Blog software
>
>
> On Thu, Nov 11, 2010 at 1:40 AM, Russ Michaels  wrote:
>> could we have an example ?
>
> An example of what?
> --
> Sean A Corfield -- (904) 302-SEAN
> Railo Technologies, Inc. -- http://getrailo.com/
> An Architect's View -- http://corfield.org/
>
> "If you're not annoying somebody, you're not really alive."
> -- Margaret Atwood
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339183
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-13 Thread Russ Michaels

This new function

-Original Message-
From: Sean Corfield [mailto:seancorfi...@gmail.com] 
Sent: 13 November 2010 07:44
To: cf-talk
Subject: Re: CF Blog software


On Thu, Nov 11, 2010 at 1:40 AM, Russ Michaels  wrote:
> could we have an example ?

An example of what?
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339182
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-12 Thread Sean Corfield

On Thu, Nov 11, 2010 at 1:40 AM, Russ Michaels  wrote:
> could we have an example ?

An example of what?
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339178
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-11 Thread Russ Michaels

could we have an example ?

On Thu, Nov 11, 2010 at 2:21 AM, Sean Corfield wrote:

>
> On Wed, Nov 10, 2010 at 8:39 AM, Adrocknaphobia
>  wrote:
> > Of course, if this is CF9, you can replace all the createObject() calls
> by
> > using the 'new' keyword.
>
> Interesting. So if cfobject and createObject() are completed blocked
> by sandbox security on CF9 Enterprise, new will still work? Good to
> know.
>
> > Sorry to be a walking advertisement, but ColdFusion
> > Builder refactoring will make that task very easy.
>
> ColdFusion Builder is an excellent product. I have it open 24x7x365
> and use it for all my CFML editing. After seeing the sneak peek of
> Storm at the ColdFusion Unconference at MAX, I'm really looking
> forward to upgrading when that ships!
>
> I'm bummed it won't run on Linux tho'... My Unbuntu netbook arrives
> next week and I shall really miss CFBuilder on that when I'm traveling
> :(
> --
> Sean A Corfield -- (904) 302-SEAN
> Railo Technologies, Inc. -- http://getrailo.com/
> An Architect's View -- http://corfield.org/
>
> "If you're not annoying somebody, you're not really alive."
> -- Margaret Atwood
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339106
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-10 Thread Sean Corfield

On Wed, Nov 10, 2010 at 8:39 AM, Adrocknaphobia
 wrote:
> Of course, if this is CF9, you can replace all the createObject() calls by
> using the 'new' keyword.

Interesting. So if cfobject and createObject() are completed blocked
by sandbox security on CF9 Enterprise, new will still work? Good to
know.

> Sorry to be a walking advertisement, but ColdFusion
> Builder refactoring will make that task very easy.

ColdFusion Builder is an excellent product. I have it open 24x7x365
and use it for all my CFML editing. After seeing the sneak peek of
Storm at the ColdFusion Unconference at MAX, I'm really looking
forward to upgrading when that ships!

I'm bummed it won't run on Linux tho'... My Unbuntu netbook arrives
next week and I shall really miss CFBuilder on that when I'm traveling
:(
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339101
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-10 Thread Andrew Scott

You could with regex support, and I can't recall if refactoring supports it
or not..

Regards,
Andrew Scott
http://www.andyscott.id.au/


> -Original Message-
> From: Russ Michaels [mailto:r...@michaels.me.uk]
> Sent: Thursday, 11 November 2010 6:24 AM
> To: cf-talk
> Subject: RE: CF Blog software
> 
> 
> It would be a bit more complicated than that surely, as you are not just
> replacing a word, you are replacing a function call and all its arguments
with a
> tag and all its parameters, and as each instance will not be the name it
> doesn't seem like something you could easily automate.
> 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339099
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-10 Thread Paul Kukiel

Actually we have a largish site hosted at CrystalTech with a partner and
have been having constant issues.

Paul Kukiel
http://blog.kukiel.net

On Wed, Nov 10, 2010 at 4:40 AM, Jason Fisher  wrote:

>
> +1 Ben's idea
>
>
> Some of those are reasonable, but CFCONTENT, CFDUMP, CreateObject()??  Go
> to CrystalTech for a few bucks a quarter or something.
>
> 
>
> From: "Ben Forta" 
> Sent: Tuesday, November 09, 2010 11:37 AM
> To: "cf-talk" 
> Subject: Re: CF Blog software
>
> Change hosting companies. Really.
>
> --- Ben
>
> (Sent from my Flash enabled Android device)
>
> On Nov 9, 2010 2:35 PM, "DURETTE, STEVEN J (ATTASIAIT)" 
> wrote:
>
> Hi all,
>
> So I haven't blogged in about a year because of different issues with my
> website provider...  Any how I'm looking to get my blog going again, but
> I don't know how I should proceed. I used to use blogcfc, but my
> provider restricts a bunch of tags (below).  Can anyone suggest which
> blog software might be good to use under these restrictions or if there
> are any "work around"  tutorials for the latest versions of blogging
> code?  I'd prefer to stick with something CF based.
>
> The restrictions I have are as follows:
>
> CF Tags not allowed:
>
> CFCOLLECTION
>
> CFCONTENT
>
> CFDUMP
>
> CFEXECUTE
>
> CFLOG
>
> CFOBJECT
>
> CFOBJECTCACHE
>
> CFREGISTRY
>
> CF Functions not allowed:
>
> SetProfileString
>
> CreateObject(COM)
>
> CreateObject(CORBA)
>
> CreateObject(JAVA)
>
> Thanks for your insights.
>
> Steve
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339096
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-10 Thread Dave Watts

> It would be a bit more complicated than that surely, as you are not just
> replacing a word, you are replacing a function call and all its arguments
> with a tag and all its parameters, and as each instance will not be the name
> it doesn't seem like something you could easily automate.

Not necessarily so complicated:
http://davidmichaelkarr.blogspot.com/2008/10/reformat-generated-getterssetters-with.html

I don't see why the same basic mechanism can't be used to rewrite
CreateObject calls to "new".

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339095
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-10 Thread Russ Michaels

It would be a bit more complicated than that surely, as you are not just
replacing a word, you are replacing a function call and all its arguments
with a tag and all its parameters, and as each instance will not be the name
it doesn't seem like something you could easily automate.



-Original Message-
From: Adrocknaphobia [mailto:adrocknapho...@gmail.com] 
Sent: 10 November 2010 16:40
To: cf-talk
Subject: Re: CF Blog software


Of course, if this is CF9, you can replace all the createObject() calls by
using the 'new' keyword. Sorry to be a walking advertisement, but ColdFusion
Builder refactoring will make that task very easy.

-Adam

On Tue, Nov 9, 2010 at 2:11 PM, Raymond Camden  wrote:

>
> To Dave's suggestion of replacing createObject w/ cfinvoke - I believe 
> (stress - believe) other BlogCFC users have done it in the past. It 
> isn't officially supported by BlogCFC, Inc (aka me) but I believe it 
> can be done.
>
>
> On Tue, Nov 9, 2010 at 12:59 PM, Alan Rother 
> wrote:
> >
> > Ah, that does make sense. Thanks Dave!
> >
> > =]
> >
> > On Tue, Nov 9, 2010 at 11:56 AM, Dave Watts  wrote:
> >
> >>
> >> > I know all about CreateObject's security risks from a hosting
> >> perspective,
> >> > but I've never heard of an issue with CFCONTENT (I'm not doubting 
> >> > you,
> >> I'm
> >> > just curious what the issues are.)
> >>
> >> It can be used to download any file that the CF service has 
> >> permission to access, including sensitive Windows files (assuming 
> >> you're on Windows). By default, on Windows the CF service runs as 
> >> SYSTEM, which has practically unrestricted access to everything. 
> >> Even if CF is configured to use a less-privileged user account (as 
> >> it should be as a matter of course) that user account will 
> >> certainly have permission to read any files used by, say, other hosting
clients.
> >>
> >> My assumption is that CFCONTENT can be sandboxed, but again I'm no 
> >> expert on sandboxing.
> >>
> >> Dave Watts, CTO, Fig Leaf Software
> >> http://www.figleaf.com/
> >> http://training.figleaf.com/
> >>
> >> Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA 
> >> Schedule, and provides the highest caliber vendor-authorized 
> >> instruction at our training centers, online, or onsite.
> >>
> >>
> >
> >
>
> 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339091
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-10 Thread Adrocknaphobia

Of course, if this is CF9, you can replace all the createObject() calls by
using the 'new' keyword. Sorry to be a walking advertisement, but ColdFusion
Builder refactoring will make that task very easy.

-Adam

On Tue, Nov 9, 2010 at 2:11 PM, Raymond Camden  wrote:

>
> To Dave's suggestion of replacing createObject w/ cfinvoke - I believe
> (stress - believe) other BlogCFC users have done it in the past. It
> isn't officially supported by BlogCFC, Inc (aka me) but I believe it
> can be done.
>
>
> On Tue, Nov 9, 2010 at 12:59 PM, Alan Rother 
> wrote:
> >
> > Ah, that does make sense. Thanks Dave!
> >
> > =]
> >
> > On Tue, Nov 9, 2010 at 11:56 AM, Dave Watts  wrote:
> >
> >>
> >> > I know all about CreateObject's security risks from a hosting
> >> perspective,
> >> > but I've never heard of an issue with CFCONTENT (I'm not doubting you,
> >> I'm
> >> > just curious what the issues are.)
> >>
> >> It can be used to download any file that the CF service has permission
> >> to access, including sensitive Windows files (assuming you're on
> >> Windows). By default, on Windows the CF service runs as SYSTEM, which
> >> has practically unrestricted access to everything. Even if CF is
> >> configured to use a less-privileged user account (as it should be as a
> >> matter of course) that user account will certainly have permission to
> >> read any files used by, say, other hosting clients.
> >>
> >> My assumption is that CFCONTENT can be sandboxed, but again I'm no
> >> expert on sandboxing.
> >>
> >> Dave Watts, CTO, Fig Leaf Software
> >> http://www.figleaf.com/
> >> http://training.figleaf.com/
> >>
> >> Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
> >> GSA Schedule, and provides the highest caliber vendor-authorized
> >> instruction at our training centers, online, or onsite.
> >>
> >>
> >
> >
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339087
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-10 Thread Gerald Guido

I am currently evaluating Amazon's EC3 free tier (613 megs ram, 10 gig HD
space and a single core 2.66GHz processor) and right now I have an instance
running on a bare bone Centos 5.4 64 bit install with Railo, Apache 2.2,
Tomcat, Mysql and WebMin and it is running like a top. I still have a couple
hundred megs of ram head room. This should be plenty to run a couple of low
traffic sites. I ran my blog (Blog cfc) and 5-6 other sites on Railo for a
couple of years with out a hiccup.

I am still evaluating and experimenting with it but I will probably make a
public copy of the AMI so others can try it out.

BTW, Amazon's free tier is for good for 1 year for new customers. After that
you can rent the instance for as low as $10 a month with a years lease.

http://aws.amazon.com/free/

G!

On Tue, Nov 9, 2010 at 11:35 AM, DURETTE, STEVEN J (ATTASIAIT) <
sd1...@att.com> wrote:

>
> Hi all,
>
>
>
> So I haven't blogged in about a year because of different issues with my
> website provider...  Any how I'm looking to get my blog going again, but
> I don't know how I should proceed. I used to use blogcfc, but my
> provider restricts a bunch of tags (below).  Can anyone suggest which
> blog software might be good to use under these restrictions or if there
> are any "work around"  tutorials for the latest versions of blogging
> code?  I'd prefer to stick with something CF based.
>
>
>
> The restrictions I have are as follows:
>
> CF Tags not allowed:
>
> CFCOLLECTION
>
> CFCONTENT
>
> CFDUMP
>
> CFEXECUTE
>
> CFLOG
>
> CFOBJECT
>
> CFOBJECTCACHE
>
> CFREGISTRY
>
>
>
> CF Functions not allowed:
>
> SetProfileString
>
> CreateObject(COM)
>
> CreateObject(CORBA)
>
> CreateObject(JAVA)
>
>
>
> Thanks for your insights.
>
> Steve
>
>
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339077
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-10 Thread Russ Michaels

Thus the previous discussion on sandbox security etc

-Original Message-
From: Sean Corfield [mailto:seancorfi...@gmail.com] 
Sent: 10 November 2010 00:37
To: cf-talk
Subject: Re: CF Blog software


Mango Blog is great but it won't run on a ColdFusion host that restricts CFC
creation...

On Tue, Nov 9, 2010 at 3:27 PM, AJ Mercer  wrote:

>
> I am running mangoBlog on Railo
>http://www.mangoblog.org/
> <http://www.mangoblog.org/>
>
>




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339072
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Dave Merrill

Ii don't think many hosts prohibit CreateObject('component'), they're
after the java/com/corba flavors. CreateObject('java') is mighty
useful though; not sure if Mango uses it or not.

Dave

On Tue, Nov 9, 2010 at 7:36 PM, Sean Corfield  wrote:
>
> Mango Blog is great but it won't run on a ColdFusion host that restricts CFC
> creation...
>
> On Tue, Nov 9, 2010 at 3:27 PM, AJ Mercer  wrote:
>
>>
>> I am running mangoBlog on Railo
>>    http://www.mangoblog.org/
>> 
>>
>>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339067
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Sean Corfield

Mango Blog is great but it won't run on a ColdFusion host that restricts CFC
creation...

On Tue, Nov 9, 2010 at 3:27 PM, AJ Mercer  wrote:

>
> I am running mangoBlog on Railo
>http://www.mangoblog.org/
> 
>
>


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339060
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread David McGraw

So am I and I have no complaints.

Dave McGraw
Oyova Software, LLC
http://www.oyova.com


On Tue, Nov 9, 2010 at 6:27 PM, AJ Mercer  wrote:

>
> I am running mangoBlog on Railo
>http://www.mangoblog.org/
> <http://www.mangoblog.org/>
>
>
> On 10 November 2010 02:25, DURETTE, STEVEN J (ATTASIAIT)  >wrote:
>
> >
> > Thanks, I will look at them (I have no experience with Railo), but I am
> > pre-paid for a few months, so...
> >
> > Any ideas on cf blogging software I can use?  Any tutorials on dumbing
> > down the current options to make them work?  I found a tutorial for
> > blogcfc but it was so many versions back, some of the changes that the
> > tutorial suggested weren't even there anymore.
> >
> > Steve
> >
> > --
>
> *AJ Mercer*
>  <http://webonix.net> |  community="Open" /> <http://webonix.org>
> http://twitter.com/webonix
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339058
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread AJ Mercer

I am running mangoBlog on Railo
http://www.mangoblog.org/
<http://www.mangoblog.org/>


On 10 November 2010 02:25, DURETTE, STEVEN J (ATTASIAIT) wrote:

>
> Thanks, I will look at them (I have no experience with Railo), but I am
> pre-paid for a few months, so...
>
> Any ideas on cf blogging software I can use?  Any tutorials on dumbing
> down the current options to make them work?  I found a tutorial for
> blogcfc but it was so many versions back, some of the changes that the
> tutorial suggested weren't even there anymore.
>
> Steve
>
> --

*AJ Mercer*
 <http://webonix.net> |  <http://webonix.org>
http://twitter.com/webonix


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339057
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-09 Thread Andrew Scott

Yes I am fully aware of that, which is why I stated the way it was
implemented.

Regards,
Andrew Scott
http://www.andyscott.id.au/


> -Original Message-
> From: Jochem van Dieten [mailto:joch...@gmail.com]
> Sent: Wednesday, 10 November 2010 7:52 AM
> To: cf-talk
> Subject: Re: CF Blog software
> 
> 
> On Tue, Nov 9, 2010 at 9:44 PM, Andrew Scott wrote:
> > And what surprised me was cfdump is one, because of the way it is
> > implemented.
> 
> cfdump internally uses createObject("java", ...) so it isn't as much that
> cfdump iself is disallowed as that you can't use it when Java objects have
> been disabled. But since cfdump is just a .cfm template I replace it with
> another implementation of cfdump that doesn't rely on Java objects when I
> built a secure server.
> 
> Jochem
> 


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339056
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Russ Michaels

you can use both Java and JSP pages on a coldfusion enabled server.
Use of Java just requires CreateObject(java)
Use of JSP pages just requires the .jsp extension to be enabled on the
server. Although you can use servlets and JSP tag libraries within CFM pages
without anything else being enabled I believe. Check the cfdocs.

Russ

On Tue, Nov 9, 2010 at 9:11 PM, DURETTE, STEVEN J (ATTASIAIT) <
sd1...@att.com> wrote:

>
> I worded that wrong... It's been a long day.
>
> I have two sites, neither of which generate money. One for my own
> personal use and one for a club at the local community college.  So 9.95
> a month or lower is better for me.  What I'm not totally understanding
> is I could (if I knew how) use Java Server Pages on this same account.
> If I can use Java there why shouldn't I be able to use Java in
> ColdFusion.let
>
> Any how the point is moot at the moment, I'm stuck for the next few
> months. I wanted something I could use now and look at new hosting in
> the future.
>
> Steve
>
> -Original Message-
> From: DURETTE, STEVEN J (ATTASIAIT)
> Sent: Tuesday, November 09, 2010 4:07 PM
> To: cf-talk
> Subject: RE: CF Blog software
>
>
> Yes, but you are assuming commercial hosting.  I host my own website
> (non-commercial) and the website for a club at the local community
> college.
>
> Neither generates money so cost is the issue here. I work at a
> corporation doing CF during the day, the stuff I'm talking about is my
> free-time "donation" type of stuff. So it's all out of pocket for me
> which is why I go for the bare minimum.
>
> Steve
>
> -Original Message-
> From: Jochem van Dieten [mailto:joch...@gmail.com]
> Sent: Tuesday, November 09, 2010 3:53 PM
> To: cf-talk
> Subject: Re: CF Blog software
>
>
> On Tue, Nov 9, 2010 at 5:35 PM, DURETTE, STEVEN J (ATTASIAIT) wrote:
> > my provider restricts a bunch of tags (below)
>
> Most of the restrictions are reasonable for a shared host that wants
> to provide a modicum of security. In a properly configured Sandbox
> cfcontent, cflog and setProfileStrng could be enabled but the rest is
> just the way ColdFusion works.
>
> Pick two:
> - shared hosting
> - security
> - functionality
>
>
> With the prices I see on some of the VPS / cloud offerings I can't
> imagine a scenario where shared hosting is the best solution for any
> commercial site, and we are fast approaching the same for any personal
> site as well.
>
> Jochem
>
>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339041
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-09 Thread DURETTE, STEVEN J (ATTASIAIT)

I worded that wrong... It's been a long day.

I have two sites, neither of which generate money. One for my own
personal use and one for a club at the local community college.  So 9.95
a month or lower is better for me.  What I'm not totally understanding
is I could (if I knew how) use Java Server Pages on this same account.
If I can use Java there why shouldn't I be able to use Java in
ColdFusion. 

Any how the point is moot at the moment, I'm stuck for the next few
months. I wanted something I could use now and look at new hosting in
the future.

Steve

-Original Message-
From: DURETTE, STEVEN J (ATTASIAIT) 
Sent: Tuesday, November 09, 2010 4:07 PM
To: cf-talk
Subject: RE: CF Blog software


Yes, but you are assuming commercial hosting.  I host my own website
(non-commercial) and the website for a club at the local community
college.

Neither generates money so cost is the issue here. I work at a
corporation doing CF during the day, the stuff I'm talking about is my
free-time "donation" type of stuff. So it's all out of pocket for me
which is why I go for the bare minimum.

Steve

-Original Message-
From: Jochem van Dieten [mailto:joch...@gmail.com] 
Sent: Tuesday, November 09, 2010 3:53 PM
To: cf-talk
Subject: Re: CF Blog software


On Tue, Nov 9, 2010 at 5:35 PM, DURETTE, STEVEN J (ATTASIAIT) wrote:
> my provider restricts a bunch of tags (below)

Most of the restrictions are reasonable for a shared host that wants
to provide a modicum of security. In a properly configured Sandbox
cfcontent, cflog and setProfileStrng could be enabled but the rest is
just the way ColdFusion works.

Pick two:
- shared hosting
- security
- functionality


With the prices I see on some of the VPS / cloud offerings I can't
imagine a scenario where shared hosting is the best solution for any
commercial site, and we are fast approaching the same for any personal
site as well.

Jochem



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339040
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Russ Michaels

Steve,

If the security/reliability is important to you then you sound like a good
candidate for Open BlueDragon or Railo.
Although to be fair most charity websites fit the shared hosting model just
fine as they are not mission critical or anything.

Russ

On Tue, Nov 9, 2010 at 9:07 PM, DURETTE, STEVEN J (ATTASIAIT) <
sd1...@att.com> wrote:

>
> Yes, but you are assuming commercial hosting.  I host my own website
> (non-commercial) and the website for a club at the local community
> college.
>
> Neither generates money so cost is the issue here. I work at a
> corporation doing CF during the day, the stuff I'm talking about is my
> free-time "donation" type of stuff. So it's all out of pocket for me
> which is why I go for the bare minimum.
>
> Steve
>
> -Original Message-
> From: Jochem van Dieten [mailto:joch...@gmail.com]
> Sent: Tuesday, November 09, 2010 3:53 PM
> To: cf-talk
> Subject: Re: CF Blog software
>
>
> On Tue, Nov 9, 2010 at 5:35 PM, DURETTE, STEVEN J (ATTASIAIT) wrote:
> > my provider restricts a bunch of tags (below)
>
> Most of the restrictions are reasonable for a shared host that wants
> to provide a modicum of security. In a properly configured Sandbox
> cfcontent, cflog and setProfileStrng could be enabled but the rest is
> just the way ColdFusion works.
>
> Pick two:
> - shared hosting
> - security
> - functionality
>
>
> With the prices I see on some of the VPS / cloud offerings I can't
> imagine a scenario where shared hosting is the best solution for any
> commercial site, and we are fast approaching the same for any personal
> site as well.
>
> Jochem
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339039
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-09 Thread DURETTE, STEVEN J (ATTASIAIT)

Yes, but you are assuming commercial hosting.  I host my own website
(non-commercial) and the website for a club at the local community
college.

Neither generates money so cost is the issue here. I work at a
corporation doing CF during the day, the stuff I'm talking about is my
free-time "donation" type of stuff. So it's all out of pocket for me
which is why I go for the bare minimum.

Steve

-Original Message-
From: Jochem van Dieten [mailto:joch...@gmail.com] 
Sent: Tuesday, November 09, 2010 3:53 PM
To: cf-talk
Subject: Re: CF Blog software


On Tue, Nov 9, 2010 at 5:35 PM, DURETTE, STEVEN J (ATTASIAIT) wrote:
> my provider restricts a bunch of tags (below)

Most of the restrictions are reasonable for a shared host that wants
to provide a modicum of security. In a properly configured Sandbox
cfcontent, cflog and setProfileStrng could be enabled but the rest is
just the way ColdFusion works.

Pick two:
- shared hosting
- security
- functionality


With the prices I see on some of the VPS / cloud offerings I can't
imagine a scenario where shared hosting is the best solution for any
commercial site, and we are fast approaching the same for any personal
site as well.

Jochem

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339038
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Russ Michaels

CreateObject(com)  is very dangerous and should never be enabled on a shared
server. DANGER will Robinson.
All the sandbox does is either enable or disable this function, as your
calling a COM object which has nothing to do with JAVA it is run totally
outside of the sandbox permissions. Again it would execute with the same
permissions as the java/coldfusion service.

CreateObject(java) is not much better as it allows you to execute any java
function. CF9 did finally address this by allow you to restrict certain
methods so you can for example block access to the Service Factory (cfadmin
settings). However as pretty much every framework/app need this function and
also needs the classloader, to disable this function would mean crippling
ColdFusion for most people. So it is a security risk most hosts have to
take.
Really this should also never be enabled on a shared server either as it
cannot truly be locked down,

CreateObject(corba) is would assume is the same as the above, but I have no
idea what the hell corba is and it is not installed on any of our servers
anyway.

So at the end of the day, no ColdFusion host can be 100% secure unless they
cripple the service and disable functionality the most customers are going
to need. So if you want security you will definitely need your own server.

--
Russ Michaels
www.cfmldeveloper.com - Supporting the CF community since 1999
FREE ColdFusion/Railo hosting for developers.

blog: www.michaels.me.uk


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339037
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Jochem van Dieten

On Tue, Nov 9, 2010 at 5:35 PM, DURETTE, STEVEN J (ATTASIAIT) wrote:
> my provider restricts a bunch of tags (below)

Most of the restrictions are reasonable for a shared host that wants
to provide a modicum of security. In a properly configured Sandbox
cfcontent, cflog and setProfileStrng could be enabled but the rest is
just the way ColdFusion works.

Pick two:
- shared hosting
- security
- functionality


With the prices I see on some of the VPS / cloud offerings I can't
imagine a scenario where shared hosting is the best solution for any
commercial site, and we are fast approaching the same for any personal
site as well.

Jochem


-- 
Jochem van Dieten
http://jochem.vandieten.net/

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339036
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Jochem van Dieten

On Tue, Nov 9, 2010 at 9:44 PM, Andrew Scott wrote:
> And what surprised me was cfdump is one, because of the way it is
> implemented.

cfdump internally uses createObject("java", ...) so it isn't as much
that cfdump iself is disallowed as that you can't use it when Java
objects have been disabled. But since cfdump is just a .cfm template I
replace it with another implementation of cfdump that doesn't rely on
Java objects when I built a secure server.

Jochem

-- 
Jochem van Dieten
http://jochem.vandieten.net/

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339035
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-09 Thread Andrew Scott

Actually Hostek do not allow everything, they lock down the exact same tags.

And what surprised me was cfdump is one, because of the way it is
implemented.

Regards,
Andrew Scott
http://www.andyscott.id.au/



> -Original Message-
> From: Gerald Guido [mailto:gerald.gu...@gmail.com]
> Sent: Wednesday, 10 November 2010 6:27 AM
> To: cf-talk
> Subject: Re: CF Blog software
> 
> 
> I believe the issue is with createobject using Java, COM and CORBA and not
> create object(component)
> 
> From the OP:
> CreateObject(COM)
> CreateObject(CORBA)
> CreateObject(JAVA)
> 
> Another option would be http://hostek.com/. They have cheap plans and
> support everything except CFREGISTRY and CFEXECUTE. But they had
> stability/down time issues when I was with them a few years back.
> 
> If you can live with (potential) sporadic down time that may be an option.
> My friend hosts some sites there and he said that he doesn't have many
> problems.
> 
> G!
> 
> 
> On Tue, Nov 9, 2010 at 2:11 PM, Raymond Camden 
> wrote:
> 
> >
> > To Dave's suggestion of replacing createObject w/ cfinvoke - I believe
> > (stress - believe) other BlogCFC users have done it in the past. It
> > isn't officially supported by BlogCFC, Inc (aka me) but I believe it
> > can be done.
> >
> >
> --
> Gerald Guido
> http://www.myinternetisbroken.com
> 
> "Wait. We can't stop here. This is bat country."
> -- HST
> 
> 
> ~~
> ~~~|
> Order the Adobe Coldfusion Anthology now!
> http://www.amazon.com/Adobe-Coldfusion-
> Anthology/dp/1430272155/?tag=houseoffusion
> Archive: http://www.houseoffusion.com/groups/cf-
> talk/message.cfm/messageid:339026
> Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
> Unsubscribe: http://www.houseoffusion.com/groups/cf-
> talk/unsubscribe.cfm


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339034
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Russ Michaels

without sandboxing (cf enterprise required) if all tags are enabled, any
user can read/write files anywhere on the server. Even if lockdown
procedures arr used, coldfusion will at bare allow all users access to each
others sites even if not the whole server.
Any other customers on the server can therefore easily hack your site, put
phishing code or viruses on your site, steal your database (customer
information etc), harvest credit card details from your payment pages, and
anything else you can imagine.
Any customer could also at any time simply delete your site, or take the
entire server down.

The problem is that most people looking for hosting are clueless about the
server.security side of things, they just want all features for the lowest
price and do not consider the consequences.
But then when the server goes down or your site does get hacked, who are you
going to blame? The host for having all these things enabled in the first
place (which you wanted) or will you blame yourself for using a cheap host
that has everything enabled.

Let me also point out that this is down to the way JAVA works, as all
requests run in the context of the service not the web server
authentication. Most hosts rely on their hositng control to manage the
security side of things, which they do for things like PHP/ASP etc, on IIS
for example a new windows user is created for each website and that website
runs under that user, who only has permission to access that website root
and certain system folders. So when a .php file runs it cannot read/write
outside the webroot. Any host that is not doing this is also allowing system
wide read/write/execute for all scripting languages.

When a .cfm page it runs as the user that the ColdFusion service is running
as, which has full system access.
Many cheap hosts simply install ColdFusion Professional on the server and
presume it works just like PHP or ASP, and will be as clueless to the
security issues as their customer.
Installing and offering ColdFusion hosting is not really the same as
supporting it. To support it, you have to actually know what you are doing
and be aware of the security risks.

People will often say "just run your own instance"
you don't get this option on shared hosting as it is then not shared
hosting. Running your own instance consumes quite a bit of system resources
and is akin to running your own VPS as its your own copy of CF with its own
CFadmin that you manage yourself, and you wont get either for $5 per month
i'm afraid.

As the saying goes, you get what you pay for.

If your site is actually your primary source of income, then presumably it
is quite important to you, therefore you should be prepared to spend  more
than a few bucks a month on it, otherwise you are just shooting yourself in
the foot.
You can get a VPS from £20 per month these days, so really anyone can afford
this, how much does your site generate for you each month? a lot more than
£20 I bet. You don't even need technical skills these days as you can use a
hosting control panel to do everything.

If you had to buy a new RELIABLE car to get you to/from work, would you buy
a cheap £50 car that you have to share with 500 people ?

--
Russ Michaels
www.cfmldeveloper.com
Supporting the CF community since 1999
FREE ColdFusion/Railo hosting for developers.

www.bluethunderinternet.com
Professional ColdFusion hosting

my blog: www.michaels.me.u

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339033
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Dave Watts

> Actually, you can lock it down by the type: COM, Java, CORBA, .Net (c8 +)
> and Webservice or you can disable the entire function.
>
> This is on CF 8 standard so it is server wide. No sandbox support on
> standard but I assume (a dangerous thing to do with Mr. Watts here ;) ) that
> it would behave the same for sandboxes (as it does on CF9 developer).

Feel free to assume - I know very little about sandboxes. One of the
joys of working in the enterprise, I guess. Russ is the guy who knows
about sandboxes here.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339032
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Gerald Guido

>. The problem as I recall is that there wasn't a way to exclude one
specific type of CreateObject call.


Actually, you can lock it down by the type: COM, Java, CORBA, .Net (c8 +)
and Webservice or you can disable the entire function.

This is on CF 8 standard so it is server wide. No sandbox support on
standard but I assume (a dangerous thing to do with Mr. Watts here ;) ) that
it would behave the same for sandboxes (as it does on CF9 developer).

G!

On Tue, Nov 9, 2010 at 2:41 PM, Dave Watts  wrote:

>
> > I believe the issue is with createobject using Java, COM and CORBA and
> not
> > create object(component)
> >
> > From the OP:
> > CreateObject(COM)
> > CreateObject(CORBA)
> > CreateObject(JAVA)
>
> The problem as I recall is that there wasn't a way to exclude one
> specific type of CreateObject call. Again, though, I'm no expert with
> sandbox security and this may no longer be true.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> http://training.figleaf.com/
>
> Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
> GSA Schedule, and provides the highest caliber vendor-authorized
> instruction at our training centers, online, or onsite.
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339031
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Dave Watts

> I believe the issue is with createobject using Java, COM and CORBA and not
> create object(component)
>
> From the OP:
> CreateObject(COM)
> CreateObject(CORBA)
> CreateObject(JAVA)

The problem as I recall is that there wasn't a way to exclude one
specific type of CreateObject call. Again, though, I'm no expert with
sandbox security and this may no longer be true.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339027
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Gerald Guido

I believe the issue is with createobject using Java, COM and CORBA and not
create object(component)

>From the OP:
CreateObject(COM)
CreateObject(CORBA)
CreateObject(JAVA)

Another option would be http://hostek.com/. They have cheap plans and
support everything except CFREGISTRY and CFEXECUTE. But they had
stability/down time issues when I was with them a few years back.

If you can live with (potential) sporadic down time that may be an option.
My friend hosts some sites there and he said that he doesn't have many
problems.

G!


On Tue, Nov 9, 2010 at 2:11 PM, Raymond Camden  wrote:

>
> To Dave's suggestion of replacing createObject w/ cfinvoke - I believe
> (stress - believe) other BlogCFC users have done it in the past. It
> isn't officially supported by BlogCFC, Inc (aka me) but I believe it
> can be done.
>
>
-- 
Gerald Guido
http://www.myinternetisbroken.com

"Wait. We can't stop here. This is bat country."
-- HST


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339026
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Raymond Camden

To Dave's suggestion of replacing createObject w/ cfinvoke - I believe
(stress - believe) other BlogCFC users have done it in the past. It
isn't officially supported by BlogCFC, Inc (aka me) but I believe it
can be done.


On Tue, Nov 9, 2010 at 12:59 PM, Alan Rother  wrote:
>
> Ah, that does make sense. Thanks Dave!
>
> =]
>
> On Tue, Nov 9, 2010 at 11:56 AM, Dave Watts  wrote:
>
>>
>> > I know all about CreateObject's security risks from a hosting
>> perspective,
>> > but I've never heard of an issue with CFCONTENT (I'm not doubting you,
>> I'm
>> > just curious what the issues are.)
>>
>> It can be used to download any file that the CF service has permission
>> to access, including sensitive Windows files (assuming you're on
>> Windows). By default, on Windows the CF service runs as SYSTEM, which
>> has practically unrestricted access to everything. Even if CF is
>> configured to use a less-privileged user account (as it should be as a
>> matter of course) that user account will certainly have permission to
>> read any files used by, say, other hosting clients.
>>
>> My assumption is that CFCONTENT can be sandboxed, but again I'm no
>> expert on sandboxing.
>>
>> Dave Watts, CTO, Fig Leaf Software
>> http://www.figleaf.com/
>> http://training.figleaf.com/
>>
>> Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
>> GSA Schedule, and provides the highest caliber vendor-authorized
>> instruction at our training centers, online, or onsite.
>>
>>
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339023
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Alan Rother

Ah, that does make sense. Thanks Dave!

=]

On Tue, Nov 9, 2010 at 11:56 AM, Dave Watts  wrote:

>
> > I know all about CreateObject's security risks from a hosting
> perspective,
> > but I've never heard of an issue with CFCONTENT (I'm not doubting you,
> I'm
> > just curious what the issues are.)
>
> It can be used to download any file that the CF service has permission
> to access, including sensitive Windows files (assuming you're on
> Windows). By default, on Windows the CF service runs as SYSTEM, which
> has practically unrestricted access to everything. Even if CF is
> configured to use a less-privileged user account (as it should be as a
> matter of course) that user account will certainly have permission to
> read any files used by, say, other hosting clients.
>
> My assumption is that CFCONTENT can be sandboxed, but again I'm no
> expert on sandboxing.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> http://training.figleaf.com/
>
> Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
> GSA Schedule, and provides the highest caliber vendor-authorized
> instruction at our training centers, online, or onsite.
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339022
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Dave Watts

> I know all about CreateObject's security risks from a hosting perspective,
> but I've never heard of an issue with CFCONTENT (I'm not doubting you, I'm
> just curious what the issues are.)

It can be used to download any file that the CF service has permission
to access, including sensitive Windows files (assuming you're on
Windows). By default, on Windows the CF service runs as SYSTEM, which
has practically unrestricted access to everything. Even if CF is
configured to use a less-privileged user account (as it should be as a
matter of course) that user account will certainly have permission to
read any files used by, say, other hosting clients.

My assumption is that CFCONTENT can be sandboxed, but again I'm no
expert on sandboxing.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339021
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Alan Rother

Hey Dave,

>>>CFCONTENT and CreateObject both have serious security implications.
I know all about CreateObject's security risks from a hosting perspective,
but I've never heard of an issue with CFCONTENT (I'm not doubting you, I'm
just curious what the issues are.)

=]

On Tue, Nov 9, 2010 at 11:33 AM, Dave Watts  wrote:

>
> > Any ideas on cf blogging software I can use?  Any tutorials on dumbing
> > down the current options to make them work?  I found a tutorial for
> > blogcfc but it was so many versions back, some of the changes that the
> > tutorial suggested weren't even there anymore.
>
> I haven't worked with BlogCFC so this is only speculation. But you
> should be able to replace CreateObject or CFOBJECT calls with
> CFINVOKE.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> http://training.figleaf.com/
>
> Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
> GSA Schedule, and provides the highest caliber vendor-authorized
> instruction at our training centers, online, or onsit
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339020
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Ben Forta

There are indeed inherent risks and limitations with shared hosting. But
there are solutions, including ones less expensive than dedicated hosting.
Sandboxing is one option, although not an absolutely perfect one.

The preferred option (these days) is the one Dave mentioned, visualization,
where you get a dedicated isolated virtual instance without dedicated
hardware. And we've made sure that ColdFusion licensing makes this a viable
option.

And thus my original response.

--- Ben

(Sent from my Flash enabled Android device)

On Nov 9, 2010 4:15 PM, "Dave Watts"  wrote:


> Granted they shouldn't have unrestricted access, but I would argue that
you
> should be able to c...
Yes, the ability to build complex applications may well be hampered in
a shared hosting environment. I'm not an expert in how to best
configure a shared hosting environment, but I suspect that the more
you pay, the more likely your applications will be able to use these
specific features. I don't know if CreateObject can effectively be
sandboxed, for example, but that could be solved using multiple
instances or VPS.


Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf S...
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339009

Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.hous...


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339019
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Dave Watts

> Any ideas on cf blogging software I can use?  Any tutorials on dumbing
> down the current options to make them work?  I found a tutorial for
> blogcfc but it was so many versions back, some of the changes that the
> tutorial suggested weren't even there anymore.

I haven't worked with BlogCFC so this is only speculation. But you
should be able to replace CreateObject or CFOBJECT calls with
CFINVOKE.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsit

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339017
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Dave Watts

> Sounds like it's ttime to change who you host with.  How are they blocking
> CFC instantiation like that?

I didn't see CFINVOKE on the list, so you could use that to create CFC
instances (assuming the CFCs have an init method that returns an
instance of the CFC). Of course, that doesn't really help the original
poster with BlogCFC, as I presume that uses CreateObject. I guess the
OP could rewrite it to use CFINVOKE instead.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339016
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-09 Thread DURETTE, STEVEN J (ATTASIAIT)

Thanks, I will look at them (I have no experience with Railo), but I am
pre-paid for a few months, so...

Any ideas on cf blogging software I can use?  Any tutorials on dumbing
down the current options to make them work?  I found a tutorial for
blogcfc but it was so many versions back, some of the changes that the
tutorial suggested weren't even there anymore.

Steve


-Original Message-
From: Sean Corfield [mailto:seancorfi...@gmail.com] 
Sent: Tuesday, November 09, 2010 1:19 PM
To: cf-talk
Subject: Re: CF Blog software


Take a look at Alurium. They offer shared hosting for about $3 / month
with
Railo - and you get full Web Administrator control for each account
(because
of the way Railo is sandboxed by default).
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood

On Tue, Nov 9, 2010 at 10:08 AM, DURETTE, STEVEN J (ATTASIAIT) <
sd1...@att.com> wrote:

>
> Kind of wish I could, but I get my package for $119 a year, the site
> doesn't make any money it is just for personal use, and I can't afford
> much more for what I get.
>
> For that price I can host 5 domains, unlimited email addresses for
each
> domain, I don't remember how much bandwidth or drive space, but I get
2
> mysql dbs and 1 mssql plus CF7.  It works out to 9.95 a month and I
> can't afford more than that.
>
> Steve
>
>
> -Original Message-
> From: Ben Forta [mailto:b...@forta.com]
> Sent: Tuesday, November 09, 2010 11:37 AM
> To: cf-talk
> Subject: Re: CF Blog software
>
>
> Change hosting companies. Really.
>
> --- Ben
>
> (Sent from my Flash enabled Android device)
>
>




~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339014
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Jake Churchill

Sounds like it's ttime to change who you host with.  How are they blocking
CFC instantiation like that?

Sent from my Droid

On Nov 9, 2010 10:36 AM, "DURETTE, STEVEN J (ATTASIAIT)" 
wrote:


Hi all,



So I haven't blogged in about a year because of different issues with my
website provider...  Any how I'm looking to get my blog going again, but
I don't know how I should proceed. I used to use blogcfc, but my
provider restricts a bunch of tags (below).  Can anyone suggest which
blog software might be good to use under these restrictions or if there
are any "work around"  tutorials for the latest versions of blogging
code?  I'd prefer to stick with something CF based.



The restrictions I have are as follows:

CF Tags not allowed:

CFCOLLECTION

CFCONTENT

CFDUMP

CFEXECUTE

CFLOG

CFOBJECT

CFOBJECTCACHE

CFREGISTRY



CF Functions not allowed:

SetProfileString

CreateObject(COM)

CreateObject(CORBA)

CreateObject(JAVA)



Thanks for your insights.

Steve







~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339012
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Sean Corfield

Take a look at Alurium. They offer shared hosting for about $3 / month with
Railo - and you get full Web Administrator control for each account (because
of the way Railo is sandboxed by default).
-- 
Sean A Corfield -- (904) 302-SEAN
Railo Technologies, Inc. -- http://getrailo.com/
An Architect's View -- http://corfield.org/

"If you're not annoying somebody, you're not really alive."
-- Margaret Atwood

On Tue, Nov 9, 2010 at 10:08 AM, DURETTE, STEVEN J (ATTASIAIT) <
sd1...@att.com> wrote:

>
> Kind of wish I could, but I get my package for $119 a year, the site
> doesn't make any money it is just for personal use, and I can't afford
> much more for what I get.
>
> For that price I can host 5 domains, unlimited email addresses for each
> domain, I don't remember how much bandwidth or drive space, but I get 2
> mysql dbs and 1 mssql plus CF7.  It works out to 9.95 a month and I
> can't afford more than that.
>
> Steve
>
>
> -Original Message-
> From: Ben Forta [mailto:b...@forta.com]
> Sent: Tuesday, November 09, 2010 11:37 AM
> To: cf-talk
> Subject: Re: CF Blog software
>
>
> Change hosting companies. Really.
>
> --- Ben
>
> (Sent from my Flash enabled Android device)
>
>


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339010
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Dave Watts

> Granted they shouldn't have unrestricted access, but I would argue that you
> should be able to call them within your own application or else the ability
> to build complex applications begins to be pretty well hampered, no?

Yes, the ability to build complex applications may well be hampered in
a shared hosting environment. I'm not an expert in how to best
configure a shared hosting environment, but I suspect that the more
you pay, the more likely your applications will be able to use these
specific features. I don't know if CreateObject can effectively be
sandboxed, for example, but that could be solved using multiple
instances or VPS.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339009
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-09 Thread DURETTE, STEVEN J (ATTASIAIT)

Kind of wish I could, but I get my package for $119 a year, the site
doesn't make any money it is just for personal use, and I can't afford
much more for what I get. 

For that price I can host 5 domains, unlimited email addresses for each
domain, I don't remember how much bandwidth or drive space, but I get 2
mysql dbs and 1 mssql plus CF7.  It works out to 9.95 a month and I
can't afford more than that.

Steve


-Original Message-
From: Ben Forta [mailto:b...@forta.com] 
Sent: Tuesday, November 09, 2010 11:37 AM
To: cf-talk
Subject: Re: CF Blog software


Change hosting companies. Really.

--- Ben

(Sent from my Flash enabled Android device)


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339008
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Jason Fisher

Not necessarily.  I've got several very complex apps that aren't used by 
many users, and they're charity apps for non-profits, so why not host for 
$20 / quarter instead of investing $120 / month or something in a full 
private server?  I've had bad shared hosting experiences before, but 
Crystaltech has been outstanding and I've been on them for years now 
without issue.



From: "Ian Skinner" 
Sent: Tuesday, November 09, 2010 1:02 PM
To: "cf-talk" 
Subject: Re: CF Blog software

On 11/9/2010 9:54 AM, Jason Fisher wrote:
> Granted they shouldn't have unrestricted access, but I would argue that 
you
> should be able to call them within your own application or else the 
ability
> to build complex applications begins to be pretty well hampered, no?

Well, true.  But hosting complex applications on shared hosting servers 
is pretty hampering right at the start, isn't it?



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339007
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Ian Skinner

  On 11/9/2010 9:54 AM, Jason Fisher wrote:
> Granted they shouldn't have unrestricted access, but I would argue that you
> should be able to call them within your own application or else the ability
> to build complex applications begins to be pretty well hampered, no?

Well, true.  But hosting complex applications on shared hosting servers 
is pretty hampering right at the start, isn't it?



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339006
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Jason Fisher

Granted they shouldn't have unrestricted access, but I would argue that you 
should be able to call them within your own application or else the ability 
to build complex applications begins to be pretty well hampered, no?



From: "Dave Watts" 
Sent: Tuesday, November 09, 2010 12:49 PM
To: "cf-talk" 
Subject: Re: CF Blog software

> Some of those are reasonable, but CFCONTENT, CFDUMP, CreateObject()??  
Go
> to CrystalTech for a few bucks a quarter or something.

CFCONTENT and CreateObject both have serious security implications.
Russ knows better than me about sandboxing, but those tags and
functions shouldn't be allowed unrestricted access in a shared hosting
environment.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339005
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Dave Watts

> Some of those are reasonable, but CFCONTENT, CFDUMP, CreateObject()??  Go
> to CrystalTech for a few bucks a quarter or something.

CFCONTENT and CreateObject both have serious security implications.
Russ knows better than me about sandboxing, but those tags and
functions shouldn't be allowed unrestricted access in a shared hosting
environment.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339004
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Jason Fisher

+1 Ben's idea


Some of those are reasonable, but CFCONTENT, CFDUMP, CreateObject()??  Go 
to CrystalTech for a few bucks a quarter or something.



From: "Ben Forta" 
Sent: Tuesday, November 09, 2010 11:37 AM
To: "cf-talk" 
Subject: Re: CF Blog software

Change hosting companies. Really.

--- Ben

(Sent from my Flash enabled Android device)

On Nov 9, 2010 2:35 PM, "DURETTE, STEVEN J (ATTASIAIT)" 
wrote:

Hi all,

So I haven't blogged in about a year because of different issues with my
website provider...  Any how I'm looking to get my blog going again, but
I don't know how I should proceed. I used to use blogcfc, but my
provider restricts a bunch of tags (below).  Can anyone suggest which
blog software might be good to use under these restrictions or if there
are any "work around"  tutorials for the latest versions of blogging
code?  I'd prefer to stick with something CF based.

The restrictions I have are as follows:

CF Tags not allowed:

CFCOLLECTION

CFCONTENT

CFDUMP

CFEXECUTE

CFLOG

CFOBJECT

CFOBJECTCACHE

CFREGISTRY

CF Functions not allowed:

SetProfileString

CreateObject(COM)

CreateObject(CORBA)

CreateObject(JAVA)

Thanks for your insights.

Steve



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339003
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF Blog software

2010-11-09 Thread Russ Michaels

Steve,

One should at least explain why hosts disable those tags.
They are all dangerous tags that provide IO access and the host is probably
just be cautious. If these were just enabled by default then the server
could be hacked in about 5 seconds.
However some of those tags should be allowed with a security sandbox, so ask
them if you can have one.
There is no reason not to allow the following with a sandbox.

CFCOLLECTION

CFCONTENT

CFDUMP

CFLOG

CFOBJECTCACHE

SetProfileString


However No host should ever allow the following, if they do, I suggest you
move as they are very insecure indeed.

CreateObject(COM)
Cfexecute
Cfregistry.

The following are also very dangerous and a sandbox doesn't really help, but
most hosts have to allow them because none of the frameworks will work
without them.

CreateObject(JAVA)
CFOBJECT


This list you have supplied is however rather short, there should actually
be many more tags disabled such as cffile and cfdirectory for a start. If
this is the only list they gave you, then I would say they have no idea what
they are doing with ColdFusion

we allow almost all tags with a security sandbox and have been doing CF
hosting for 10 years.
See the DEVELOPER NOTES tab on this page for more details.
http://www.cfmxhosting.co.uk/index.cfm?action=services.hosting



Regards
--
Russ Michaels
www.cfmldeveloper.com - free CFML hosting for developers
my blog: http://russ.michaels.me.uk/
skype: russmichaels





~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338999
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF Blog software

2010-11-09 Thread Ben Forta

Change hosting companies. Really.

--- Ben

(Sent from my Flash enabled Android device)

On Nov 9, 2010 2:35 PM, "DURETTE, STEVEN J (ATTASIAIT)" 
wrote:


Hi all,



So I haven't blogged in about a year because of different issues with my
website provider...  Any how I'm looking to get my blog going again, but
I don't know how I should proceed. I used to use blogcfc, but my
provider restricts a bunch of tags (below).  Can anyone suggest which
blog software might be good to use under these restrictions or if there
are any "work around"  tutorials for the latest versions of blogging
code?  I'd prefer to stick with something CF based.



The restrictions I have are as follows:

CF Tags not allowed:

CFCOLLECTION

CFCONTENT

CFDUMP

CFEXECUTE

CFLOG

CFOBJECT

CFOBJECTCACHE

CFREGISTRY



CF Functions not allowed:

SetProfileString

CreateObject(COM)

CreateObject(CORBA)

CreateObject(JAVA)



Thanks for your insights.

Steve







~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338995
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


CF Blog software

2010-11-09 Thread DURETTE, STEVEN J (ATTASIAIT)

Hi all,

 

So I haven't blogged in about a year because of different issues with my
website provider...  Any how I'm looking to get my blog going again, but
I don't know how I should proceed. I used to use blogcfc, but my
provider restricts a bunch of tags (below).  Can anyone suggest which
blog software might be good to use under these restrictions or if there
are any "work around"  tutorials for the latest versions of blogging
code?  I'd prefer to stick with something CF based.

 

The restrictions I have are as follows:

CF Tags not allowed: 

CFCOLLECTION

CFCONTENT

CFDUMP

CFEXECUTE

CFLOG

CFOBJECT

CFOBJECTCACHE

CFREGISTRY

 

CF Functions not allowed:

SetProfileString

CreateObject(COM)

CreateObject(CORBA)

CreateObject(JAVA)

 

Thanks for your insights.

Steve

 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338994
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Subversion Software

2010-10-14 Thread Eric Roberts

Cool...I did not know that.  Thanks Jason!  I will have to check that out and 
see how it compares with CollabNet's Edge package.

>No, there is a VisualSVN plugin for Visual Studio, but the same folks also 
>make a VisualSVN Server package that is a one-step install on Windows 
>server and is kept up to date with SVN patches etc.  Very good, and free to 
>boot.
>
>
>http://www.visualsvn.com/server/
>
>Isn't Visual SVN for Visual studio only?  Subversive and Subclipse are 2 
>good plugins for Eclipse users.
>
>Tortoise is free period ;-)  All three work great whether it's corporate of 
>personal.
>
>Eric
>wrote: 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338200
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Subversion Software

2010-10-14 Thread Jason Fisher

Yep, same here.



From: "Rick Root" 
Sent: Thursday, October 14, 2010 3:35 PM
To: "cf-talk" 
Subject: Re: Subversion Software

That's why I use VisualSVN SERVER and TortoiseSVN CLIENT =)

On Thu, Oct 14, 2010 at 3:01 PM, Eric Roberts
 wrote:
>
> That's exactly why i use tortoise...*grin*
>
>>> I like VisualSVN because I'm lazy and windows based =)
>>>
>>> http://www.visualsvn.com/server/
>>
>>and it's free and super easy to install/setup.
>>
>>Rick
>
> 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338196
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Subversion Software

2010-10-14 Thread Rick Root

That's why I use VisualSVN SERVER and TortoiseSVN CLIENT =)

On Thu, Oct 14, 2010 at 3:01 PM, Eric Roberts
 wrote:
>
> That's exactly why i use tortoise...*grin*
>
>>> I like VisualSVN because I'm lazy and windows based =)
>>>
>>> http://www.visualsvn.com/server/
>>
>>and it's free and super easy to install/setup.
>>
>>Rick
>
> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338194
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Subversion Software

2010-10-14 Thread Jason Fisher

No, there is a VisualSVN plugin for Visual Studio, but the same folks also 
make a VisualSVN Server package that is a one-step install on Windows 
server and is kept up to date with SVN patches etc.  Very good, and free to 
boot.


http://www.visualsvn.com/server/



From: "Eric Roberts" 
Sent: Thursday, October 14, 2010 3:08 PM
To: "cf-talk" 
Subject: Re: Subversion Software

Isn't Visual SVN for Visual studio only?  Subversive and Subclipse are 2 
good plugins for Eclipse users.

Tortoise is free period ;-)  All three work great whether it's corporate of 
personal.

Eric
>+1 for Visual SVN for corporate applications.
>
>+1 for Unfuddle for free ad-hoc projects.
>
>Greg
>
>
>On Wed, Oct 13, 2010 at 9:51 PM, Jochem van Dieten 
wrote:
>
>> 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338193
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Subversion Software

2010-10-14 Thread Eric Roberts

That's exactly why i use tortoise...*grin*

>> I like VisualSVN because I'm lazy and windows based =)
>>
>> http://www.visualsvn.com/server/
>
>and it's free and super easy to install/setup.
>
>Rick 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338191
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Subversion Software

2010-10-14 Thread Eric Roberts

Isn't Visual SVN for Visual studio only?  Subversive and Subclipse are 2 good 
plugins for Eclipse users.

Tortoise is free period ;-)  All three work great whether it's corporate of 
personal.

Eric
>+1 for Visual SVN for corporate applications.
>
>+1 for Unfuddle for free ad-hoc projects.
>
>Greg
>
>
>On Wed, Oct 13, 2010 at 9:51 PM, Jochem van Dieten wrote:
>
>> 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338190
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Subversion Software

2010-10-14 Thread Eric Roberts

We are using TortoiseSVN aqnd Subversive on the client side.  I like 
both...Tortoise can be faster than Subversive in some cases and it has a few 
more features you can acess via the drop down menu.  I have been using the 
Collabnet SVN Edge and they have a new web interface to manage users and repos 
that makes it pretty easy.

>Tortoise SVN here as well ..
>
>I've had some odd issues with the icons (on local drives) since going
>to Windows 7, like icons not updating right away when I commit
>stuff...  but that's pretty minor.
>
>Rick
>
>
>On Thu, Oct 14, 2010 at 11:12 AM, Jas
>>
>> TortoiseSVN is pretty solid, although I've had to turn off the icon
>> overlays on mapped network drives, just to improve Explorer performance. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:338189
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


  1   2   3   4   5   6   7   8   9   10   >