Re: Advise in optimizing an application

2014-11-15 Thread Roger Austin
Any chance to have the database engine do all that record logic? That would be the first thing I would try. Stored procedures are great for things like this. I don't know what RDMS you are using, but most have SQL that can do this. Complex database stuff is usually better off doing within the

Re: Advise in optimizing an application

2014-11-15 Thread Les Mizzell
On 11/15/2014 12:42 PM, Roger Austin wrote: Any chance to have the database engine do all that record logic? After killing myself on this, I finally realiaed I was doing it ALL WRONG! All those loops and everything to filter the array, then do the insertwas taking forever. I'm revising - BULK

Re: Advise in optimizing an application

2014-11-15 Thread Roger Austin
You might try something like this SELECT * FROM t1 WHERE NOT EXISTS (SELECT * FROM t2 WHERE t1.email = t2.email); Without being more familiar with your use case, it is very difficult to suggest much. Les Mizzell lesm...@bellsouth.net wrote: On 11/15/2014 12:42 PM, Roger Austin

Re:_List_Question?

2014-11-14 Thread robert
Thanks. I'll set up a second account. Personally I don't think I'd have implemented the design that way because it seems of little value to me to be able to post to an account when you're not getting messages to reply to or you don't see the responses to the messages you send. I'm sure you

Re: _List_Question?

2014-11-14 Thread Blake
On Fri, Nov 14, 2014 at 10:17 AM, rob...@creativecyberspace.com wrote: Thanks. I'll set up a second account. Personally I don't think I'd have implemented the design that way because it seems of little value to me to be able to post to an account when you're not getting messages to reply

Re:_List_Question?

2014-11-14 Thread robert
OK, I removed my work email address from my account, then I tried to create a new account using my work email address, but it won't let me. It says I'm already listed. Apparently it removed my work email address from my profile so I can't see it anymore, but it still has it stored somewhere

Advise in optimizing an application

2014-11-14 Thread Les Mizzell
Evening, I'm still fighting with my Excel Import application a bit. Basically, it works pretty well, as long as there's a limited number of records being imported. Problem is, the client tried to import a list with almost 15,000 addresses today, and it eventually timed out or the server reset

Re: Is time for a change?

2014-11-13 Thread Michael Grant
spoken like a true programmer. It's not a big it's a feature. On Tuesday, November 11, 2014, Matt Quackenbush quackfu...@gmail.com wrote: On Tue, Nov 11, 2014 at 9:56 AM, Matt Quackenbush quackfu...@gmail.com javascript:; wrote: and riddled with security features LMAO. And by

Re: CF9.02 administrator hack

2014-11-13 Thread Tom McNeer
Wil - understood. I just appreciate the fact that so many people are willing to help. And I apologize for panicking over what was just a fairly simple local virus (now removed). But when you're working on a server that runs critical sites for one of your clients, and you start seeing injections

scheduled task save output to a network share

2014-11-12 Thread marc --
Hello, ColdFusion 10,286680 running on a Windows 2012R2 machine. I want to create a Scheduled Task. The output should be saved to a file on a network share. The network share is accessible via Windows explorer: either using the UNC notation (\\network_share) or via a mapping (F:). When I

Re: scheduled task save output to a network share

2014-11-12 Thread Russ Michaels
Are you still running cf under the system account? If so then this is why, and is also insecure. You need to run cf as a user who has access to the network share. If you are still running an out of the box install then you should also follow the lock down guide. On Wed, Nov 12, 2014 at 9:15 AM,

Re: scheduled task save output to a network share

2014-11-12 Thread marc --
Are you still running cf under the system account? If so then this is why, and is also insecure. I forgot to add, CF10 is _not_ running under the local system acct - it runs as a dedicated user that has access to the share. I found a solution already: file:

cfpdf package

2014-11-12 Thread Tim Do
Has anyone had any success using pdf packages and displaying it in any browsers other than ie 8? I'm generating a pdf from cfpdf with package=yes. The pdf opens in acrobat and ie8 but not in chrome,ff and ie9 and later. Thanks in advance, Tim Sample disclaimer

Re: cfpdf package

2014-11-12 Thread Dave Watts
Has anyone had any success using pdf packages and displaying it in any browsers other than ie 8? I'm generating a pdf from cfpdf with package=yes. The pdf opens in acrobat and ie8 but not in chrome,ff and ie9 and later. I don't think the built-in PDF viewers used by most browsers will

CF9.02 administrator hack

2014-11-12 Thread Tom McNeer
Hi, I've just discovered that one of my servers, running 9.02, has been hacked. I'm not sure of the update level, because the hack is visible in the administrator and prevents its use. It's not the old h.cfm hack. I haven't been able to find any references to what I'm seeing, but I hope someone

FW: CF9.02 administrator hack

2014-11-12 Thread Mark A Kruger
Tom, My one questions is you say that view source is identical from a hacked and non hacked server - that seems odd. There are a number of hacks that could produce results that manipulate your files by adding content. This one uses the missing file handler:

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Tom McNeer
Hi Mark, On Wed, Nov 12, 2014 at 12:33 PM, Mark A Kruger mkru...@cfwebtools.com wrote: My one questions is you say that view source is identical from a hacked and non hacked server - that seems odd. Extremely. That's why I mentioned it. I both looked through the source in a browser and

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Dave Watts
My one questions is you say that view source is identical from a hacked and non hacked server - that seems odd. There are a number of hacks that could produce results that manipulate your files by adding content. Not necessarily. There's no reason that content can't be injected at serve

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Dave Watts
Obviously, I still hope someone has seen a similar attack, because I'm not all that relieved that the symptom has gone away. Honestly, I would assume the worst, and do the following. Back up server settings and the source files themselves, review the server settings manually, review the source

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Claude Schnéegans
There's no reason that content can't be injected at serve time. In this case, there would be a difference in the files delivered to the visitor. IMO the hack is in the browser, not on the server. ~| Order the Adobe Coldfusion

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Dave Watts
There's no reason that content can't be injected at serve time. In this case, there would be a difference in the files delivered to the visitor. IMO the hack is in the browser, not on the server. Yes, I missed the reference by the original poster about using view source. If that's the

RE: FW: CF9.02 administrator hack

2014-11-12 Thread Mark A Kruger
Claude, The idea that there's no visible indication in the view source makes me consider that as well - but why would it just appear on a login page for the cfadmin? Perhaps it looks for specific form field names and throws up the java out of date message to prey on fears of folks logging in to

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Dave Watts
The idea that there's no visible indication in the view source makes me consider that as well - but why would it just appear on a login page for the cfadmin? Perhaps it looks for specific form field names and throws up the java out of date message to prey on fears of folks logging in to

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Claude Schnéegans
but why would it just appear on a login page for the cfadmin? Who knows what may happen or not happen in some hacker's mind ? ;-) Perhaps it looks for specific form field names ... especially input fields of type PASSWORD! The hacker may be more interested in getting access to the CF

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Claude Schnéegans
One is that, while it doesn't show up in the view source for a given page, a JS library referenced in the page has been compromised to rewrite page content. Of course, this is quite possible in theory, however it would imply that the hacker has already hacked the server, and one could ask what

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Tom McNeer
I appreciate all the suggestions - and I especially appreciate when you step in, Dave. Certainly, I'm considering a clean installation. But as a followup: Dave's comment about the problem is almost certainly in the browser itself or some other piece of malware installed on the client brings up

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Tom McNeer
One more followup: whatever this is, it isn't related to CF. I jumped to the wrong conclusion. The problem reappeared when I was in the CF admin page, long after I'd logged on. But then I opened another browser and purposely asked for a local page that didn't exist. The IIS error page contained

Re: CF9.02 administrator hack

2014-11-12 Thread Wil Genovese
Tom, Stop and go back to the CF Admin and check the setting for Missing Template Handler. Make sure its blank or is actually pointing to a valid missing template handler page that you setup. This blog post is why I mention that.

Re: CF9.02 administrator hack

2014-11-12 Thread Pete Freitag
Most likely a virus / malware on your computer, not the server: https://www.google.com/search?q= Your+Java+version+is+outdated%2C+have+security+risks -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting Products http://hackmycf.com - Is your ColdFusion

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Dave Watts
One is that, while it doesn't show up in the view source for a given page, a JS library referenced in the page has been compromised to rewrite page content. Of course, this is quite possible in theory, however it would imply that the hacker has already hacked the server, and one could

Re: FW: CF9.02 administrator hack

2014-11-12 Thread Tom McNeer
Wil, Thanks. I'd already checked that. Mark chimed in earlier, and it's his post. Pete, Thanks. I was so concerned that the server was compromised in a way that would affect its performance as a server, I hadn't had a chance to start googling the text itself. And Dave, Thanks again. Yes,

Re: CF9.02 administrator hack

2014-11-12 Thread Wil Genovese
Tom - I missed the email that Mark sent with that same blog post (which was written by me). Mark and I tag team this stuff regularly. Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com wilg...@trunkful.com www.trunkful.com On Nov 12, 2014, at

RE: Redirects

2014-11-11 Thread Steve LaBadie
I have over 400 redirects that have to be recreated and I am always adding more. Steve LaBadie, Web Manager East Stroudsburg University 570-422-3999 slaba...@esu.edu -Original Message- From: Michael Grant [mailto:mgr...@modus.bz] Sent: Monday, November 10, 2014 9:28 PM To:

Re: Redirects

2014-11-11 Thread Byron Mann
With that many I might look into using some sort of command line script to manage. Here's a thread with a simple example on using appcmd for IIS to create a rewrite rule. http://stackoverflow.com/questions/19091661/urlrewrite-via-appcmd On Tue, Nov 11, 2014 at 8:36 AM, Steve LaBadie

RE: Is time for a change?

2014-11-11 Thread Jenny Gavin-Wear
I'd be interested to know which route you decide to take. I stopped taking on new clients about 2 years ago. I now look after only 3 and their bandwidth requirements are small. They've all been with me for a very long time and do produce a useful bit of income. My setup now is a windows 2003

Re: Is time for a change?

2014-11-11 Thread Matt Quackenbush
While there might not be features you're compelled to upgrade to get, security *should* be something of concern. CF7 is ancient, completely unsupported, and riddled with security features. That said, I cannot in good conscience recommend paying for a CF license, no matter what version or what

Re: Is time for a change?

2014-11-11 Thread Matt Quackenbush
On Tue, Nov 11, 2014 at 9:56 AM, Matt Quackenbush quackfu...@gmail.com wrote: and riddled with security features LMAO. And by security features I, of course, actually meant security HOLES. :P ~| Order the Adobe Coldfusion

RE: Redirects

2014-11-11 Thread Steve LaBadie
Byron, Looks like this is the route I am taking. Thanks for your suggestion and thanks to everyone that contributed to this thread. BTW- the mainframe was returned several years ago. Steve LaBadie, Web Manager East Stroudsburg University 570-422-3999 slaba...@esu.edu -Original

Re: Is time for a change?

2014-11-11 Thread Dave Watts
Ideally I'd like to get everything shifted to a VPS, but would I be able to run these old applications? And where could I get an inexpensive yet reliable service? If your primary goal is just to get this infrastructure out of your garage, you could set it up in Amazon. It's not going to be

Re: Is time for a change?

2014-11-11 Thread Russ Michaels
you are using 2 EOL products there which are no longer supported or updated, CF7 and SQL 2000 Windows Server 2003 is EOL in about 7 months, so you will not get any updates for that either beyond that date. If you are hosting this off your ADSL, then that presumably means no firewall other than

Re: IIS 8.5 truncating file download

2014-11-10 Thread Russ Michaels
Try setting the maxAllowedContentLength in your web.config On Mon, Nov 10, 2014 at 2:44 AM, John Blayter jblay...@gmail.com wrote: Yes there is a mismatch on the Content-Length variable. I tried setting it manually without any luck. cfset variables.temporaryFilePath =

Re: Scheduled Tasks Error

2014-11-10 Thread John M Bliss
Only by restoring from backup. No clue as to root-cause / preventing it from happening again. On Sun, Nov 9, 2014 at 6:37 PM, Sebastian Powell bas...@gmail.com wrote: [crickets] :-) -- John Bliss - http://www.linkedin.com/in/jbliss I am experiencing the same issue on CF 11,

Re: Scheduled Tasks Error

2014-11-10 Thread Byron Mann
I've seen this before when the CF service suddenly terminates. Could be the service terminated during an update to the xml file rendering it empty. A subsequent restart of CF may have created a backup of the xml file before stopping, rendering the bak file empty as well. We moved to clustered

Re: Scheduled Tasks Error

2014-11-10 Thread Russ Michaels
is this a new feature in CF10/11 to install the tasks in DB ? On Mon, Nov 10, 2014 at 1:37 PM, Byron Mann byronos...@gmail.com wrote: I've seen this before when the CF service suddenly terminates. Could be the service terminated during an update to the xml file rendering it empty. A

Re: Scheduled Tasks Error

2014-11-10 Thread Byron Mann
This was a new feature implemented in CF10. There were a ton of improvements to scheduling for that release. http://help.adobe.com/en_US/ColdFusion/10.0/Developing/WSe61e35da8d31851899e53a51353e870493-8000.html On Mon, Nov 10, 2014 at 9:08 AM, Russ Michaels r...@michaels.me.uk wrote: is

Re: Scheduled Tasks Error

2014-11-10 Thread Russ Michaels
cool, it was about time. I haven't really bothered with CF since CF9 since I use Railo for everything now. On Mon, Nov 10, 2014 at 2:11 PM, Byron Mann byronos...@gmail.com wrote: This was a new feature implemented in CF10. There were a ton of improvements to scheduling for that release.

Redirects

2014-11-10 Thread Steve LaBadie
We are currently using a meta date redirect from a UNIX box. The redirects currently sit on www and the production server sit at www4. We are taking down www so the redirects have to be recreated on our new production server which will be taking www. Current redirect structure: HTML BODY META

Re: Redirects

2014-11-10 Thread John M Bliss
Not sure I understand your question. Check out https://wikidocs.adobe.com/wiki/display/coldfusionen/cflocation On Mon, Nov 10, 2014 at 3:39 PM, Steve LaBadie slaba...@po-box.esu.edu wrote: We are currently using a meta date redirect from a UNIX box. The redirects currently sit on www and the

RE: Redirects

2014-11-10 Thread William Seiter
Unless you need these redirects to be dynamically controlled by a datasource, I would handle them outside of CF. You could use a mod_rewrite on the server or even a virtual directory. If you are determined to utilize CF for this, look into the cflocation tag.

Re: Redirects

2014-11-10 Thread Jon Clausen
Sorry: typo. You should use a 307 status code for temporary redirects. Jon On Nov 10, 2014, at 3:53 PM, Jon Clausen jon_clau...@silowebworks.com wrote: Is the current “www4” a Linux or Windows machine? I would suggest handling those at the web server level, with a 303 status code to let

RE: Redirects

2014-11-10 Thread Steve LaBadie
www4 is a windows box Steve LaBadie, Web Manager East Stroudsburg University 570-422-3999 slaba...@esu.edu -Original Message- From: Jon Clausen [mailto:jon_clau...@silowebworks.com] Sent: Monday, November 10, 2014 3:54 PM To: cf-talk Subject: Re: Redirects Is the current www4

Re: Redirects

2014-11-10 Thread Jon Clausen
Then use the Linux mod_rewrite redirect below on the current “www” box and you should be good to go. Since you’ve got Linux on www, you could also install NGINX (which makes a great HTTP proxy server) or use Apache to proxy traffic to ww4 while maintaining the “www” in the URL. You’ll need

RE: Redirects

2014-11-10 Thread Steve LaBadie
The Unix box (www) is going away and the www4 (windows box) will be renamed www. I need to be able to recreate the directory without making a mess out of the new server directory structure. I thought about creating a www folder and putting all of the redirects/forwards in it. Is this

Re: Redirects

2014-11-10 Thread Russ Michaels
Is there a specific reason you are not using url rewrite? On Mon, Nov 10, 2014 at 21:17 PM, Steve LaBadie slaba...@po-box.esu.edu wrote: The Unix box (www) is going away and the www4 (windows box) will be renamed www. I need to be able to recreate the directory without making a mess out of

RE: Redirects

2014-11-10 Thread Steve LaBadie
I didn't give it any thought. Steve LaBadie, Web Manager East Stroudsburg University 570-422-3999 slaba...@esu.edu -Original Message- From: Russ Michaels [mailto:r...@michaels.me.uk] Sent: Monday, November 10, 2014 4:21 PM To: cf-talk Subject: Re: Redirects Is there a specific

Re: Redirects

2014-11-10 Thread Jon Clausen
Can’t you just put an .htaccess file in the directory and use mod_rewrite to handle all of the redirects in the short-term? You can certainly recreate the physical files and have redirect code in place, if you want to, but the mod_rewrite will save you a lot of time and will be faster. If

Re: Redirects

2014-11-10 Thread Jon Clausen
Is the current “www4” a Linux or Windows machine? I would suggest handling those at the web server level, with a 303 status code to let the search engines know the redirect is temporary, rather than through the application - with the exception of perhaps some dynamic redirects that need to be

List_Question?

2014-11-10 Thread robert
I recently move to a new company and updated my profile to have my work email as my second email address in my profile. I'm not getting any list email to the secondary address. How do I correct that? I want list mail to go to both email addresses. Thanks, Robert

Re: List_Question?

2014-11-10 Thread Bryan Stevenson
May be best to send that question directly to the list owner Michael Dinowitz - pretty sure his e-mail is available at houseoffusion.com *Bryan Stevenson*B.Comm. President CEO Electric Edge Systems Group Inc. - makers of FACTS^(TM) phone: 250.480.0642 cell: 250.920.8830 e-mail:

Re: Redirects

2014-11-10 Thread Russ Michaels
I would suggest doing so now then as it is a more efficient solution than using meta refresh tags. On Mon, Nov 10, 2014 at 21:22 PM, Steve LaBadie slaba...@po-box.esu.edu wrote: I didn't give it any thought. Steve LaBadie, Web Manager East Stroudsburg University 570-422-3999 slaba...@esu.edu

Re: Redirects

2014-11-10 Thread Michael Grant
Plus meta refresh is awful for SEO. Though that might not be a problem for you. On Monday, November 10, 2014, Russ Michaels r...@michaels.me.uk wrote: I would suggest doing so now then as it is a more efficient solution than using meta refresh tags. On Mon, Nov 10, 2014 at 21:22 PM, Steve

Re: Redirects

2014-11-10 Thread Byron Mann
Is the site coded in a manner where it is not using absolute paths for anything? If this is the case, the new server can probably just have a virtual directory in IIS off the root for /police, that points to the physical path for about/offices/police And by the way, I hope you are not using the

IIS 8.5 truncating file download

2014-11-09 Thread John Blayter
I am doing a server migration to IIS 8.5 and CF10 and having some issues delivering PDF files. I tried the code using the built in web server and it works without issue so I know the issue is in IIS somewhere. Basically what happens is it truncates the PDF file to the first 749 bytes. I have

Re: IIS 8.5 truncating file download

2014-11-09 Thread Russ Michaels
I would check the response headers for any hints, you may be getting a mismatch with the expected content length. Also, take a look at this setting in IIS and see if disabling it helps: http://screencast.com/t/H03SiWuabri If so, then you may just need to tweak the value. On Sun, Nov 9, 2014 at

Re: Scheduled Tasks Error

2014-11-09 Thread Sebastian Powell
[crickets] :-) -- John Bliss - http://www.linkedin.com/in/jbliss I am experiencing the same issue on CF 11, neo-cron.xml all the scedheuled task vanished. and its an empty file. Did you manage to resolve this? ~|

Re: Scheduled Tasks Error

2014-11-09 Thread Bryan Stevenson
Weekend ;-) chirp chirp *Bryan Stevenson*B.Comm. President CEO Electric Edge Systems Group Inc. - makers of FACTS^(TM) phone: 250.480.0642 cell: 250.920.8830 e-mail: br...@electricedgesystems.com mailto:br...@electricedgesystems.com web: www.electricedgesystems.com

Re: Scheduled Tasks Error

2014-11-09 Thread Russ Michaels
if you just restore that file from your backups, then everything should be good again :-) On Sun, Nov 9, 2014 at 11:37 PM, Sebastian Powell bas...@gmail.com wrote: [crickets] :-) -- John Bliss - http://www.linkedin.com/in/jbliss I am experiencing the same issue on CF 11,

Re: IIS 8.5 truncating file download

2014-11-09 Thread John Blayter
Yes there is a mismatch on the Content-Length variable. I tried setting it manually without any luck. cfset variables.temporaryFilePath = C:\inetpub\wwwroot\MyPDF.pdf cfheader name=Content-Length value=#getFileInfo(variables.temporaryFilePath).size#/ cfheader name=X-Content-Length

Re: IIS 8.5 truncating file download

2014-11-09 Thread Andrew Scott
Try this instead of that. cfcontent type = text/html file = C:\CFusion\wwwroot\myapps\cfcontent_message.htm deleteFile = No Regards, Andrew Scott WebSite: http://www.andyscott.id.au/ Google+: http://plus.google.com/113032480415921517411 On Mon, Nov 10, 2014 at 1:44 PM, John

Is time for a change?

2014-11-07 Thread Rick Eidson
Anyone using Hostek? I have been with them for. well a long time. But in the last year it seems there have been more problems than ever. I really hate the idea of moving all my clients but I am wondering if in the long run will I be better off. Any thoughts? Rick

Re: Is time for a change?

2014-11-07 Thread Matt Quackenbush
I only have one response when people are looking for CFML hosting. Use Vivio! https://www.viviotech.net/ I was once told, If you have nothing good to say, say nothing at all. As such, I'll refrain from commenting on any other CFML host. :-) On Fri, Nov 7, 2014 at 1:15 PM, Rick Eidson

Re: Is time for a change?

2014-11-07 Thread Wil Genovese
I’m working with Hostek for a client and so far they’ve been great. What issues are you seeing? Have you talked to them? They’ve been very responsive to our clients needs and requests. Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com

Re: Is time for a change?

2014-11-07 Thread Kelly Matthews
Agreed! Vivio rocks! I have had no problems with them for years and years. Very awesome support as well. On Nov 7, 2014, at 2:20 PM, Matt Quackenbush quackfu...@gmail.com wrote: I only have one response when people are looking for CFML hosting. Use Vivio! https://www.viviotech.net/

RE: Is time for a change?

2014-11-07 Thread Eric Roberts
I have been using them for several years with a number of clients and haven't had any issues. -Original Message- From: Rick Eidson [mailto:cfh...@kchost.net] Sent: Friday, November 07, 2014 1:16 PM To: cf-talk Subject: Is time for a change? Anyone using Hostek? I have been with them

Re: Is time for a change?

2014-11-07 Thread Russ Michaels
what often happens is that some clients will have a couple of issues and will suddenly forget how many years of GREAT service they have had and threaten to leave at the drop of hat. So if you have been happen with them till now, then at least talk to them about your issues. You did not mention

RE: Is time for a change?

2014-11-07 Thread Rick Eidson
Mail Servers going down, Web servers going down seams the turnaround isn't as quick as it used to be. I was wondering if they may have been purchased by someone else. I have a particular client that seems every time I turn around their services aren't working. They are about to bail. I don't have

Re: Is time for a change?

2014-11-07 Thread Stephen Hait
I moved a client to Hostek from Newtek/Chrystaltech earlier this year and it has been a big improvement. On Fri, Nov 7, 2014 at 2:15 PM, Rick Eidson cfh...@kchost.net wrote: Anyone using Hostek? I have been with them for. well a long time. But in the last year it seems there have been more

Re: Is time for a change?

2014-11-07 Thread Jon Cavanaugh
Thanks Russ and Wil for the nice comments. We understand that any hosting issues can be concerning. This year we've faced many challenges, and have been aggressive about resolving them. We never want a customer to feel like they have to look elsewhere so if there's something I can do for you

Re: Is time for a change?

2014-11-07 Thread Bryan Stevenson
Yep Jordan and crew at Vivio are simply the best I've ever worked with at a hosting company -full stop *Bryan Stevenson*B.Comm. President CEO Electric Edge Systems Group Inc. - makers of FACTS^(TM) phone: 250.480.0642 cell: 250.920.8830 e-mail: br...@electricedgesystems.com

Re: Is time for a change?

2014-11-07 Thread Money Pit
Could not agree more with Russ' comments on CF hosting in his blog. I'll never go back to shared hosting. I've got a couple of Viviotech VPS' that I'm pretty happy with. One runs my personal stuff and old web site from when I was a developer. Another runs about 30 low-traffic sites that work

RE: Is time for a change?

2014-11-07 Thread Rick Eidson
Lots of great responses... Like I said I really hate the idea of moving. The VPS sounds interesting and I believe Hostek offers that as well as dedicated. I have a pretty large SQL Server database with them now for my largest client and its probably going to grow. I only have about 25 domains 1

Re: Is time for a change?

2014-11-07 Thread Russ Michaels
Ideally you need 1 VPs for each service, web db and mail, plus you would need a smartermail license, unless hostek are a bundle provider in which case you can get a free 250 user license with the VPS. Running a mail server is way more work than people realise though, it is not just keeping it

RE: Is time for a change?

2014-11-07 Thread Rick Eidson
Oh I know all about the email hosting.. .Before I moved to Hostek I had a T1 line into my basement. Did all my own hosting, I had 2 server cabinets with all Dells...(I still have them) pretty good setup. I started my company with that and then the T1 became outdated and very expensive. I used

Re: Non-profit donation providers

2014-11-05 Thread Mike K
I have dealt with Paypal in the past in a position similar to Al's.They are totally impenetrable when it comes to discussing anything.There is no way to get in contact with any human about anything. All you ever get is a form letter related to the first word the automated support system

RE: cfqueryparam EncodeForHTML

2014-11-04 Thread Stephens, Larry V
I did - many times before I sent the message. So, explain, please. From CF: (cfqueryparam) Verifies the data type of a query parameter ... My example is a text field. The potential inject/bad data language is text. I just tested it and cfqueryparam did not prevent me from entering potentially

Re: cfqueryparam EncodeForHTML

2014-11-04 Thread Byron Mann
cfqueryparam will not prevent the malicious data from getting entered into the table. However it does prevent the malicious text from executing as T-SQL. cfqueryparam does not parse or cleanse data in any way. Basically it passes the text as a variable to the sql statement. Thus preventing any

Re: cfqueryparam EncodeForHTML

2014-11-04 Thread Dave Watts
Text input field Entry is Johnson Johnson's I store it in a table using cfqueryparam. All is good. Let's say the hacked entry is Johnson Johnson's;delete * (or something akin to that - you get the drift) I use cfqueryparam but it won't catch the hack; it's still just a string.

Re: cfqueryparam EncodeForHTML

2014-11-04 Thread Claude Schnéegans
Like querying malicious data and using it in another cfquery without cfqueryparam. As an extra safety feature, if your application does not use multiSQL statements at all, and depending on the type of database engine used, you could also streatly deactivate the multi statement facility. If

Re: cfqueryparam EncodeForHTML

2014-11-04 Thread Russ Michaels
what you really need is a Web Application Firewall which will clean all form and url params and strip out anything dodgy. There are plenty of generic web server WAF's, or if you want a CF specific solution then try FuseGuard. On Tue, Nov 4, 2014 at 5:26 PM, wrote: Like querying malicious

Re: cfqueryparam EncodeForHTML

2014-11-04 Thread Pete Freitag
cfqueryparam and EncodeForHTML are used to prevent two different types of attack. cfqueryparam is for SQL injection attacks, as Byron explained. EncodeForHTML is used to prevent cross site scripting attacks (it does not prevent/escape sql injection), which exist when the attacker can execute

Re: Non-profit donation providers

2014-11-04 Thread Rob Voyle
Hi Al Thanks for this. I will pass the info on to the group I am working with. Rob On 2 Nov 2014 at 11:16, Al Musella, DPM wrote: I use paypal.. Couldn't be easier, and they give a discount on the rates to nonprofits... however, there is one big problem... Bad people have been

CommonSpot question

2014-11-03 Thread Scott Stewart
Hey all, I know there's at least a couple of CommonSpot users on here, who might be able to answer a question.. :) Is there a way to restrict what a CommonSpot Authoring server pushes to the ROP servers? My government client is having an issue where a web.config file is getting pushed up to

cfqueryparam EncodeForHTML

2014-11-03 Thread Stephens, Larry V
Text input field Entry is Johnson Johnson's I store it in a table using cfqueryparam. All is good. Let's say the hacked entry is Johnson Johnson's;delete * (or something akin to that - you get the drift) I use cfqueryparam but it won't catch the hack; it's still just a string. At some

Re: Non-profit donation providers

2014-11-03 Thread Al Musella, DPM
I use paypal.. Couldn't be easier, and they give a discount on the rates to nonprofits... however, there is one big problem... Bad people have been using my donation form to test stolen credit cards. They use the stolen credit cards to make a small donation to see if the cards work. I

Using HighCharts.js with cfdocument

2014-11-03 Thread Dan Murphy
Does anyone have experience getting HighCharts.js to work with cfdocument? We would like to display the charts on printed reports or emails and are not sure if we should go the Phantom.js route that it (briefly) describes within the HighCharts.js documentation or if there are other options

Re: cfqueryparam EncodeForHTML

2014-11-03 Thread .jonah
Read up on how query param works. It will protect against Johnson Johnson's;delete * On 11/3/14, 12:41 PM, Stephens, Larry V wrote: Text input field Entry is Johnson Johnson's I store it in a table using cfqueryparam. All is good. Let's say the hacked entry is Johnson Johnson's;delete *

Re: cfqueryparam EncodeForHTML

2014-11-03 Thread Byron Mann
Larry, You are already using cfqueryparam so you are protected for the most part. I say most part, because you could still extract the data from the db and have bad consequences if you are not considerate of the underlying data and how you use it. Like querying malicious data and using it in

Re: Work Around for SSLv3 Vulnerability?

2014-11-01 Thread Michael Grant
Just a heads up to everyone, I'm still waiting to hear back from Newtek about whether they've reimported the certs and CA cert again. Once I have some news I'll post back. Thanks again everyone for your guidance. ~| Order the

Re: Work Around for SSLv3 Vulnerability?

2014-10-31 Thread Pete Freitag
The SSL handshake handled by the JVM (though there might be some config that takes place in the CF engine, not sure), Java 6 supports only TLS 1.0, java 7 adds support for TLS 1.1 and 1.2. The actual crypto parts of it is handled by the JCE (java cryptography engine) which if you are running

Re: Work Around for SSLv3 Vulnerability?

2014-10-31 Thread Russ Michaels
if upgrading to Java 7 solves the issue, do also note that this also breaks SOLR on CF9, or rather CF can no longer communicate with SOLR, so none of your colelctions will be accessible. I have contacted Adobe about this, but as usual no response, and with CF9 EOL pending I doubt they ever will.

<    4   5   6   7   8   9   10   11   12   13   >