On Thursday 25 Feb 2010, Kevin Pepperman wrote:
But recently he has been using a newer version of Word and giving me .docx
files.
Ask him to stop ? I would hope he would. Your interchange formats may even be
specified in the contract
--
Helping to autoschediastically cluster
,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing lists
of an object; but many don't.
Any thoughts would be very welcome at this point. I'll be happy to provide
any further information that someone thinks might be helpful.
--
Thanks,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
] -
=
--
Thanks,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
~|
Want to reach the ColdFusion community with something they want? Let them know
on the House of Fusion mailing
Has anyone else using the new CFEclipse release opened up a CFInterface CFC ?
The following:
cfinterface
cffunction name=getReportName access=public output=false
returntype=string /
/cfinterface
is valid, as far as Adobe CF9 is concerned, but CFE puts a 'borking the parse'
error on the
item here.
/cfoutput
/cfif
Or have I missed what you're going for?
--
Thanks,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
~|
Want to reach the ColdFusion
do something with Session.Report.lats.Why[i]
/cfloop
/cfif
Of course, you can always just cfloop query=Session.Report.lats and
avoid the use of the index. Just thought I'd point out that you can access
individual records in the array for each column with array notation.
--
Thanks,
Tom
is really required? Or does anyone have
any specific advice in this regard?
--
Thanks,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
~|
Want to reach the ColdFusion
of the actual web
root), I'm good, right? No need to set any permissions on the Windows
directories at all?
The old KB article also says to give the user full control of the registry
key /HKEY_LOCAL_MACHINE/SOFTWARE/.
Is that still necessary? Was it ever?
--
Thanks,
Tom
Tom McNeer
MediumCool
a bad idea.
Wouldn't think of it.
Thanks again for your always-generous help. And thanks for the link to
Jochem's blog entry.
--
Thanks,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
On Tuesday 26 Jan 2010, Qing Xia wrote:
I did submit it to the wish list at
https://www.adobe.com/cfusion/mmform/index.cfm?name=wishform, but I don't
believe I was given a confirmation number.
Yeah, the bug tracker is now totally broken, as opposed to mearly being nearly
useless.
--
On Monday 25 Jan 2010, Qing Xia wrote:
I wonder how long it is going to take Adobe to replace all the
[Macromedia] in CF error messages to [Adobe]. Completely irrelevant
maybe, but nice to have so new CF people don't have to wonder.
You could only do that in a major release (like CF10)
On Monday 25 Jan 2010, Ian Skinner wrote:
It's the start of a new week and I wish I was home, under the covers,
nursing my cold|flu.
You might have already checked, but is there a spike in network traffic
(HTTP) ? What about the load on the database server (if any) ?
--
Helping to
On Tuesday 26 Jan 2010, Qing Xia wrote:
It is definitely nice to have--makes the code far cleaner. Plus, it makes
the tag more consistent--there is no semantic reason why the NULL attribute
should work with some functions but not others.
What NULL ? We're talking about the log file, not the
Did you clear out your 'workspace' folder too ? Try just renameing it and see
if that fixes things.
--
Helping to widespreadedly establish B2B enterprise-class performance-oriented
market-driven deliverables as part of the IT team of the year 2010, '09
and '08
On Tuesday 12 Jan 2010, Tom Chiverton wrote:
On Monday 11 Jan 2010, b...@bradwood.com wrote:
Tom, I've always loved your signature-- does it not count now that it is
2010?
We've not won it this year yet :-)
Now we have :-)
--
Helping to interactively innovate exceptional granular
On Thursday 21 Jan 2010, Dave Watts wrote:
Melbourne which had PHP topics, but I don't think CF would be an
appropriate topic at an open-source conference, since, you know, it's
closed-source.
Nah...there's a open language spec (due any day now) and at least two open
source implementations
On Friday 22 Jan 2010, Matthew Allen wrote:
Can anyone please give me pointers or real life example of how to insert
simple form field values into a database using AJAX.
/your/path/to/A.cfc?returnFormat=jsonmethod='yourSaveMethodName'arg1='foo'arg2=23
--
Helping to evangelistically introduce
On Friday 22 Jan 2010, Dave Watts wrote:
While I think that the open-source CFML implementations are great and
all, I think you can understand why Adobe might not present at an
open-source conference, right?
Adobe does a ton of good open source work, in particular around Flex. They
have a
Wow ? Seriously ? ColdFusion is dead ? *Again* :-)
--
Helping to continually develop front-end next-generation edge-of-your-seat
holistic mindshares as part of the IT team of the year, '09 and '08
This email is sent for and on behalf of
So I moved to a .Net shop a while back and I can say that .Net is on its last
legs. Well, its nice to program these elegant elaborate fully object oriented
systems in C# and be able to whip out a console application once in a while, as
needed. Sure, it makes one feel smart to throw all these
On Friday 15 Jan 2010, Chung Chow wrote:
if ( isdefined(cgi.query_string) and (
findnocase(DECLARE,cgi.query_string) or
I do declare that keyword matching alone has issues :-)
--
Helping to challengingly envisioneer eigth-generation network integrated
turn-key bandwidth as
Maybe Halliwells should enter the 'comedy causer of the year' instead :-)
--
Helping to enthusiastically iterate sticky visionary infomediaries as part of
the IT team of the year, '09 and '08
This email is sent for and on behalf of
On Monday 11 Jan 2010, b...@bradwood.com wrote:
Tom, I've always loved your signature-- does it not count now that it is
2010?
We've not won it this year yet :-)
--
Helping to preemptively seize networks as part of the IT team of the year, '09
and '08
On Thursday 07 Jan 2010, Kevin Pepperman wrote:
So I did a test install in a Ubuntu VM, only to discover CF5 only runs on
older versions Apache (LTE Apache 2.0.43-xx ) AFAIK
You could have left it running there using the built in web server, and linked
it into your Apache install via.
So, I kind of found something that I'm looking for at
http://plugins.jquery.com/project/SQL_QUERY_BUILDER;. The Tables and Columns
are static but I'm looking in to changing that so it's a little bit more real
time.
Tom
I'm not totally sure what you are after-- I Googled Quick Query and
all
Query but it's a ASP.Net thing and I'm not
running on Windows nor do I really want to use ASP. :-)
Are there any projects or something that will give me a head start or do I need
to write it from scratch?
Thanks,
tom
~|
Want
On Friday 18 Dec 2009, webmas...@pegweb.com wrote:
Is there a way through command line or a 3rd party application to see
what web sites on a CF Pro 8 server are causing the most requests?
Your web server logs would seem the obvious bet...
--
Helping to enthusiastically aggregate unique
On Friday 18 Dec 2009, Chad Gray wrote:
What keeps someone from loading up the model-glue XML file through their
browser?
We've got global rules in our Apache config. that ban sending *.xml files, for
instance.
--
Helping to collaboratively harness turn-key principle-centered eyeballs as
On Thursday 17 Dec 2009, Sigi Heckl wrote:
if I try a longer password the button text changes to Set new
password
Did you press that button ?
--
Helping to professionally fashion fourth-generation materials as part of the
IT team of the year, '09 and '08
On Thursday 17 Dec 2009, Chad Gray wrote:
I have a feeling in need to optimize my data and not the CF code.
Making it run faster will not stop you getting deadlocks (entangled pairs of
conflicting transactions). It might reduce the frequency of them, however.
You really need to establish
On Wednesday 09 Dec 2009, Yuliang Ruan wrote:
in CFIDE, the printer list is definitely blank...but how did it get that
way? and how does that list get populated?
Samba ? CUPS ?
--
Helping to carefully morph niches as part of the IT team of the year, '09
and '08
On Friday 04 Dec 2009, Raul Riera wrote:
Does anyone know the solution of this? Also, what would be the recommended
chmod to use? seems like 777 is the only one that will allow me to write to
the folder
Don't do that. Or '666'. This allows anyone on the server to alter the file.
This isn't
Wow, the DataMgr project is very cool. I can use it right away for other parts
of my application.
thanks,
tom
Tom,
As Isaac mentioned his DataFaucet project and my DataMgr project will
both create tables and columns from XML. DataMgr will also allow you
to define the data (not sure
I do have one question on the loadXml function.
I'm getting a error that says LoadXML Failed(verify datasource MySQLDS is
correct). The DSN is valid, where/ how can I trouble shoot this?
Thanks,
tom
~|
Want to reach
Hello,
I was wondering if there were any libraries or functions which can be used to
create database tables on the fly based on XML data and then insert the data.
So all I had to worry about was formatting the xml data.
Thanks,
tom
Yes, you have to install the cert, and you have to restart the cfm service as
well. The other thing I'm not seeing in your cfldap tag is the port. If it's
missing it's will default to 389 not the standard 636 for ssl.
tom
On Dec 8, 2009, at 8:50 AM, Jake Churchill wrote:
I'm working
://www.compoundtheory.com/.
--
Thanks,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
~|
Want to reach the ColdFusion community with something they want? Let them know
Hello,
I'm looking for a tag or extension which will allow me to sign a string with a
RSA private key so that I can verify it with the public key. What can I use to
do this?
Thanks,
tom
~|
Want to reach the ColdFusion
On Wednesday 21 Oct 2009, David Mineer wrote:
The temporary workaround that I found for this was to set a height value in
the cflayout tag. You can see more details about how I fixed it in the
comments on Sam's blog linked below.
This is listed in the release notes isn't it ?
--
Helping to
On Monday 05 Oct 2009, Rick Root wrote:
CFFM allows you to upload a zip file then unzip it on the server.. but
to upload a a whole directory without zip/unzip? I've never seen
anything that does that, at least not web-based.
No, you'd have to be able to enumerate the users file system, which
On Tuesday 29 Sep 2009, Mark McArthey wrote:
Debug home page URL and Mapping information. I'm not sure if I am to
differentiate between the user URL that would be accessed for the home page
and a debug URL. It would seem to be the case, but I'm not sure what
No, they can be the same.
RDS
On Monday 05 Oct 2009, Che Vilnonis wrote:
Who needs to be notified? Ray, C?
Maybe it's all the people with the shiny new ColdFusion Builder beta
reinstalling them all :-)
--
Helping to ambassadorially harness exceptional advanced vertical communities
as part of the IT team of the year, '09
On Tuesday 22 Sep 2009, Damo Drumm wrote:
where IINVOICE_Key = #url.invoice#
AND InvoiceTemplateType_Key = 1
/cfquery
Use CFQUERYPARAM !
Unless you really want someone putting
On Thursday 24 Sep 2009, Nathan Chen wrote:
How do you clear users' local cache after they log out and the session
variable is cleared? I can clear the session on the server, but if users
click the Back button, they can still get back and that's not what I
want. This must have been discussed
On Tuesday 15 Sep 2009, Jacob wrote:
Format C: - Reinstall apps - restore data from backup.
Although probably OK in this case, note that malware could be hiding in the
BIOS, Intel vPro etc. etc., especially if you have been target specifically.
--
Helping to efficiently establish
On Monday 21 Sep 2009, Rick Root wrote:
Any recommendations for inexpensive solutions? (inexpensive meaning,
hundres or thousands of dollars but not tens of thousands).
rsync is the generic answer. You can get some fairly 'home/office' NAS boxes
now that support RAID mirroring, and I'm
You could go old school and just treat it as a string...
--
Helping to greatly architect eye-catching segments as part of the IT team of
the year, '09 and '08
This email is sent for and on behalf of Halliwells LLP.
Halliwells LLP is a
On Tuesday 08 Sep 2009, Glyn Jackson wrote:
Hi Tom how are you?
Good ta.
any others I should know about?
hf801-1878.jar from
http://www.adobe.com/support/security/bulletins/apsb09-12.html if this is
missing, have you applied all the other ones from that page too ?
--
Helping to globally
On Monday 07 Sep 2009, Mike Chabot wrote:
it states in cfadmin the update level is hf801-1875.jar
Yeah, but that lies. The only way to tell for sure is look along the class
path, as you spotted.
It's a mess.
The cumulative hotfix 3 contains all the prior hotfixes, so delete
contains all
On Tuesday 08 Sep 2009, Scott Stroz wrote:
The bindings will call the onRequest in App.cfc as that is juts a
regular ole HTTP request.
Are you saying even on HTTPS pages, CFAJAX calls go over HTTP, not HTTPS ?
--
Helping to preemptively generate synergistic infrastructures as part of the IT
On Saturday 05 Sep 2009, b...@bradwood.com wrote:
I believe it would take #plans x #lines tries to complete, but the good
news multiplication and addition are very fast operations even when done
millions of times. :)
Yup, I do a brute force search, store the results, and then reporting to the
On Saturday 05 Sep 2009, Chris Montgomery wrote:
Well, after trying everything I can think of, this isn't working. Could
there possibly be some mime type issues with the .flv files? I'm testing
this on my local development box, WinXP Pro, CF8, using the built-in web
server with CF.
Any 404's
On Tuesday 01 Sep 2009, Arsalan Tariq Keen wrote:
Can anyone tell me in detail what parameters I need to know from my GSM
Operator for sending SMS using ColdFusion?
You wont be able to use a GSM provider i.e. the radio system normally used.
You need to find an SMSC provider or something. Have
On Wednesday 26 Aug 2009, Peter Boughton wrote:
It's idiotic that words can be considered offensive and blocked without
context - yet I hope you suffer an eternity of burning agony will be
allowed past just fine.
You should have seen the bizzare errors I had to deal with as a sys. admin for
On Wednesday 26 Aug 2009, Byte Me wrote:
Does anyone know how to get a list of Coldfusion Threads (created with the
cfthread tag), programatically. I don't have access to the Server Monitor.
If a thread is aborted, I need to know it was aborted,
How about when you create the thread, you add
On Tuesday 25 Aug 2009, Blue 750 wrote:
In talking to the vendor, they explained that since we are now sending SSN
data in our request, that we have to pad the value of it to X characters
for the XML response to no longer include the error. I'm not sure what that
X is or what I should be
On Wednesday 26 Aug 2009, Cutter (ColdFusion) wrote:
Don't forget that he could also access a .NET object (CF 8 or higher) if
he's on Windows.
Or if the CF is on non-Windows but there is a Windows machine to hand.
--
Helping to centrally participate prospective next-generation viral unique
On Wednesday 26 Aug 2009, Joseph Bugeja wrote:
We want that when a user clicks on the Amend button the action handler of
the amend is executed after executing the onblur event.
Doesn't sound much like a CF problem, but...
Your code doesn't have a blur handler for the amend button.
If you
On Thursday 20 Aug 2009, DURETTE, STEVEN J (ATTASIAIT) wrote:
I know the following... ColdFusion used .5 Gigs (512m) by default and
can handle a max of 1.8 gigs. My problem is that 1.8 Gigs doesn't
divide by 1024 evenly.
On a 64bit JVM, it can use a lot more than 1.8G :-)
What number
On Tuesday 25 Aug 2009, John M Bliss wrote:
Does anyone know of a tool (SQL or CFML) similar to SQL's DIFFERENCE (
http://msdn.microsoft.com/en-us/library/ms188753.aspx) but with
significantly higher fidelity.
You want something like Llevenshtein distance maybe ? It was easy enough to
find
suggestions that there will be some sort of Flex Builder 4/CF Builder combo
pricing.
--
Thanks,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
~|
Want to reach
On Monday 17 Aug 2009, Rick Root wrote:
This means a couple of image manipulation features are gone since
CFIMAGE doesn't seem to have the ability to flip horizontal, flip
vertical,
http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=functions_h-im_22.html
:-)
or crop an
On Thursday 06 Aug 2009, Gerald Guido wrote:
Don,
This scenario has been repeated so many times with your posts it is as it
follows a script. One could call it The Don Show.
To be slightly constructive about it, the OP might want to read
http://catb.org/esr/faqs/smart-questions.html#intro
On Wednesday 05 Aug 2009, ch g wrote:
Thank you so much for all of your time and suggestions.
It's normally easier to do your testing calling the service as a normal
component, and then try as a webservices once it's working OK.
Save clear the WSDL stubs all the time.
--
Helping to quickly
On Thursday 06 Aug 2009, SANJEEV SINGLA wrote:
What request came in at what time, from which user, which browser, how
much time it took to process the request etc. and all other relevant
request details.
Is that not all in the IIS logs ?
--
Helping to evangelistically bully eigth-generation
On Friday 31 Jul 2009, Tony Bentley wrote:
I can do it using two nested loops but the record set is over 1000
So ? That's not very many.
Does it take a particularly long time ?
--
Helping to confidentially fashion professional bleeding-edge total
developments as part of the IT team of the
On Wednesday 29 Jul 2009, Arsalan Tariq Keen wrote:
didn't get your point dude...!
AnyTerm is an AJAX app with simple server backend that enables SSH to the
server it's running on through nothing more than a browser. It's free too.
I'm sure CFHTTP could use the same interface.
--
Helping to
to FlexCoders and be a little more specific,
even including your code.
--
Thanks,
Tom
Tom McNeer
MediumCool
http://www.mediumcool.com
1735 Johnson Road NE
Atlanta, GA 30306
404.589.0560
~|
Want to reach the ColdFusion community
On Thursday 30 Jul 2009, Kim Hoopingarner wrote:
I noticed that the Flex forum doesn't get as much attention as the
Coldfusion - so forgive me for posting my Flex question here.
You want FlexCoders on Yahoo groups.
--
Helping to authoritatively aggregate internet ubiquitous relationships as
On Monday 27 Jul 2009, Arsalan Tariq Keen wrote:
besides... Tera Term Pro Web is another opensource option ... I finally
found last night... it uses POST and GET forms for ssh/telnet purposes...
so we can integrate it with ColdFusion, HTML or any other web application
server as well :) (this
On Sunday 26 Jul 2009, Arsalan Tariq Keen wrote:
Does anyone know of a possible way of connecting to devices on the network
using ColdFusion and telnet/ssh and execute commands on the host machines?
You can CFEXCEUTE a (CFFILE-authored) batch file that does it.
--
Helping to apprehensively
On Sunday 26 Jul 2009, James Holmes wrote:
The way ColdSpring does this is simpler:
The init() of your CFC takes a dsnBean as an argument.
Or you can set 'autoWire=byName' and have ColdSpring use your set'er methods
to do the injection for you.
I think this is clearer, and I don't duplicate
On Wednesday 22 Jul 2009, Don L wrote:
I don't think you know how my app is going to be deployed.
We might be able to provide better comments on your need to control licence
terms if you explained :-)
--
Helping to administratively mesh B2B seamless supply-chains as part of the IT
team of
On Wednesday 22 Jul 2009, Adrian Lynch wrote:
Add CFIDE as a virtual directory in your new sites and see if that fixes
it.
Noo ! This exposes the ColdFusion administrator on all the sites.
You do not want this in Adobe's ColdFusion.
Add /CFIDE/scripts/ as a mapping to each site.
--
.
Thanks,
tom
On Jul 23, 2009, at 9:24 AM, cftalk wrote:
You can also this little gem (cfdbinfo)
http://www.cfquickdocs.com/cf8/#cfdbinfo
-Original Message-
From: David McGuigan [mailto:davidmcgui...@gmail.com]
Sent: July-22-09 9:23 PM
To: cf-talk
Subject: Re: WildCard query
You
On Tuesday 21 Jul 2009, Randy Adkins wrote:
Or if there is a way to use CF to verify that a document (DOC or PDF) has
been electronically signed??
With what standard ? The generic answer would be to cfexecute 'gpg' and parse
the result, or find a suitable Java API.
--
Helping to efficiently
On Tuesday 21 Jul 2009, Don L wrote:
Thank you for your thoughts.
See also defectivebydesign.org - if you can't trust your paying customers you
have bigger issues.
--
Helping to authoritatively incentivize IPOs as part of the IT team of the
year, '09 and '08
On Tuesday 21 Jul 2009, Rob Barthle wrote:
Background: I have a local CFMX7
...
The Application.cfc file has things set up properly:
Wasn't Application.cfc introduced in CF8, not 7 ?
--
Helping to professionally entrench open-source convergence as part of the IT
team of the year, '09 and
On Wednesday 22 Jul 2009, cftalk wrote:
Hi Tom,
Could you elaborate on that answer? I am also interested in digital
signatures. Using standard...
gpg is a GNU tool for processing (public key) cryptography, such as digital
signatures.
http://www.gnupg.org/documentation/
--
Helping
On Wednesday 22 Jul 2009, Rob Barthle wrote:
Wasn't Application.cfc introduced in CF8, not 7 ?
If that were the case, then I'd be having bigger problems... ;-)
Coffee failure, oops.
--
Helping to proactively compete essential cross-platform systems as part of the
IT team of the year, '09
On Wednesday 22 Jul 2009, Sebastiaan van Dijk wrote:
We get the same error on our
internal production servers, but our external servers seem to run the cfc
with no problem.
Could it be a proxy setting ?
--
Helping to adaptively monetize industry-wide B2B appliances as part of the IT
team
Hello,
I'm migrating some pages from Lasso to Coldfusion and one of the
current pages in Lasso has a query to search any field/column for a
value. I have never done this with coldsuion before so I'm not sure
how to go about this.
thanks,
tom
On Monday 20 Jul 2009, Don L wrote:
To me some service contract like delivery of a fix of 8 days is too long.
Probably I'll talk to the OSS's owner to negotiate a deal something
later
Yeah.
At a guess if you pay more, you'll get more :-)
You know what, I strongly believe, any OSS
On Tuesday 21 Jul 2009, Don L wrote:
For a cf8 or equivalent app, what options do we have for its control in
Windows environment?
Something simple like a CFREGIETRY key that stores first start time, and a
check that that is not too long ago you mean ?
At the end of the day the only thing
On Friday 17 Jul 2009, John McSwishton wrote:
I purchased a CFX from http://www.emerle.net/programming/, CFX_Excel2Query
but I keep getting this error: java.lang.ClassNotFoundException:
cfx_excel2query.jar, tags folder=classes/
Is this a problem with the CFX or my installation?
Where did you
On Wednesday 15 Jul 2009, Robert Nurse wrote:
index.cfm is requested, CF hangs. We took the code out of index.cfm and
put it in new file and it works as expected. Even a completely empty
index.cfm file hangs CF!
Remove the cached/compiled cftemplates.
--
Helping to confidentially iterate
On Monday 20 Jul 2009, denstar wrote:
If you are running a business on the Railo software and need a rapid
and guaranteed response, a support contract is probably not a bad idea
at all.
And, to be fair, I wouldn't expect and immediate response to a direct email
to, say, Bill gates or any
On Monday 13 Jul 2009, Beru wrote:
CF8? Or, is there another way to map a part of a web site to some other
instance than the one that is serving the root?
I think you can use Pound to do this, or mod_proxy in Apache.
--
Helping to enormously differentiate internet innovative metrics as part
On Thursday 09 Jul 2009, Dawson, Michael wrote:
I don't see your particular update level, but I do see an update level
that is earlier than 77218.
Cool. I cc'ed Adam so at least Adobe and Google now know :-)
--
Helping to advantageously foster eligible guinine mindshares as part of the IT
On Tuesday 30 Jun 2009, Byte Me wrote:
the staff maintain the website. From a security standpoint, does it make
any difference if I create one database connection and call my queries as
follows or would this be more secure (three separate connections):
With a single connection connecting to
On Wednesday 08 Jul 2009, Adrocknaphobia wrote:
Sorry Kris, I wish we could have made it a little less scary, but you
shouldn't worry.
Note the instructions aren't the best.
Our CF8.0.0 server doesn't have 'editor/filemanager/connectors/cfm', so I've
done
# cd
On Tuesday 07 Jul 2009, Dave l wrote:
http://www.coldfusion.tv/viewVideo.cfm?videoID=111
There is a whole ton of 'old' errors in the application he hacks, any of which
anyone could make. Without anyone of them, the 'exploit' wouldn't have
worked.
There's nothing in the FCKeditor plugins
Also, after applying it, the info. page still says:
Update Level: /opt/coldfusion8/lib/updates/hf801-71471.jar
Although it also says
CF
Classpath: :opt/coldfusion8/runtime/../lib/updates/hf801-71471.jar:
:opt/coldfusion8/runtime/../lib/updates/coldfusion8.0.1_hf801-77218.jar:
Is that
On Monday 06 Jul 2009, Pete Freitag wrote:
I would keep FCKeditor file upload manager disabled for now:
http://www.petefreitag.com/item/705.cfm
As you seem to have a good test case, is it enough to set
Config.Enabled=false ?
--
Helping to efficiently empower customized distributed
On Friday 03 Jul 2009, Adrian Lynch wrote:
Am I missing something?
You're on CF8.0.0 not 8.0.1 and so fine ?
--
Helping to biannually pursue best-of-breed sexy holistic eyeballs as part of
the IT team of the year, '09 and '08
This email
On Friday 03 Jul 2009, Dave Watts wrote:
Remediation steps available here:
http://www.codfusion.com/blog/post.cfm/cf8-and-fckeditor-security-threat
Site down, probably load.
In summary:
CF8.0.1 ships with a plugin in the FCKeditor that powers rich text editing in
a non-default, insecure
On Friday 03 Jul 2009, Oli Rosenbladt wrote:
So far, nothing I have tried in CF has allowed me to rebuild the result
34-character string so that I can compare them to what's in the database,
ie.
You'll have to find out how PHP combines the input with the salt (append ?
prepend ? XOR ? ...
On Friday 03 Jul 2009, Oli Rosenbladt wrote:
when you look at the result of a PHP crypt(string,salt) function that uses
MD5, the entire 12-character user salt ends up prepended to the resulting
string,
So what calculates the salt ?
--
Helping to appropriately deploy killer customized
On Friday 26 Jun 2009, Paul Alkema wrote:
I would just set your variables in the application variables scope instead
of the server variable scope. Or you could set a request variable on the
application.cfm page and just call that every time you need it.
Or store the common settings in a
201 - 300 of 3579 matches
Mail list logo
