Re: New CF8 vulnerability

2009-07-06 Thread Dave l
Thats the trouble with bundling things. I used to think it was nice but really it creates these types of things. Have you seen the video of the guy hacking sites with this? It's not a CF-only issue. However, CF comes bundled with FCKEditor and other scripting languages don't. If you

Re: ssot: Ext window management question

2009-07-06 Thread cold.fusion
From the Docs on Ext.Window (http://extjs.com/deploy/ext-3.0-rc3/docs/?class=Ext.Window), in the 'methods' section: *load *( |Object/String/Function config| ) : Ext.Panel Loads this content panel immediately with content returned from an XHR call. *Parameters:* * |config| :

aggregate query problems

2009-07-06 Thread Seamus Campbell
Hi I have a query that I can't solve. I have a table with these columns (all text apart from contact_id): contact_id language_group town region state country There are 4 language_groups and each town has varying numbers each language_group (inc some with zero) I have to be able to show a

Restricted access to non cf files using cf

2009-07-06 Thread Anastassios Hadjicrystallis
I have a question that its answer may be interesting and usefull for many CF developers. Here it is. I have a site, and I have a folder where access is restricted and I have a login page asking for user name and password. As usually I chech these access data in my database and I give or give

Re: aggregate query problems

2009-07-06 Thread Jason Fisher
I think you need an outside table that has just your 4 language_groups in it, and then LEFT OUTER JOIN to ensure you get at least one record for each language, with the COUNT()s that can be zero. SELECT tbl_langs.language_group, Count(tbl_demographics.contact_id) AS CountOfcontact_id,

Re: Restricted access to non cf files using cf

2009-07-06 Thread Ryan Stille
Store them outside of the webroot and use cfcontent to serve them to the browse when necessary. -Ryan Anastassios Hadjicrystallis wrote: I have a question that its answer may be interesting and usefull for many CF developers. Here it is. I have a site, and I have a folder where access is

Re: Restricted access to non cf files using cf

2009-07-06 Thread Jason Fisher
Place your non-CF files into a non-web folder (say, C:\SecureFiles\MySite\ or whatever) and then serve those files through a CF script. For example, perhaps the file request link looks like this: href=index.cfm?event=file.downloadid=xyz Then the file.download event checks the session; if

Re: New CF8 vulnerability

2009-07-06 Thread Eric Roberts
I have always installed FCK instead of using the bundled version...it allows me to make sure that i have the latest version without effecting CF. I am not a fan of bundled/integrated anything...I think Office being the exception...why would you want all of your eggs in one basket? Eric On Mon,

Re: ssot: Ext window management question

2009-07-06 Thread Don L
You're aware that a window is a type of panel, right? mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ 2009/7/6 Don L do...@yahoo.com: Good input, but load() method seems for panel only, it made me think of render and renderto... Have you tried the

Re: Restricted access to non cf files using cf

2009-07-06 Thread Claude Schneegans
Store them outside of the webroot and use cfcontent to serve them to the browse when necessary. Some people have no access to folders outside the webroot. In that case, one solution is to : 1. register all files in your database with their original name and type (pdf, doc, etc.) 2. store any

Re: Restricted access to non cf files using cf

2009-07-06 Thread Jason Fisher
Nice solution for those in hosted environments, Claude! Simple and effective! ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive:

Re: aggregate query problems

2009-07-06 Thread Seamus Campbell
Thanks Jason, but that doesn't seem to help. I've put a copy up here http://www.working-traveller.com/g/demographicsold.cfm to show you what I mean. Any more clues? and thanks again Seamus ~| Want to reach the ColdFusion

Re: ssot: Ext window management question

2009-07-06 Thread James Holmes
I just use the applyTo property when setting up the ComboBox. mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ 2009/7/6 Don L do...@yahoo.com: You're aware that a window is a type of panel, right? mxAjax / CFAjax docs and other useful articles:

Re: Restricted access to non cf files using cf

2009-07-06 Thread Anastassios Hadjicrystallis
Well, all these solutions fit in case that we want to restrict access to pdf or doc etc files which after login we serve them as a page. What could be done when the files, we want to restrict access to, are PART of a web (cfm) page ? I mean, in the restricted folder after login I display cfm

Re: Restricted access to non cf files using cf

2009-07-06 Thread Claude Schneegans
any other idea without cfcontent ? Nope. Any solution to give access or not must be based on some CF code to abort the request if the user has no access, or send the document if he has. And the proper tag for CF to send the document is CFCONTENT.

Re: Restricted access to non cf files using cf

2009-07-06 Thread Ian Skinner
Anastassios Hadjicrystallis wrote: Am I wrong? If I am not any other idea without cfcontent ? cfcontent can server up any type of web content including image files. You would just put the name of the cfm template that contains the cfontent tag into the img href=... property. Then

Re: ssot: Ext window management question

2009-07-06 Thread Don L
I just use the applyTo property when setting up the ComboBox. mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ Beautiful, thank you. One more question, what are required attributes for a URL for data store? some scattered sample as a question seems very messy.

Re: ssot: Ext window management question

2009-07-06 Thread James Holmes
http://www.extjs.com/deploy/dev/docs/?class=Ext.data.Store mxAjax / CFAjax docs and other useful articles: http://www.bifrost.com.au/blog/ 2009/7/6 Don L do...@yahoo.com: I just use the applyTo property when setting up the ComboBox. Beautiful, thank you.  One more question, what are

Re: aggregate query problems

2009-07-06 Thread Jason Fisher
Seamus, Can you post your updated query? ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive:

OT DNS cname vs dname question

2009-07-06 Thread Ian Skinner
Not a ColdFusion question, but there are just so many smart people here. We have an old server named jolie [jolie.cdpr.ca.gov] . This server is being replaced by our new apps server [apps.cdpr.ca.gov]. What do I want to tell our DNS host to do with the old jolie.cdpr.ca.gov entry to have it

Re: Restricted access to non cf files using cf

2009-07-06 Thread Anastassios Hadjicrystallis
cfcontent can server up any type of web content including image files. You would just put the name of the cfm template that contains the cfontent tag into the img href=... property. Then the cfcontent... tag would server up the image file from the secure location with the proper

Re: Restricted access to non cf files using cf

2009-07-06 Thread Ian Skinner
Your example was not quite the same as the Adobe example. They had reset=yes in their cfcontent tag. Try that with yours. It is especially important with binary data like an image file, to not have any extraneous white space that may be hanging around in the cfm file. The reset=yes

Re: OT DNS cname vs dname question

2009-07-06 Thread Judah McAuley
DNAME is for aliasing an entire domain, not a single resource, so you should use CNAME. You should also see if there is an MX record for your old app server. If so it will need to be updated as well. Judah On Mon, Jul 6, 2009 at 10:15 AM, Ian Skinnerh...@ilsweb.com wrote: Not a ColdFusion

Re: Restricted access to non cf files using cf

2009-07-06 Thread Anastassios Hadjicrystallis
Your example was not quite the same as the Adobe example. They had reset=yes in their cfcontent tag. Try that with yours. It is especially important with binary data like an image file, to not have any extraneous white space that may be hanging around in the cfm file. The reset=yes

Re: Restricted access to non cf files using cf

2009-07-06 Thread Ian Skinner
Anastassios Hadjicrystallis wrote: Ian, I used reset=yes but no luck. When I run test.cfm and view source I see there the img tag img href=image.cfm. It looks like it does not run the image.cfm page at all. It treats it as a simple HTML tag. Why it should run image.cfm? What force it to

Re: OT DNS cname vs dname question

2009-07-06 Thread Ian Skinner
Judah McAuley wrote: DNAME is for aliasing an entire domain, not a single resource, so you should use CNAME. You should also see if there is an MX record for your old app server. If so it will need to be updated as well. Judah Is that not what I am attempting to do, aliasing the entire

How to Reset MS SQL Server '05 Connections

2009-07-06 Thread David G
I'm working with our DBA on a permissions issue. We wonder if he makes a change... like putting the service account user into a role... will it be reflected on the next CF page attempt. My timeout appears to be 20 min in CF Admin for that DSN. Is there a way to reset the connections to make

RE: OT DNS cname vs dname question

2009-07-06 Thread Dave Watts
The servers jolie and apps are hosts, not domains. If the server is registered in DNS with an A or CNAME record, it's not a domain. Dave Watts, CTO, Fig Leaf Software -Original Message- From: Ian Skinner h...@ilsweb.com Sent: Monday, 06 July, 2009 14:22 To: cf-talk

Re: OT DNS cname vs dname question

2009-07-06 Thread Ian Skinner
Dave Watts wrote: The servers jolie and apps are hosts, not domains. If the server is registered in DNS with an A or CNAME record, it's not a domain. Dave Watts, CTO, Fig Leaf Software That clarifies some of it. I really need to get my head around the entire DNS way fores and whatnots

Re: New CF8 vulnerability

2009-07-06 Thread Pete Freitag
On Fri, Jul 3, 2009 at 7:32 PM, Eric Roberts ow...@threeravensconsulting.com wrote: I know the vulnerability was in older versions of FCKEditor...if one were to install and use the current version, does it still have the vulnerability or has that been fixed? I just got an emergency gig

DSN is Saving CF Query Ops to Wrong Database?

2009-07-06 Thread Matthew Reinbold
I'm dealing with some real oddness today and I was wondering if anybody else has seen something similar. We have a development environment and a test environment. Each environment has its own database on the same instance of SQL Server (9.04.3042). So the database that dev hits is named

Re: New CF8 vulnerability

2009-07-06 Thread Dave Watts
Thats the trouble with bundling things. I used to think it was nice but really it creates these types of things. Well, CF contains TONS of bundled items; any of these items could conceivably have some unknown vulnerability. Database drivers, COM and .NET interfaces, all sorts of third-party

Re: Restricted access to non cf files using cf

2009-07-06 Thread Dave Watts
Any idea how can I restrict access to any kind of content (htm, cfm, pdf, jpg, doc xls etc) using coldfusion ? As many have mentioned, you can store them in a directory that isn't web-accessible, and serve them with CFCONTENT. Another alternative is to store them as mentioned above, but use

Re: Restricted access to non cf files using cf

2009-07-06 Thread Dave Watts
Placing the jpg files outside the webroot ok none not logged in can http them, but then I can't use them in img src=... either. I think cfcontent can't help in this case. Sure it can. CFCONTENT can be used to serve any sort of file you want. All an IMG tag does is tell the browser to make

Re: DSN is Saving CF Query Ops to Wrong Database?

2009-07-06 Thread davidmcgui...@gmail.com
Maybe. Make sure each of your applications has its own namespace by using this.name in Application.cfc, otherwise they'll share ( and overwrite eachother ) anything you put into the application scope across the entire JVM if I remember correctly. In this case the pointer to a datasource or the

Re: OT DNS cname vs dname question

2009-07-06 Thread Judah McAuley
There are some potential complications when you start getting into delegation of subdomains, but that is a pretty rare setup. Generally speaking you are going be dealing with two levels of DNS. There is the domain itself which you would go to a registrar for, like foo.com or foo.co.uk That

Re: DSN is Saving CF Query Ops to Wrong Database?

2009-07-06 Thread Matthew Reinbold
Maybe. Make sure each of your applications has its own namespace by using this.name in Application.cfc, otherwise they'll share ( and overwrite eachother ) anything you put into the application scope Interesting. Looking through the inherited code I'm seeing that in the application.cfc

Re: aggregate query problems

2009-07-06 Thread Seamus Campbell
Hi Jason updated query here (I'm using access at the moment) SELECT tbl_member_language_group.language_group_name, Count(*) AS CountOfcontact_id, tbl_demographics.town, tbl_demographics.region FROM tbl_member_language_group LEFT JOIN tbl_demographics ON

Re: DSN is Saving CF Query Ops to Wrong Database?

2009-07-06 Thread Dave Watts
cfset application.ds = mydb / Would that be any different than using: cfset this.ds = mydb / Yes, those are two different things. The first creates a variable in the Application scope. The second creates a property of the application.cfc instance. Also, to clarify, the separate Coldfusion

Re: DSN is Saving CF Query Ops to Wrong Database?

2009-07-06 Thread David McGuigan
So do your Application.cfc files have a cfset this.name = etc / in their pseudo constructors? On Mon, Jul 6, 2009 at 3:43 PM, Matthew Reinbold matthew.reinb...@voxpopdesign.com wrote: Maybe. Make sure each of your applications has its own namespace by using this.name in Application.cfc,

Re: ssot: Ext window management question

2009-07-06 Thread Don L
Thanks. ok, gettting closer... the following code still missed some required attributes or value not set correctly for some existing ones, and I don't know which one... var autos = new Ext.form.ComboBox({ xtype: 'combo', id: 'type', store : new Ext.data.Store({ proxy:new

Re: aggregate query problems

2009-07-06 Thread Jason Fisher
OK, I wonder if it's the * in COUNT(*) ... try this: SELECT tbl_member_language_group.language_group_name, COUNT(tbl_demographics.contact_id) AS CountOfcontact_id, tbl_demographics.town, tbl_demographics.region FROM tbl_member_language_group LEFT JOIN

Re: ssot: Ext window management question

2009-07-06 Thread Cutter (ColdFusion Related)
Don, Adobe's JSON implementation is a little non-standard (and better, IMHO). You'll need a custom data reader when feeding your data store with a cf query return. The CFQueryReader is available at http://cfqueryreader.riaforge.org, with some more information available on this post:

Re: aggregate query problems

2009-07-06 Thread Seamus Campbell
Hi, thanks - I did try both ways - neither way worked. Seamus OK, I wonder if it's the * in COUNT(*) ... try this: ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion