Re: CF and PHP same server

2008-09-16 Thread James Holmes
PHP requires a single threaded webserver (as some of the libraries it runs aren't thread safe: http://neosmart.net/blog/2008/dont-believe-the-lies-php-isnt-thread-safe-yet/), so you need to run the Apache Prefork MPM. This is less than optimal for high volume sites, but it will work. On Wed, Sep 1

Re: SQL Server 2005 permission problems

2008-09-16 Thread James Buckingham
is is what I've got on my working DBs and it's fine! Any help would be appreciated. Cheers, James ~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doub

SQL Server 2005 permission problems

2008-09-16 Thread James Buckingham
h this DB is that it's been built from an SQL script rather than manually by me. I've changed the owner of the tables to DBO and apart from that I can think what else would be different. There isn't a lot on Google about this error message so I thought I'd see

Re: cfqueryparam - couple ofquestions from a problem that occured today...

2008-09-15 Thread James Holmes
It failed because with cfqueryparam you're binding thousands of variables into the statement as parameters, which is a Very Bad Thing (TM). If it's all against the same DB, use a subquery for your IN clause. It should perform much better than either of the current solutions. On Tue, Sep 16, 2008

Re: Coldfusion 8 on Ubuntu 8 but error loading admin

2008-09-14 Thread James Holmes
If you've used Apache then you need http://127.0.0.1/CFIDE/administrator/ as your admin location. On Sun, Sep 14, 2008 at 10:54 PM, Doug Brown <[EMAIL PROTECTED]> wrote: > Hi all, I have installed CF8.01 on Ubuntu 8.04 with mySql and Apache2 but > cannot seem to figure out why I cannot get the adm

Re: ColdFusion DSN Security

2008-09-13 Thread James Holmes
Try hosting with a company that has a clue and uses sandboxing? On Sun, Sep 14, 2008 at 1:55 AM, Meghna Chopra <[EMAIL PROTECTED]> wrote: > Thanks Bobby but the problem is that we use HELM Control Panel and it doesn't > allow created ColdFusion DSN with Database Username and password. So we have

Re: Coldfusion 8 developer edition installation issue

2008-09-12 Thread James Holmes
Is your Vista machine 32 bit or 64 bit? On Fri, Sep 12, 2008 at 3:29 PM, Bob Imperial <[EMAIL PROTECTED]> wrote: > I posted something here last week about this but never saw any response to my > post. I'm thinking maybe the subject line may have thrown some off so I'm > posting the issue again h

Re: redirecting cfmail to a different destination using CF

2008-09-11 Thread James Holmes
Search for it and find this?: http://subethasmtp.tigris.org/ http://subethasmtp.tigris.org/wiser.html On Fri, Sep 12, 2008 at 7:12 AM, Beru <[EMAIL PROTECTED]> wrote: > Denstar, I might be interested in this "subethasmtp", how do you use it? ~

Re: Does CF8 or CF8.1 have some sort of screen capture function?

2008-09-11 Thread James Holmes
No. Who's screen are you trying to capture? The server's or the client's? On Fri, Sep 12, 2008 at 11:26 AM, Don L <[EMAIL PROTECTED]> wrote: > A screen, be it, simple text or multmedia content or a mix of them, does the > current CF version have anything like CFscreenCapture something? I don't

Re: How NOT to Evaluate (moved from cfset so not to confuse topic)

2008-09-10 Thread James Holmes
So FORM[FORM.FIELD] didn't work instead of Evaluate("FORM.#FORM.Field#")? On Wed, Sep 10, 2008 at 11:03 PM, David Moore, Jr. wrote: > How then would you approach the following without Evaluate, because it was > the only way I could get it to work: (oh, let the fun begin, the shame. I > probabl

Re: cfajaxproxy: Object doesn't support this property or method

2008-09-08 Thread James Holmes
Have you used firebug to work out which methods the proxy object actually has? On Tue, Sep 9, 2008 at 9:19 AM, Brad Wood <[EMAIL PROTECTED]> wrote: > OK, I'm 0 for 2 now with the CF 8 Ajax stuff. I never did figure out why my > bind="cfc:etc.." would work and now cfajaxproxy is kicking my butt.

Re: mac address and additional protection

2008-09-08 Thread James Holmes
It's almost trivial to change the MAC address on a client. On Mon, Sep 8, 2008 at 8:49 PM, Richard White <[EMAIL PROTECTED]> wrote: > hi > > we have a debate that we need some expert advice on!!! > > our software is going to be used by university institutions. when tailoring > the package we want

multiple select drop down box and oracle dates

2008-09-05 Thread James Blaha
Hi Folks, I ran into an issue with a multiple select drop down box that has a list of dates i.e. mm/dd/. On my action page I have a cfquery that I would like to pass the list of dates to like: Mydates IN ('08/01/2008','08/02/2008',…) In oracle I need to do something like: TO_DATE('08/0

Re: Problem using duplicate() on xml data type

2008-09-02 Thread James Holmes
Is the duplicate() call inside the same exclusive lock? On Wed, Sep 3, 2008 at 8:44 AM, Mike Vierow <[EMAIL PROTECTED]> wrote: > For the past 16 months I've been reading an XML document with cffile and > parsing it into an application variable, all within an exclusive cflock > on the application s

Re: Coldfusion 8 Standard Edition & multiple sites

2008-09-01 Thread James Holmes
In CF 8 Standard, the SMS gateway is single threaded; it will only run in one request at a time. If your sites are low volume, this may be fine. If not, you'll need Enterprise. If you need to connect to Oracle, the drivers supplied with CF Enterprise have more features than the Oracle thin driver.

Re: Repost: Dynamically executing Beans, Gateways, DOA and Service objects.

2008-08-31 Thread James Holmes
n Mon, Sep 1, 2008 at 12:09 PM, Gerald Guido <[EMAIL PROTECTED]> wrote: >>>Use cfinvoke. > > Thanx James > > I thought about that, and you are right. But I was hoping to keep it in a > cfscript block. > > Is there a way to do that? This is more of an academic pu

Re: Repost: Dynamically executing Beans, Gateways, DOA and Service objects.

2008-08-31 Thread James Holmes
Use cfinvoke. This allows you to specify an arbitrary component and method to call. On Mon, Sep 1, 2008 at 11:24 AM, Gerald Guido <[EMAIL PROTECTED]> wrote: > > What I want to do is eliminate "evaluate" from the mix even though it seems > to me to be doing exactly what it was designed to do, much

Re: cfthread running condition?

2008-08-29 Thread James Holmes
Yeah, I've been wondering why this would use multiple threads when the aim is to deliberately single thread the execution. On Sat, Aug 30, 2008 at 12:44 PM, Mark Mandel wrote: > Silly question - why not just run the executing code you want to fire > to happen at the end of thread 1? It has exactly

Re: Details on CF9's "free for academic" licensing?

2008-08-29 Thread James Holmes
Flex builder is, however, free for any use by any member of an educational institution, so there's a difference. While I'd love to see a similar program for CF, I suspect the CF policy will provide only for teaching as has been discussed. On Sat, Aug 30, 2008 at 6:01 AM, Sean Corfield <[EMAIL PROT

Re: XML rendering issue

2008-08-26 Thread James Holmes
XMLFormat() takes care of escaping those characters and making them XML safe. On Tue, Aug 26, 2008 at 11:35 PM, Simon Bailey <[EMAIL PROTECTED]> wrote: > Hi all, > > I have this pain in the rear issue with cf generated xml... [snip] > > This still generates problems with certain characters such as

Re: PID errors - much simpler

2008-08-26 Thread James Wolfe
en go another 5,000 without issue. I dont know if that is a classic sign of the problem but I am interested in learning more about what you mean and how to debug it if you are correct. - James >Because the OP says they "get the crash once in every ~10,000 >attempts" which is probab

Re: PID errors - much simpler

2008-08-26 Thread James Wolfe
Brad, Do you know what it WAS related to? Do you make extensive use of ? - James >Yes, I've gotten them when JRUN had a hard crash, but it was never related >to image manipulation. > >~Brad ~| Adobe® ColdF

Re: PID errors - much simpler

2008-08-26 Thread James Wolfe
Dave, I believe that you are correct. I'm fairly certain that the prefix "hs_" is indicating that it was a HotSpot error. - James # Java VM: Java HotSpot(TM) Server VM (10.0-b19 mixed mode windows-x86) >> James, if the JVM crashes, it will certainly create a >> hs_e

Re: PID errors - much simpler

2008-08-25 Thread James Holmes
6, 2008 at 9:46 AM, Brad Wood <[EMAIL PROTECTED]> wrote: > James, if the JVM crashes, it will certainly create a hs_err_pid file, but > how do you know that the OP's problem is related to hotspot optimization? > The talkingtree post says nothing about image manipulation, and

Re: PID errors - much simpler

2008-08-25 Thread James Holmes
These crashes are related to JVM hotspot optimisation. http://www.talkingtree.com/blog/index.cfm/2004/5/21/hscrashlog0504 Try updating your JVM, if possible. On Tue, Aug 26, 2008 at 6:23 AM, James Wolfe <[EMAIL PROTECTED]> wrote: > OK, > > So it appears I went a little too s

passing array from coldfusion to .NET web service

2008-08-25 Thread james carberry
Having problem passing complex data (i.e. an array) to a web service authored in .NET that expects data of type "array". Code: passing array to web service == keep getting the famous error - Web service operation ProcessMember

PID errors - much simpler

2008-08-25 Thread James Wolfe
OK, So it appears I went a little too specific with my previous question. Here is a simpler version: Does anyone have files that look like this: hs_err_pid.log ( can be any number) in the following folder: c:\coldfusion8\runtime\bin ~~~

PID errors (and cfImage or CFX_imageCR3)

2008-08-25 Thread James Wolfe
I have been working to debug some problems that my server has been getting intermittently and I wanted to know how common the problem is. We have been getting "small" coldfusion crashes (where CF restarts automatically) periodically on a couple of our servers and I think I have linked it to the

Re: Does anyone here use @wiki ?

2008-08-23 Thread James Holmes
other CF >> stuff is hosted these days? That gives you a wiki out of the box. > > Thanks James. These projects actually are on RIAForge as is and they > have wikis there. The issue with the RIAForge wiki is that nobody but > the project owner can edit them right now, which

Re: Does anyone here use @wiki ?

2008-08-22 Thread James Holmes
How about making the app available on riaforge where all the other CF stuff is hosted these days? That gives you a wiki out of the box. On Sat, Aug 23, 2008 at 4:58 AM, s. isaac dealey <[EMAIL PROTECTED]> wrote: > Does anyone here use @wiki ( http://atwiki.com ) ? > > Any thoughts about the servic

Re: CFC Best Practices

2008-08-19 Thread James Holmes
http://livedocs.adobe.com/coldfusion/8/htmldocs/Tags_p-q_17.html "result_name.ROWID; Oracle only. The ID of an inserted row. This is not the primary key of the row, although you can retrieve rows based on this ID." This means we can now insert a row and then query the DB on the ROWID to get the n

Re: Web Service Issue , pls help

2008-08-19 Thread James Holmes
Yeah I've been messing with this and I have it working but only after writing my own WSDL to get around this error: org.xml.sax.SAXException: Found character data inside an array element while deserializing Anyway, use a username of "any" and password of "any" as per their PHP example. The chang

Re: Web Service Issue , pls help

2008-08-19 Thread James Holmes
It would be a lot easier to respond if you provided some details. What is not working? Post some code. Do you get an error? If so, what does the error say? On Wed, Aug 20, 2008 at 9:50 AM, vishnu prasad <[EMAIL PROTECTED]> wrote: > Hi Dave > > I dont have a web service code , i tried to access th

Re: CFC Best Practices

2008-08-19 Thread James Holmes
You can generally avoid the problem with a cftransaction tag if you're doing the MAX(id) thing, but the other solutions are better (especially the new CF8 goodies which, for example, are a life saver for Oracle). On Tue, Aug 19, 2008 at 11:12 PM, Scott Stewart <[EMAIL PROTECTED]> wrote: > " > > Be

Re: Details on CF9's "free for academic" licensing?

2008-08-19 Thread James Holmes
The students can also use CF Developer edition for free at home or on their laptops with no licensing problems. On Tue, Aug 19, 2008 at 3:33 PM, Chris Blackwell <[EMAIL PROTECTED]> wrote: > If you're after a free CF engine, why not use Open Blue Dragon. It has > everything you need to teach your

Re: Form submission issue

2008-08-18 Thread James Holmes
No, in IE6 the submit button is not part of the form submission if the enter key is used. I'd use a hidden field and check for that instead of the submit button. On Mon, Aug 18, 2008 at 3:12 PM, Andrew Scott <[EMAIL PROTECTED]> wrote: > Are you using the onsubmit in the form tag? > > Maybe some m

Re: CFContent tag

2008-08-16 Thread James Holmes
First, check that your datasource has the "enable BLOB" checkbox ticked. On Sun, Aug 17, 2008 at 11:44 AM, Nathan Chen wrote: > Hi, All: > > I have a query that selects a BLOB field (embedded file) from a table. > Then I use cfcontent to output the string to the browser. The code has > running fin

Re: SQL injection attack on House of Fusion

2008-08-16 Thread James Holmes
So for six months you've known the feature is coming yet you're still arguing about it now? Do you just like wasting people's time? On Sat, Aug 16, 2008 at 11:37 PM, Andrew Scott <[EMAIL PROTECTED]> wrote: > Man your about 6 months late with that news > -- mxAjax / CFAjax docs and other usef

Re: SQL injection attack on House of Fusion

2008-08-16 Thread James Holmes
You'll be happy to know that CF9 is rumoured to include Hibernate with a corresponding set of tags, so CF should indeed be able to deal with this under the hood. On Sat, Aug 16, 2008 at 11:12 PM, Andrew Scott <[EMAIL PROTECTED]> wrote: > -- > Senior Coldfusion Developer > Aegeon Pty. Ltd. > www.ae

Re: Free BlueDragon?

2008-08-16 Thread James Holmes
e Jrun Web connectors that > Coldfusion Standard uses to interface into Jrun on a standard install. But > it is still Jrun Application Server, dude. > > > -- > Senior Coldfusion Developer > Aegeon Pty. Ltd. > www.aegeon.com.au > Phone: +613 9015 8628 > Mobile: 0404 99

Re: Testing for existence of Java library?

2008-08-15 Thread James Holmes
Not when someone asks a Java question and not a JavaScript question. On Sat, Aug 16, 2008 at 12:21 PM, Andrew Scott <[EMAIL PROTECTED]> wrote: > I don't know but maybe something like this > > Try { >Var test = new Ext.GridPane(); > } catch (e) { >// Library not found > } > > I supp

Re: Free BlueDragon?

2008-08-15 Thread James Holmes
JRun Webserver is a webserver. You are talking about the JRun application server. The first is part of the second; JWS is only good for serving web pages and has none of the functionality a production webserver needs (like security, URL rewriting etc). On Sat, Aug 16, 2008 at 12:15 PM, Andrew Scot

Re: Lean, 'mean' cf8

2008-08-15 Thread James Holmes
That's how it works in JRun too. On Sat, Aug 16, 2008 at 9:13 AM, Daniel Jimenez <[EMAIL PROTECTED]> wrote: >> So don't use JRun then, CF8 is a proper J2EE app. > > In other J2EE servers you have to have a whole coldfusion instance running > for each WAR. Talk about a memory hog! -- mxAjax / C

Re: Free BlueDragon?

2008-08-15 Thread James Holmes
http://www.adobe.com/support/coldfusion/adv_development/config_builtin_webserver/index.html "Although you can use the ColdFusion MX built-in web server for developing, testing, and debugging ColdFusion applications, Macromedia does not recommend that you use it for deployment." That's from 2002.

Re: SOT: Using jQuery to access the JSON that CF8 returns?

2008-08-14 Thread James Holmes
You need to JSON.parse() the result. On Fri, Aug 15, 2008 at 12:39 AM, Andy Matthews <[EMAIL PROTECTED]> wrote: > I'm using jQuery to make a direct CFC call, with the optional returnFormat > parameter. > > Here's the get call: > > $.get("coupons.cfc?method=getSingleCoupon", {

Re: Apache + Virtual hosts with CF

2008-08-14 Thread James Holmes
Can you confirm what you've written in your hosts file? On Thu, Aug 14, 2008 at 11:02 PM, Stephen Adams <[EMAIL PROTECTED]> wrote: > Hi, > > I'm trying to set up VirtualHosts in apache for the cf sites I'm working on. > My setup so far is I have apache2.2.9 installed, with cf8 running on Vista >

Re: securing pdf's?

2008-08-14 Thread James Holmes
Huh? That article uses cfcontent, as everyone in the thread advised. On Thu, Aug 14, 2008 at 10:51 PM, Jessica Kennedy <[EMAIL PROTECTED]> wrote: > Thanks for all the tips! I was not able to change most of the pdf's to > cfcontent because the pdf's legally could not be altered; however, I found

Re: XMLSearch not thread safe

2008-08-11 Thread James Holmes
t; How bizarre! > > I wonder which would be faster, a lock around the parse, or > duplicating the XMDoc? > > Mark > > On Tue, Aug 12, 2008 at 1:25 PM, James Holmes <[EMAIL PROTECTED]> wrote: >> Our testing confirms your suspicions; a duplicate() seems to perform >&g

Re: XMLSearch not thread safe

2008-08-11 Thread James Holmes
Our testing confirms your suspicions; a duplicate() seems to perform better than re-parsing the XML string. We went with duplicate as a quick fix for our framework; if we find something better, we'll let everyone know. I voted for a fix in CF and I encourage others to do the same: http://www.ado

Re: SQL injection attack on House of Fusion

2008-08-11 Thread James Holmes
Interestingly, hibernate is one of the rumoured additions to CF9: http://www.barneyb.com/barneyblog/2008/06/19/cfunited-day-one/ etc On Tue, Aug 12, 2008 at 12:44 AM, Dave Watts <[EMAIL PROTECTED]> wrote: > > ColdFusion is a programming language, like Java. Just as Java doesn't come > with an OR

Re: Lean, 'mean' cf8

2008-08-11 Thread James Holmes
So don't use those features in your app and your app will have lower CPU requirements. On Tue, Aug 12, 2008 at 6:09 AM, Don L <[EMAIL PROTECTED]> wrote: > Lean: > Architechurally, ideally, developer has the option to pick what core features > or family/families to deploy for a given cf server ins

Re: Database Sessions

2008-08-11 Thread James Holmes
CF does conenctions two ways: 1) CF uses pooled connections if you have maintain connections checked for the datasource, This means a connection will stay open for quite some time, across multiple web requests. 2) If you don't maintain connections, CF opens a connection at the first cfquery tag a

Re: XMLSearch not thread safe

2008-08-08 Thread James Holmes
A duplicate() deep copy will work in a similar way to the XMLParse as you say. We're comparing various workarounds including duplicate() and reparsing. If anyone else gets the time to do this we can compare notes. On Fri, Aug 8, 2008 at 10:30 PM, Brad Wood <[EMAIL PROTECTED]> wrote:

Re: XMLSearch not thread safe

2008-08-08 Thread James Holmes
No, the same null pointer exception occurs (which you'd expect, since the search is being done on the same object and it's just the result that's duplicated). On Fri, Aug 8, 2008 at 6:37 PM, James Holmes <[EMAIL PROTECTED]> wrote: > I'll rerun the tests and let you

Re: XMLSearch not thread safe

2008-08-08 Thread James Holmes
I'll rerun the tests and let you know. On Fri, Aug 8, 2008 at 5:29 PM, Jochem van Dieten <[EMAIL PROTECTED]> wrote: > James Holmes wrote: >> Right, I can now screw up our XML searches at will. The bad news is >> the same thing happens in CF8.01 as well as CF 7

Re: XMLSearch not thread safe

2008-08-08 Thread James Holmes
following code provides thread safety (as it creates the XML object on each request): On Thu, Aug 7, 2008 at 11:50 PM, James Holmes <[EMAIL PROTECTED]> wrote: > Yes, the tests I'll be doing tomorrow will be with jmeter. I'll post > the results when we have them. > &g

Re: XMLSearch not thread safe

2008-08-07 Thread James Holmes
Yes, the tests I'll be doing tomorrow will be with jmeter. I'll post the results when we have them. On Thu, Aug 7, 2008 at 4:24 PM, Tom Chiverton <[EMAIL PROTECTED]> wrote: > On Wednesday 06 Aug 2008, Brad Wood wrote: >> iframes aren't good for load testing. Browsers like IE follow spec and >> on

Re: XMLSearch not thread safe

2008-08-06 Thread James Holmes
Was that in CF7 or 8? That's definitely the issue we and others see. On Thu, Aug 7, 2008 at 6:40 AM, Brad Wood wrote: > This put a giant light bulb over my head. I worked on an app at my last job > that would run concurrent xmlsearch's on a shared XML object in the > application scope. It alway

Re: XMLSearch not thread safe

2008-08-06 Thread James Holmes
I'm attempting to produce a simple, definitive test case based on code we know to cause the problem. I'll post it when it's done. On Wed, Aug 6, 2008 at 9:42 PM, Tom Chiverton <[EMAIL PROTECTED]> wrote: > On Wednesday 06 Aug 2008, James Holmes wrote: >> Does anyon

Re: XMLSearch not thread safe

2008-08-06 Thread James Holmes
Another reference: http://davequested.blogspot.com/2007_02_01_archive.html On Wed, Aug 6, 2008 at 7:54 PM, James Holmes <[EMAIL PROTECTED]> wrote: > This (old) post details it rather well: > > http://forums.devshed.com/coldfusion-development-84/caching-xml-in-cfcs-mx-7-prob

Re: XMLSearch not thread safe

2008-08-06 Thread James Holmes
t stored in the app scope, and thread B > modified the XML ob at the same time, I don't think I'd expect thread > A to have updated results, but rather the results that would have been > right at the time it began the search. > > On Wed, Aug 6, 2008 at 1:22 AM, James Holme

XMLSearch not thread safe

2008-08-05 Thread James Holmes
The CF7 version of XMLSearch() is not thread safe (as noted in the livedocs http://livedocs.adobe.com/coldfusion/7/htmldocs/0672.htm by a helpful person and confirmed by us on several unfortunate occasions over the last few days). Does anyone know if this is fixed in CF8? -- mxAjax / CFAjax

Re: securing pdf's?

2008-08-04 Thread James Holmes
Serve the docs using cfcontent and secure the folder from direct access using your webserver. On Tue, Aug 5, 2008 at 10:00 AM, Jessica Kennedy <[EMAIL PROTECTED]> wrote: > I have a directory of .pdf files nested within a secure section of my > website. However, the application is not firing when

Re: Null/empty values from the database.

2008-08-04 Thread James Holmes
On Mon, Aug 4, 2008 at 11:18 PM, Ioannis Papanikolaou <[EMAIL PROTECTED]> wrote: > Browser is throughing error "Variable RETURN is undefined " > however I know that if I my results from the DB are not empty the function > works. Right - you are in a cfoutput loop and when there are no result

Re: cfswitch

2008-08-04 Thread James Holmes
The docs are pretty clear (http://cfquickdocs.com/cf8/?getDoc=cfcase): "The value or values must be simple constants or constant expressions, not variables." On Mon, Aug 4, 2008 at 10:12 PM, Brian Dumbledore <[EMAIL PROTECTED]> wrote: > Can someone confirm that we cann't actually use variables i

Re: Reloading CFC's?

2008-08-03 Thread James Holmes
Is the CFC in the application scope? If so, you need to have some way of re-creating it in that scope. The restart you just did will have done this. It's better to do it programatically. On Sun, Aug 3, 2008 at 11:10 PM, Phillip M. Vector <[EMAIL PROTECTED]> wrote: > Strange. I unchecked it (thank

Re: cfflush in CF 8

2008-07-28 Thread James Holmes
Copy and paste the link carefully. The page is working fine. On Tue, Jul 29, 2008 at 10:23 AM, Wes Middendorff <[EMAIL PROTECTED]> wrote: > This link no longer works, does anyone know what this solution was supposed > to be? > > >> My solution for cfflush on CF8 with IIS: >> >> http://orangepips.

Re: CFajaxproxy VS AjaxCFC

2008-07-26 Thread James Holmes
It's returning a JSON string. use JSON.parse() on the string and you'll get a JavaScript object with arrays in it. On Sun, Jul 27, 2008 at 8:08 AM, Ioannis Papanikolaou <[EMAIL PROTECTED]> wrote: > Hello everyone, > > I have deside to use the new CFajaxproxy. > > The functionality is truly simple

Re: Is this a CF bug or just a Java behavior?

2008-07-25 Thread James Holmes
Did you just say you should NEVER do something? And you hassled us for NEVER doing a query without a cfqueryparam. Typical. On Sat, Jul 26, 2008 at 4:33 AM, Claude Schneegans wrote: > As a basic principle in programing, one should never (and I really mean > *never* ;-) > compare floating values,

Re: Is this a CF bug or just a Java behavior?

2008-07-25 Thread James Holmes
Add this to your demo: Is val(c) EQ val(6.2): #val(c) EQ val(6.2)# Val() sorts this out for you. On Sat, Jul 26, 2008 at 4:19 AM, Qasim Rasheed wrote: > One of my fellow developer discovered some weird behaviour with ColdFusion > number manipulation. Here is an example > > > > > > Value of

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-24 Thread James Holmes
Jeez, and value="URL.TryToHackThis" should be value="#URL.TryToHackThis#" That's what I get for answering at midnight. On Thu, Jul 24, 2008 at 11:57 PM, James Holmes <[EMAIL PROTECTED]> wrote: > Obviously cfsqltype="varchar" should be cfsqltype=&q

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-24 Thread James Holmes
Obviously cfsqltype="varchar" should be cfsqltype="cf_sql_varchar" (my typo). On Thu, Jul 24, 2008 at 11:55 PM, James Holmes <[EMAIL PROTECTED]> wrote: > I'll say it again. > > ANY string passed into cfqueryparam cannot be executed as SQL: > &

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-24 Thread James Holmes
I'll say it again. ANY string passed into cfqueryparam cannot be executed as SQL: select somecolumn from sometable where someothercolumn = It is irrelevant what gets passed in the URL.TryToHackThis; it cannot be executed as a SQL statement. It's bound to the query as a parameter. On Thu, Jul 2

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-24 Thread James Holmes
So you know that it *always* prevents SQL injection in a standard query (select, update or delete). That's a good enough reason to always use it for me. On Thu, Jul 24, 2008 at 10:58 PM, Claude Schneegans <[EMAIL PROTECTED]> wrote: > >>Do you fully understand what cfqueryparam does when binding t

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-24 Thread James Holmes
This is not the only case. If you use pooled statements on the datasource (which is a default for CF) you can demonstrate another case: Create a table. Select * from it in a CF template. Add a column to the table in the DB. Run the same template again. See the problem. On Thu, Jul 24, 2008 at 11:

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-24 Thread James Holmes
Do you fully understand what cfqueryparam does when binding text parameters into the query? On Thu, Jul 24, 2008 at 9:54 PM, Claude Schneegans <[EMAIL PROTECTED]> wrote: > 2. if both fields are text, CFQUERYPARAM won't detect anything harmful > and won't help anyway. -- mxAjax / CFAjax docs and

Re: Load testing software for website with AD integrated authenti cation

2008-07-24 Thread James Holmes
Your load testing tool, if it's worth anything, should come with a browser proxy that records everything you do and provides a script you can then edit and to which you can add username/password pairs from a text file. On Thu, Jul 24, 2008 at 8:35 PM, Burns, John D <[EMAIL PROTECTED]> wrote: > How

Re: Directory contents to list/array?

2008-07-23 Thread James Holmes
The query you get from cfdirectory is an array (or rather, its columns are): On Wed, Jul 23, 2008 at 10:05 PM, Melissa Cope <[EMAIL PROTECTED]> wrote: > Here's the story: We have about 20 logos. We want a random four displayed. In > and of itself this is not very complicated, but a third party

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-21 Thread james carberry
Just put the following line at the TOP of your application.cfm to innoculate your CF webs against this attack: peace, j >Just was looking at a 'user monitor' page on one of my sites and I saw the >url string below being called. I've seen several sql injection urls before, >but what the heck ar

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-21 Thread james carberry
Even easier than monkeying with every single one of your cfquery's just add following line to the TOP of all your application.cfm's: This will immediately shut down execution of any CFM that this piece of trash tries to invoke to execute this particular type of SQL for. peace, j >Just wa

Re: (ot) URL Hack Attempt Leaves Me Scractching My Head...

2008-07-21 Thread james carberry
>Just was looking at a 'user monitor' page on one of my sites and I saw the >url string below being called. I've seen several sql injection urls before, >but what the heck are they trying to accomplish here? Eeverything is >cfqueryparam'ed. Thanks, Che > >/rss.cfm?';DECLARE @S CHAR(4000);SET >@S=CA

Re: cfhttp: HTTPServerError

2008-07-17 Thread James Holmes
If you are running this in a CFC, have you var'd a "cfhttp" variable at the top of the method first? On Fri, Jul 18, 2008 at 4:57 AM, Scott Brady <[EMAIL PROTECTED]> wrote: > It looks like it's not cfhttp, but the fact that our code isn't > sending in the right parameters into the request. Not su

Re: Am I a thread or not ?

2008-07-15 Thread James Holmes
I'd use StructKeyExists(THREAD,"name"), as someone would be going out of their way to break their code by creating a struct called "thread" with a "name" key. On Tue, Jul 15, 2008 at 2:18 AM, Alan Rother <[EMAIL PROTECTED]> wrote: > Point taken... > > ASSUMING... You haven't explicitly defined the

Re: Components anomalies?

2008-07-15 Thread James Holmes
Did you specify output="no" in your component and the methods? On Mon, Jul 14, 2008 at 11:05 PM, Lawrence Mak <[EMAIL PROTECTED]> wrote: > Apparently it was the tag that put all those spaces in each layoutarea > and stopped a component binding cfgrid from working. I was even able to > reproduce

Re: CFDocument and border-collapse

2008-07-15 Thread James Holmes
Security via JavaScript; that is hilarious! On Tue, Jul 15, 2008 at 4:01 AM, Azadi Saryev <[EMAIL PROTECTED]> wrote: > just disable js in your browser and see all the answers. they are all > there, all the time (not just first time), way at the end of the page, > after all the "you need to be a me

Re: Little brainstorming help needed (developing email app)

2008-07-15 Thread James Holmes
I'd serve the images from a CF template that tracks the same URL variables. On Tue, Jul 15, 2008 at 5:35 AM, William Nichols <[EMAIL PROTECTED]> wrote: > Trackable links. I am imaging a link going to say > www.urlhere.com/filename.htm going to something like > www.urlhere.com?file=UNIQUE-PARAM

Re: Multiple queries from a CFC? Drop in Array?

2008-07-13 Thread James Holmes
I'd return a struct. Put each query result into one key of the struct. On Mon, Jul 14, 2008 at 12:43 PM, Ian Rutherford <[EMAIL PROTECTED]> wrote: > I am trying to move some of my database access to cfcs and am trying to > figure out how to get a set of five query results in a stored procedure ou

Re: cffile error: String index out of range: -1

2008-07-10 Thread James Holmes
The fileField parameter is incorrect - just use the name of the form element: fileField="fileName" On Thu, Jul 10, 2008 at 4:45 PM, Kamru Miah <[EMAIL PROTECTED]> wrote: > While using cffile upload, I seems to be getting 'String index out of range: > -1' after the file is placed in the applicati

Re: The error occurred on line -1

2008-07-09 Thread James Holmes
There are plenty of post 8.01 hotfixes: http://kb.adobe.com/selfservice/viewContent.do?externalId=kb402604 On Thu, Jul 10, 2008 at 6:55 AM, David Critchley <[EMAIL PROTECTED]> wrote: > We are upgrading to 8.0.1 now. Hopefully this addresses the problem, if not I > will post back here again. I di

Re: cfimage captcha problem - broken images SOMETIMES

2008-07-08 Thread James Holmes
Well, hitting the image URL directly: http://www.saline1990.com/CFFileServlet/_cf_captcha/_captcha_img1333627722341645062.png about half the time I get a 404 error and the other half I get an image. I guess that's where the problem lies, whatever it is. On Wed, Jul 9, 2008 at 9:42 AM, Rick Root

Re: Coldfusion restarting itself

2008-07-07 Thread James Holmes
Ah, sorry to hear that. Hopefully, a clean install of Enterprise helps. On Tue, Jul 8, 2008 at 11:07 AM, Rick Root <[EMAIL PROTECTED]> wrote: > Alright, I just "downgraded" to JVM 1.5_15 > > I re-enabled hotspot compilation (removed the -Xint arg) > > Had to delete all the existing class files in

Re: Coldfusion restarting itself

2008-07-07 Thread James Holmes
ce to give the 1.5 JDK a whirl like James suggested? > > Not yet. Personally, I'd like to avoid switching JDKs if possible. > 1.6 is the "Default" and I'm hoping to stick with it. -- mxAjax / CFAja

Re: Coldfusion restarting itself

2008-07-04 Thread James Holmes
>>> On Fri, Jul 4, 2008 at 8:41 PM, James Holmes <[EMAIL PROTECTED]> wrote: >>>> Have you cleared out the contents of the cfclasses folder? Try >>>> stopping CF, deleting everything in that folder >>>> (C:\CFusionMX\wwwroot\WEB-INF\cfclasses or th

Re: Coldfusion restarting itself

2008-07-04 Thread James Holmes
Have you cleared out the contents of the cfclasses folder? Try stopping CF, deleting everything in that folder (C:\CFusionMX\wwwroot\WEB-INF\cfclasses or the equivalent) and then starting CF. This might make the original error go away. On Sat, Jul 5, 2008 at 2:50 AM, Rick Root <[EMAIL PROTECTED]>

Re: Coldfusion restarting itself

2008-07-03 Thread James Holmes
Try using the JVM startup parameters described in the blog entry to see if that stops the issue from occurring. On Fri, Jul 4, 2008 at 12:08 PM, Rick Root <[EMAIL PROTECTED]> wrote: > This has happened twice in the last 5 minutes. Exact same issue as > described below. > > I have fusionreactor sy

Re: Coldfusion restarting itself

2008-07-03 Thread James Holmes
This looks like a bug in the Sun java hotspot compiler (the thing that converts Java bytecode into native code after a certain number of calls to the same class). http://www.talkingtree.com/blog/index.cfm/2006/4/28/Understanding-HotSpot-in-Plain-English On Fri, Jul 4, 2008 at 11:45 AM, Rick Root

Re: CF8 on SLES 10.2 - where is an updated glibc ?

2008-07-03 Thread James Holmes
l 3, 2008 at 11:44 PM, Tom Chiverton <[EMAIL PROTECTED]> wrote: > On Wednesday 02 Jul 2008, James Holmes wrote: >> I'll be watching this carefully - we've just deployed on SLES 32 bit >> because we were aware of this issue > > Did you report it to Adobe a

Re: CF8 on SLES 10.2 - where is an updated glibc ?

2008-07-02 Thread James Holmes
I'll be watching this carefully - we've just deployed on SLES 32 bit because we were aware of this issue and we wanted to wait until it was resolved and 64 bit had more exposure in the wild. Please keep us all posted... On Wed, Jul 2, 2008 at 9:58 PM, Tom Chiverton <[EMAIL PROTECTED]> wrote: > On

Re: Any way to make this query work like this?

2008-06-30 Thread James Holmes
Crap, even my code had a typo; I missed a ">": where p.city in () On Mon, Jun 30, 2008 at 9:17 PM, James Holmes <[EMAIL PROTECTED]> wrote: > Yes, you forgot the () around the cfqueryparam tag. Check my code again... > > On Mon, Jun 30, 2008 at 9:14 PM, Rick Faircloth

Re: Any way to make this query work like this?

2008-06-30 Thread James Holmes
Yes, you forgot the () around the cfqueryparam tag. Check my code again... On Mon, Jun 30, 2008 at 9:14 PM, Rick Faircloth <[EMAIL PROTECTED]> wrote: > Ok... it's a draw. I think you both replied simultaneously > and with equal fervor! > > Now, back to the issue at hand! :o) > > The solution isn

<    1   2   3   4   5   6   7   8   9   10   >