Re: Google for Domains, mail not being sent

2008-09-20 Thread Kym Kovan
Chuck Weidler wrote: I've hardcoded the To email address in the cfmail to an address that I know is good. Still no good. Try dropping a local mail server on your server and use that to send the mail to Google, or anywhere else for that matter. We use iMS Lite (coolfusion.com) on each

Problem with reading and writing UTF-8 characters

2008-09-20 Thread Joseph Bugeja
Hi Guys, We are using ColdFusion 8 with the built-in Java 1.6. When trying to write a string that contains UTF-8 characters to a file, these characters are becoming stored incorrectly in the file. A sample call issued is the following: cffile action=write file=testfile.txt output=#chr(198)#

Re: Problem with reading and writing UTF-8 characters

2008-09-20 Thread Paul Hastings
Joseph Bugeja wrote: We are using ColdFusion 8 with the built-in Java 1.6. When trying to write a string that contains UTF-8 characters to a file, these characters are doubt that. becoming stored incorrectly in the file. A sample call issued is the following: cffile action=write

New SQL Injection

2008-09-20 Thread Al Musella, DPM
A new type of sql attack is hitting my server since about 2 am this morning. It got through the filter I use because it has different keywords. Luckily the cfparam triggered an error - as it was looking for intergers and was finding this:

Re: Sessions and more info

2008-09-20 Thread Mike Chabot
Gus, The session variables would be specific to the application name on the server, not just the server. Some options: Log into every application on the main login page by writing a cfapplication tag, then set the session variables, then repeat for every application. Log into every application

Re: Sessions and more info

2008-09-20 Thread Judah McAuley
If this is for an internal application, then I'd suggest creating your own SSL certs which you can do for free. Your users will get a warning about a untrusted certificate the first time around, but you can explain to them that they need to trust it permanently adn then the error will not recur

Upgrade From 7.0.2 Standard to 8.0.1 Enterprise

2008-09-20 Thread Matt Quackenbush
I am planning on performing an upgrade from 7.0.2 Standard to 8.0.1 Enterprise tonight. Are there any particular gotchas that I should look out for? Generally speaking, in terms of software upgrades, I am a fan of uninstalling the current version and then doing a fresh install of the new

Re: Upgrade From 7.0.2 Standard to 8.0.1 Enterprise

2008-09-20 Thread Matt Quackenbush
To be clear, I am going from a standard installation (e.g. C:\ColdFusion7\) to a JRun installation (so I can run multiple CF instances). While I've done lots of the JRun installs from scratch, I've never moved a standard install to JRun in production. Hence my iffiness on the topic. ;-)

Re: New SQL Injection

2008-09-20 Thread Les Mizzell
A new type of sql attack is hitting my server since about 2 am this morning. I am seeing a large increase in the number of attacks on several of my sites in the last 48 hours.. Here we go again... Instead of just being on the defense, I wish there was some way to counter attack!!!

Re: New SQL Injection

2008-09-20 Thread Claude Schneegans
I wish there was some way to counter attack!!! H Well, based on the fact that attacks come from infected PC which even ignore they were infected, it would be pretty useless to counter-attack the IP address from which the attack came. BUT, all theses attacks tend to inject spammy links to

Re: Google for Domains, mail not being sent

2008-09-20 Thread Dan O'Keefe
Chuck, I don't think your SMTP server is correct and not sure if you should list all of the other's as backups. As Kym mentioned, since you know the DNS entries for a google mail account, I am assuming you have one and have the domain configured to work with google. Also, can you send and

Re: New SQL Injection

2008-09-20 Thread Al Musella, DPM
We got a reputation for being easy to hack, so they now concentrate on cfm files.. hopefully, with this last attack, at least everyone on this list should already be protected against the current set of attempts... and if they don't succeed, maybe they will move on to easier targets. I

: Re: Google for Domains, mail not being sent

2008-09-20 Thread Chuck Weidler
Hey, thanks for all the suggestions. I got it working kind of like Dan suggested. I created another account in Google and setup CF Admin to smtp.google.com and used the account information I created to send the mail through. It might not be the correct way, but it works and that is all I need

: : Re: Google for Domains, mail not being sent

2008-09-20 Thread Chuck Weidler
To add a little more of the configuration in CF Admin. Mail Server: smtp.google.com Username: User Email Account ([EMAIL PROTECTED]) Password: * (Whatever the password is.) Server Port: 587 Backup Mail Servers: Left Blank Enable SSL

Amazon S3 REST Wrapper

2008-09-20 Thread Andrew Grosset
I need to create a directory (bucket) within another bucket Here is an excerpt from the cfc by Joe Danziger !--- put the bucket via REST --- cfhttp method=PUT url=http://s3.amazonaws.com/#arguments.bucketName#; charset=utf-8 cfhttpparam type=header

Re: New SQL Injection

2008-09-20 Thread Michael Dinowitz
If your interested, I have a project that I just wrote for a client that will allow you to scan an entire directory tree for all files that have a cfquery with un-paramed variables and fix them. It doesn't work automatically (it could but I disabled that option) but instead gives you the queries

RE: Sessions and more info

2008-09-20 Thread Dave Watts
I am working in a uni and we have multiple sites (on the same server) requiring authentication. We simmply cannot afford to purchase a cert for each site (domain and separate IP), so my solution was to created a single site with a cert which has the other sites available as virtual

Re: New SQL Injection

2008-09-20 Thread Al Musella, DPM
Thanks, but all of mine are fixed finally. You should talk to the CF people to get that integrated with either cold fusion or dreamweaver.. At 09:58 PM 9/20/2008, Michael Dinowitz wrote: If your interested, I have a project that I just wrote for a client that will allow you to scan an entire

Re: Problem with reading and writing UTF-8 characters

2008-09-20 Thread Paul Hastings
Joseph Bugeja wrote: cffile action=write file=testfile.txt output=#chr(198)# and � charset=utf-8 just to confirm, this works fine on our dev server (8.01). ~| Adobe® ColdFusion® 8 software 8 is the most important and

Re: Amazon S3 REST Wrapper

2008-09-20 Thread Barney Boisvert
Buckets can't be nested, you have to create separate buckets. I use subdomains with an -s3 extension, typically, regardless of whether they actually exist in DNS. The point is that it is a namespace you control, though DNS in particular is nice for the direct mapping. cheers, barneyb On

Re: cfdocument and eps graphics

2008-09-20 Thread Mike Chabot
I looked into getting vector graphic images, such as EPS, embedded into a cfdocument-produced PDF and I believe that this is not possible using cfdocument in CF 8.0.1. If anyone thinks otherwise, please let me know. -Mike Chabot I am just curious about the possibility of using a vector graphics

Re: Amazon S3 REST Wrapper

2008-09-20 Thread Andrew Grosset
thanks Barney, I use s3Fox in firefox which makes it so easy! I just wish I could figure out how to do it with Coldfusion Andrew. ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the

Re: cfdocument and eps graphics

2008-09-20 Thread Paul Hastings
Mike Chabot wrote: I looked into getting vector graphic images, such as EPS, embedded into a cfdocument-produced PDF and I believe that this is not possible using cfdocument in CF 8.0.1. If anyone thinks otherwise, please let me know. you might try the iText lib that's shipped w/cf, it's an

Re: Amazon S3 REST Wrapper

2008-09-20 Thread Andrew Grosset
Found it! just add a slash here (after the arguments.bucketName): !--- Create a canonical string to send based on operation requested --- cfset var cs = PUT\n\ntext/html\n#dateTimeString#\nx-amz-acl:#arguments.acl#\n/mywebsitename/#arguments.bucketName#/ and here: cfhttp