Re: aes--any way to encrypt a hex encoded string in CF?

Hi Mark and Denstar-- Thanks so much for your help! I finally figured it out... In the end, it was just a matter of getting the padded string into the encrypt function in a way that would give identical results. I'm still not entirely sure why this works (and why I didn't try it before...), but

Re: aes--any way to encrypt a hex encoded string in CF?

Hey Mark-- Thanks for the response. My understanding is that they are converting "1234567891234567" as a string, not as a number, so that when they encode the card number they get: 1234567891234567 --> hex: 31323334353637383931323334353637 When I encrypt "1234567891234567" using cfencrypt and

aes--any way to encrypt a hex encoded string in CF?

I am trying to match the encryption results on a box running BBj and just can't quite get there... This is how they are encrypting: 1. AES/CFC/NoPadding 2. IV of zero () Which is no problem. When encrypting 1234567891234567, I get this result: 1DF20DDA4A5C45DC

Re: CF AES Encryption/Decryption on BBj

>Maybe someone else here is good at it, and could post base64/hex >representations of the stuff. > Yeah, I'm hitting a dead end. The guy provided the hex encoded string (313233343536373839313233343536370010) to be encrypted... I understand how it was created (1234567

Re: CF AES Encryption/Decryption on BBj

Ha, yeah, that should have been > AES/CBC/NoPadding? (As far as I know, encryption algorithms are not contributing to the depletion of the ozone layer, but they are depleting my patience!) I'll see if I can get them to give up the java...

Re: CF AES Encryption/Decryption on BBj

> I have not used BBj. But until someone knowledgeable chimes in ... can > you provide an example showing the difference between the CF versus > BBj results? Hi Leigh-- Thanks for the response... It looks like BBj is 1. using AES/CFC/NoPadding 2. using an IV of zero (000

CF AES Encryption/Decryption on BBj

Hi-- Is there anyone out there in CFland who knows a bit about encryption/decryption in BBj? I am encrypting data in CF using AES/CBC/NoPadding (which is what the BBj folks say their "ENCRYPT" uses by default), but my client hasn't been able to decrypt what I send them successfully... And when

Re: loopcounts and pound sign madness

>#form['comments' & loopcount]# > Thanks to everyone for your lightning-fast responses! You're the absolute best. #form['comments' & loopcount]# was exactly what did the trick this time. Thanks again! ~| Adobe® ColdFusion® 8 s

loopcounts and pound sign madness

Forgive me... I pulled an all-nighter and my brain is scrambled Here is my problem: When a customer submits an order, I am requesting additional info for certain products on the checkout page. So for these products, so I have a variable called: comments#loopcount# When I write the order

Update cart items without reloading--AJAX?

or the simplest implementation for the lowest common denominator (within reason). I was thinking of dabbling in AJAX (which I know next to nothing about)? Or is there a simpler way (aside from using frames, which I refuse to do...). muchas gracias, Megan Cytron Alpha 60 Design Sho

Re: cftransaction ( mysql load data infile)--CFHTTP??

> > It is EASY with cfhttp (if you've got well formed data), but I have > never load tested it. > > or (not nearly as easy) > > If you've got createObject "power" you can use HSSQLDB, which seems > pretty > robust for CSV stuff- but CFHTTP is probably fastest from 0 to Query. > > The one advan

Re: cftransaction ( mysql load data infile)--CFHTTP??

east disruptive method? Many thanks, Megan Cytron >This might not be the most efficient way but it's easy. This could be a bit >quicker by running the loop inside the values statement but then you need to >to check for the last row of your .cvs file and remove the comma. I only run >

Re: cftransaction ( mysql load data infile)

>Does load data infile query of mysql doesnt work in cftransaction? I'm curious... did you ever figure this out? I'm also trying to determine the simplest/most efficient way of loading the data from a .csv file into a mysql DB using CF. ~~

Re: Encrypt CC number and store in DB

We work on a site with a similar issue. The items sold are live plants and customers order them in one batch and the plants get shipped and charged when the are sent (at different times, sometimes months later, depending on a whole host of factors). We don't store the credit card numbers in a d

Re: querying an array?

Thanks to all who responded. Put this one away for a day and--after trying some remarkably complicated solutions--I realized how easy it was to solve. I ended up doing the following: total number of green vegetables: #numberofgreenvegetables# [Todays Threads] [This Message] [Subscri

RE: web hosts

Yep. Crystaltech is the only shared host I've used that hasn't made my life a living hell. And their Control Panel is a godsend. The only time I've ever had to use their tech support in the past two years was when I had them install some custom tags. Megan [EMAIL PROTECTED] Alpha 60 Design Shop

RE:

I second the vote for crystaltech.com. They have an amazing control panel. The only time I've had to contact customer support has been when I need a custom tag installed. Megan [EMAIL PROTECTED] Alpha 60 Design Shop http://www.alpha60.com phone: 202-745-6393 fax: 202-745-6394

RE: CC processing question

> We process credit cards via Verisign and do an > auth-only on order. When we > ship, we then do a delayed-capture, for which you only need the > transaction id given when you created the auto-only > transaction. Do you know how long the auth-only transaction id is good for and can you use it mu

QUESTION: Mail Order Manager

Has anyone out there used CF in conjunction with Mail Order Manager (by Dydacomp)? One of our clients wants to tranfer their internal order processing and accounting over to MOM. We're just wondering how MOM deals with web orders and if there are any CF tags out there that make it easier. In our

RE: Credit Card Encryption

There's a discussion on using GnuPG to encrypt cc info in the archives somewhere. You can use CFEXECUTE to do this, but it's kind of tricky, depending on your server and probably not viable in a shared environment. Someone should really write a custom tag that utilizes GnuPG server-side--there's

RE: Crash Studio 4.5.2 lost data.

> I just lost a > couple of hours work. > Off to load the back up tape > and see how much I lost. Before you go to the backup tapes... did you try looking in the windows/temp folder for the machine running CF Studio? Sort it by date or look for files beginning with "cf~". I've found a lot of los

Q: CFFTP IP address

Our client's server folks would like to restrict FTP access to a given set of IP addresses. We're currently using CFFTP on a shared hosting site that posts to their server... Without requiring the host or server folks to think too hard or be responsive (something that might constitute a miracle),

RE: Storing Credit Cards

Has anyone ever looked into developing a CFX tag that makes use of GnuPG on NT? Given that the PGP commercial server license is so exhorbitant ($7000+), I, for one, would be willing to pay for a CFX tag that used the freely available GnuPG... I think shared hosts would also buy in, since this woul

RE: Storing Credit Cards

I have also done this using CFX_PGP. In our case, we FTPed the order and PGP-encrypted CC info to a Unix server and they moved the file to a secure location behind a firewall and deleted it from the FTP folder. You could also do this via VPN. Another question: has anyone found any shared hosts th

RE: I've lost a week's work!!!

Look in the windows/temp folder for the machine running CF Studio. Sort it by date or look for files beginning with "cf~". I've found quite a few lost files this way... Good luck! Megan [EMAIL PROTECTED] Alpha 60 Design Shop http://www.alpha60.com phone: 202-745-6393 fax: 202-745-6394 > ---

shopping cart--switching to SSL with session variables

Does anyone foresee any problems with appending "?#session.URLToken#" to the url to which a form submits when switching from an "insecure" server to a secure server. It seems to work great in preserving the shopping cart session for this particular project, since everything is on one box (and has

RE: cfx_pwcardcrypt--a few questions...

> >2. Does anyone have any ideas on how to decrypt the results of > >CFX_PWCARDCRYPT on a Unix box? > > cfx_pwcardrypt uses the standard RSA algorithm, and can > create/encrypt/decrypt 512, 1024 and 2048 bit keys. In > theory, if there was > a tool on *nix to decrypt standard RSA and you used > t

RE: Red Worm Hack - Affected Files?

This just happened on one of our hosts and I was still able to FTP to our directory and get our files out without losing anything... Megan [EMAIL PROTECTED] Alpha 60 Design Shop http://www.alpha60.com phone: 202-745-6393 fax: 202-745-6394> ~~ S

cfx_pwcardcrypt--a few questions...

Another in the ongoing saga of questions about encryption options between Cold Fusion/NT and Unix... Last month there was a brief thread that mentioned CFX_PWCARDCRYPT (using the RSA public key encryption method) as a good alternative to PGP (especially given the $7000+ cost of the PGP commercial

Encrypting CC info--sending from NT/CF to Unix--need advice

We have an interesting situation... We have a client who needs to have CC info sent from a CF application on an SSL NT server to a Unix box that is not running CF. They do not need any sort of authentication (as items are billed to the CC later as they are shipped), they just need to have the CC

RE: CFFILE Output--how do I include CFLOOP and session variables

> I don't believe you can place cf tags inside of ANY cf > tags. Try something like this: > > > > To="#ArrayLen(session.cart)#"> > #session.cart[loopcount][3]# > VARIETY: #session.cart[loopcount][1]# > QUANTITY: #session.cart[loopcount][4]# > "> > Yes

CFFILE Output--how do I include CFLOOP and session variables

I'll preface this dodo-brain question by saying that I'm completely sleep-deprived, half brain-dead and away from my home base, references, etc. Here's what I need to do: we are using CFFILE to write the results of an order to a file. We are using CFSET to create a variable called "textoutput". W

need to find host that supports cfx_pgp

Does anyone have any leads on a host that supports the CFX_PGP tag? If not, does anyone have any experience implementing PGP encryption on an email that is sent via CFMAIL, while using a shared hosting scenario? Our quandary is that we need to encrypt credit card data and send it via email to a