James, that did the trick!
Crazy, in ALL other SQL queries sent via CFQUERY, if you end them in ;,
you get an Invalid Character error...
Here's a question, Mr. Oracle Man...
Why can't I do this?
SELECT *, 'foo' as foo FROM BLOG_CONFIG
It's easy enough to work around by specifying the field
SELECT BLOG_CONFIG.*, 'foo' as foo FROM BLOG_CONFIG
And you thought that would be hard, didn't you...
-Original Message-
From: Rick Root [mailto:[EMAIL PROTECTED]
Sent: Saturday, 5 February 2005 12:04
To: CF-Talk
Subject: Re: Creating Oracle Functions in CFQUERY revisited
James
James Holmes wrote:
SELECT BLOG_CONFIG.*, 'foo' as foo FROM BLOG_CONFIG
And you thought that would be hard, didn't you...
Hehheheh.. I'll keep that in mind!
You know, making BlogCFM work for 5 different databases has been an
interesting exercise.
Once it's done, I'm hoping to talk the
MS SQL
CFMX 6.1
How do you limit the score of info returned?
or
The equivalent of MySQL
LIMIT #StartRow#, #NumberRows#
Thanks,
Nick
~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble
Ticket
MS SQL
CFMX 6.1
How do you limit the score of info returned?
or
The equivalent of MySQL
LIMIT #StartRow#, #NumberRows#
To get the first 5 rows:
SELECT TOP 5 ...
To get the second 5 rows:
SELECT TOP 5 ...
FROM ...
WHERE field NOT IN (SELECT TOP 5 ...)
Dave Watts, CTO, Fig Leaf
SELECT TOP x..
However..
MS SQL Server does not support select range type quries.
If your table does not contain lot of data.. look at CFOUTPUT controls..
otherwise.. SQL StoredProc would give you good results..
Nick Baker wrote:
MS SQL
CFMX 6.1
How do you limit the score of info
Hi,
I have a problem with a SELECT cfquery selecting a CLOB field in an
Oracle database.
The problem comes from this character, which is invisible but at then
of almost all my fields : see the attachment for the character.
The query never ends and the page never displays... only on Coldfusion
MX
This was in another thread but I wanted to post it to a separarate
thread so more people might see it..
I need to create oracle functions from within CFML.
Ie:
cfquery ...
CREATE OR REPLACE FUNCTION year (MyDate DATE) RETURN NUMBER IS BEGIN
RETURN extract(YEAR FROM MyDate);
END year
Hello,
Works for me, but only without the trailing slash (with slash the func
is created but invalid). Do you have the appropriate privs in Oracle?
cfquery name=makefunction datasource=sc_stag17_dev
CREATE OR REPLACE FUNCTION year (MyDate DATE) RETURN NUMBER IS BEGIN
RETURN extract(YEAR
thread but I wanted to post it to a separarate
thread so more people might see it..
I need to create oracle functions from within CFML.
Ie:
cfquery ...
CREATE OR REPLACE FUNCTION year (MyDate DATE) RETURN NUMBER IS BEGIN
RETURN extract(YEAR FROM MyDate);
END year;
/
/cfquery
people might see it..
I need to create oracle functions from within CFML.
Ie:
cfquery ...
CREATE OR REPLACE FUNCTION year (MyDate DATE) RETURN NUMBER IS BEGIN
RETURN extract(YEAR FROM MyDate);
END year;
/
/cfquery
It doesn't generate errors - at least not in coldfusion
it runs off the edge of your
editor) or
2) as an include - cfinclude the cfquery tag into the body of the CFC method
and the carriage returns in the PL/SQL won't screw things up.
This is one of those cool practical joke bugs with CF that are fun at
parties, but I m serious - try
which would say '(value);DROP * FROM tableName where 1 = 1'
... which would be harmless. at least by sql server, it
would be treated as one long string to insert/update/whatever.
You might want to read this:
http://www.nextgenss.com/papers/advanced_sql_injection.pdf
Dave Watts, CTO, Fig
Adam, first off - I agree with you entirely, one should not be playing
this game. I don't post in an attempt to convince the original poster
to not use queryparam, only as a response to what I saw to be an
incorrect answer.
With that in mind, I still cannot get it to work.
select * from
Jeff,
Assume the big bad user put a ' after your (value).
SELECT * FROM table1 WHERE field1 = 'some value';DELETE FROM table2
WHERE 1 = 1 --'
I don't think any of the examples posted yet explicitly had it in
there, but give it a try, crackers will.
cfqueryparam,
t
On Wed, 02 Feb 2005
Tyler Fitch wrote:
Assume the big bad user put a ' after your (value).
SELECT * FROM table1 WHERE field1 = 'some value';DELETE FROM table2
WHERE 1 = 1 --'
And that won't work because CF automatically doubles all single
quotes. If it were that easy nobody needed to be convinced of the
Indeed. I see myself beginning to get flogged over this, but I'm only
trying to make this point: it's not that easy. Somebody said show
me an example, and somebody else said here. I'm simply saying that
the example is flawed, and I am CERTAINLY not saying don't worry about
injection or
Indeed. I see myself beginning to get flogged over this, but
I'm only trying to make this point: it's not that easy.
Somebody said show me an example, and somebody else said
here. I'm simply saying that the example is flawed, and I
am CERTAINLY not saying don't worry about injection
I did Dave, and it's a good summary, especially of the more advanced
topics like extended procedures and activex integration. It
(http://www.nextgenss.com/papers/advanced_sql_injection.pdf for those
new to the thread) also serves as yet another reminder to never use the
default error
why can't you use cfqueryParam???
Because the query may be called with the cachedwithin attribute which
doesn't play nice with queryparams. I haven't seen a easy work around for
this issue yet.
Realistically, coldfusion automatically escapes any single quotes
ANYWAY...
But if im not
;(drop table users) or something of the sort?
If your query doesn't already have the single quotes... that's an issue,
like this:
cfquery ..
select * from emp where emp_id=#url.emp_id#
/cfquery
That would certainly be bad...
Then you could pass ?emp_id=;drop table emp
;(drop table users) or something of the sort?
If your query doesn't already have the single quotes... that's an issue,
like this:
cfquery ..
select * from emp where emp_id=#url.emp_id#
/cfquery
That would certainly be bad...
I use val()
select * from emp where emp_id=#val(url.emp_id
I use val()
select * from emp where emp_id=#val(url.emp_id)#
Anything not numeric will be dropped. A totally non-numeric
value will return 0.
For dates I use ODBCDateFormat.
That's great for numbers, but what about strings?
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
Because the query may be called with the cachedwithin
attribute which doesn't play nice with queryparams. I haven't
seen a easy work around for this issue yet.
You can cache your query within the Session, Application or Server scopes,
or you might be able to cache a query of that query
Because the query may be called with the cachedwithin attribute which
doesn't play nice with queryparams. I haven't seen a easy work around
for this issue yet.
You can cache your query within the Session, Application or Server scopes,
or you might be able to cache a query of that query using
gabriel l smallman wrote:
would the statement made by rick still hold true though. The
attack would need to be able to close the single quotes to embed an attack.
And how hard is that exactly? Don't go and play 'I know more
about SQL then you do' with a hacker. You lose.
Jochem
I have tried this but ran into casting issues. MX would make
the wrong guess at the data type of the column.
In that case, I'd recommend that you just put the query objects within the
Session, Application or Server scopes as appropriate. If you're writing the
application yourself, this is
I use val()
select * from emp where emp_id=#val(url.emp_id)#
Anything not numeric will be dropped. A totally non-numeric
value will return 0.
For dates I use ODBCDateFormat.
That's great for numbers, but what about strings?
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
Bud wrote:
I use val()
select * from emp where emp_id=#val(url.emp_id)#
Anything not numeric will be dropped. A totally non-numeric
value will return 0.
For dates I use ODBCDateFormat.
That's great for numbers, but what about strings?
Strings are within single quotes. Can you
Strings are within single quotes. Can you tamper with
'#url.emp_id#' if emp_id is text??
Yes.
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago,
Strings are within single quotes. Can you tamper with '#url.emp_id#'
if emp_id is text??
--
Yes, easily and with great destructive potential.
--
Ian Skinner
Web Programmer
BloodSource
www.BloodSource.org
Sacramento, CA
C code. C code run. Run code run. Please!
- Cynthia Dunning
Strings are within single quotes. Can you tamper with '#url.emp_id#'
if emp_id is text??
; DROP * FROM TableName WHERE 1=1 --
~|
Logware (www.logware.us): a new and convenient web-based time tracking
application. Start
Jochem van Dieten wrote:
gabriel l smallman wrote:
would the statement made by rick still hold true though. The
attack would need to be able to close the single quotes to embed an attack.
And how hard is that exactly? Don't go and play 'I know more
about SQL then you do' with a
Is a stored procedure an option?
~|
Logware (www.logware.us): a new and convenient web-based time tracking
application. Start tracking and documenting hours spent on a project or with a
client with Logware today. Try it for
which would say '(value);DROP * FROM tableName where 1 = 1'
... which would be harmless. at least by sql server, it would be
treated as one long string to insert/update/whatever.
-jc
Michael T. Tangorre wrote:
Strings are within single quotes. Can you tamper with '#url.emp_id#'
if emp_id is
you missed the -- at the endthat comments anything trailing on
that line...like the ending single quote. i am going to echo quite a
few people don't play the game with a hacker, hackers are always half
a step ahead and if they fall behind they will find a way to get
ahead...
Adam H
On Tue, 01
Hey all, anyone got a simple method to protect a var used in a where clause
where we cannot use cfqueryparam?
Example:
OR P.Keywords LIKE '%#Url.SearchString#%'
And search string can be entered by the public
thanks
~|
gabriel l smallman wrote:
Hey all, anyone got a simple method to protect a var used in a where clause
where we cannot use cfqueryparam?
Example:
OR P.Keywords LIKE '%#Url.SearchString#%'
Use cfqueryparam:
P.Keywords LIKE cfqueryparam value=%#Url.SearchString#% ...
Jochem
gabriel l smallman wrote:
Hey all, anyone got a simple method to protect a var used in a where clause
where we cannot use cfqueryparam?
Why can't you use cfqueryparam?
OR P.Keywords LIKE '%#Url.SearchString#%'
OR P.KEYWORDS LIKE cfqueryparam cfsqltype=cf_sql_varchar
Why can't you use cfqueryparam?
I have actually experienced this myself with the following, and only
on MS SQL Server. The same statement works great in mySQL, Access and
Oracle. In the code below, if we are running SQL Server
(localgrid.usedb=2) execution branches to bypass cfqueryparam.
Matt,
I use LIKE all the time in MS SQL with CFQueryParam...just to make
sure my head is screwed on straight, I just ran the following against
an nvarchar column:
cfquery datasource=alex name=foo
where SomeColumn like cfqueryparam cfsqltype=cf_sql_varchar
value=%#SomeValue#%
/cfquery
in aswer to yuor question you can do something like
DECLARE @myvar varchar(100);
SET @myvar = '%#Url.SearchString#%'
Select ...
From ...
Where p.Keywords LIKE @myvar
The syntax may not be 100% but I hope that gets the idea across...and
just to echo everyone else...why can't you use
Joe,
This is what I get for pasting snippets without writing up the
background properly...
This was for an ntext field. Thats where this started worming its way
into my code. SQL Server was barfing on searches where I was
searching thru a page's contents as part of a global site search.
Can
Realistically, coldfusion automatically escapes any single quotes
ANYWAY... so
FOO LIKE '%#url.somevar#%'
should be safe anyway, unless you're using PreservESingleQuotes somewhere.
Still... use cfqueryparam, it's good for you.
- Rick
Does anyone know how to delete duplicate records from a table and leave only
one record in the table using CFQUERY.
~|
Logware (www.logware.us): a new and convenient web-based time tracking
application
how to delete duplicate records from a table and leave only
one record in the table using CFQUERY.
~|
Find out how CFTicket can increase your company's customer support
efficiency by 100%
http://www.houseoffusion.com/banners
The Proc is looking for a like within the string '[EMAIL PROTECTED]' - you
will need
to do the following:
Excellent, that works perfectly, thanks!
I just figured out full text searching last night, and think I'm going to
create a catalog for this db and give it a shot.
Thanks again for your
,
tblprodmodelcodes.prodmodeltitle,tblprodmodelcodes.prodcategory,
tblprodmodelcodes.prodsellprice
-Original Message-
From: Will Tomlinson [mailto:[EMAIL PROTECTED]
Sent: 24 January 2005 02:23
To: CF-Talk
Subject: CFQUERY --- Stored Procedure
I'm converting most of my select queries to stored procedures
To: CF-Talk
Subject: Re: CFQUERY --- Stored Procedure
The Proc is looking for a like within the string '[EMAIL PROTECTED]' - you
will need
to do the following:
Excellent, that works perfectly, thanks!
I just figured out full text searching last night, and think I'm going to
create a catalog
I'm converting most of my select queries to stored procedures and hit a snag
with one of them.
This cfquery works and gives me the desired results for the term peace:
SELECT tblprodmodelcodes.prodmodelcode,
tblprodmodelcodes.prodmodeltitle,tblprodmodelcodes.prodcategory
I hope you're cfparam'ing those queries ! :)
Yes I've used them. But I've just started with stored procedures, so right now
I'm only comfy building it the old amateur way, making it work, then converting
everything to sp's. Once I have a good handle on them I'll build them from the
start.
thats my thinking as well will
so if i have 1 product in 1 table then i dont have to do a looping delete as
well
but what do i know?
I've figured out you HAVE to be signed up in the CF-Crackpipe list!
I'M JOKING!! heeheh..
Thanks for your sugg's.
:) Will
Will Tomlinson wrote:
On my clothing database, I have a situation where I have to delete from one
FK table, then the PK table. I do it in one cfquery like so:
cfquery datasource=#DSN#
DELETE FROM dbo.tblavailablecolors WHERE prodID='#URL.ID#';
DELETE FROM dbo.tblproducts WHERE prodID
On my clothing database, I have a situation where I have to delete from one FK
table, then the PK table. I do it in one cfquery like so:
cfquery datasource=#DSN#
DELETE FROM dbo.tblavailablecolors WHERE prodID='#URL.ID#';
DELETE FROM dbo.tblproducts WHERE prodID='#URL.ID#'
/cfquery
I
Will Tomlinson wrote:
cfquery datasource=#DSN#
DELETE FROM dbo.tblavailablecolors WHERE prodID='#URL.ID#';
DELETE FROM dbo.tblproducts WHERE prodID='#URL.ID#'
/cfquery
i'd wrap a SET NOCOUNT ON/OFF around these (assuming it's sql server) to
shave some time/traffic off these.
I
23:31:37 -0400
On my clothing database, I have a situation where I have to delete from one FK
table, then the PK table. I do it in one cfquery like so:
cfquery datasource=#DSN#
DELETE FROM dbo.tblavailablecolors WHERE prodID='#URL.ID#';
DELETE FROM dbo.tblproducts WHERE prodID='#URL.ID
I hope you're cfparam'ing those queries ! :)
For multiple inserts, I've used a format like so:
cfquery
INSERT INTO tableA
(name1,name2)
select 'jack','jill'
union all
select 'bill','brad'
/cfquery
-Original Message-
From: Will Tomlinson [mailto:[EMAIL PROTECTED]
Sent: Thursday
Thanks Joe!
This was the sollution to the problem!
Stavros
~|
Find out how CFTicket can increase your company's customer support
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49
Message:
The application I'm currently working on was originally written in CF 4.5 so
I'm frequently seeing dbtype=odbc in CFQUERY tags. Does anyone know if that
setting could adversely affect performance now that the DBTYPE attribute is to
be used to designate a QofQ?
Thanks much,
Dina
The application I'm currently working on was originally
written in CF 4.5 so I'm frequently seeing dbtype=odbc in
CFQUERY tags. Does anyone know if that setting could
adversely affect performance now that the DBTYPE attribute is
to be used to designate a QofQ?
I'm pretty sure
Thanks, Dave. I was surprised to see that DBTYPE=odbc was working in this
application as well, but it is. At this point, I'm just trying to determine if
a DBTYPE=odbc designation in CFMX would adversely affect performance for a
JDBC datasource.
Hi all
after insert a user record I need to show that same record to that
user. But using SELECT statement in other cfquery don't show that user
record. Please look this simple example:
cfquery datasource=#application.dsn# name=insertuser
INSERT INTO resourcebank ( userID,corpID,statusID,age1
Works now
I insert this query after the first INSERT query
cfquery name=commituser datasource=#application.dsn#
COMMIT;
/cfquery
Cheers
Hi all
after insert a user record I need to show that same record to that
user. But using SELECT statement in other cfquery don't show that user
record
Works now
I insert this query after the first INSERT query
cfquery name=commituser datasource=#application.dsn#
COMMIT;
/cfquery
Cheers
Hi all
after insert a user record I need to show that same record to that
user. But using SELECT statement in other cfquery don't show that user
record
I am getting this error on coldfusion mx when i am trying to execute a query. i
would be happy if any body finds a solution to this
with regards,
chand
~|
Special thanks to the CF Community Suite Gold Sponsor - CFHosting.net
Try setting the default request timeout for that template higher by
adding a cfsetting.
Add this to the template in the top, to give the query 60 seconds time
to execute before the process is aborted.
cfsetting requesttimeout=60
Micha Schopman
Software Engineer
Modern Media, Databankweg 12 M,
, Adrienne Brown
[EMAIL PROTECTED] wrote:
Is it possible to execute code that creates a temporary table using a
cfquery tag?
Here's the code I'm trying to execute:
cfquery name=createTable datasource=#db#
CREATE TempTable AS
(SELECT ENGINEER_SKILLS_ENGINEERS.ES_ENGINEERS_ID
it thru SQL PLUS you have permission to run a CREATE command, but
through you CF datasource it may be prohibitted.
Just a thought.
On Wed, 06 Oct 2004 14:53:30 -0400, Adrienne Brown
[EMAIL PROTECTED] wrote:
Is it possible to execute code that creates a temporary table using a
cfquery tag
Is it possible to execute code that creates a temporary table using a cfquery tag?
Here's the code I'm trying to execute:
cfquery name=createTable datasource=#db#
CREATE TempTable AS
(SELECT ENGINEER_SKILLS_ENGINEERS.ES_ENGINEERS_ID,
ENGINEER_SKILLS_SKILLSET.SKILLSET_ID
I'm late to this thread but thought it worth mentioning that ColdFusion MX
Bible cites a method for caching a single result set stored procedure, as
follows:
cfquery name=cached_12hours datasource=#dsn#
cachedwithin=#createtimespan(0,12,0,0)#
{ CALL sp_getAuthors('Churvis') }
/cfquery
~Dina
Yeah if you must cache, then use CFQUERY but you can also just duplicate the
results into a new query object and cache that.
_
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: 29 September 2004 20:35
To: CF-Talk
Subject: RE: CFStoredProc vs CFQuery
Are there any benefits to calling stored
Are there any benefits to calling stored procedures using CFStoredProc vs.
CFQuery? All the stored procs return a single record set.
The limitation I am running in to is how to cache the results of a query
that is created calling CFStoredProc.
TIA,
Duane
[Todays Threads]
[This Message
The major benefit of using cfquery to call is that you can cache the
results. There are no cachedwithin or cachedafter attributes in
cfstoredproc (which I think MM should address!!!). The only way to cache
the results is to put them into a shared scope or use QoQ... Which is a
waste.. Just use
What are the disadvantages of putting them into a shared scope?
-Adam
- Original Message -
From: Tangorre, Michael [EMAIL PROTECTED]
Date: Wed, 29 Sep 2004 15:07:34 -0400
Subject: RE: CFStoredProc vs CFQuery
To: CF-Talk [EMAIL PROTECTED]
The major benefit of using cfquery to call
Are there any benefits to calling stored procedures using
CFStoredProc vs. CFQuery? All the stored procs return a
single record set.
The limitation I am running in to is how to cache the results
of a query that is created calling CFStoredProc.
In this case, I'd recommend using CFQUERY
: CFStoredProc vs CFQuery
Are there any benefits to calling stored procedures using CFStoredProc
vs.
CFQuery? All the stored procs return a single record set.
The limitation I am running in to is how to cache the results of a query
that is created calling CFStoredProc.
TIA,
Duane
_
[Todays
Pascal Peters wrote:
This is intended behavior: any CF string variable within a cfquery
will escape (double) single quotes. I think it has always been like this
(at least since CF4).
OK, thanks for clearing that up.
This would throw an error if single quotes weren't escaped. This is
purely
isn't that the common thing that PreserveSingleQuotes() is used for?
Doug
- Original Message -
From: Damien McKenna [EMAIL PROTECTED]
Date: Fri, 17 Sep 2004 16:54:06 -0400
Subject: cfquery still breaking apostrophies in CFMX 6.1 updater?
To: CF-Talk [EMAIL PROTECTED]
I've just noticed
This is intended behavior: any CF string variable within a cfquery
will escape (double) single quotes. I think it has always been like this
(at least since CF4). This is implemented this way so you don't have to
worry about single quotes when you write something like:
cfquery...
...
WHERE column
I've just noticed that the CFQUERY fix for apostrophies from the CFMX
6.1 updater may not be fixed.I've got a query that does something
along the line of SELECT * FROM table_blah WHERE #from# #equal# #to#
where the #to# comes from SQL Server is something along the lines of
('N', 'n').However
, September 07, 2004 5:17 AM
Subject: cfquery error on new database
ok .. strange scenario. i have a script that is creating a mysql database on the fly. no login/password is required.
i create the tables.
i create a dsn on the fly as well.
once the db is created i try to run a quick query
hmm i dunno .. actually i managed to get it to work some of the time HEHE .. then i found a java sleep tag to use .. and that worked every time except when i refreshed the page 5 times real quick, then it gave me an error that either the db didnt exist, or the table didnt exist.
i guess i coudl
-Original Message-
From: Wurst, Keith D. [mailto:[EMAIL PROTECTED]
Sent: Monday, September 06, 2004 3:28 PM
To: CF-Talk
Subject: cfloop / cfquery and displaying results
hi everyone. i have a question concerning cfloop, cfquery and how to display
information most effectively on a page. here
hi everyone. i have a question concerning cfloop, cfquery and how to display information most effectively on a page. here is the situation. i have two queries. the first query gets all my main topics. the second query gets all my sub topics. my where clause in my second query uses an IN statement
]
Date: Mon, 6 Sep 2004 15:28:21 -0400
Subject: cfloop / cfquery and displaying results
To: CF-Talk [EMAIL PROTECTED]
hi everyone. i have a question concerning cfloop, cfquery and how to
display information most effectively on a page. here is the situation.
i have two queries. the first query gets all
ok .. strange scenario. i have a script that is creating a mysql database on the fly. no login/password is required.
i create the tables.
i create a dsn on the fly as well.
once the db is created i try to run a quick query on it but receive an error like:
General error: Unknown database
I know you can return the execution time of a query, but how do you
return what the query ran is?Just like they do when you turn on
debugging.
Christian
[Todays Threads]
[This Message]
[Subscription]
[Fast Unsubscribe]
[User Settings]
[Donations and Support]
I guess this is what you need
http://cflib.org/udf.cfm?ID=686
- Original Message -
From: Christian Watt [EMAIL PROTECTED]
Date: Tue, 31 Aug 2004 10:21:43 -0500
Subject: CFQuery
To: CF-Talk [EMAIL PROTECTED]
I know you can return the execution time of a query, but how do you
return what
Reply, not quite, this only works when an error has occurred.I would
like to do this even if an error has not occurred.
cfquery name=somequery
Select * from table
/cfquery
#Output Query Ran#
Christian
-Original Message-
From: Qasim Rasheed [mailto:[EMAIL PROTECTED]
Sent
Message -
From: Christian Watt [EMAIL PROTECTED]
Date: Tue, 31 Aug 2004 12:00:39 -0500
Subject: RE: CFQuery
To: CF-Talk [EMAIL PROTECTED]
Reply, not quite, this only works when an error has occurred.I would
like to do this even if an error has not occurred.
cfquery name=somequery
Select
it does require debug to be on though for sure, not a good thing for
production systems, eh?try the long hand way
cfset variables.sql = select foo from goo /
cfquery
#PreserveSingleQuotes(varaibles.sql)#
/cfquery
of course you may need to name your sql var different for multiple queries.
Doug
Hello all,
In my page, clicking on a name brings up another window where you can
edit their information (their address is shown below their name).The
addressID for each address is also stored in a variable (addressIDList).
Clicking on a button gets the the current information from the database
anyway.
Christian
-Original Message-
From: Qasim Rasheed [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 31, 2004 12:11 PM
To: CF-Talk
Subject: Re: CFQuery
As far as I can tell after looking at the UDF, it doesn't
require an
error to occur before it returns the sql statement
so why is debugging being enabled on a production machine bad?
it takes up valuable time slices:)
Doug
- Original Message -
From: Christian Watt [EMAIL PROTECTED]
Date: Tue, 31 Aug 2004 13:34:52 -0500
Subject: RE: CFQuery
To: CF-Talk [EMAIL PROTECTED]
Yes, you are correct
and if a query on average returned 30 rows I set the blockfactor to 30.I didnt notice a performance increase at all and in fact in some places I notice some actual decrease.So I removed the setting from all cfquery tags.But I didnt try just making all query blockfactor's 100.
Thanks,
David
[Todays
Yes, you are correct, but the requesting IPAddress has to
be in the
debugging IP Addresses.otherwise IsDebugMode returns
false.This
brings up an interesting question though, if my ip is not
in the list
then I don't get debug information and debug mode is
turned off, so why
is debugging
the app and if a query on average returned 30 rows I
set the blockfactor to 30.I didnt notice a performance
increase at all and in fact in some places I notice some
actual decrease. So I removed the setting from all cfquery
tags. But I didn't try just making all query blockfactor's 100.
I
This brings up an interesting question though, if my ip is not
in the list then I don't get debug information and debug mode
is turned off, so why is debugging being enabled on a production
machine bad?
My understanding is that simply gathering debug statistics incurs a
performance penalty,
If debugging is turned on in the admin debuging routines are ALWAYS
run. IsDebugMode() returns for the specific instance weather YOU will
see degubbing or not. Debuging from my expeince does use a good bit of
processing time.
However that asside somehow the debugging information is pulling
the
If you are using CFMX you can get at the query information
using the service factory.I posted a function on my
blog (http://blog.mxconsulting.com). I'm sorry if someone
has already mentioned this - it's been around for a
while and resurfaces every few months. I think I originally got
it from one
801 - 900 of 1675 matches
Mail list logo
