Re: Upgrading CF9 Hotfixes

2014-02-13 Thread Donnie Bachan (Gmail)
Hi Richard, Are you renaming any existing jar files or removing them completely? I have run into issues when the old hotfix files are just renamed, you should remove them from the folder completely (i.e. the ones in the UPDATES folder). Ensure that you have them backed up in another location thou

Re: generating and merging pdfs

2014-01-13 Thread Donnie Bachan (Gmail)
Hi Tim, I tend not to use CF for anything like this. I've used ghostscript and pdftk to perform pdf merging with great success. See http://stackoverflow.com/questions/8158584/ghostscript-to-merge-pdfs-compresses-the-result for an example of usage commands for both ghostscript and pdftk ( http://w

Re: Call of a soap webservice passing headers

2013-02-23 Thread Donnie Bachan (Gmail)
Have you tried the addSOAPRequestHeader function? Use this in conjunction with createObject to pass the username and password to the service. See http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=functions_a-b_03.html HTH. Best Regards, Donnie Bachan "Nitendo Vinces - By Striving

Re: SOT: IP Geolocation APIs

2013-02-05 Thread Donnie Bachan (Gmail)
Hi Justin, If you have a budget available I would recommend http://www.maxmind.com/en/geolocation_landing. We use the downloadable database. Best Regards, Donnie Bachan "Nitendo Vinces - By Striving You Shall Conquer" == The inf

Re: Source control in CF

2013-01-30 Thread Donnie Bachan (Gmail)
I agree with Cameron on this one. We recently moved from SVN to Git because we found that within our team it facilitated our workflow. We started implementing the practices outlined by Git Flow and that's been working really well. That doesn't mean that Git is better than SVN, it's just better in

Re: AW: Severe memory issue

2013-01-30 Thread Donnie Bachan (Gmail)
Hi Till, What version of CF are you on? I had some issues with memory in CF8 and outlined a few tips http://thinkinglemur.com/index.php/2010/02/memory-leaks-with-coldfusion-8/. If you are doing heap dumps, look for objects that hold huge amounts of memory, the blog posts has links to a couple of

Re: SQL Express and CF

2012-11-16 Thread Donnie Bachan (Gmail)
You'll need to purchase the developer edition for SSIS. It's not free but has full standard level features and is pretty affordable $50 US at NewEgg http://www.newegg.com/Product/Product.aspx?Item=N82E16832416455&Tpk=sql%20server%20developer Best Regards, Donnie Bachan "Nitendo Vinces - By Striv

Re: Anybody seen this hack/exploit?

2012-11-13 Thread Donnie Bachan (Gmail)
I've seen something like this on a shared server that was running osCommerce. The uploads directory had the wrong permissions set, the attacker uploaded a server admin script that could set permissions on other directories. They were then able to inject code into every index.php, index.html, index

Re: CF8 Instance hogs cpu

2012-10-02 Thread Donnie Bachan (Gmail)
Hi Richard, I wrote a post a while back about memory leaks in CF8 Ent., although it is not specifically related to high CPU usage, some of the settings here may be of help. http://thinkinglemur.com/index.php/2010/02/memory-leaks-with-coldfusion-8/ The two things that helped the most (aside from

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Pete and Dave, I owe both of you a beverage (or ten!) next time I'm in the US or you are in the UK! It was the BSafe library. I used the code from the forum post to disable the library and my requests worked. I will have to look into the compliance issue with disabling the library when making the

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
l stack trace for the error you are getting in > CF? > > > > -- > > Pete Freitag - Adobe Community Professional > > http://foundeo.com/ - ColdFusion Consulting & Products > > http://petefreitag.com/ - My Blog > > http://hackmycf.com - Is your ColdFusion Server Se

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Donnie Bachan "Nitendo Vinces - By Striving You Shall Conquer" == The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review,

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Thanks Dave, You just pass the location of the key file as a string so I'm just passing in C:\wamp\.\ClientKey.pem both in CF and Java class. I've tried using Wireshark as well to look at the packets being sent. From Java the request is fine, from CF the remote URL never gets called at all so

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
> > Hi Paul, > > Thanks for this, it's odd we use Cardinal when we call Paypal Pro (we use > them as a back up processor if Barclays ever goes down) and that works fine > on 64 bit. What's even more odd is the fact that they all use Arcot at the > core because Arcot developed the system. > > Best

Re: Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Oct 2, 2012 at 11:29 AM, Paul Kukiel wrote: > > Unsure if its an option be we use 3d secure with cardinal commerce who > support ColdFusion and 64 bit. > > Paul > > On 02/10/2012, at 8:26 PM, "Donnie Bachan (Gmail)" < > donnie.bac...@gmail.com> wrote: > &

Invoking Java component that sends SSL Client Key in CF9 Ent

2012-10-02 Thread Donnie Bachan (Gmail)
Hi All, I've run into an issue on CF9 Enterprise 64 bit on Windows (7/2003/2008) with using client authentication when invoking a java component. Background: We are attempting to implement 3D Secure (Verified By Visa) on the Barclay's EPDQ system using the Arcot SDK. We have this working using t

Re: credit card fraud

2012-08-23 Thread Donnie Bachan (Gmail)
We handle credit card (and UK direct debit) fraud by assigning a fraud score to every single credit card submission. We generate the score at the time of purchase but using MaxMind and checking if the billing address of the credit cad matches the IP country, checking if the billing is one of the h

Re: Modern (and free) html/cf editor that is similar to Homesite?

2012-08-19 Thread Donnie Bachan (Gmail)
I know this option isn't free but you may want to contact them and see if you can work something out with them since it's for educational use. http://www.sublimetext.com/ This is probably the best editor I've ever used. It is very similar to Homesite in may respects but it just takes it to a thous

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Donnie Bachan (Gmail)
Hi Robert, I'm not sure if I'm missing something but shouldn't you have setClientCookies to Yes? Otherwise you'd have to pass the JSESSIONID in the url on each request. Best Regards, Donnie Bachan "Nitendo Vinces - By Striving You Shall Conquer" ==

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Donnie Bachan (Gmail)
Justin, I don't think that would work though, depending on the level of compliance and the SAQ being completed I don't think any vendor will allow that exemption regardless of if credit card information is visible or not. If an attacker is allowed any access to a user session and can harvest any p

Re: Failed PCI Compliance test on CF9.01

2012-03-06 Thread Donnie Bachan (Gmail)
Robert, This is odd that you are losing the session, are you using CF in multiserver mode or standalone? The article you referenced was for CF8, however, we're currently running CF9 Ent in multiserver mode and we've not had this issue crop up. We are however using a DB with client cookies for man

Re: GeoIP for Coldfusion?

2011-12-25 Thread Donnie Bachan (Gmail)
ed to be free. I can't drop $370 on this. > > On Sun, Dec 25, 2011 at 3:48 AM, Donnie Bachan (Gmail) > wrote: >> >> Although this isn't a completely free solution we've used it with very >> good success without any updates for a while now. >> http://www.m

Re: GeoIP for Coldfusion?

2011-12-25 Thread Donnie Bachan (Gmail)
Although this isn't a completely free solution we've used it with very good success without any updates for a while now. http://www.maxmind.com/app/geoip_features. If you are using it for just country level access for $50 it's not a bad investment. I've included some code for accessing checking t

Re: URGENT: problem with latest hotfix

2011-12-14 Thread Donnie Bachan (Gmail)
Out of curiosity, did you follow steps in Section 1 or Section 2? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.c

Re: URGENT: problem with latest hotfix

2011-12-14 Thread Donnie Bachan (Gmail)
lete" dialog > - see that files are gone > - click "start service" > > On Wed, Dec 14, 2011 at 3:19 PM, Donnie Bachan (Gmail) < > donnie.bac...@gmail.com> wrote: > >> >> Did you ensure that all the old jar files referenced in point 5 were >>

Re: URGENT: problem with latest hotfix

2011-12-14 Thread Donnie Bachan (Gmail)
Did you ensure that all the old jar files referenced in point 5 were removed? You need to stop all the instances and remove the jar files, then attempt to restart. Best Regards, Donnie Bachan "Nitendo Vinces - By Striving You Shall Conquer"

Re: Server Monitoring

2009-04-14 Thread Donnie Bachan (Gmail)
I second Nagios. You can monitor the port required and get alerts by email or sms (if available) On 4/14/09, Mike Chabot wrote: > > Oops. You did mention that you run CF8. Have you explored the > monitoring feature built into CF8 yet? > > -Mike Chabot > > On Tue, Apr 14, 2009 at 10:04 AM, Mike C

Re: Question about hack

2009-04-14 Thread Donnie Bachan (Gmail)
Hi Mark, I only mentioned cfexecute because of the permissions set on our specific case. Your info seems most likely. I did notice that there was a cfm file created with a call to cfexecute on the webroot so this should be a check as well. best regards Donnie On 4/13/09, Nick Gleason wrote: >

Re: Question about hack

2009-04-13 Thread Donnie Bachan (Gmail)
Hi Nick, I know this post is a bit late but to your original question, that attack is as a result of incorrect file/iis permissions and is not an XSS attack. I would even bet that you are on a shared server (at HMS) since one of my client sites had this exact same problem. The attacker would have

Re: Upload progress bar

2008-02-02 Thread Donnie Bachan (Gmail)
George, I agree with the idea of just displaying some sort of animation, if something is taking too long you can always say "still working...hang on!" but the entire idea is to give the user an indicator letting them know that something is happening and the upload hasn't died. You will need to incl

Re: CFEclipse with Aptana

2008-02-02 Thread Donnie Bachan (Gmail)
Pete, I think for it to work correctly you need to enable line numbers in both places (General > Editors > Text Editors and within the CFEclipse > Editor panels). I am using Eclipse with both Aptana and CFEclipse installed and was having a similar problem when one or the other was checked. I know