Re: view protected pdf
On Thu, Jan 22, 2009 at 3:15 AM, Ken Willis wrote: I have used cfpdf to protect pdfs on my server. now i need to be able to show those protected pdfs to the user upon request. Does anyone have a solution to this? I just wrote a proof of concept 'self destructing PDF' solution for a client. The documents are protected on the server and are sent to users who are logged in into the website. The users can open them in Acrobat Reader without having to type their password. If they save the documents from Reader to the filesystem they will not be able to re-open them. If they save the documents from the browser (right click on the link, Save as) they have 2 minutes to open them for viewing. Printing, commenting, copying etc. is not allowed. The thing you are not going to like is I did that with LiveCycle Rights Management so cost starts at 5K+ per document. Jochem ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318380 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
Kenny, I ran into some trouble using cfpdf to remove the password. So much trouble that I think I must be an idiot and missing something. I'm going to do a blog post on in a bit later, so please watch www.coldfusionjedi.com today in case I forget to post back on this thread. On Thu, Jan 22, 2009 at 5:28 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: In your example (without cfheader), at what point do I have to strip out the password? Is this done previous to this point? Meaning that I should cfpdf unprotect to another directory then read that one in and display with cfcontent? Thanks for all your help to both. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318385 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
On Thu, Jan 22, 2009 at 11:31 PM, Kenny J. Willis wrote: I do believe this is probably my solution until a better one comes along. I agree about the hacker problem, but I am also wary about my own users (I have no reason. I just am thinking ahead). Most breaches are from the inside and the outside. Typically it is much harder to get access to a server then to open a password protected PDF without the password. If somebody gets access to your server the password protection is not going to stop them. Jochem -- Jochem van Dieten http://jochem.vandieten.net/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318389 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
One last question. What is syntax for the second cfpdf call to strip the password? -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 6:05 PM To: cf-talk Subject: Re: view protected pdf No, one tag to read it in, then a second cfpdf call to remove the password, then the cfheader/cfcontent to serve it up. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318401 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
I ran into the same issue. That's why I asked for the syntax previously. ken -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Friday, January 23, 2009 5:06 AM To: cf-talk Subject: Re: view protected pdf Kenny, I ran into some trouble using cfpdf to remove the password. So much trouble that I think I must be an idiot and missing something. I'm going to do a blog post on in a bit later, so please watch www.coldfusionjedi.com today in case I forget to post back on this thread. On Thu, Jan 22, 2009 at 5:28 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: In your example (without cfheader), at what point do I have to strip out the password? Is this done previous to this point? Meaning that I should cfpdf unprotect to another directory then read that one in and display with cfcontent? Thanks for all your help to both. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318403 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
Ouch. Neat app but not quite monetarily feasible at this time. Thanks, will keep that in mind going forward. -Original Message- From: Jochem van Dieten [mailto:joch...@gmail.com] Sent: Friday, January 23, 2009 3:04 AM To: cf-talk Subject: Re: view protected pdf On Thu, Jan 22, 2009 at 3:15 AM, Ken Willis wrote: I have used cfpdf to protect pdfs on my server. now i need to be able to show those protected pdfs to the user upon request. Does anyone have a solution to this? I just wrote a proof of concept 'self destructing PDF' solution for a client. The documents are protected on the server and are sent to users who are logged in into the website. The users can open them in Acrobat Reader without having to type their password. If they save the documents from Reader to the filesystem they will not be able to re-open them. If they save the documents from the browser (right click on the link, Save as) they have 2 minutes to open them for viewing. Printing, commenting, copying etc. is not allowed. The thing you are not going to like is I did that with LiveCycle Rights Management so cost starts at 5K+ per document. Jochem ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318402 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
Agreed, still have to take the steps for compliance reasons. -Original Message- From: Jochem van Dieten [mailto:joch...@gmail.com] Sent: Friday, January 23, 2009 5:23 AM To: cf-talk Subject: Re: view protected pdf On Thu, Jan 22, 2009 at 11:31 PM, Kenny J. Willis wrote: I do believe this is probably my solution until a better one comes along. I agree about the hacker problem, but I am also wary about my own users (I have no reason. I just am thinking ahead). Most breaches are from the inside and the outside. Typically it is much harder to get access to a server then to open a password protected PDF without the password. If somebody gets access to your server the password protection is not going to stop them. Jochem -- Jochem van Dieten http://jochem.vandieten.net/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318404 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
Heh, Kenny, you missed my mail. ;) I ran into a problem with that - and I finally solved it. I'll have a blog post on it in about 30 minutes. Unfortunately it is NON-trivial, but I hope to make it trivial for folks. On Fri, Jan 23, 2009 at 9:07 AM, Kenny J. Willis k...@alliedinformationresource.com wrote: One last question. What is syntax for the second cfpdf call to strip the password? -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 6:05 PM To: cf-talk Subject: Re: view protected pdf No, one tag to read it in, then a second cfpdf call to remove the password, then the cfheader/cfcontent to serve it up. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318405 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
This is what I have been trying to point out in this long discussion that this tag (cfpdf) seems to be a one way trip. Glad you have a work around/fix. Looking forward to it. -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Friday, January 23, 2009 7:13 AM To: cf-talk Subject: Re: view protected pdf Heh, Kenny, you missed my mail. ;) I ran into a problem with that - and I finally solved it. I'll have a blog post on it in about 30 minutes. Unfortunately it is NON-trivial, but I hope to make it trivial for folks. On Fri, Jan 23, 2009 at 9:07 AM, Kenny J. Willis k...@alliedinformationresource.com wrote: One last question. What is syntax for the second cfpdf call to strip the password? -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 6:05 PM To: cf-talk Subject: Re: view protected pdf No, one tag to read it in, then a second cfpdf call to remove the password, then the cfheader/cfcontent to serve it up. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318406 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
Kenny, and all, please see: http://www.coldfusionjedi.com/index.cfm/2009/1/23/How-to-remove-a-password-from-a-PDF-using-ColdFusion As I say in the blog entry, I'll be rewriting the code to be generic so it's easier to use. On Fri, Jan 23, 2009 at 9:10 AM, Kenny J. Willis k...@alliedinformationresource.com wrote: I ran into the same issue. That's why I asked for the syntax previously. ken -- === Raymond Camden, VP of Software Dev, Broadchoice Email: r...@camdenfamily.com Blog : www.coldfusionjedi.com AOL IM : cfjedimaster Keep up to date with the community: http://www.coldfusionbloggers.org ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318407 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
Ray, if DDX is so picky about the none to None did you check this issue with the encrypt portion of cfpdf? Thanks for the work around. I will be checking this out later. -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Friday, January 23, 2009 7:41 AM To: cf-talk Subject: Re: view protected pdf Kenny, and all, please see: http://www.coldfusionjedi.com/index.cfm/2009/1/23/How-to-remove-a-passwo rd-from-a-PDF-using-ColdFusion As I say in the blog entry, I'll be rewriting the code to be generic so it's easier to use. On Fri, Jan 23, 2009 at 9:10 AM, Kenny J. Willis k...@alliedinformationresource.com wrote: I ran into the same issue. That's why I asked for the syntax previously. ken -- === Raymond Camden, VP of Software Dev, Broadchoice Email: r...@camdenfamily.com Blog : www.coldfusionjedi.com AOL IM : cfjedimaster Keep up to date with the community: http://www.coldfusionbloggers.org ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318413 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
Sorry if it wasn't clear - but yes, I tried like heck to solve it w/o using DDX and was unable to. As my blog entry clearly states, I may be wrong in how I used it, but DDX was the only way I could fix the problem. Of course, once I wrap it up in pdfUtils it will be trivial. On Fri, Jan 23, 2009 at 10:19 AM, Kenny J. Willis k...@alliedinformationresource.com wrote: Ray, if DDX is so picky about the none to None did you check this issue with the encrypt portion of cfpdf? Thanks for the work around. I will be checking this out later. -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Friday, January 23, 2009 7:41 AM To: cf-talk Subject: Re: view protected pdf Kenny, and all, please see: http://www.coldfusionjedi.com/index.cfm/2009/1/23/How-to-remove-a-passwo rd-from-a-PDF-using-ColdFusion As I say in the blog entry, I'll be rewriting the code to be generic so it's easier to use. On Fri, Jan 23, 2009 at 9:10 AM, Kenny J. Willis k...@alliedinformationresource.com wrote: I ran into the same issue. That's why I asked for the syntax previously. ken -- === Raymond Camden, VP of Software Dev, Broadchoice Email: r...@camdenfamily.com Blog : www.coldfusionjedi.com AOL IM : cfjedimaster Keep up to date with the community: http://www.coldfusionbloggers.org ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318416 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
On Fri, Jan 23, 2009 at 4:40 PM, Raymond Camden wrote: http://www.coldfusionjedi.com/index.cfm/2009/1/23/How-to-remove-a-password-from-a-PDF-using-ColdFusion PDFs have 2 passwords, a user password and an owner password. If you use the owner password instead of the user password in combination with none encryption it will work just fine: cfpdf action=protect source=protected.pdf newUserPassword = test newOwnerPassword = test permissions = All destination = unprotected.pdf encrypt = none overwrite = yes password = user / Jochem -- Jochem van Dieten http://jochem.vandieten.net/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318418 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
Yep, that definitely works, but, I'd still say it is a bug, or lack of a feature, that you can't handle PDFs with JUST a userpassword. I'm still going to update pdfUtils for this. If you have control over how the PDF is generated then its easy enough to fix, but if you don't, you are still screwed. On Fri, Jan 23, 2009 at 10:56 AM, Jochem van Dieten joch...@gmail.com wrote: On Fri, Jan 23, 2009 at 4:40 PM, Raymond Camden wrote: http://www.coldfusionjedi.com/index.cfm/2009/1/23/How-to-remove-a-password-from-a-PDF-using-ColdFusion PDFs have 2 passwords, a user password and an owner password. If you use the owner password instead of the user password in combination with none encryption it will work just fine: cfpdf action=protect source=protected.pdf newUserPassword = test newOwnerPassword = test permissions = All destination = unprotected.pdf encrypt = none overwrite = yes password = user / Jochem -- Jochem van Dieten http://jochem.vandieten.net/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318419 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
On Fri, Jan 23, 2009 at 6:00 PM, Raymond Camden wrote: Yep, that definitely works, but, I'd still say it is a bug, or lack of a feature, that you can't handle PDFs with JUST a userpassword. I would say it is a bug that DDX allows you to anything but open the PDF with just the user password since Adobe's own PDF specification forbids that. Jochem -- Jochem van Dieten http://jochem.vandieten.net/ ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318443 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
Yeah, I'm a bit confused now too. On another listserver I've got a request out to Adobe to help clarify this. Who knew PDFs could be so exciting?? On Fri, Jan 23, 2009 at 2:38 PM, Jochem van Dieten joch...@gmail.com wrote: On Fri, Jan 23, 2009 at 6:00 PM, Raymond Camden wrote: Yep, that definitely works, but, I'd still say it is a bug, or lack of a feature, that you can't handle PDFs with JUST a userpassword. I would say it is a bug that DDX allows you to anything but open the PDF with just the user password since Adobe's own PDF specification forbids that. Jochem - ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318445 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
Do you have a solution to this problem? Is there any way to feed the password to the document so it will open? -Original Message- From: Chuck [mailto:h...@coldfusionguru.com] Sent: Wednesday, January 21, 2009 7:17 PM To: cf-talk Subject: RE: view protected pdf What do you mean by protected? Password protected or PDFs stored outside of the webroot? -Original Message- From: Ken Willis [mailto:k...@alliedinformationresource.com] Sent: Wednesday, January 21, 2009 9:16 PM To: cf-talk Subject: view protected pdf I have used cfpdf to protect pdfs on my server. now i need to be able to show those protected pdfs to the user upon request. Does anyone have a solution to this? thanks in advance ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318320 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
Do you have a solution to this problem? Is there any way to feed the password to the document so it will open? The client has to enter the password when the PDF opens, so no. You could remove the password using CFPDF before allowing the user to download it. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318321 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
That would negate the protection for the file on the server, right? Thanks for your response -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 11:59 AM To: cf-talk Subject: Re: view protected pdf Do you have a solution to this problem? Is there any way to feed the password to the document so it will open? The client has to enter the password when the PDF opens, so no. You could remove the password using CFPDF before allowing the user to download it. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318322 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
How can I put the password back on after it has been downloaded to the client? -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 11:59 AM To: cf-talk Subject: Re: view protected pdf Do you have a solution to this problem? Is there any way to feed the password to the document so it will open? The client has to enter the password when the PDF opens, so no. You could remove the password using CFPDF before allowing the user to download it. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318323 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
Remove the password on a _copy_ of the original. If you want to get fancy, you can a) Copy the original pdf b) Remove password c) Delete pages 5-* d) Let the user download the unprotected PDF, but only the first 4 pages. On Thu, Jan 22, 2009 at 2:08 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: How can I put the password back on after it has been downloaded to the client? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318324 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
That would negate the protection for the file on the server, right? Yes. As Ray mentions, though, you could have protected and unprotected versions if you like. You could also use CF to control access to your files, using the CFCONTENT tag to serve them from locations not directly accessible through the web server. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318330 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
This seems to be a very short sided tag cfpdf. Why allow to discreetly protect files and then have no way to display them. Very frustrating. What about the read action of cfpdf? Why couldn't I read the file then dump it (for lack of a better word) to the client? If this is possible, I would like to know how. I have looked at the read function and all it gives me is a wrapper and when I dump it it gives me the file info, which is supposed to be another function of cfpdf (action = info). The information I am dealing with is extremely sensitive and should not, cannot be copied or unprotected - at least from my side to the client. Sorry for the rant, just need to solve this as soon as possible. ken -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 1:04 PM To: cf-talk Subject: Re: view protected pdf That would negate the protection for the file on the server, right? Yes. As Ray mentions, though, you could have protected and unprotected versions if you like. You could also use CF to control access to your files, using the CFCONTENT tag to serve them from locations not directly accessible through the web server. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318342 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
This seems to be a very short sided tag cfpdf. Why allow to discreetly protect files and then have no way to display them. Very frustrating. What about the read action of cfpdf? Why couldn't I read the file then dump it (for lack of a better word) to the client? If this is possible, I would like to know how. I have looked at the read function and all it gives me is a wrapper and when I dump it it gives me the file info, which is supposed to be another function of cfpdf (action = info). The information I am dealing with is extremely sensitive and should not, cannot be copied or unprotected - at least from my side to the client. Sorry for the rant, just need to solve this as soon as possible. PDFs are not displayed by the server, but by a PDF client application. Password security is handled by said PDF client. If you dump it to the client without a password, the client could redistribute that content however they like. Of course, they could redistribute it even with a password, but they would also have to redistribute the password. So, I think your expectations for the CFPDF tag are a bit unrealistic. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318344 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
I'm pretty confused here. I've been following this thread, and I still
don't think I understand exactly what your objectives are here.
If you don't want random people to be able to access the directory with
the PDFs and download them without permission, then store them outside
the web root and cfcontent them to the user.
If you don't want anyone other than the intended recipient to open the
PDF, then E-mail them the password they need to unlock it. (Be aware
password protected PDF's are easily hacked.)
If you don't want a third party intercepting the PDF while the user is
downloading it, use SSL.
What am I missing here?
~Brad
Original Message
Subject: Re: view protected pdf
From: Dave Watts dwa...@figleaf.com
Date: Thu, January 22, 2009 3:37 pm
To: cf-talk cf-talk@houseoffusion.com
This seems to be a very short sided tag cfpdf. Why allow to
discreetly protect files and then have no way to display them. Very
frustrating. What about the read action of cfpdf? Why couldn't I read
the file then dump it (for lack of a better word) to the client? If
this is possible, I would like to know how. I have looked at the read
function and all it gives me is a wrapper and when I dump it it gives
me
the file info, which is supposed to be another function of cfpdf
(action
= info). The information I am dealing with is extremely sensitive and
should not, cannot be copied or unprotected - at least from my side
to
the client. Sorry for the rant, just need to solve this as soon as
possible.
~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318345
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
Maybe unrealistic for cfpdf, but unrealistic for ColdFusion itself. To protect something with no discernable way back. You can't disagree with this. I realize that we have cfcontent and others that display output. I find it a miscue to not notice this one way only for pdfs. They tought cfpdf in cf8, but I find it somewhat lacking, so I am trying to find a way around it without compromising the files security and yes I am aware of what the client can do with it once they have it and I cannot control much of that. With all these other tools, there has to be a way. I have that much faith in this language and I am hoping that I am not wrong. -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 1:37 PM To: cf-talk Subject: Re: view protected pdf This seems to be a very short sided tag cfpdf. Why allow to discreetly protect files and then have no way to display them. Very frustrating. What about the read action of cfpdf? Why couldn't I read the file then dump it (for lack of a better word) to the client? If this is possible, I would like to know how. I have looked at the read function and all it gives me is a wrapper and when I dump it it gives me the file info, which is supposed to be another function of cfpdf (action = info). The information I am dealing with is extremely sensitive and should not, cannot be copied or unprotected - at least from my side to the client. Sorry for the rant, just need to solve this as soon as possible. PDFs are not displayed by the server, but by a PDF client application. Password security is handled by said PDF client. If you dump it to the client without a password, the client could redistribute that content however they like. Of course, they could redistribute it even with a password, but they would also have to redistribute the password. So, I think your expectations for the CFPDF tag are a bit unrealistic. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318346 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
I will probably use the suggestion for the cfcontent and move the files
off web root. This still leaves them on the server unprotected by other
means (can't have that). The email option does not work due to the
real-time nature of the information. I am aware of the hacking on the
other end, but I cannot control that nor am I at risk when it is beyond
my system. Currently already using SSL. I do not think you are missing
anything. I am just stuck and a little frustrated. I spent $700 for a
tag that does not finish my need. Thanks though.
-Original Message-
From: b...@bradwood.com [mailto:b...@bradwood.com]
Sent: Thursday, January 22, 2009 1:47 PM
To: cf-talk
Subject: RE: view protected pdf
I'm pretty confused here. I've been following this thread, and I still
don't think I understand exactly what your objectives are here.
If you don't want random people to be able to access the directory with
the PDFs and download them without permission, then store them outside
the web root and cfcontent them to the user.
If you don't want anyone other than the intended recipient to open the
PDF, then E-mail them the password they need to unlock it. (Be aware
password protected PDF's are easily hacked.)
If you don't want a third party intercepting the PDF while the user is
downloading it, use SSL.
What am I missing here?
~Brad
Original Message
Subject: Re: view protected pdf
From: Dave Watts dwa...@figleaf.com
Date: Thu, January 22, 2009 3:37 pm
To: cf-talk cf-talk@houseoffusion.com
This seems to be a very short sided tag cfpdf. Why allow to
discreetly protect files and then have no way to display them. Very
frustrating. What about the read action of cfpdf? Why couldn't I read
the file then dump it (for lack of a better word) to the client? If
this is possible, I would like to know how. I have looked at the read
function and all it gives me is a wrapper and when I dump it it gives
me
the file info, which is supposed to be another function of cfpdf
(action
= info). The information I am dealing with is extremely sensitive and
should not, cannot be copied or unprotected - at least from my side
to
the client. Sorry for the rant, just need to solve this as soon as
possible.
~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318347
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
On Thu, Jan 22, 2009 at 3:23 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: This seems to be a very short sided tag cfpdf. Why allow to discreetly protect files and then have no way to display them. cfpdf is a _server_ side tag. It modifies the setting of a PDF file. If you want to _view_ it w/o a password that is a client side thing. How do you view PDFs now? Either w/ Acrobat or Preview (on the mac) - a client side application. Very frustrating. What about the read action of cfpdf? Why couldn't I read the file then dump it (for lack of a better word) to the client? PDFs aren't text. They are binary data. They must be viewed with a client side app or browser plugin, and that tool has been engineered to say, If protect, ask for a password. If this is possible, I would like to know how. I have looked at the read function and all it gives me is a wrapper and when I dump it it gives me the file info, which is supposed to be another function of cfpdf (action = info). The information I am dealing with is extremely sensitive and should not, cannot be copied or unprotected - at least from my side to the client. Sorry for the rant, just need to solve this as soon as possible. What you are asking for is not really reasonable though. You want to publicly show a password protected PDF w/o a password. That doesn't really make sense. -Raymond ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318348 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
Eh? You -can- remove a password. As I, and others have said though, to _view_ the PDF you need a client program and that client program is built with security in mind. It won't just ignore a password setting because you want it to. You either have a password, or you don't. On Thu, Jan 22, 2009 at 3:54 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: Maybe unrealistic for cfpdf, but unrealistic for ColdFusion itself. To protect something with no discernable way back. You can't disagree with this. I realize that we have cfcontent and others that display output. I find it a miscue to not notice this one way only for pdfs. They tought cfpdf in cf8, but I find it somewhat lacking, so I am trying to find a way around it without compromising the files security and yes I am aware of what the client can do with it once they have it and I cannot control much of that. With all these other tools, there has to be a way. I have that much faith in this language and I am hoping that I am not wrong. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318349 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
Why not simply use cfpdf to remove the password when the user requests to view the pdf, and store the new pdf in a location that is served up by cfcontent, and then delete the file after a certain amount of time? You can a scheduled to remove any of these files made more than N minutes ago. As an aside, I think you are being a bit unfair to cfpdf since this is really an issue with the _client_ not the server technology. (And cfpdf is -extremely- powerful.) On Thu, Jan 22, 2009 at 4:01 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: I will probably use the suggestion for the cfcontent and move the files off web root. This still leaves them on the server unprotected by other means (can't have that). The email option does not work due to the real-time nature of the information. I am aware of the hacking on the other end, but I cannot control that nor am I at risk when it is beyond my system. Currently already using SSL. I do not think you are missing anything. I am just stuck and a little frustrated. I spent $700 for a tag that does not finish my need. Thanks though. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318351 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
Maybe unrealistic for cfpdf, but unrealistic for ColdFusion itself. To protect something with no discernable way back. You can't disagree with this. I realize that we have cfcontent and others that display output. I find it a miscue to not notice this one way only for pdfs. They tought cfpdf in cf8, but I find it somewhat lacking, so I am trying to find a way around it without compromising the files security and yes I am aware of what the client can do with it once they have it and I cannot control much of that. With all these other tools, there has to be a way. I have that much faith in this language and I am hoping that I am not wrong. Well, I can certainly disagree with that. In fact, I disagree with every statement you've just made. First, you can use CFPDF to read from a password-protected PDF into a PDF variable, which you could write to output or to file. Second, I'm not sure what your desired outcome is, in any case. You want it secured? not secured? You might find it useful to describe, as a use case, exactly how you want users to interact with PDFs using your application. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318352 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
How do I output the pdf variable to the client? -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 2:12 PM To: cf-talk Subject: Re: view protected pdf Maybe unrealistic for cfpdf, but unrealistic for ColdFusion itself. To protect something with no discernable way back. You can't disagree with this. I realize that we have cfcontent and others that display output. I find it a miscue to not notice this one way only for pdfs. They tought cfpdf in cf8, but I find it somewhat lacking, so I am trying to find a way around it without compromising the files security and yes I am aware of what the client can do with it once they have it and I cannot control much of that. With all these other tools, there has to be a way. I have that much faith in this language and I am hoping that I am not wrong. Well, I can certainly disagree with that. In fact, I disagree with every statement you've just made. First, you can use CFPDF to read from a password-protected PDF into a PDF variable, which you could write to output or to file. Second, I'm not sure what your desired outcome is, in any case. You want it secured? not secured? You might find it useful to describe, as a use case, exactly how you want users to interact with PDFs using your application. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318354 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
I will probably use the suggestion for the cfcontent and move the files off web root. This still leaves them on the server unprotected by other means (can't have that). Define unprotected. If they are outside of the web root, someone can't just come along and download them. Are you worried about your server being compromised by a hacker? If that happens, your problems are much bigger. You can secure and encrypt PDFs all day long, but if you are worried about a hacker accessing your server they could just look at your code to figure out how to unsecure or dencrypt the PDFs anyway. If you just want to layer security for the sake of security (nothing really wrong with that I guess), then place them outside of the web root and secure or encrypt them. Then follow Ray's advice and unsecure/decrypt them into a temporary file at the time you need to serve it to the user. The email option does not work due to the real-time nature of the information. Then display the password on the screen for them to use. I am just stuck and a little frustrated. I spent $700 for a tag that does not finish my need. I guess you will have clarify for us what your need is. I think you have all the pieces to the puzzle you need (or at least as much as you're going to get), but I think we might have a disconnect with what it is you are really looking to accomplish. ~Brad ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318356 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
I do agree that cfpdf is powerful, just frustrated that there was not a action=get or action=display or something like that or even a way for cfcontent to pass info to a specified type. Trying to get a solution, but apparently I am not communicating in the correct way. I am coming across very poorly and for that I apologize. -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 2:12 PM To: cf-talk Subject: Re: view protected pdf Why not simply use cfpdf to remove the password when the user requests to view the pdf, and store the new pdf in a location that is served up by cfcontent, and then delete the file after a certain amount of time? You can a scheduled to remove any of these files made more than N minutes ago. As an aside, I think you are being a bit unfair to cfpdf since this is really an issue with the _client_ not the server technology. (And cfpdf is -extremely- powerful.) On Thu, Jan 22, 2009 at 4:01 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: I will probably use the suggestion for the cfcontent and move the files off web root. This still leaves them on the server unprotected by other means (can't have that). The email option does not work due to the real-time nature of the information. I am aware of the hacking on the other end, but I cannot control that nor am I at risk when it is beyond my system. Currently already using SSL. I do not think you are missing anything. I am just stuck and a little frustrated. I spent $700 for a tag that does not finish my need. Thanks though. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318357 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
cfpdf action=read source=install.pdf name=install cfcontent type=application/pdf variable=#toBinary(install)# The only tricky part is the toBinary to convert the PDF 'object' into pure binary data. You probably also want to include a file name for the download. Here is a better example: cfpdf action=read source=install.pdf name=install cfheader name=Content-Disposition value=inline; filename=foo.pdf cfcontent type=application/pdf variable=#toBinary(install)# On Thu, Jan 22, 2009 at 4:20 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: How do I output the pdf variable to the client? -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 2:12 PM To: cf-talk Subject: Re: view protected pdf Maybe unrealistic for cfpdf, but unrealistic for ColdFusion itself. To protect something with no discernable way back. You can't disagree with this. I realize that we have cfcontent and others that display output. I find it a miscue to not notice this one way only for pdfs. They tought cfpdf in cf8, but I find it somewhat lacking, so I am trying to find a way around it without compromising the files security and yes I am aware of what the client can do with it once they have it and I cannot control much of that. With all these other tools, there has to be a way. I have that much faith in this language and I am hoping that I am not wrong. Well, I can certainly disagree with that. In fact, I disagree with every statement you've just made. First, you can use CFPDF to read from a password-protected PDF into a PDF variable, which you could write to output or to file. Second, I'm not sure what your desired outcome is, in any case. You want it secured? not secured? You might find it useful to describe, as a use case, exactly how you want users to interact with PDFs using your application. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318358 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
I do believe this is probably my solution until a better one comes along. I agree about the hacker problem, but I am also wary about my own users (I have no reason. I just am thinking ahead). Most breaches are from the inside and the outside. thanks -Original Message- From: b...@bradwood.com [mailto:b...@bradwood.com] Sent: Thursday, January 22, 2009 2:25 PM To: cf-talk Subject: RE: view protected pdf I will probably use the suggestion for the cfcontent and move the files off web root. This still leaves them on the server unprotected by other means (can't have that). Define unprotected. If they are outside of the web root, someone can't just come along and download them. Are you worried about your server being compromised by a hacker? If that happens, your problems are much bigger. You can secure and encrypt PDFs all day long, but if you are worried about a hacker accessing your server they could just look at your code to figure out how to unsecure or dencrypt the PDFs anyway. If you just want to layer security for the sake of security (nothing really wrong with that I guess), then place them outside of the web root and secure or encrypt them. Then follow Ray's advice and unsecure/decrypt them into a temporary file at the time you need to serve it to the user. The email option does not work due to the real-time nature of the information. Then display the password on the screen for them to use. I am just stuck and a little frustrated. I spent $700 for a tag that does not finish my need. I guess you will have clarify for us what your need is. I think you have all the pieces to the puzzle you need (or at least as much as you're going to get), but I think we might have a disconnect with what it is you are really looking to accomplish. ~Brad ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318360 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
Okay were getting somewhere. It is still asking me for the password. In the cfheader you have value=inline; filename=foo.pdf . Where is foo.pdf physically located at thispoint and can we strip the password using cfpdf just before the cfcontent? -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 2:29 PM To: cf-talk Subject: Re: view protected pdf cfpdf action=read source=install.pdf name=install cfcontent type=application/pdf variable=#toBinary(install)# The only tricky part is the toBinary to convert the PDF 'object' into pure binary data. You probably also want to include a file name for the download. Here is a better example: cfpdf action=read source=install.pdf name=install cfheader name=Content-Disposition value=inline; filename=foo.pdf cfcontent type=application/pdf variable=#toBinary(install)# On Thu, Jan 22, 2009 at 4:20 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: How do I output the pdf variable to the client? -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 2:12 PM To: cf-talk Subject: Re: view protected pdf Maybe unrealistic for cfpdf, but unrealistic for ColdFusion itself. To protect something with no discernable way back. You can't disagree with this. I realize that we have cfcontent and others that display output. I find it a miscue to not notice this one way only for pdfs. They tought cfpdf in cf8, but I find it somewhat lacking, so I am trying to find a way around it without compromising the files security and yes I am aware of what the client can do with it once they have it and I cannot control much of that. With all these other tools, there has to be a way. I have that much faith in this language and I am hoping that I am not wrong. Well, I can certainly disagree with that. In fact, I disagree with every statement you've just made. First, you can use CFPDF to read from a password-protected PDF into a PDF variable, which you could write to output or to file. Second, I'm not sure what your desired outcome is, in any case. You want it secured? not secured? You might find it useful to describe, as a use case, exactly how you want users to interact with PDFs using your application. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318361 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: view protected pdf
On Thu, Jan 22, 2009 at 4:31 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: I do believe this is probably my solution until a better one comes along. I agree about the hacker problem, but I am also wary about my own users (I have no reason. I just am thinking ahead). Most breaches are from the inside and the outside. thanks Did you see my post about using cfpdf to read and then cfcontent to serve the pdf? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318362 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
Sorry, I was assuming you would take this as a 'how do I go from cfpdf to cfcontent'. foo.pdf is simply the _name_ that the user will see when they download the file. As for the password, you need to use cfpdf to remove the password after you read it in. I should have made that clear. So step 1, read it, step 2, remove the password, step 3, serve it up cfheader/cfcontent. On Thu, Jan 22, 2009 at 4:47 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: Okay were getting somewhere. It is still asking me for the password. In the cfheader you have value=inline; filename=foo.pdf . Where is foo.pdf physically located at thispoint and can we strip the password using cfpdf just before the cfcontent? -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 2:29 PM To: cf-talk Subject: Re: view protected pdf cfpdf action=read source=install.pdf name=install cfcontent type=application/pdf variable=#toBinary(install)# The only tricky part is the toBinary to convert the PDF 'object' into pure binary data. You probably also want to include a file name for the download. Here is a better example: cfpdf action=read source=install.pdf name=install cfheader name=Content-Disposition value=inline; filename=foo.pdf cfcontent type=application/pdf variable=#toBinary(install)# On Thu, Jan 22, 2009 at 4:20 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: How do I output the pdf variable to the client? -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 2:12 PM To: cf-talk Subject: Re: view protected pdf Maybe unrealistic for cfpdf, but unrealistic for ColdFusion itself. To protect something with no discernable way back. You can't disagree with this. I realize that we have cfcontent and others that display output. I find it a miscue to not notice this one way only for pdfs. They tought cfpdf in cf8, but I find it somewhat lacking, so I am trying to find a way around it without compromising the files security and yes I am aware of what the client can do with it once they have it and I cannot control much of that. With all these other tools, there has to be a way. I have that much faith in this language and I am hoping that I am not wrong. Well, I can certainly disagree with that. In fact, I disagree with every statement you've just made. First, you can use CFPDF to read from a password-protected PDF into a PDF variable, which you could write to output or to file. Second, I'm not sure what your desired outcome is, in any case. You want it secured? not secured? You might find it useful to describe, as a use case, exactly how you want users to interact with PDFs using your application. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318364 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
Yes. Just trying to find a cheat without having to run other subroutines to clean up. What do you think? Is there a possibility? :) :) -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 2:48 PM To: cf-talk Subject: Re: view protected pdf On Thu, Jan 22, 2009 at 4:31 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: I do believe this is probably my solution until a better one comes along. I agree about the hacker problem, but I am also wary about my own users (I have no reason. I just am thinking ahead). Most breaches are from the inside and the outside. thanks Did you see my post about using cfpdf to read and then cfcontent to serve the pdf? ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318365 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
In step 2, I need to unprotect it to another location, do step 3 then run a subroutine to clean up the unprotected file? -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 2:57 PM To: cf-talk Subject: Re: view protected pdf Sorry, I was assuming you would take this as a 'how do I go from cfpdf to cfcontent'. foo.pdf is simply the _name_ that the user will see when they download the file. As for the password, you need to use cfpdf to remove the password after you read it in. I should have made that clear. So step 1, read it, step 2, remove the password, step 3, serve it up cfheader/cfcontent. On Thu, Jan 22, 2009 at 4:47 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: Okay were getting somewhere. It is still asking me for the password. In the cfheader you have value=inline; filename=foo.pdf . Where is foo.pdf physically located at thispoint and can we strip the password using cfpdf just before the cfcontent? -Original Message- From: Raymond Camden [mailto:rcam...@gmail.com] Sent: Thursday, January 22, 2009 2:29 PM To: cf-talk Subject: Re: view protected pdf cfpdf action=read source=install.pdf name=install cfcontent type=application/pdf variable=#toBinary(install)# The only tricky part is the toBinary to convert the PDF 'object' into pure binary data. You probably also want to include a file name for the download. Here is a better example: cfpdf action=read source=install.pdf name=install cfheader name=Content-Disposition value=inline; filename=foo.pdf cfcontent type=application/pdf variable=#toBinary(install)# On Thu, Jan 22, 2009 at 4:20 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: How do I output the pdf variable to the client? -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 2:12 PM To: cf-talk Subject: Re: view protected pdf Maybe unrealistic for cfpdf, but unrealistic for ColdFusion itself. To protect something with no discernable way back. You can't disagree with this. I realize that we have cfcontent and others that display output. I find it a miscue to not notice this one way only for pdfs. They tought cfpdf in cf8, but I find it somewhat lacking, so I am trying to find a way around it without compromising the files security and yes I am aware of what the client can do with it once they have it and I cannot control much of that. With all these other tools, there has to be a way. I have that much faith in this language and I am hoping that I am not wrong. Well, I can certainly disagree with that. In fact, I disagree with every statement you've just made. First, you can use CFPDF to read from a password-protected PDF into a PDF variable, which you could write to output or to file. Second, I'm not sure what your desired outcome is, in any case. You want it secured? not secured? You might find it useful to describe, as a use case, exactly how you want users to interact with PDFs using your application. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318366 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
In step 2, I need to unprotect it to another location, do step 3 then run a subroutine to clean up the unprotected file? You could do that, but you shouldn't have to. You can read the PDF into a variable, then use CFCONTENT to serve that variable. Ray's example uses CFHEADER to tell the browser the name of the file you want it to receive, but you don't actually have to have that file on your server. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318367 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
In your example (without cfheader), at what point do I have to strip out the password? Is this done previous to this point? Meaning that I should cfpdf unprotect to another directory then read that one in and display with cfcontent? Thanks for all your help to both. -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 3:07 PM To: cf-talk Subject: Re: view protected pdf In step 2, I need to unprotect it to another location, do step 3 then run a subroutine to clean up the unprotected file? You could do that, but you shouldn't have to. You can read the PDF into a variable, then use CFCONTENT to serve that variable. Ray's example uses CFHEADER to tell the browser the name of the file you want it to receive, but you don't actually have to have that file on your server. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318368 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: view protected pdf
Actually, the source attribute of the cfpdf tag allows for you to just
pass in a variable containing the pdf. A PDF document variable in
memory that is generated by the cfdocument tag or the cfpdf tag, for
example, myPDFdoc.
I'm pretty sure that means that you don't need to save it to a temp
location, just pass the variable around of the pdf you read in step 1.
~Brad
Original Message
Subject: RE: view protected pdf
From: Kenny J. Willis k...@alliedinformationresource.com
Date: Thu, January 22, 2009 5:00 pm
To: cf-talk cf-talk@houseoffusion.com
In step 2, I need to unprotect it to another location, do step 3 then
run a subroutine to clean up the unprotected file?
~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318369
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
What would be the attributes of mypdfdoc.someattribute ?
-Original Message-
From: b...@bradwood.com [mailto:b...@bradwood.com]
Sent: Thursday, January 22, 2009 3:35 PM
To: cf-talk
Subject: RE: view protected pdf
Actually, the source attribute of the cfpdf tag allows for you to just
pass in a variable containing the pdf. A PDF document variable in
memory that is generated by the cfdocument tag or the cfpdf tag, for
example, myPDFdoc.
I'm pretty sure that means that you don't need to save it to a temp
location, just pass the variable around of the pdf you read in step 1.
~Brad
Original Message
Subject: RE: view protected pdf
From: Kenny J. Willis k...@alliedinformationresource.com
Date: Thu, January 22, 2009 5:00 pm
To: cf-talk cf-talk@houseoffusion.com
In step 2, I need to unprotect it to another location, do step 3 then
run a subroutine to clean up the unprotected file?
~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to
date
Get the Free Trial
http://ad.doubleclick.net/clk;207172674;29440083;f
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318370
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: view protected pdf
No, one tag to read it in, then a second cfpdf call to remove the password, then the cfheader/cfcontent to serve it up. On Thu, Jan 22, 2009 at 5:28 PM, Kenny J. Willis k...@alliedinformationresource.com wrote: In your example (without cfheader), at what point do I have to strip out the password? Is this done previous to this point? Meaning that I should cfpdf unprotect to another directory then read that one in and display with cfcontent? Thanks for all your help to both. -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, January 22, 2009 3:07 PM To: cf-talk Subject: Re: view protected pdf In step 2, I need to unprotect it to another location, do step 3 then run a subroutine to clean up the unprotected file? You could do that, but you shouldn't have to. You can read the PDF into a variable, then use CFCONTENT to serve that variable. Ray's example uses CFHEADER to tell the browser the name of the file you want it to receive, but you don't actually have to have that file on your server. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318373 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
view protected pdf
I have used cfpdf to protect pdfs on my server. now i need to be able to show those protected pdfs to the user upon request. Does anyone have a solution to this? thanks in advance ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318295 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
What do you mean by protected? Password protected or PDFs stored outside of the webroot? -Original Message- From: Ken Willis [mailto:k...@alliedinformationresource.com] Sent: Wednesday, January 21, 2009 9:16 PM To: cf-talk Subject: view protected pdf I have used cfpdf to protect pdfs on my server. now i need to be able to show those protected pdfs to the user upon request. Does anyone have a solution to this? thanks in advance ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318298 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: view protected pdf
Password protected -Original Message- From: Chuck [mailto:h...@coldfusionguru.com] Sent: Wednesday, January 21, 2009 7:17 PM To: cf-talk Subject: RE: view protected pdf What do you mean by protected? Password protected or PDFs stored outside of the webroot? -Original Message- From: Ken Willis [mailto:k...@alliedinformationresource.com] Sent: Wednesday, January 21, 2009 9:16 PM To: cf-talk Subject: view protected pdf I have used cfpdf to protect pdfs on my server. now i need to be able to show those protected pdfs to the user upon request. Does anyone have a solution to this? thanks in advance ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:318301 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
