Re: SOT: jquery hide

2013-01-02 Thread Larry Lyons
John, display:none means that the the tag in question will not appear on the page at all (although you can still interact with it through the dom). There will be no space allocated for it between the other tags. Visibility:hidden means that unlike display:none, the tag is not visible, but

Re: SOT: jquery hide

2013-01-02 Thread Steve 'Cutter' Blades
Yes, and jQuery's show() and hide() methods use the 'display' property. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010

New Security Issue with CF

2013-01-02 Thread Larry Lyons
A new CF security issue was just discovered a few days ago. You may want to forward this information to whomever is your CF Admin. http://www.carehart.org/blog/client/index.cfm/2013/1/2/serious_security_threat To make a very long story short, the exploit allows a hacker to upload a file is

Re: New Security Issue with CF

2013-01-02 Thread Russ Michaels
and also read the following article. http://www.michaels.me.uk/post.cfm/securing-your-coldfusionmx-installation-on-windows On Wed, Jan 2, 2013 at 7:47 PM, Larry Lyons larrycly...@gmail.com wrote: A new CF security issue was just discovered a few days ago. You may want to forward this

Re: New Security Issue with CF

2013-01-02 Thread Money Pit
Thanks for posting. I thought I had my stuff locked down pretty well but I screwed up and left a door open. The nature of this is almost unbelievably nasty. -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com ~|

Re: New Security Issue with CF

2013-01-02 Thread Robert Rhodes
Oh man I just looked and one of my standby servers got hit with this. Somehow we forgot to patch that one. It had a bunch of sites on it, but none of them were actually live (because it was a standby server). So I have questions. Does anyone know that this thing does? I can just wipe this

Re: New Security Issue with CF

2013-01-02 Thread Raymond Camden
Charlie posted an update: http://www.carehart.org/blog/client/index.cfm/2013/1/2/Part2_serious_security_threat On Wed, Jan 2, 2013 at 9:00 PM, Robert Rhodes rrhode...@gmail.com wrote: Oh man I just looked and one of my standby servers got hit with this. Somehow we forgot to patch that one.

RE: New Security Issue with CF

2013-01-02 Thread Eric Bourland
I am reading up on Charlie's blog posts. (Thank you, Charlie.) My ColdFusion 9.0.2 server was hit with this. I found h.cfm in /CFIDE/ with file date 12/24/2012. I deleted it. No new scheduled tasks were set in my CF Admin. I use IIS 7.5 on Windows 2008. Can someone review the exact steps

Re: New Security Issue with CF

2013-01-02 Thread Robert Rhodes
Thanks. I saw that afterwards. I was freaking out a bit there. Still am. :( I have gone through the logs on that server (windows 2008 R2 server running IIS7.5 and CF9.02) and the hacker loaded his script 1 time each on 15 different sites. They all look like this: 2013-01-02 00:15:15

Re: New Security Issue with CF

2013-01-02 Thread Wil Genovese
I am investing a server that has been hit. I am seeing these files were created at the time of the attack. C:\ColdFusion9\wwwroot\WEB-INF\cfclasses\cfh2ecfm509131890$funcLOC.class C:\ColdFusion9\wwwroot\WEB-INF\cfclasses\cfh2ecfm509131890.class

Re: New Security Issue with CF

2013-01-02 Thread Wil Genovese
Never mind - I just realized this server has template caching turned on. duh. Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com wilg...@trunkful.com www.trunkful.com On Jan 3, 2013, at 12:14 AM, Wil Genovese jugg...@trunkful.com wrote: I am