RE: SQL OT: selecting bottom most 10 records

2002-10-28 Thread Cornillon, Matthieu
Hi, all. A late entry on this topic. I didn't know about the SQL method, which is pretty nifty. I would have offered the (perhaps slower?) CF method, using maxrows in the CFQUERY tag: cfquery name=getWriter datasource=survivorsmiles maxrows=10 select ID, firstname, lastname, email

Redirect methods: CFHEADER, CFLOCATION, JavaScript, META REFRESH

2002-10-25 Thread Cornillon, Matthieu
I have an application that lists a bunch of external sites that people can link to. When a user selects an item on the list, I display a detail page regarding that item, along with a Log On button that allows them to access the site in question. When they click the button, they are sent to an

RE: Duplicate UserNames / Passwords logging into a site

2002-10-14 Thread Cornillon, Matthieu
Mark, I don't know if this is the way to go, but it might spark some ideas for you that solve the initial problem, as well as addressing Benoit's point. You store your usernames and passwords in a table, I assume. If you can modify that table, add a LastActivity column of type date/time. When

RE: Problem with a dynamic menu and loops.

2002-10-10 Thread Cornillon, Matthieu
You could treat it as two separate queries, each of which feed a segment of the select list. So, in half-pseudo-sortof-code: CFQUERY name=GetTargetDept... SELECT NEEDEDCOLUMNS FROM TABLE /CFQUERY CFQUERY name=GetOtherDepts... SELECT NEEDEDCOLUMNS FROM TABLE

copying db info with cf

2002-10-10 Thread Cornillon, Matthieu
Hi. I work on a site that has development, preview/testing, and production environments. These are fully independent right down to the database environments. It's all Oracle on the back end. I've taken care that the data structure is identical from environment to environment. However, the

RE: copying db info with cf

2002-10-10 Thread Cornillon, Matthieu
-Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 10, 2002 10:20 AM To: CF-Talk Subject: copying db info with cf Hi. I work on a site that has development, preview/testing, and production environments. These are fully independent right down

OT: cf project management

2002-10-10 Thread Cornillon, Matthieu
Does anyone out there have a particular tool that they use for managing ColdFusion development projects. I have a feeling that Microsoft Project is super-overkill, but my looseleaf paper with hand-drawn checkboxes is becoming a bit insufficient. I don't need budgetary things, and I don't need

RE: copying db info with cf

2002-10-10 Thread Cornillon, Matthieu
Thanks, everyone, for your feedback on this. Looks like some sort of Oracle-based operation is the way to go. I more or less just wanted to make sure that there was no easy and obvious CF solution that I was missing. Thanks again for your posts. Matthieu -Original Message- From:

RE: CFLOCATION to external sites - failure

2002-09-30 Thread Cornillon, Matthieu
Hi, all. I'm afraid that this isn't the problem. The addresses are indeed fully qualified. I have rewritten the CFLOCATION tag several times from scratch to be sure I have no typos. I have cut and pasted the exact URL string from the CFLOCATION url attribute to a browser's address bar (on the

RE: escaping ampersands in sql*plus

2002-09-27 Thread Cornillon, Matthieu
Deanna! You're a star! That did the trick. I knew the answer was a simple one that was just too hard for me. ;) Thanks, Matthieu -Original Message- From: Deanna Schneider [mailto:[EMAIL PROTECTED]] Sent: Friday, September 27, 2002 8:54 AM To: CF-Talk Subject: Re: escaping ampersands

RE: escaping ampersands in sql*plus

2002-09-27 Thread Cornillon, Matthieu
Cool! I probably don't need to mess with it, but it's good to know anyway. Thanks again, Matthieu -Original Message- From: Deanna Schneider [mailto:[EMAIL PROTECTED]] Sent: Friday, September 27, 2002 9:20 AM To: CF-Talk Subject: Re: escaping ampersands in sql*plus You can also change

CFLOCATION to external sites - failure

2002-09-27 Thread Cornillon, Matthieu
Hi. I have a series of pages, each of which points to an offsite link. These external sites vary in location and nature. In order to track usage of these sites, I am passing users through an exit page. On this exit page, I pull the external URL from a database and stick it in a CFLOCATION

OT: escaping ampersands in sql*plus

2002-09-26 Thread Cornillon, Matthieu
Hi. I know that the ampersand () character, when in an insert statement in SQL*PLUS, causes a problem, because it's a special character. I am guessing that there is a way to escape this out, but I can't figure it. Here is the statement: INSERT INTO DEPARTMENTS VALUES (1,2,3,'Mergers

OT: Long text fields

2002-09-24 Thread Cornillon, Matthieu
Hi. I am developing with an Oracle back end. I want to have a miscellaneous notes field in a table. I want to use some sort of HTML-editor tag as the front end for this field, and imagine that it will hold up to about 3000 characters. What datatype should I use in the back end, and what size

RE: Comma seperaed help

2002-09-12 Thread Cornillon, Matthieu
Kris, One idea is to have a page with a single text box, a hidden field, and Save and Add Another button. The form submits to itself. So, the basic flow of the page is like this: CFIF IsDefined(Form.TextBoxName) CFIF IsDefined(Form.HiddenFieldName) CFSET

RE: Stuck Building Admin Area

2002-09-11 Thread Cornillon, Matthieu
Candace, One warning if you don't use Greg's very good suggestion: if you stick with the dropdown list approach, be sure to test whatever you use in both Netscape and IE. I had a somewhat similar check taking place and was unable to get the JavaScript to check the value of the dropdown list

OT: CF-related software wish list

2002-09-04 Thread Cornillon, Matthieu
Hi, everyone. My manager has asked me to put together a list of potential software purchases for the next year. I am a rather new ColdFusion developer, so I don't really know much in terms of CF-related software. So far, I have only come up with Visual SourceSafe and some sort of HTMLEditing

RE: extra blank lines problem

2002-09-03 Thread Cornillon, Matthieu
Mitch, I don't know the CF answer. I'm pretty sure that there is one, because I've seen this topic discussed here before. You might search the archive. I do, however, know the quick-and-dirty fix for this in Excel. After you paste your data in, you have blank rows, right? So let's say that

RE: cfqueryparam and scrubbing form inputs

2002-09-03 Thread Cornillon, Matthieu
Matt, When I did the security analysis for my site, I did come to this same conclusion. I still--because I am a paranoid worrywart--clean the numerics coming in, but yes, I think that it's safe to say that CFQUERYPARAM with cfsqltype=cf_sql_numeric will make input scrubbing unnecessary, whereas

RE: mysterious server death

2002-09-03 Thread Cornillon, Matthieu
What is the OS on the web server? Is that Win 2000? Matthieu -Original Message- From: Mike Brunt [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 03, 2002 12:38 PM To: CF-Talk Subject: RE: mysterious server death Bryan, I would still look in the CF error logs although you do not

RE: SQL Injection Attacks (scrubbers cont.)

2002-09-03 Thread Cornillon, Matthieu
You can use this really nasty regex that I use to sweep for all sorts of attacks: ([[:space:]]?/?(script|embed|applet|object|form|layer|ilayer|frame|iframe|f rameset|param|meta|server)[^]*?)|(;?[[:space:]]*(((alter|create|drop)[[:sp

strange error

2002-08-27 Thread Cornillon, Matthieu
Hello, all. I have a page that is hanging the CFAS. It is a rather simple file. It includes a template that does some playing with text, but nothing too fancy. The only fancy stuff (database interaction, session variable manipulation, cookie checking) that the page does is in the

application.cfm in templates directory?

2002-08-27 Thread Cornillon, Matthieu
Let's say that I accidentally put an Application.cfm file in my /Templates directory. Would that Application.cfm be included at the top of every template CFINCLUDEd from that directory? Thanks, Matthieu Pfizer Information Center

RE: strange error

2002-08-27 Thread Cornillon, Matthieu
Actually, I'd love to get an idea of what would even cause the CFAS to hang. Even if it doesn't seem related: what would be so serious an error as to cause it to hang, rather than referring to the site's error template? Thanks, Matthieu -Original Message- From: Cornillon, Matthieu

CFAS crash

2002-08-27 Thread Cornillon, Matthieu
Hello, everyone. Sorry to re-post this, but it's a rather serious issue, and I fear my initial, long-winded message may have made people fall asleep and hit the delete key. :) So here's the short version. The CFAS is hanging such that all CFM pages fail (they mention something about a UNIX

CFQUERY's timeout attribute

2002-08-27 Thread Cornillon, Matthieu
Hi. I run a bunch of queries all over without setting the TIMEOUT attribute of CFQUERY. Does this make you gurus cringe? Are you gritting your teeth, hearing my application crashing to screeching halt all over the place? I read that CFQUERY calls, if they wait for a third-party (the back end

CFERROR type=monitor and Solaris

2002-08-27 Thread Cornillon, Matthieu
Hi. I found the following article today in investigating a mysterious crash of CFAS: http://www.macromedia.com/v1/Handlers/index.cfm?ID=22638Method=Full The key quotes: 1) With Macromedia ColdFusion Server versions 4.5 and 5, CFML templates that use cferror type=monitor can cause ColdFusion

thanks and sharing the bubbly

2002-08-19 Thread Cornillon, Matthieu
Hi, everyone. I just wanted to share a bit of the ship-christening bubbly with everyone: I have launched a major new ColdFusion app (my first) to a large userbase, so far with excellent success. I could not have done it without the generous help of the CF-Talk group, nor, of course, could I

RE: thanks and sharing the bubbly

2002-08-19 Thread Cornillon, Matthieu
-Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED]] Sent: Monday, August 19, 2002 1:30 PM To: CF-Talk Subject: thanks and sharing the bubbly Hi, everyone. I just wanted to share a bit of the ship-christening bubbly with everyone: I have launched a major new ColdFusion

RE: thanks and sharing the bubbly

2002-08-19 Thread Cornillon, Matthieu
... :) Matthieu -Original Message- From: Jillian Carroll [mailto:[EMAIL PROTECTED]] Sent: Monday, August 19, 2002 2:27 PM To: CF-Talk Subject: RE: thanks and sharing the bubbly Can you tell us about what it does? -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED

RE: simple table format question

2002-08-19 Thread Cornillon, Matthieu
Hi, Janine. You can do a few things: 1) The quick-and-dirty solution. Add a BR tag just before the /CFOUTPUT closing tag: TRTD COLSPAN=3CFOUTPUT QUERY=GetCourses INPUT TYPE=Checkbox NAME=Courses VALUE=#CourseID##CourseName#BR /CFOUTPUT/TD /TR 2) Have each with it's own row: CFOUTPUT

RE: limit cfoutput

2002-08-17 Thread Cornillon, Matthieu
Corey, You could just truncate the variable field. Let's say that your query is called GetMemo and the memo column in question is called MemoCol. Then just display this: !--- First, make sure you have 255 characters. --- CFIF Len(GetMemo.MemoCol) lt 255 CFSET

protecting against strange navigation

2002-08-16 Thread Cornillon, Matthieu
I am about to release a system that has been beaten up and tested extensively. For the most part, it works whether you run it backwards or forwards, and it has all sorts of error handling. But all that cost a lot of time. A large part of it had to do with protecting against the user who goes

looping through query columns, not rows

2002-08-13 Thread Cornillon, Matthieu
Hi, everyone. Is there a way to loop through the columns--and not the rows--of a query? Let's say I have a query: cfquery name=GetData dsn=mydsn SELECT * FROM USERS /cfquery ..and I am too lazy to type out all of the many columns to output them to a page. Can I loop through the

RE: looping through query columns, not rows

2002-08-13 Thread Cornillon, Matthieu
a .columnList property. So, queryname.columnList is a list of columns for the query. You can loop over it using bracket notation: col #col# is #queryname[col][rownum]# -Raymond Camden, ColdFusion Jedi Master for Hire -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED

RE: Hide URL

2002-08-12 Thread Cornillon, Matthieu
Cami, What about encoding and then decoding the information? I don't know if ColdFusion has any such features. Maybe it does. But you could write simple code to make the information meaningless at first glance. Of course, this wouldn't stand up to anyone who really wanted to get at the

cookie expiration information

2002-08-12 Thread Cornillon, Matthieu
Hey, everyone. Is there a way to get more information from cookies than just their names and values? More specifically, I wanted to know when a particular cookie was set to expire on a user's machine. Can we get that info on the CF side of the universe? Or does the browser keep it all?

RE: cookie expiration information

2002-08-12 Thread Cornillon, Matthieu
Thanks, Dave. That's what I figured. Oh, well. :( Matthieu -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED]] Sent: Monday, August 12, 2002 1:57 PM To: CF-Talk Subject: RE: cookie expiration information Hey, everyone. Is there a way to get more information from

RE: Browser losing data with back button

2002-08-08 Thread Cornillon, Matthieu
Hi. I have a multi-page user registration system that handles this in a complicated, but clean way. I'll describe the whole thing: reg_init.cfm - Sets a series of Session variables corresponding to the form fields on all registration pages, e.g., Session.frmFirstName, Session.frmPhoneNumber,

RE: Session not being killed on close of browser

2002-07-31 Thread Cornillon, Matthieu
Adrian, Is that CFIF block supposed to kill the cookies, thus detaching the session? If so, the only thing I can think of is to specify, in the CFCOOKIE statements, the parameter expires=NOW. Perhaps omitting it sends a value which some browsers interpret differently than others? Matthieu

RE: reg expression..

2002-07-31 Thread Cornillon, Matthieu
Tony, I ran this against some random text and it seemed to run properly--after I removed that unnecessary comma at the end of the function. I assume that's not the problem, or your app should have thrown an error, right? Matthieu -Original Message- From: Tony Weeg [mailto:[EMAIL

RE: Session not being killed on close of browser

2002-07-31 Thread Cornillon, Matthieu
not being killed on close of browser I thought that by omitting it, the default value sent WAS now? Matt -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 31, 2002 10:01 AM To: CF-Talk Subject: RE: Session not being killed on close of browser

RE: Session not being killed on close of browser

2002-07-31 Thread Cornillon, Matthieu
)452-1001 ext. 1245 [EMAIL PROTECTED] -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 31, 2002 10:26 AM To: CF-Talk Subject: RE: Session not being killed on close of browser Oops! I'm sorry. I should have read the documentation before

RE: Session Woes

2002-07-29 Thread Cornillon, Matthieu
Tony, I've proofread twice your statement against what's in the CF Studio help for CFAPPLICATION, and I can see nothing wrong. The only things I can imagine: 1) Do you have another Application.cfm in some folder that could be fouling things up? 2) Is it possible that what seems to be the

query string variable idea

2002-07-29 Thread Cornillon, Matthieu
Hi, there. In trying to solve a problem this weekend, it occurred to me that I could easily handle my situation by passing a particular URL variable with every link on my site. Unfortunately, that would mean going through and appending that URL variable to every link on my site, so I ended up

RE: Spaces stripped out of query return values?

2002-07-29 Thread Cornillon, Matthieu
Well, once you have done your SQL statement, I am assuming that you have strings padded out to the 20 characters or whatever with spaces. Since the problem is at the HTML level, you can--at the CFML level--just replace with nbsp;. So, CFSET TargetVar=Replace(SourceVar, ,nbsp;,ALL) You might

RE: query string variable idea

2002-07-29 Thread Cornillon, Matthieu
are saying... Perhaps you could enlighten me as to why and perhaps more people would understand... -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 9:35 AM To: CF-Talk Subject: query string variable idea Hi, there. In trying to solve a problem

CGI.HTTP_REFERER

2002-07-27 Thread Cornillon, Matthieu
Okay. I'm stumped. I had this whole lovely plan for something I'm working on. It involved looking at the value of CGI.HTTP_REFERER. But that value isn't coming up on my radar. It doesn't matter what browser I use. It's just not there. I've tried different spellings (REFERRER, REFERER),

RE: CGI.HTTP_REFERER

2002-07-27 Thread Cornillon, Matthieu
submittal? Douglas Brown Email: [EMAIL PROTECTED] - Original Message - From: Cornillon, Matthieu [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Sent: Saturday, July 27, 2002 3:49 PM Subject: CGI.HTTP_REFERER Okay. I'm stumped. I had this whole lovely plan for something I'm working

RE: Setting and evaluating session variables

2002-07-26 Thread Cornillon, Matthieu
Hi. I think that I see the problem that you are having. My explanation may seem overly simple at first, but bear with me. Session variables are stored on the CF server. A given set of session variables is tied to a given user by two key values: CFID, and CFTOKEN. These values are sent to your

RE: Setting and evaluating session variables

2002-07-26 Thread Cornillon, Matthieu
=no /cfif splash1.cfm cfif not(isDefined(session.initialized)) cfset session.initialized = true /cfif splash2 You wont need anything, because application.cfm will handle it... Douglas Brown Email: [EMAIL PROTECTED] - Original Message - From: Cornillon, Matthieu [EMAIL PROTECTED

RE: record linking prob

2002-07-26 Thread Cornillon, Matthieu
Sean, Some things to check: 1. Is your a href... tag below is outside of the looping CFOUTPUT statement that generates your list of results? 2. Are you sure that RecordID is not set to one for all records? 3. What query are you using? 4. On the detail page, how are you referring to the URL

RE: Setting and evaluating session variables

2002-07-26 Thread Cornillon, Matthieu
the CFID and CFTOKEN to temp vars and therefore I get a new pair on each browser. If he is not setting them like that, then they will expire when the application says so Douglas Brown Email: [EMAIL PROTECTED] - Original Message - From: Cornillon, Matthieu [EMAIL PROTECTED] To: CF-Talk

RE: Quick Help

2002-07-25 Thread Cornillon, Matthieu
Kris, Just for future reference: you can also take a look at the archives, a link to which should appear at the bottom of just about every message on the list. Since one can often find multiple discussion threads on a topic, I've found these archives to be a tremendous resource. Hope this is

RE: (Admin) Behavior

2002-07-25 Thread Cornillon, Matthieu
Michael, Thanks a bunch for your work on this. Just the other day, I was wondering whether you get paid for this, and thought, Well, of course he's paid. It's way too much work to do unpaid. Now that I know the truth, I don't know what to say...hats off. Thank you so much for a resource which

RE: 3 column output

2002-07-25 Thread Cornillon, Matthieu
Justin, I did something _sort of like_ this. I have a page that asks users to check from a list of items. The number of items varies based on a value selected on a previous page. I do a query for the items. I count the number, divide by three, and then have start and stop values for the

RE: FAQs for CF-Talk was (Admin) Behavior

2002-07-25 Thread Cornillon, Matthieu
I have been running into the same question on my site: how do I present the information best when the user could be coming in with two different desires, either for a quick answer or for an overall review. My experience as a user is that I want, at any given time, one of three things. The best

RE: Stupid number format problem

2002-07-24 Thread Cornillon, Matthieu
OK. This is a wretched solution, but you could convert the number to a string, CFLOOP as long as Right(MyString,1) = 0, and then within the loop remove that last character. At the end of it, you convert it back to a number. I'm almost sorry for even suggesting such an ugly, albeit workable,

RE: Finding a good Session management system.

2002-07-22 Thread Cornillon, Matthieu
Stephen, I am not going to comment on the client vs. session variable issue that everyone else is talking about. I am awfully ignorant about client variables, and I am learning from those other messages as they come. I can, however, offer some advice on the approach to a multi-page form with

RE: Finding a good Session management system.

2002-07-22 Thread Cornillon, Matthieu
Todd, What is session corruption/leak? I'm worried. :) Matthieu -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July 22, 2002 10:21 AM To: CF-Talk Subject: RE: Finding a good Session management system. Nothing wrong with sessions, until you've

RE: Finding a good Session management system.

2002-07-22 Thread Cornillon, Matthieu
to page until the end of the form is reached, then the are committed to the database (or whatever) all at once. - Matt Small -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED]] Sent: Monday, July 22, 2002 10:36 AM To: CF-Talk Subject: RE: Finding a good Session

Explorer password saving feature

2002-07-22 Thread Cornillon, Matthieu
Hello. Internet Explorer, when certain settings are set and a user enters a username and password in a form, asks the user: Do you want windows to remember this password, so that you don't have to type it again the next time you visit this page? I know how to disable this on my own computer.

RE: Explorer password saving feature

2002-07-22 Thread Cornillon, Matthieu
Thanks! This was exactly the thing. Just add autocomplete=off to the form field, and it doesn't get stored by the browser. The really sad thing is this: I use MS Outlook's task list to list all the things I need to do in an application, so that the little things that slip through the cracks of

CFMODULE as a workaround for using custom tags

2002-07-21 Thread Cornillon, Matthieu
Hi, everyone. The IT department in my company has told me that I can't put custom tags in the installation directory (something to do with multi-application environment, blah blah blah). In our installation, that is the only place where it searches for the tags automatically. So, as a

RE: Cookie problem - Cookie value gets reset as random integer

2002-07-18 Thread Cornillon, Matthieu
David, It seems like there's a typo in some part of your code where you are pulling the wrong query variable in, or something like that. I would go through to every statement (in all conditions) that sets the cookie. Look at the value you are putting into the cookie (a variable, no doubt), and

RE: Help! Preventing code from executing

2002-07-18 Thread Cornillon, Matthieu
Frank, I'm afraid that you are just starting down the relatively unpleasant road that I have just finished traveling. There are a lot of issues related to this. Here is a quick summary: 1) Data can come into your application into a number of ways. Three of those can possibly be manipulated

RE: How do I do a SQL insertion attack?

2002-07-17 Thread Cornillon, Matthieu
Isaac (and all others who responded on this issue), Thanks very much for your responses. They've been very helpful. Sorry that I didn't send my thanks earlier, but I left town for a few days about twenty minutes after my last post! Matthieu -Original Message- From: S. Isaac Dealey

pre-query validation

2002-07-11 Thread Cornillon, Matthieu
Hi. I am about to use a user-input string in the where clause of a SQL query. I know, yikes. Unfortunately, there is a wide variety of valid characters, from numbers to letters to punctuation. So, I want to remove (or at least escape out) any characters which are not allowed. I have already

How do I do a SQL insertion attack?

2002-07-11 Thread Cornillon, Matthieu
OK. Now I'm really confused. Here I've been slogging through all these measures to make a SQL insertion attack impossible, and now that I get to the point of testing, I can't get one to work even with all of my Rube Goldberg security systems turned off! This query for example: CFSET

RE: How do I do a SQL insertion attack?

2002-07-11 Thread Cornillon, Matthieu
to do this for you. You could try using PreserveSingleQuotes(). Of course, a visitor isn't going to be able to do that. -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED]] Sent: Friday, 12 July 2002 12:40 p.m. To: CF-Talk Subject: How do I do a SQL insertion attack

RE: How do I do a SQL insertion attack?

2002-07-11 Thread Cornillon, Matthieu
. -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED]] Sent: Friday, 12 July 2002 12:57 p.m. To: CF-Talk Subject: RE: How do I do a SQL insertion attack? This is wonderful and exactly what I want to hear, but now I wonder: why did I bother doing all this SQL

RE: How do I do a SQL insertion attack?

2002-07-11 Thread Cornillon, Matthieu
Isaac, First of all, every time I see your name as it appears on the list (S. Isaac Dealey), my brain for some reason automatically translates it into Sir Isaac Dealey. So if I call you Sir Isaac by accident, I hope that you don't mind. :) OK. As for the subject at hand: I think I understand

RE: How do I do a SQL insertion attack?

2002-07-11 Thread Cornillon, Matthieu
yeah. i haven't wet my feet with stored procedures. maybe i should take some reading about it on my long weekend. thanks again, matthieu -Original Message- From: S. Isaac Dealey [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 9:27 PM To: CF-Talk Subject: Re: How do I do a SQL

RE: update table

2002-07-10 Thread Cornillon, Matthieu
What about something like this: UPDATEpeople SET num = (SELECT num + newnum AS SummedNum FROM people) Matthieu -Original Message- From: Bruce, Rodney S HQISEC/SIGNAL [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 10, 2002 4:05 PM To: CF-Talk Subject: update table Hello all Is

Regular Expressions/Speed

2002-07-09 Thread Cornillon, Matthieu
Does anyone have anything concrete to say about the speed of searching using regular expressions? Are giant RegExes a mistake? I am hardly seeing any performance hit at all right now with mine, which is quite big. Of course, I am not live with piles of simultaneous users, either. Am I going

RE: Regular Expressions/Speed

2002-07-09 Thread Cornillon, Matthieu
the defining factor --the parser. Just like xml parsers are different so are regex libs/utilities. On Tue, 9 Jul 2002, Cornillon, Matthieu wrote: Does anyone have anything concrete to say about the speed of searching using regular expressions? Are giant RegExes a mistake? I am hardly seeing any

more on security

2002-07-02 Thread Cornillon, Matthieu
Hello, everyone. I'm losing my mind swimming through the issue of filtering input variable scopes to stave off attacks. Something occurred to me: Why not just loop through all input variables and put them into HTMLEditFormat? I know that this won't take care of SQL attacks, but in terms of

RE: more on security

2002-07-02 Thread Cornillon, Matthieu
Island ColdFusion Users Group Founder Director www.cfug-vancouverisland.com - Original Message - From: Cornillon, Matthieu [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Sent: Tuesday, July 02, 2002 3:00 PM Subject: more on security Hello, everyone. I'm losing my mind swimming through

security: attacks through submission of script

2002-06-26 Thread Cornillon, Matthieu
Hi. I am evaluating the security of my application as regards malicious attack via manipulation of the Cookie, URL, or Form variables. I know about the business with submission of unauthorized SQL statements, and have already screened for it. But then there is the issue of unauthorized script

error messages sent to log

2002-06-25 Thread Cornillon, Matthieu
Hello, everyone. I have been told by the IT folks in my company who control the CF environment that I need to keep all Information type error messages from being written to application.log, server.log, and webserver.log files. (Error messages of type Error, Warning, and Fatal are okay.) Can

RE: Save the logs was RE: error messages sent to log

2002-06-25 Thread Cornillon, Matthieu
information to users. CF has some great error handling capabilities. Hth...! Kind Regards - Mike Brunt, CTO Webapper http://www.webapper.com Downey CA Office 562.243.6255 AIM - webappermb Webapper - Making the NET work -Original Message- From: Cornillon, Matthieu [mailto:[EMAIL PROTECTED

searching large amounts of text

2002-06-03 Thread Cornillon, Matthieu
Hi, everyone. A friend of mine has a bunch of data currently stored in InMagic's DBTextWorks. This data is a series of document records. Each record has several fields with general information (author(s), publication date, etc.) and a field with the body of the document. This last field, of

RESEND: searching large amounts of text

2002-06-03 Thread Cornillon, Matthieu
Hi, everyone. A friend of mine has a bunch of data currently stored in InMagic's DBTextWorks. This data is a series of document records. Each record has several fields with general information (author(s), publication date, etc.) and a field with the body of the document. This last field, of

RE: Preventing user from going back

2002-05-30 Thread Cornillon, Matthieu
Mark, I've been wrestling with this issue myself lately. There is no direct and easy way that I've found. It depends largely on what the context is. For example, if you have a five-page registration procedure and don't want the user to go back using the browser buttons from 4 to 3, you can

RE: Query question

2002-05-28 Thread Cornillon, Matthieu
Trace, What exactly is your intent? It seems that you want to create a list of all the hyperlink_title values, whether they appear in tbl_Pages or tbl_Categories. Is that right? In other words, if you have tbl_Pages: tbl_Pages_pk hyperlink_title 1 A 2 B 3

spawning new windows

2002-05-28 Thread Cornillon, Matthieu
Hi, everyone. I have a challenge for you. I want to spawn a new (2nd) browser window, but I don't want it to use JavaScript. And I want to do it from any page on a site, so I want to put a test in Application.cfm that initiates the process. More specifically: User loads page on site.

RE: spawning new windows

2002-05-28 Thread Cornillon, Matthieu
just use target=_blank in a cflocation or a meta rfresh tag. If you don't use java however - it may be a bit difficult instructing the size or parameters of the window.. but if that doesn't matter - the above should work. How would this work? I don't know where to put the target=_blank in

session variable renewal

2002-03-26 Thread Cornillon, Matthieu
Hello. Do session variables get renewed when you set them? In other words, let's say that my application has a 20-minute session variable timeout. At 10:00, a user hits a page that sets Session.LoggedIn=true. At 10:15, the user hits that page again. Does Session.LoggedIn expire at 10:20 or

RE: Two_SelectsRelated problem - Help!

2002-03-25 Thread Cornillon, Matthieu
Frank, I've been working with CF_TwoSelectsRelated in the last week or so, so I could probably help, but I'd need more detail. Please post your SQL query and your CF_TwoSelectsRelated statement. Also, as a first try before you post all that: make sure that your query results are sorted by

CF_TwoSelectsRelated and browser back button

2002-03-21 Thread Cornillon, Matthieu
Hello. I am using Nate Weiss' invaluable CF_TwoSelectsRelated tag, with almost flawless results. But I am encountering a problem, and I wonder whether I am alone. I have a multi-page form, a few pages of which use CF_TwoSelectsRelated. Each page submits its data to an action page which writes

RE: CF_TwoSelectsRelated and browser back button

2002-03-21 Thread Cornillon, Matthieu
Joseph, Thanks for the idea. I tried it, and all of a sudden it worked, but not completely. It's behaving very strangely. I can't even quite figure out the logic of the weirdness. For example, I select Rhode Island - Narragansett, then hit the back button. Still Rhode Island - Narragansett.

Current URL?

2002-02-18 Thread Cornillon, Matthieu
Hi, everyone. I feel silly for asking such a simple question, but I can't find the definitive answer. Is there a sure-fire way to pull the URL of the currently displayed page? I can hack it out using CGI variables, but I was thinking that there is probably a CF reserved variable that I'm just

RE: multi-page forms

2002-01-29 Thread Cornillon, Matthieu
Thanks to everyone for feedback on this issue. This point that Matt Robertson raises is an interesting one. It does seem logical to me that the completion rate for a long single-page form would be different from that of a multi-page form. I am a little confused, though, because the long

RE: multi-page forms

2002-01-29 Thread Cornillon, Matthieu
In my application, the users have no choice but to go through the system, so I don't need to worry about driving off customers, but I certainly don't want to complicate the user experience any more than I have to. I see the problem with presenting form after form to a user who thought it

multi-page forms

2002-01-28 Thread Cornillon, Matthieu
Hi. I am building a login/registration system for the Intranet site that I manage. In order to collect user data from new users, I am creating a multi-page form. I am breaking into multiple pages to make it less overwhelming for the user. But this introduces the issue of passing variables

RE: Dreamweaver

2001-11-20 Thread Cornillon, Matthieu
I thought this was an easy one, but it turns out that it's a little tricky in one spot. Go to the Site Files view of your site. In the local files pane, right-click on the root folder. In the pop-up, select Check Links -- Entire Site. (The Entire Site part is very important: orphaned files

RE: ColdFusion license agreement

2001-09-04 Thread Cornillon, Matthieu
If you have CF Studio, you can use the single-user version that comes with that. I think that has all the tags. Unless you want Server 5, that is, in which case you have to wait for Studio 5. For the 5.0 tags, I just looked at the Macromedia site. There is something there called the ColdFusion

RE: creating excel file in the REQUESTED format

2001-08-29 Thread Cornillon, Matthieu
Here's a kludgy way to do it: 1) Make a CFM template with your CFQUERY tag below. 2) Add the following output code: CFOUTPUT QUERY=getfs #getfs.Column1#`#getfs.Column2#`#getfs.Column3#`#getfs.ColumnEtc#BR /CFOUTPUT NOTE: Those little apostrophe-looking things are the thing to the left of the

RE: creating excel file in the REQUESTED format

2001-08-29 Thread Cornillon, Matthieu
P.S. Sorry: my solution is, of course, a one-time thing. It's not intended for repeated, automated work. -Original Message- From: Cornillon, Matthieu Sent: Wednesday, August 29, 2001 12:09 PM To: [EMAIL PROTECTED] Subject: RE: creating excel file in the REQUESTED format Here's

RE: Problem with indexing Verity Collections (long)

2001-08-28 Thread Cornillon, Matthieu
Hi. The first thing that strikes me is that you should be specifying the index directory as a local path, and not with an http-style address. All of the processing is happening locally on that machine, so any references should be local. That means that you'll have to get the path for the root

<    1   2   3   >