Re: Difference between 3 tier architecture and MVC pattern

2010-01-18 Thread Sean Corfield
On Mon, Jan 18, 2010 at 11:56 AM, Barney Boisvert wrote: > Three tier architecture is about physically separating your > presentation code (typically an MVC application) from your business > logic (typically a set of business objects) and your persistence layer > (a database) onto different hardw

Re: Downloading a file from a website

2010-01-18 Thread Dave Watts
> What I'd like to do is connect to www.foo.bar/images/foobar.jpg and > then save that jpg file as an image on my server. That's what CFHTTP is for. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB)

Re: Downloading a file from a website

2010-01-18 Thread Phillip Vector
Thanks all. :) ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329773 Subscriptio

Re: Downloading a file from a website

2010-01-18 Thread Phillip Vector
>From what I am reading, that is used to make a page using a file. What I'd like to do is connect to www.foo.bar/images/foobar.jpg and then save that jpg file as an image on my server. On Mon, Jan 18, 2010 at 12:16 PM, Che Vilnonis wrote: > > should work if I remember correctly. > ~CV > >

RE: Downloading a file from a website

2010-01-18 Thread Che Vilnonis
OOPS, I misread the email... Yup, you can "scrape" images from other sites with . ~CV -Original Message- From: Cameron Childress [mailto:camer...@gmail.com] Sent: Monday, January 18, 2010 3:17 PM To: cf-talk Subject: Re: Downloading a file from a website On Mon, Jan 18, 2010 at 3:14

Re: Downloading a file from a website

2010-01-18 Thread Cameron Childress
On Mon, Jan 18, 2010 at 3:14 PM, Phillip Vector wrote: > If I wanted to have my server download an image from a website, would > cffile be able to handle that? If so, how since I thought cffile can > only work with files it has or the user is uploading. > > If not, then what will work? CFHTTP -

RE: Downloading a file from a website

2010-01-18 Thread Che Vilnonis
should work if I remember correctly. ~CV -Original Message- From: Phillip Vector [mailto:vec...@mostdeadlygame.com] Sent: Monday, January 18, 2010 3:15 PM To: cf-talk Subject: Downloading a file from a website If I wanted to have my server download an image from a website, would cffi

Downloading a file from a website

2010-01-18 Thread Phillip Vector
If I wanted to have my server download an image from a website, would cffile be able to handle that? If so, how since I thought cffile can only work with files it has or the user is uploading. If not, then what will work? ~| Wan

Re: Difference between 3 tier architecture and MVC pattern

2010-01-18 Thread Barney Boisvert
MVC is a pattern for structuring your UI-layer code, while a three tier architecture is about how your hardware is laid out. MVC is about separating the request processing code from the state (model) code and from the display (view) code. The three all worth together to deal with a user interacti

Re: ORM question

2010-01-18 Thread Victor Moore
Good to know. This is exactly the stuff I was talking about. Using old tricks with new dogs :) Before, I as just running the query at application start up, loading it in app scope (I need it for read only purposes anyway) and use it whenever i need it. It changes very rarely but when changes I c

Difference between 3 tier architecture and MVC pattern

2010-01-18 Thread funand learning
Hi All, I was trying to understand the concepts of fusebox and came across MVC design pattern, Can anyone please help me in understanding the difference between MVC and 3 tier architecture. I am confused as both are concerened with separation of layers? Thanks.

Re: ORM question

2010-01-18 Thread Dave Watts
> You should virtually never cache ORM-managed instances anywhere. > Their state MUST be managed by the ORM framework, or you run into all > kinds of crazy issues.  If you simply must cache one (a common-ish use > case is for business-level transactions where you need to keep > modified persistent

RE: Injection Testing/Monitoring

2010-01-18 Thread brad
On the topic, I guess to be fair I could mention that there are web application firewalls out there that filter for attacks such as these. They are probably going to be able to filter a high amount of traffic faster that CF can, and if you pay $$ the vendor keeps up with all the latest attack def

Re: ORM question

2010-01-18 Thread Barney Boisvert
You should virtually never cache ORM-managed instances anywhere. Their state MUST be managed by the ORM framework, or you run into all kinds of crazy issues. If you simply must cache one (a common-ish use case is for business-level transactions where you need to keep modified persistent instances

Re: ORM question

2010-01-18 Thread Victor Moore
I think I will stick with one load per call and probably will end up saving it in the application scope so it's available in other places as needed. Thank you Victor On Mon, Jan 18, 2010 at 2:06 AM, Barney Boisvert wrote: > > It does solve the problem, but has pretty significant performance > i

RE: Injection Testing/Monitoring

2010-01-18 Thread Justin Scott
> With the recent SQL Injection talk, I was looking for ways to > setup monitoring and testing procedures to test for and monitor > SQL Injection. One of the prevention tools that I made available a while back will find many SQL injection attempts and can stop them and notify you. It's not perfe

Injection Testing/Monitoring

2010-01-18 Thread Andrew Tegenkamp
With the recent SQL Injection talk, I was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. Monitor downtime and all that is covered, but I don't have anything too useful for testing SQL Injection on new code and monitoring for SQL Injection on e

Re: Injection Testing/Monitoring

2010-01-18 Thread Cameron Childress
On Mon, Jan 18, 2010 at 12:44 PM, wrote: > As far as specific testing tools, I think good practice and code reviews > are one of the best things here.  You should be able to look at a query > and spot any dynamic parts that are out of a cfqueryparam or not > sanitized in some other way.  The key

RE: Injection Testing/Monitoring

2010-01-18 Thread brad
One of the best ways to test your site is to post the URL here and claim it can't be hacked. Usually people will "help you out". :) As far as specific testing tools, I think good practice and code reviews are one of the best things here. You should be able to look at a query and spot any dynam

RE: More Efficient (Faster) Method

2010-01-18 Thread brad
> I can't do that (MySQL) - but I can do Maxrows="1" - and I usually do. For the record, putting maxrows=1 in a cfquery still asks the database to retrieve all the rows-- the drivers just stop fetching after the first row. Your database might be able to optimize fetching the first record better

Injection Testing/Monitoring

2010-01-18 Thread Andrew Tegenkamp
With the recent SQL Injection talk, I was looking for ways to setup monitoring and testing procedures to test for and monitor SQL Injection. Monitor downtime and all that is covered, but I don't have anything too useful for testing SQL Injection on new code and monitoring for SQL Injection on e

RE: More Efficient (Faster) Method

2010-01-18 Thread Eric Nicholas Sweeney
Thanks Everyone for the great feedback - Qing: "Is the inner loop for query qryGetShipCosts really necessary?" No - it wasn't - thanks for the catch! " I always include SELECT TOP 1..." I can't do that (MySQL) - but I can do Maxrows="1" - and I usually do. Thanks for that catch as well. And

Re: 64bit CF Server and System DSNs

2010-01-18 Thread Bobby Hartsfiled
Hi Greg, thanks for the response. The SQL server is an existing (separate) server that we have used for years. It has no problems talking to our other existing servers. Return-Path: Received: from mail.houseoffusion.com [64.118.74.225] by mail.clickcultur

Re: 64bit CF Server and System DSNs

2010-01-18 Thread Greg Luce
Bobby, I'm no sys admin, but I found on windows 7 64 bit that TCP/IP was disabled by default in MSSQL. Not sure if that helps, but it tripped me up for awhile and I've heard of others getting stuck on that. -- Greg Luce Luce Consulting Services, Inc. www.luceconsulting.net (863) 273-0289 On M

64bit CF Server and System DSNs

2010-01-18 Thread Bobby Hartsfiled
Normal 0 false false false EN-US X-NONE X-NONE MicrosoftInternetExplorer4 We are in the process of setting up a 64bit, multiserver configuration ColdFusion server. We have setup and tested multiserver configuration in the past but that was on 32bit. This is our first attempt

Re: Recent SQL Injection attacks

2010-01-18 Thread Tom Chiverton
On Friday 15 Jan 2010, Chung Chow wrote: > if ( isdefined("cgi.query_string") and ( > findnocase("DECLARE",cgi.query_string) or I do declare that keyword matching alone has issues :-) -- Helping to challengingly envisioneer eigth-generation network integrated turn-key bandwidth a

RE: managing emails

2010-01-18 Thread Richard Meredith-Hardy
I don't think that matters, so long as it is a cheaper solution than Exchange or Zimbra as Dave suggests. I'm not clear on how one would use it to isolate correspondence relating to single jobs though. I'm probably being thick... Richard -Original Message- From: Cameron Childress [mail

RE: managing emails

2010-01-18 Thread Richard Meredith-Hardy
Hmm. Not sure what you mean, are you suggesting there should be a group for every job? There are 1000's of them. Richard -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: 16 January 2010 17:06 To: cf-talk Subject: Re: managing emails > What I'm really reluctant t