Re: EMail Injection Attack

2014-08-18 Thread G T
I currently have logging for sent mail through cfadmin so that is really the way I found out that email is being sent outbound somehow. I do have captcha implementation on my forms, but it's been a bit of time since I initially implemented this, so I was also considering the possibility that

Re: EMail Injection Attack

2014-08-18 Thread Money Pit
Regarding the 'h.cfm' issue, go to the bathroom first (your upholstery will thank me) and THEN sit down and read this. http://www.carehart.org/blog/client/index.cfm/2013/1/2/serious_security_threat and the two follow-on blog entries linked at page bottom. This did quite a job of rocking many

Re: EMail Injection Attack

2014-08-18 Thread G T
Hey Dean - I'll be looking at my webserver logs to see if I can see any correlation with my mail logs. But to respond to your thought, none of the code so far allows the user to specify who they're sending to. The forms that send email are at the very basic level just notification to our

Re: EMail Injection Attack

2014-08-18 Thread Money Pit
if sending by CF but not using your code that could mean they are running cf code you didn't write. -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com ~| Order the Adobe Coldfusion Anthology now!

Re: EMail Injection Attack

2014-08-18 Thread G T
To consolidate a few thoughts here - 1) I will be looking to webserver logs and mail sent logs to see if I see any points of contact of when/where the attacks are coming from. If I can isolate the problem to it actually being a page attack (ie. email inject) vs a serverside compromise (ie.

Re: EMail Injection Attack

2014-08-18 Thread Wil Genovese
Garry The hack files are not always called h.cfm. In fact that was just one named used by one attacker. there was also i.cfm by another attacker. Others have used other file names and/or other techniques as described in this blog post that Mark Kruger wrote that describes an exploit method I

RE: ColdFusion / authorize.net question

2014-08-18 Thread Eric Bourland
Dean and Les, Thank you for these helpful remarks. Dean, I think I did implement, in another draft of this form, the idea that you suggested -- but I will check that and confirm. I've been working on this task stubbornly for three days and have many versions of this code. I will check my

RE: ColdFusion / authorize.net question

2014-08-18 Thread Eric Bourland
http://nnvawi.org/sample2.cfm When I use the code, below, then the Last Name field in the authorize.net page gets populated with: cfoutput/cfoutput So it looks like something is ... erasing the value of #form.lastname#: cfset lastname=cfoutput#form.lastname#/cfoutput !--- set value of

RE: ColdFusion / authorize.net question

2014-08-18 Thread Roger Austin
I might try cfset lastname=form.lastname instead of cfset lastname=cfoutput#form.lastname#/cfoutput Eric Bourland ebwebw...@outlook.com wrote: http://nnvawi.org/sample2.cfm When I use the code, below, then the Last Name field in the authorize.net page gets populated with:

RE: ColdFusion / authorize.net question

2014-08-18 Thread Eric Bourland
Dear Roger, Thanks for that. However, cfset lastname=form.lastname !--- set value of lastname from #form.lastname#--- inserts value form.lastname in the Last Name field in the authorize.net form. I think I need the outputs. I am also wondering why any value that occurs between the outputs

Re: ColdFusion / authorize.net question

2014-08-18 Thread Maureen
cfoutput cfset lastname=#form.last_name# /cfoutput but in order for this to work, you need to have a form field with name=lastname and you don't appear to have that in the code you posted. And I agree with Roger that renaming the field names to the variable name you need to send is the simpler

RE: ColdFusion / authorize.net question

2014-08-18 Thread Eric Bourland
...nd obviously I am going to generate a new transaction key since I just posted mine. sigh. *** Eric Bourland Internet Project Development Washington DC kind | creative | reliable To: cf-talk@houseoffusion.com Subject: RE: ColdFusion / authorize.net question Date: Mon,

RE: ColdFusion / authorize.net question

2014-08-18 Thread Eric Bourland
An easier option would be to just rename your LastName field to x_last_name and not have to deal with the javascript at all. Dean, Maureen: I agree that simple is best. So, I dispensed with cfset, and used this: !--- Create the HTML form containing necessary SIM post values --- FORM

RE: ColdFusion / authorize.net question

2014-08-18 Thread Roger Austin
You don'tneed the double quotes around form.lastname in a cfset statement. Eric Bourland ebwebw...@outlook.com wrote: Dear Roger, Thanks for that. However, cfset lastname=form.lastname !--- set value of lastname from #form.lastname#--- inserts value form.lastname in the Last

Re: ColdFusion / authorize.net question

2014-08-18 Thread Maureen
You now have two form fields with the same name. You can lose the hidden field for x_last_name since you now are getting it from the input. On Mon, Aug 18, 2014 at 7:21 PM, Eric Bourland ebwebw...@outlook.com wrote: An easier option would be to just rename your LastName field to

RE: ColdFusion / authorize.net question

2014-08-18 Thread Eric Bourland
Maureen, you're my hero. That worked. Dean, Roger, Les -- thank you all very much. So -- I need to rename some form fields now. I think I can take it from here. On the phone with authorize.net right now to change API Login Key and Transaction ID after posting them here with my code in a

Re: EMail Injection Attack

2014-08-18 Thread Byron Mann
I'd also enlist the help of your hosting provider if server level troubleshooting is part of your service level agreement. It's usually in their best interest to squash this type of activity, as it can get their ip addreses and ranges blacklisted. Byron Mann Lead Engineer Architect

Re: ColdFusion / authorize.net question

2014-08-18 Thread Maureen
Glad to be of help, and don't worry about the boneheadedness. I spent hours last week trying to debug a similar issue with a form only to discover I had a minus sign where I needed an equal sign. Stuff happens. On Mon, Aug 18, 2014 at 8:05 PM, Eric Bourland ebwebw...@outlook.com wrote:

ColdFusion / authorize.net question

2014-08-17 Thread Eric Bourland
Has anyone here tried out the ColdFusion SIM* sample code from authorize.net? I've downloaded and tested the sample code and have been reading a lot of stuff in the API. I have a question that seems basic and simple: when using the ColdFusion SIM, is it possible to use form fields with

protection from sql attacks with regex++

2014-08-15 Thread Stephens, Larry V
Using information from a Ben Nadel atricle, jsStringFormat( htmlEditFormat()) seems to be catching insertions like b and escaping them. However, I have tried a number of regex routines from http://www.symantec.com/connect/articles/detection-sql-injection-and-cross-site-scripting-attacks plus

RE: protection from sql attacks with regex++

2014-08-15 Thread Robert Harrison
Uhm... cfqueryparam Robert Harrison Director of Interactive Services Austin Williams Advertising I Branding I Digital I Direct   125 Kennedy Drive,  Suite 100   I  Hauppauge, NY 11788 T 631.231.6600 X 119   F 631.434.7022   http://www.austin-williams.com Blog:

Re: protection from sql attacks with regex++

2014-08-15 Thread Casey Dougall - Uber Website Solutions
Unless you were using evaluate (column) name inside another query somewhere I am not aware of how that could be used for an injection On Aug 15, 2014 1:51 PM, Stephens, Larry V steph...@iu.edu wrote: Using information from a Ben Nadel atricle, jsStringFormat( htmlEditFormat()) seems to be

RE: protection from sql attacks with regex++

2014-08-15 Thread Stephens, Larry V
Doing that on everything. -Original Message- From: Robert Harrison [mailto:rob...@austin-williams.com] Sent: Friday, August 15, 2014 1:54 PM To: cf-talk Subject: RE: protection from sql attacks with regex++ Uhm... cfqueryparam Robert Harrison Director of Interactive Services

Re: protection from sql attacks with regex++

2014-08-15 Thread Justin Scott
Doing that on everything. If you're parametrizing everything on the queries then what is the concern? -Justin ~| Order the Adobe Coldfusion Anthology now!

RE: SOT: the magic of RANK()

2014-08-14 Thread UXB
18 years in and I just learned about it today Old dogs... new tricks... who says it can't happen? :) I know the feeling. Dennis Powers UXB Internet - A website Design and Hosting Company P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844 W: http://www.uxbinternet.com W:

Moved CFMX7 CFIDE and now it won't work?

2014-08-14 Thread Marie Taylore
So I moved my CFIDE directory to another location for safety. I wanted to temporarily move it back, but every time I do, it responds with: File not found: /CFIDE/administrator/index.cfm but it's there!  Is this one of those situations where a service restart is required? Thanks! MT

Re: Emails MIA

2014-08-13 Thread Money Pit
I think the failto address is not used by CF to bounce messages, only to provide a Return-Path: address in the message header, and the bounce is generated by the destinee server, not CF. Thats how I use it as well. Failto is used by the recipient to send back a failure. I add in plus

Re: ColdFusion BBCode routines

2014-08-12 Thread Bobby
Without specifics, I can just suggest trying to download the last version of CF4em (which is still pretty old) and check out the bbmlparser there. http://cf4em.com/downloads/ /cf4em/inc/parsebbml.cfm Unless CF4em is what you inherited... In which case, I¹d suggest NOT doing that that :-) On

Issue using CF to set Java server variables

2014-08-12 Thread Scott Weikert
The last few days, my production webserver has had an issue with Java unable to create cache files. This is triggered when firing a cfimage tag, pointing at a graphic file in the filesystem, the purpose of which is to retrieve the width/height values. As best I can tell (as this is generally

SOT: the magic of RANK()

2014-08-12 Thread John M Bliss
I hope this saves someone some time and I hope I'm not way late to the RANK() party: Let's say you have this table: column1 - column2 A - 1 A - 2 A - 2 B - 3 B - 4 B - 4 ...and you need to write SQL to return the most frequently occurring column2 for each distinct column1: A - 2 B - 4 Enter

Re: Emails MIA

2014-08-12 Thread Jochem van Dieten
On Aug 5, 2014 3:35 PM, Byron Mann wrote: Use a failto in cfmail as it may provide you some detail. If the mail isn't making it off the server, it should bounce to the failto. Multi-recipient email will not generate a bounce or undeliverable message in CF if the CF spooler can deliver to at

RE: ColdFusion BBCode routines

2014-08-12 Thread UXB
trying to download the last version of CF4em check out the bbmlparser there. I decided to spend an evening fully investigating the subject and looked at all the various BBML code routines in CF, PHP and Perl to see what I could glean. It looks like just about all the ones I could find have

Re: Emails MIA

2014-08-12 Thread Claude Schnéegans
Multi-recipient email will not generate a bounce or undeliverable message in CF if the CF spooler can deliver to at least one recipient. I think the failto address is not used by CF to bounce messages, only to provide a Return-Path: address in the message header, and the bounce is generated

RE: ColdFusion BBCode routines

2014-08-12 Thread UXB
trying to download the last version of CF4em check out the bbmlparser there. I decided to spend an evening fully investigating the subject and looked at all the various BBML code routines in CF, PHP and Perl to see what I could glean. It looks like just about all the ones I could find have

Re: SOT: the magic of RANK()

2014-08-12 Thread Rick Faircloth
Nice! I've never heard of Rank()... On 8/12/2014 4:21 PM, John M Bliss wrote: I hope this saves someone some time and I hope I'm not way late to the RANK() party: Let's say you have this table: column1 - column2 A - 1 A - 2 A - 2 B - 3 B - 4 B - 4 ...and you need to write SQL to

Re: SOT: the magic of RANK()

2014-08-12 Thread John M Bliss
Happy to not be the only one. 18 years in and I just learned about it today (IIRC). :-) On Aug 12, 2014 8:49 PM, Rick Faircloth r...@whitestonemedia.com wrote: Nice! I've never heard of Rank()... On 8/12/2014 4:21 PM, John M Bliss wrote: I hope this saves someone some time and I hope

Re: CF9 to CF11 cfscript

2014-08-11 Thread Rob Voyle
Hi Adam Its the end of a workshop registration form where multiple participants can be registered. For each participant a series of emails are generated to both the participant and the workshop host, and the participant information is entered into a data bases. The page is then paused for a

CF9 to CF11 cfscript

2014-08-10 Thread Rob Voyle
Hi folks Migrating from cf9 to cf11 cfscript thread = CreateObject(java, java.lang.Thread); thread.sleep(4000); /cfscript is now giving an error message invalid token What should the syntax be. I simply want the page to pause while data is entered into a database. Thanks Rob

Re: CF9 to CF11 cfscript

2014-08-10 Thread Adam Cameron
You know CFML has had the sleep() function (which does what your code does) built-in since CF8, right? Your issue is probaby that thread is a keyword in CF9+. Replace your code with: sleep(4000); Wanting the page to pause whilst data is entered into the DB is an odd thing... given DB

ColdFusion BBCode routines

2014-08-10 Thread UXB
I was wondering if anyone has some battle tested BBCode routines to convert BBcode to html and one to covert the HTML created back to BBcode? I have inherited a forum that has rolled its own BBcode Html routines and the kiddies are finding ways to imbed scripts into the various BBCode routines.

Logical looking dates reporting..

2014-08-09 Thread Phillip Vector
So I want to display the time between 2 events (down to the second). I have the following code.. cfset Years = #DateDiff(, Leaderboard.CreatedOn, Leaderboard.DateOfDeath)# + 18 cfset Months = #DateDiff(, Leaderboard.CreatedOn,

Re: Logical looking dates reporting..

2014-08-09 Thread Phillip Vector
Found this.. http://www.cflib.org/index.cfm?event=page.udfbyidudfid=377 This seems to work. Thanks anyway. :) On Sat, Aug 9, 2014 at 5:40 AM, Phillip Vector vec...@mostdeadlygame.com wrote: So I want to display the time between 2 events (down to the second). I have the following code..

Re: Logical looking dates reporting..

2014-08-09 Thread Phillip Vector
I stand corrected. That only calculated up to days.. I need months and years (and not just the calculation, but actual days and months.. Grrr... Going to get some wake up juice. :) On Sat, Aug 9, 2014 at 6:40 AM, Phillip Vector vec...@mostdeadlygame.com wrote: Found this..

Re: Logical looking dates reporting..

2014-08-09 Thread John M Bliss
http://cflib.org/udf/longTime On Sat, Aug 9, 2014 at 8:40 AM, Phillip Vector vec...@mostdeadlygame.com wrote: So I want to display the time between 2 events (down to the second). I have the following code.. cfset Years = #DateDiff(, Leaderboard.CreatedOn,

Re: Logical looking dates reporting..

2014-08-09 Thread Phillip Vector
Thank you. :) On Sat, Aug 9, 2014 at 9:40 AM, John M Bliss bliss.j...@gmail.com wrote: http://cflib.org/udf/longTime On Sat, Aug 9, 2014 at 8:40 AM, Phillip Vector vec...@mostdeadlygame.com wrote: So I want to display the time between 2 events (down to the second). I have the

RE: (Semi-OT) - site sucker app

2014-08-08 Thread UXB
Does anyone have a suggestion for a good application that can be pointed to an url and then download every page under that url. The tool HTTrack never fails for me. http://www.httrack.com/ and you can't beat the price. Dennis Powers UXB Internet - A website Design and Hosting Company

RE: (Semi-OT) - site sucker app

2014-08-08 Thread CF:_InternetEmail.info
Try SiteSucker.us - Free - iOS and OSX though. http://sitesucker.us Have used HTrack for years - but I don’t think the application is that great. Especially when it comes to preserving the original site files and structures. SiteSucker does. Provides and exact copy of the site… - minus

Re: Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-07 Thread Sathyanarayanan Ramanathan
Dear, Thanks for your replies. But still am facing issue. @Paul, Yes. I was using ODBC socket datasource to connect CF with SQL server database. In that the connection was successful but Arabic didn't display properly in CFM page.(In db the datatype is correctly used nvarchar and I can see

Issue Solved - Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-07 Thread Sathyanarayanan Ramanathan
Dear Friends, Finally the is solved. Thanks Bobby Paul. While adding datasource in CF administrator , in server field I was wrongly trying as localhost, now I changed to MICRO\SQLEXPRESS as server and db name in database field along with check box checked for Enable High ASCII characters and

Re: Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-07 Thread Paul Hastings
On 8/7/2014 1:34 PM, Sathyanarayanan Ramanathan wrote: Yes. I was using ODBC socket datasource to connect CF with SQL server well you can stop now. Driver]Error establishing socket to host and port: 127.0.0.1:1433. use real IP or server name instead of 127.0.0.1. if you're using an

Re: (Semi-OT) - site sucker app

2014-08-07 Thread C. Hatton Humphrey
On Wed, Aug 6, 2014 at 9:06 PM, Gerald Guido gerald.gu...@gmail.com wrote: http://www.httrack.com/ is, IMHO, outstanding. +1 for this tool Until Later! C. Hatton Humphrey http://www.eastcoastconservative.com Every cloud does have a silver lining. Sometimes you just have to do some

Re: Auto File Uploading...

2014-08-07 Thread Dave Watts
This isn't the right tool for the job. But this code seems to work. !DOCTYPE html html head title/title /head body cfif StructKeyExists(FORM , 'fieldnames') cfdump var=#FORM# / scriptsetTimeout(function(){window.history.back();} , 2000);/script cfelse

expire application variable

2014-08-07 Thread John M Bliss
I have a case where I need to have an application variable expire after a known amount of time. Do you have a favorite method for doing this? I was thinking of something like: application.thevar = structnew(); application.thevar.createtick = gettickcount(); application.thevar.thevalue = foo;

Re: expire application variable

2014-08-07 Thread Carl Von Stetten
Are you on ColdFusion 9+? Why not use the built-in cache functionality (cachePut(), cacheGet(), etc.)? If you are on ColdFusion 10+, you can even put related objects into a cache region and manually flush that region using CacheRemoveAll( region ) . -Carl V. On 8/7/2014 1:06 PM, John M

Re: expire application variable

2014-08-07 Thread John M Bliss
Sweet. Thanks! On Aug 7, 2014 5:51 PM, Carl Von Stetten vonner.li...@vonner.net wrote: Are you on ColdFusion 9+? Why not use the built-in cache functionality (cachePut(), cacheGet(), etc.)? If you are on ColdFusion 10+, you can even put related objects into a cache region and manually

Re: Auto File Uploading...

2014-08-07 Thread Ricardo Russon
Interesting point Dave. But I just tested on Chrome (Mac) and it does pick up the changed file. On Fri, Aug 8, 2014 at 12:17 AM, Dave Watts dwa...@figleaf.com wrote: This isn't the right tool for the job. But this code seems to work. !DOCTYPE html html head title/title /head

Re: Auto File Uploading...

2014-08-07 Thread Ricardo Russon
And again, I don't think this would be the right tool for the job. I just also thought that it wouldn't (shouldn't) work and had to try it out. I would probably go for rsync or something similar. On Fri, Aug 8, 2014 at 10:06 AM, Ricardo Russon ricardo.rus...@gmail.com wrote: Interesting

Re: Auto File Uploading...

2014-08-07 Thread Dave Watts
Interesting point Dave. But I just tested on Chrome (Mac) and it does pick up the changed file. I'm surprised! But that's interesting to know, so thanks! Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a

CF9/Windows how to push data to HTML page

2014-08-06 Thread Mike K
I have a radio station site, and I want to be able to update the pages automatically as events happen. For example on the section where it says what's on air now i want it to automatically change as the hour ticks over and the new show startsOr as the live call of the sports ends and we

Re: CF9/Windows how to push data to HTML page

2014-08-06 Thread John M Bliss
Are you talking about updating the page while end-user is looking at it? Or do you just need to have it updated on load / refresh? On Wed, Aug 6, 2014 at 8:03 AM, Mike K afpwebwo...@gmail.com wrote: I have a radio station site, and I want to be able to update the pages automatically as

Re: CF9/Windows how to push data to HTML page

2014-08-06 Thread Mike K
Ideally I'd like it updating while he's looking at it . rather the way Facebook does. Cheers Mike Kear Windsor, NSW, Australia Adobe Certified Advanced ColdFusion Developer AFP Webworks http://afpwebworks.com ColdFusion 9 Enterprise, PHP, ASP, ASP.NET hosting from AUD$15/month On Wed, Aug

Re: CF9/Windows how to push data to HTML page

2014-08-06 Thread John M Bliss
Many ways to accomplish this: Check out alternatives to cfdiv here: https://github.com/cfjedimaster/ColdFusion-UI-the-Right-Way/blob/master/chapters/cfdiv/index.md JQuery example (you'd use a Javascript timer instead of the button): http://jsfiddle.net/ZPYUS/ etc On Wed, Aug 6, 2014 at 8:23

Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-06 Thread Sathyanarayanan Ramanathan
Dear Friends, Few days before I was trying to insert Arabic text into my ColdFusion application with oracle database. And finally it worked for me as I mentioned in previous mail chain below. *Steps taken:* *Oracle side:* I created the new database with NLS_CHARACTERSET as AL32UTF8 and

Re: Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-06 Thread Bobby
Last time, my suggestion was to make sure the Enable High ASCII characters and Unicode for data sources configured for non-Latin characters² setting was enabled on your CF datasource but that was before I realized it was an oracle datasource. If you are using a SQL Server datasource this time,

Re: Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-06 Thread Paul Hastings
On 8/6/2014 8:28 PM, Bobby wrote: Last time, my suggestion was to make sure the Enable High ASCII characters and Unicode for data sources configured for non-Latin characters� setting was enabled on your CF datasource but that was before I realized it was an oracle datasource. If you are

Re: Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-06 Thread Paul Hastings
On 8/6/2014 8:17 PM, Sathyanarayanan Ramanathan wrote: *Issue 1: *Now I have existing SQL server 2008 db with Arabic text data in some table columns. But when I try to fetch display using CF even after adding charset in meta tag cfprocessingdirective as UTF-8 all Arabic text appeared as

Re: Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-06 Thread Bobby
He said the arabic text was actually in the database but only ??? when retrieving/displaying with CF. Wouldnt it be garbage IN the db if it wasnt an nchar/nvarchar data type? On 8/6/14, 12:21 PM, Paul Hastings p...@sustainablegis.com wrote: On 8/6/2014 8:17 PM, Sathyanarayanan Ramanathan

(Semi-OT) - site sucker app

2014-08-06 Thread Michael Dinowitz
Does anyone have a suggestion for a good application that can be pointed to an url and then download every page under that url. For example, if I want to view all of the Google maps documents offline I can point the app at https://developers.google.com/maps and it'll get me all of the faq, the

Re: (Semi-OT) - site sucker app

2014-08-06 Thread John M Bliss
This is what I've used in the past: https://softbytelabs.com/en/BlackWidow/ On Aug 6, 2014 8:32 PM, Michael Dinowitz mdino...@houseoffusion.com wrote: Does anyone have a suggestion for a good application that can be pointed to an url and then download every page under that url. For example,

Auto File Uploading...

2014-08-06 Thread Phillip Vector
So I have a server that reads a file that is submitted to it and processes the contents. I can not touch this server and change any settings on it.. I want to take a file I have (Let's call it data.txt) and upload it to the server once an hour. I can just reload the page once an hour or I can

Re: (Semi-OT) - site sucker app

2014-08-06 Thread Ricardo Russon
I've always just used wget. On Thu, Aug 7, 2014 at 10:35 AM, John M Bliss bliss.j...@gmail.com wrote: This is what I've used in the past: https://softbytelabs.com/en/BlackWidow/ On Aug 6, 2014 8:32 PM, Michael Dinowitz mdino...@houseoffusion.com wrote: Does anyone have a

Re: Auto File Uploading...

2014-08-06 Thread John M Bliss
In short, no. You'd have to deliver file to server via email / FTP / etc. On Aug 6, 2014 8:36 PM, Phillip Vector vec...@mostdeadlygame.com wrote: So I have a server that reads a file that is submitted to it and processes the contents. I can not touch this server and change any settings on

Re: Auto File Uploading...

2014-08-06 Thread Phillip Vector
Damm security! :) Thanks. On Wed, Aug 6, 2014 at 5:39 PM, John M Bliss bliss.j...@gmail.com wrote: In short, no. You'd have to deliver file to server via email / FTP / etc. On Aug 6, 2014 8:36 PM, Phillip Vector vec...@mostdeadlygame.com wrote: So I have a server that reads a file

Re: Auto File Uploading...

2014-08-06 Thread John M Bliss
...or HTTP post. On Aug 6, 2014 8:39 PM, John M Bliss bliss.j...@gmail.com wrote: In short, no. You'd have to deliver file to server via email / FTP / etc. On Aug 6, 2014 8:36 PM, Phillip Vector vec...@mostdeadlygame.com wrote: So I have a server that reads a file that is submitted to it

Re: Auto File Uploading...

2014-08-06 Thread Phillip Vector
Yes... HTTP post... That's what I'm trying to do.. Is there a way? (don't tease) On Wed, Aug 6, 2014 at 5:42 PM, John M Bliss bliss.j...@gmail.com wrote: ...or HTTP post. On Aug 6, 2014 8:39 PM, John M Bliss bliss.j...@gmail.com wrote: In short, no. You'd have to deliver file to server

Re: Auto File Uploading...

2014-08-06 Thread John M Bliss
In other words, if you have CF running locally, you could write something that performs a cfhttp post to server...mimicking browse, select file, click submit. On Aug 6, 2014 8:42 PM, John M Bliss bliss.j...@gmail.com wrote: ...or HTTP post. On Aug 6, 2014 8:39 PM, John M Bliss

Re: Auto File Uploading...

2014-08-06 Thread Ricardo Russon
This isn't the right tool for the job. But this code seems to work. !DOCTYPE html html head title/title /head body cfif StructKeyExists(FORM , 'fieldnames') cfdump var=#FORM# / scriptsetTimeout(function(){window.history.back();} , 2000);/script cfelse

Re: Auto File Uploading...

2014-08-06 Thread Phillip Vector
Thank you very much. Both of you. On Wed, Aug 6, 2014 at 5:49 PM, Ricardo Russon ricardo.rus...@gmail.com wrote: This isn't the right tool for the job. But this code seems to work. !DOCTYPE html html head title/title /head body cfif StructKeyExists(FORM , 'fieldnames') cfdump

Re: (Semi-OT) - site sucker app

2014-08-06 Thread Gerald Guido
http://www.httrack.com/ is, IMHO, outstanding. HTH G! *Gerald Anthony Guido* Nullius in verba http://en.wikipedia.org/wiki/Nullius_in_verba -- Horace Twitter https://twitter.com/CozmoTrouble Facebook https://www.facebook.com/gerald.guido.9 On Wed, Aug 6, 2014 at 8:36 PM, Ricardo Russon

Re: Unable To display Arabic text fetched SQL Server 2008 database into my CFM page

2014-08-06 Thread Paul Hastings
On 8/7/2014 6:16 AM, Bobby wrote: He said the arabic text was actually in the database but only ??? when retrieving/displaying with CF. Wouldnt it be garbage IN the db if it wasnt an nchar/nvarchar data type? could be already garbaged as far as cf unicode go. in the bad old days (pre

Re: TC's and Privacy Policy

2014-08-06 Thread Christopher Bowyer
Looks good! However, the last two lines of the Web Site Terms and Conditions of Use: General Terms and Conditions applicable to Use of a Web Site. - 2 - and the last line of the Privacy Policy: [Note1]Internet Web Site Privacy Policy. look like they don't belong. Could you advise on this

Re: Auto File Uploading...

2014-08-06 Thread Byron Mann
Sounds like curl or wget would do the trick. Byron Mann Lead Engineer Architect HostMySite.com On Aug 6, 2014 8:36 PM, Phillip Vector vec...@mostdeadlygame.com wrote: So I have a server that reads a file that is submitted to it and processes the contents. I can not touch this server and

Emails MIA

2014-08-05 Thread Kevin Parker
Hi guys - wonder if anyone can give little advice on a missing emails issue. Of course this is the old some arrive and some don't issue (but most arrive) - it would be a lot easier if none arrived. The site is running CF8 on IIS with a SQL Server dbase - mail server is set in CFMAIL to

Re: Emails MIA

2014-08-05 Thread Russ Michaels
If the email was bcc to you and it arrived then it was successfully sent. You should tell the recipient to check his own spam folder and mail logs. I would aldo suggest you stop using the hosts default mail settings and instead relay through a mailbox on your own domain then you can see them in

Re: Emails MIA

2014-08-05 Thread Byron Mann
Your hosting provider should troubleshoot this if they will not provide the SMTP logs. We do not usually provide entire logs either, but will attempt to find the pertinent records and provide them. Should be easy enough to parse the logs if you provide an approximate time the email was sent and

Re: Emails MIA

2014-08-05 Thread Dave Watts
Issues only occur with service provider emails (BCC to me is OK). Their network provider advises the missing emails don't even hit their mail server - they run their own mail server and don't use their ISP's mail system. The usual suspects of anti-spam systems and junk mail have been checked

How To Fix Server Hack

2014-08-05 Thread E Cohen
Hello All, Sorry this is a bit of a clueless email. I have a ColdFusion 8 server that was hacked yesterday. A file was installed at /CFIDE/scripts/index.html on a Windows 2008 server that redirected to a phishing site. I am trying to work out what they did to install that file and lock it

Re: How To Fix Server Hack

2014-08-05 Thread Wil Genovese
There is a lot of work to do at this point and you will need to face the possibility that it could be to late to lockdown (depending on what was hacked/installed etc and what data was taken) and you may in the worst case be looking at reinstalling everything from scratch. In the mean time you

Re: Sort by file extension in CFDIRECTORY

2014-07-31 Thread Nick Voss
It does, unfortunately it doesn't have the file extension as part of the object, so you'll need to add that column to the query object and run through the results separating the file name and filee xtension out to then sort by either column interchangeably. Nick I'd look at putting it

Re: Invalid Data for Parameter but which one?

2014-07-31 Thread Richard White
thanks guys, bit sounds good! Actually, the error is telling you exactly what is wrong. You are sending a string value of false to a field that only allows a maximum of 1 character. More than likely, you are trying to send a true/false value to a char(1) field. Try either converting your

Encrypting Zip File

2014-07-31 Thread Richard White
Hi, What is the best way to encrypt a zip file in ColdFusion? Many thanks, Richard ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive:

Re: Encrypting Zip File

2014-07-31 Thread John M Bliss
Maybe http://www.andyscott.id.au/blog/getting-better-zip-support-in-coldfusion-with-zip4j On Thu, Jul 31, 2014 at 12:18 PM, Richard White rich...@re-base.net wrote: Hi, What is the best way to encrypt a zip file in ColdFusion? Many thanks, Richard

re: Encrypting Zip File

2014-07-31 Thread Jeff Garza
In addition to zip4j, you can also look at installing 7Zip (http://www.7-zip.org/) on the server (if possible) and using the CLI interface to that via cfexecute. -- Jeff Original Message From: Richard White rich...@re-base.net Sent: Thursday, July 31, 2014 9:19

Re: Encrypting Zip File

2014-07-31 Thread Nick Voss
cfzip supports encryption out-of-box I believe zip cfzip required file = absolute pathname One of the following: source = source directory cfzipparam source = source directory ... optional encryptionAlgorithm = standard|AES-128|AES-256 password = password

Re: Sort by file extension in CFDIRECTORY

2014-07-31 Thread Dave Watts
It does, unfortunately it doesn't have the file extension as part of the object, so you'll need to add that column to the query object and run through the results separating the file name and filee xtension out to then sort by either column interchangeably. Good point! Sometimes I forget

Sort by file extension in CFDIRECTORY

2014-07-30 Thread Richard Colman
Can anyone point to an easy way to sort the display of CFDIRECTORY filenames by file extension, and then perhaps by name? -- Rick. ~| Order the Adobe Coldfusion Anthology now!

RE: Sort by file extension in CFDIRECTORY

2014-07-30 Thread Robert Harrison
Interesting... You might be able to use a query of queries after you gotten the file list... Or you might recourse the directory to get the extension then do a separate query on each extension. That's an interesting question... I'm going to watch for what others say. Robert Harrison

Handling 404 errors by Coldfusion

2014-07-30 Thread Claude Schnéegans
Hi, I'm havin someting weird hapening on mt CF 9 / Windows Web Server 2008 / IIS 7.5 My site is returning an error 404 status when some requested page does'nt exists. For instance http://myDomain.com/index.cfm?p=pageid=21 return normaly page 21 which exists, but

Re: Handling 404 errors by Coldfusion

2014-07-30 Thread Jon Clausen
Claude, This should be just a setting that needs to be adjusting in IIS: IIS Manager [Site] Error Pages 404 - Uncheck “Insert content from static file in to the error response” and/or reconfigure as fits your need. HTH, Jon On Jul 30, 2014, at 2:49 PM, Claude Schnéegans

Re: Handling 404 errors by Coldfusion

2014-07-30 Thread Claude Schnéegans
IIS Manager [Site] Error Pages 404 - Uncheck “Insert content from static file in to the error response” and/or reconfigure as fits your need. Ok, I've seen that, but the problem is that I still have to give a URL to be executed or Respond with 302 redirect. In fact I just need IIS to do

<    9   10   11   12   13   14   15   16   17   18   >