RE: ASP.Net book for CF programmer

2006-05-08 Thread Robertson-Ravo, Neil (RX)
I have to agree - I still think CF5 was more stable that MX. Java certainly did add a few more oddities in terms of stability which needs far more tweaking of the JVM. -Original Message- From: Snake [mailto:[EMAIL PROTECTED] Sent: 07 May 2006 00:29 To: CF-Talk Subject: RE: ASP.Net

RE: ASP.Net book for CF programmer

2006-05-08 Thread Snake
You develop directly on your live server !! :-O !!! Do I really need to say anything? Snake -Original Message- From: Rick Faircloth [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 00:48 To: CF-Talk Subject: RE: ASP.Net book for CF programmer Sounds like you got things set up well

RE: ASP.Net book for CF programmer

2006-05-08 Thread Rick Faircloth
Yep...no problem... Rick -Original Message- From: Snake [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 4:45 AM To: CF-Talk Subject: RE: ASP.Net book for CF programmer You develop directly on your live server !! :-O !!! Do I really need to say anything? Snake

RE: ASP.Net book for CF programmer

2006-05-08 Thread Snake
Ok, well I assume your customers are all smallfry and wouldn't actually notice/care if u killed the server running some untested code that caused an infinite loop or somehting then. -Original Message- From: Rick Faircloth [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 10:00 To: CF-Talk

Re: ASP.Net book for CF programmer

2006-05-08 Thread Denny Valliant
On 5/8/06, Robertson-Ravo, Neil (RX) [EMAIL PROTECTED] wrote: I have to agree - I still think CF5 was more stable that MX. Java certainly did add a few more oddities in terms of stability which needs far more tweaking of the JVM. Oddly, 6.1 did much better for us, and 7 has been even

RE: ASP.Net book for CF programmer

2006-05-08 Thread Snake
I think it is also dependant on what your doing on the server. Single site, prob no issues. Multiple sites (i.e. shared hosting), that's when u have more problems. -Original Message- From: Denny Valliant [mailto:[EMAIL PROTECTED] Sent: 08 May 2006 12:34 To: CF-Talk Subject: Re: ASP.Net

Test

2006-05-08 Thread george . earl
Sorry for the test. Messages I send to cf-talk thru email aren't appearing so I'm trying through the HOF site . . . George ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239807 Archives:

Re: Project not being returned as type project?

2006-05-08 Thread Joelle Tegwen
That was it. It didn't occur to me that I would need to reference the folder name. Thanks Joelle Matt Williams wrote: What does the component that has newProjectCreated() have for an argument? If its type is simply Project, then it must be in the same directory as the Project.cfc. Otherwise

CFComet is alive

2006-05-08 Thread Robert Everland III
I see posts come up all the time about how to access Index Server. I wrote an article on this years ago back in CF 5 when COM objects worked pretty well. I'm not sure how well a lot of these will still work, but I found this by doing an Ego google search on my name. http://cfregex.com/cfcomet/

supression of / and/or \

2006-05-08 Thread Uwe Degenhardt
Hi list, I want to supress a / or a \ in an cfhttp.FileContent output like in: -- Error attempting to write data to target file 'x:\test\customer\cfdocs\sem\1\ljslkjl, H. / Götter Herrscher Inschriften.htm'. - the / in H. /

RE: supression of / and/or \

2006-05-08 Thread Ben Nadel
What kinds of problems are you having? Have you tried just replacing out the character? ... Ben Nadel www.bennadel.com -Original Message- From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 11:04 AM To: CF-Talk Subject: supression of / and/or

RE: supression of / and/or \

2006-05-08 Thread Munson, Jacob
I get wanting to remove the /, but you also want all the back slashes from your path? Here's how to remove the forward slashes: cfset noForwards = Replace(cfhttp.FileContent,/,,all) If you what to remove both at the same time: cfset noSlashes = ReReplace(cfhttp.FileContent,\\|\/,,all)

RE: DEAD TOPIC - LEAVE IT ALONE: cf-talk is weird =)

2006-05-08 Thread Kevin Aebig
Look at the date it was sent??? Jesus... I'm so done with this it's ridiculous. !k -Original Message- From: Todd Rafferty [mailto:[EMAIL PROTECTED] Sent: May 8, 2006 8:09 AM To: CF-Talk Subject: DEAD TOPIC - LEAVE IT ALONE: cf-talk is weird =) Kevin, As far as I'm concerned, my

Re: supression of / and/or \

2006-05-08 Thread Tom Chiverton
On Mon, May 8, 2006 at 4:04 PM, in message [EMAIL PROTECTED], [EMAIL PROTECTED] wrote: Hi list, I want to supress a / or a \ in an cfhttp.FileContent output like in: safeFile=rereplace('[/\/]','','ALL'); I think - whatch the escaping on the reg. exp :-) Tom Chiverton

Re[2]: supression of / and/or \

2006-05-08 Thread Uwe Degenhardt
Hi Jacob, thanks. (and thanks all the others, who replied !) When I want a ? to escape as well would it be like: cfset noSlashes = ReReplace(cfhttp.FileContent,\\|\/|\?,,all) ?? Uwe MJ I get wanting to remove the /, but you also want all the back slashes from your path? Here's how to remove

RE: Re[2]: supression of / and/or \

2006-05-08 Thread Munson, Jacob
That's correct, and actually I simplified it a bit (removed one character from the regex): cfset noSlashes = ReReplace(cfhttp.FileContent,\\|/|\?,,all) -Original Message- From: Uwe Degenhardt [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 9:40 AM To: CF-Talk Subject: Re[2]:

Re: What is High-Performance in the statement High-Performance Reporting and Document Generation

2006-05-08 Thread dcooper
Correct: Enterprise Edition takes out all all the stops...(and kicks butt compared to Crystal and other Enterprise Class Java-based reporting engine report generation, in our internal tests prior to CF7 ship). Standard Edition is effectively single-threaded for doc and report generation. Any

Test object type

2006-05-08 Thread Joelle Tegwen
I have a User.cfc, Manager.cfc and Worker.cfc. Manager and Worker extend User. I would like to be able to test whether an instantiated object is a Worker or a Manager. Something like cfif isObjectType(#session.currentUser#, #ttComponents.Manager#) But I don't know what isObjectType is really

RE: Test object type

2006-05-08 Thread Jim
listlast(getMetadata(obj).name,.) probably more efficient to have a getType() function in each cfc though. then perhaps a user.equals(anotherobj) function which utilises it e.g. return if(arguments.obj.getType() eq this.getType()) -Original Message- From: Joelle Tegwen [mailto:[EMAIL

RE: Test object type

2006-05-08 Thread Ben Nadel
As far as I know, CF doesn't have a built in instanceOf operator or method. The way to get around this might be to have a public property for objects Ex.: SESSION.CurrentUser.InstanceOf() Which would return, as a string, something like manager or worker. ... Ben Nadel

Re: Generic CF form handler

2006-05-08 Thread andy
Quoting Mark Henderson [EMAIL PROTECTED]: Mark... That method works great if you have all text fields, or dropdowns, or textareas. But what if you have a raxio button or a checkbox? How do you indicate if a field is required? How do you perform validation on fields of a certain type? I'm

Big SQL security hole at Crystaltech?

2006-05-08 Thread Matt Robertson
After signing onto a new client's SQL Server account, first on one dedicated server and then another, I found I could not only see several other databases belonging to other customers... I could click on the Tables tab and see all of their tables. Taking it a step further, I could double-click

RE: Test object type

2006-05-08 Thread Brad Wood
So I assume that you use session.currentUser to hold EITHER a manager object OR a worker object. This may be a stupid question since I don't have a lot of oop experience, but is it bad form to use the same variable name to store two different types of objects? That seems so create the problem

RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Munson, Jacob
We've had this conversation on this list before, and yes what you saw is true. If I remember right, it's a weakness of SQL Server, not CrystalTech. Well, except for the fact that Crystaltech allows remote connections using EM (a lot of hosts don't allow this). I also think someone posted a

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Crow T. Robot
Yikes! This is true for my accounts also. Let us know what happens. Matt Robertson wrote: After signing onto a new client's SQL Server account, first on one dedicated server and then another, I found I could not only see several other databases belonging to other customers... I could click

Re: Coldfusion with Godaddy

2006-05-08 Thread Nathan Strutz
They probably meant (or should have said) that GoDaddy don't support cfstoredproc, which does run sp_prepexec for each result specified. It's pretty inefficient, but I think there is probably no other way to do multiple result sets through JDBC. This is the exact reason why I don't like and don't

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Bryan Stevenson
Yes this can be solved (don't ask me how though).and yes that is a pretty SERIOUS screw-up on their part. The ISP I use does show you all other DBs on the shared server, but you cannot connect to any of themso no seeing the tables and so on...just DB namesso it is doable. Cheers

RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Dave Watts
We've had this conversation on this list before, and yes what you saw is true. If I remember right, it's a weakness of SQL Server, not CrystalTech. Well, except for the fact that Crystaltech allows remote connections using EM (a lot of hosts don't allow this). I also think someone

Re: Generic CF form handler

2006-05-08 Thread Matt Robertson
andy wrote: But what if you have a raxio button or a checkbox? How do you indicate if a field is required? How do you perform validation on fields of a certain type? OK I get it. Thats going to be fun. When I did something similar I used standard html form fields. Individual field

RE: Test object type

2006-05-08 Thread Dave Watts
So I assume that you use session.currentUser to hold EITHER a manager object OR a worker object. This may be a stupid question since I don't have a lot of oop experience, but is it bad form to use the same variable name to store two different types of objects? That seems so create

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Jeff Fleitz
I have a client who uses Intermedia.net, and that is the way it works for them. You can see the other databases in the EM, but can't access the objects. I don't think this is entirely correct. You should be able to see a list of other databases by default, but you should not be able to see

Scheduled tasks

2006-05-08 Thread Earl, George
3rd post, new subject line, haven't seen the first two come through . . .. We have a request from someone who shares our server to create _80_ scheduled tasks for a reporting application. Each scheduled task would create a single report and save it as an htm file so it doesn't have to be created

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Matt Robertson
Dave Watts wrote: This would require that their DBA revoke the public group role throughout the server, if I recall correctly. When it comes to MSSQL and EM I am strictly a user. Don't know much about the server's care and feeding. With that out of the way: Are there any sort of consequences

RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Snake
This is not a security hole at crystatech, it is simply how enterprise manager/sql server works. It does not restrict you from viewing other databases, but you cannot do anything with them if your user does not have access. There is a modfication you can make to the master database SP's to

RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Dave Watts
When it comes to MSSQL and EM I am strictly a user. Don't know much about the server's care and feeding. With that out of the way: Are there any sort of consequences to doing this that might make them not want to perform that action? I certainly don't miss not having this

RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Snake
Yep, we have done the modification so users cannot see others databases, but most don't. As I have mentioned b4, it's a tossup with shared hosting, if you want cheap hosting and to be able to do what you like on the server without restriction, then you have to accept the lack of security that

catching broken links?

2006-05-08 Thread Ray Champagne
Is there some automated way to report broken links in a client's site? It has to be automated, not like Xenu. It also has to be able to run on a shared server. We have clients who are entering broken links into their site, then their bosses write to us and complain about the dead links. Of

RE: Test object type

2006-05-08 Thread Brad Wood
Ok, that makes sense. So is there an instanceof method in CF or something similar to tell you what class was used to create your object. Also, can you create an interface with CFC's, and then implement that interface with another class? (Like other OOP languages) ~Brad -Original

RE: Coldfusion with Godaddy

2006-05-08 Thread John Rossi
I think they probably never really got the point of my initial support request. I haven't tried cfstoredproc yet because none of my clients sites use it, but there is definitely a problem with cfqueryparam, and sql server on my account at least. but The following query cfquery name=qryTest

RE: Test object type

2006-05-08 Thread Ian Skinner
Also, can you create an interface with CFC's, and then implement that interface with another class? (Like other OOP languages) ~Brad No not directly. See the writings of Hal Helms and others on why this is not so good for CF. -- Ian Skinner Web Programmer BloodSource

RE: catching broken links?

2006-05-08 Thread Ian Skinner
We have clients who are entering broken links into their site, then their bosses write to us and complain about the dead links. Of course, we try to explain that this is not our doing, but it really falls on deaf ears. I'd love a nice little app that could spider all links on the site and

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Jochem van Dieten
Matt Robertson wrote: Before I completely blow a gasket I wanted to confirm this is as big of a screwup as I think it is. There is an easy fix for this right? The fix should be under REVOKE in the manual. Jochem ~|

Re: catching broken links?

2006-05-08 Thread One User
I have a pure CF solution. email me if interested. ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239843 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription:

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Matt Robertson
Dave Watts wrote: that's probably not the worst thing going on in a shared hosting environment. Agreed. Luckily these are both dedicated servers. Only the SQL server component is shared. I was already lobbying for a dedicated box with MSDE/SQL Express running on it.

Re: ASP.Net book for CF programmer

2006-05-08 Thread Jochem van Dieten
Snake wrote: Like everything. There is a big difference to hosting a production server with hundreds of sites on it and millions of hits per day and running a development server with 1 developer on it and no traffic. There is indeed a big difference in what you must do (like make backups)

Re: URL Structure

2006-05-08 Thread Tuan Tran
The problem I have with this is I'm not the one putting these links on the page. There are users who uses a content managment system that enters in the content for the website. I want to avoid making the users use Coldfusion code b/c they don't understand it and it will complicate things for

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Rey Bango
Sorry Snake but this isn't correct. Seeing the DB names in EM is one thing. Being able to get down to the object level (tables, stored procs, or views) is not the norm. I just signed into my shared CFDynamics DB server and can see a boatload of other DBs but I can't see any of their tables or

RE: Test object type

2006-05-08 Thread Dave Watts
Ok, that makes sense. So is there an instanceof method in CF or something similar to tell you what class was used to create your object. You can use GetMetaData() to find this out. Also, can you create an interface with CFC's, and then implement that interface with another class? (Like

Re: Looping multiple dates...

2006-05-08 Thread Richard Dillman
That helped a ton. I was haveing SQL Writers Block lol. On 5/7/06, Jochem van Dieten [EMAIL PROTECTED] wrote: Richard Dillman wrote: Children are featured in various special publications at least 3 of which i need to track their appearances. Ill need to output the publication and

RE: URL Structure

2006-05-08 Thread Ian Skinner
The problem I have with this is I'm not the one putting these links on the page. There are users who uses a content management system that enters in the content for the website. I want to avoid making the users use ColdFusion code b/c they don't understand it and it will complicate things for

Better Way to Query?

2006-05-08 Thread Eric J. Hoffman
Not getting good results from this: SELECT COUNT (customer_orders.corder_id) as TOTOT, client.company FROM customer_orders JOIN customer_orders_prod on customer_orders.corder_id = customer_orders_prod.order_id JOIN

Re: Better Way to Query?

2006-05-08 Thread Jim Wright
Just throw a DISTINCT in the count, and you should be ok... SELECT COUNT (DISTINCT customer_orders.corder_id) as TOTOT, client.company -- Jim Wright Wright Business Solutions [EMAIL PROTECTED] 919-417-2257

Simple Cart?

2006-05-08 Thread Emmet McGovern
I need to setup a simple cart. Very similar to the cart cfmsource is using.. http://www.cfmsource.com/listitems.cfm?contentnbr=46 Mainly I'm looking for item list/quantity ordering. I don't need pictures. Category support is needed however. I'll probably integrate with authorize.net but I can

test ignore

2006-05-08 Thread Christopher . Lomvardias
test ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239854 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe:

session vars and cookies

2006-05-08 Thread Ray Champagne
Is there any other way to use session variables without setting client cookies or passing the CFID/CFTOKEN in the URL for every page? -- Ray ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239855 Archives:

Re: session vars and cookies

2006-05-08 Thread Charlie Griefer
i want to say no. but invariably somebody's going to come along with some hoity toity java method that passes them thru the ether. we'll see :) On 5/8/06, Ray Champagne [EMAIL PROTECTED] wrote: Is there any other way to use session variables without setting client cookies or passing the

RE: session vars and cookies

2006-05-08 Thread Dave Watts
Is there any other way to use session variables without setting client cookies or passing the CFID/CFTOKEN in the URL for every page? No, either one or the other is required. Well, theoretically, you could ensure that only forms are used for page navigation, and pass it via HTTP POST, but

Re: session vars and cookies

2006-05-08 Thread Crow T. Robot
Yea, and I should mention that there is no chance of being able to use J2EE vars on the server, either. Charlie Griefer wrote: i want to say no. but invariably somebody's going to come along with some hoity toity java method that passes them thru the ether. we'll see :) On 5/8/06, Ray

Re: session vars and cookies

2006-05-08 Thread Jochem van Dieten
Ray Champagne wrote: Is there any other way to use session variables without setting client cookies or passing the CFID/CFTOKEN in the URL for every page? Pass themn through a form :) Jochem ~| Message:

Re: session vars and cookies

2006-05-08 Thread Crow T. Robot
Yea, other than that. :) That would be an interesting site, though. Boatloads of fun to maintain! Jochem van Dieten wrote: Ray Champagne wrote: Is there any other way to use session variables without setting client cookies or passing the CFID/CFTOKEN in the URL for every page? Pass

Re: session vars and cookies

2006-05-08 Thread Jochem van Dieten
Crow T. Robot wrote: Yea, other than that. :) That would be an interesting site, though. Boatloads of fun to maintain! Not hard at all, just do it client-side: write a small javascript function and hook it to the onclick event of every anchor. Won't catch those without Javascript, but it

Looping through Fields

2006-05-08 Thread Les Mizzell
When testing, form is sending... strNAME1, numCOST1 (test values Bob, 300) strNAME2, numCOST2 (test values John, 400) strNAME3, numCOST3 (test values Robert, 500) and however many total there my be as defined by #form.intTravelerCount# I've done a cfdump and confirmed that the fields are

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Stephen Hait
I think this occurs when databases have a user with the name of guest. Databases without a user named guest should not have their objects or even their database names exposed. If you have a user in your database named guest, delete that user and your database should not be visible to others thru

RE: Looping through Fields

2006-05-08 Thread Brad Wood
The val() function returns an integer. Text cannot be converted to an integer and will output a 0. ~Brad -Original Message- From: Les Mizzell [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 4:44 PM To: CF-Talk Subject: Looping through Fields When testing, form is sending...

RE: Better Way to Query?

2006-05-08 Thread Hua Wei
You may want to try GROUP BY client.id, client.company Instead of GROUP BY company -Original Message- From: Eric J. Hoffman [mailto:[EMAIL PROTECTED] Sent: Monday, May 08, 2006 3:50 PM To: CF-Talk Subject: Better Way to Query? Not getting good results from this: SELECT COUNT

RE: ASP.Net book for CF programmer

2006-05-08 Thread Snake
To tune the server and CF for high usage, multiple sites, large amounts of traffic, lots of memory usage, security etc. A development server will happily run with CF installed with the default settings as you will not be running hundreds of sites with millions of visitors, nor will you be

RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Snake
Well as I have all our servers locked down I can't actually check to see how far you can get with the default configuration. I know you can see everyone elses databases, and I'm sure you can also open the database and view the tables. Just because you cannot do this at CFD, does not mean it is

RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Snake
It is nothing to do with guest user, databases do not have this by default, as stated, this is the known default behaviour of SQL server and EM and Microsoft released a stored proc to update themaster table to stop users seeing others users DB's. You can easily test this yourself, by creating a

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread Bryan Stevenson
Well as I have all our servers locked down I can't actually check to see how far you can get with the default configuration. I know you can see everyone elses databases, and I'm sure you can also open the database and view the tables. Just because you cannot do this at CFD, does not mean it

Re: ASP.Net book for CF programmer

2006-05-08 Thread Andy Allan
Our Development/Staging/QA/whatever-you-want-to-call-it mirrors Production exactly. CF settings, JVM settings, OS settings, Apache settings. It has to. (OK you can get away with the odd discrepency). Now true, we won't have external users hitting this environment, but we still have to load test

RE: Big SQL security hole at Crystaltech?

2006-05-08 Thread Joel
Hi Guys, The script you are after is http://support.microsoft.com/kb/889696/en-us (Run this script at your own risk, and pls test it on a dev server before running on a prod server) it only works on SQL 2000. I don't think they is one for 2005, haven't had much time to play with 2005 yet. By

Re: Big SQL security hole at Crystaltech?

2006-05-08 Thread James Holmes
With sandboxing and no cfobject (java) tag, this can be done with reasonable safety. On 5/9/06, Bryan Stevenson [EMAIL PROTECTED] wrote: Especially as a lot of clients put their username/passwor dinto the DSN , which means everyone else on the server can get into their database anyway

Re: Looping through Fields

2006-05-08 Thread Les Mizzell
Brad Wood wrote: The val() function returns an integer. Text cannot be converted to an integer and will output a 0. Yup - that was the problem. I don't need to be working 16 hours straight, huh? I start to forget what I'm doing...

Parsing non-standard XML

2006-05-08 Thread Andrew Spear
I'm trying to parse a file for a school district that is supposed to be XML, but it's not well-formed. Does anyone here have experience parsing files like this? The format is something like this: BasmatiL CLASS CC xxx /CC SN xxx /SN CNAME /CNAME MISC1 /MISC1 /CLASS ASSIGN DESCR

RE: Parsing non-standard XML

2006-05-08 Thread Dawson, Michael
According to XMLSpy, this is a well-formed document until you add multiple BasmatiL nodes. So, when you read this file into a variable, you should be able to just add a new top-level node that encompasses the multiple BasmatiL nodes. Then, you should be able to parse the XML file into an actual

Re: Parsing non-standard XML

2006-05-08 Thread Andrew Spear
Great idea Mike! Turned out to be a pretty elegant solution. Here's what I did to make it work... cfset Parsed = XMLParse(myxml#myxml#/myxml) cfloop index=ii from=1 to=#ArrayLen(Parsed.myxml.xmlchildren)# cfdump var=#Parsed.myxml.basmatiL[ii]#p/p /cfloop According to XMLSpy, this is a

RE: Test object type

2006-05-08 Thread Phillip Holmes
[For some reason my original post didn't go through (I think because I digitally sign my email). It had a typo anyway, so apologies if the original finally comes through to the list.] Exactly Right Dave. Joelle, In your base class, add something like this: cfproperty name=userType type=string