From the Adobe CF documentation on CGI variables
(http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=Expressions_8.html):
"In ColdFusion, these variables are referred to as /CGI environment
variables/. CGI Environment variables contain data about the transaction
betwee
I'm not familiar with that particular CGI variable, but did something change
on the IIS side?
On Mon, Jun 20, 2011 at 9:04 AM, Bern Weed wrote:
>
> I'm have an application that has been using CGI variables and working fine.
> It stopped working and I'm not sure why of c
I'm have an application that has been using CGI variables and working fine. It
stopped working and I'm not sure why of course. I am using IIS 7 and
ColdFusion 9. I can get it to return cgi.auth_user but not the
cgi.cert_subject and it was working for both. Anyone have any ideas
Thank you, Ian! I'll check out the IIS forums.
Dave
ps. I see you're in Sac. Next time you're in Tahoe, give me a holler!
> CGI variables are generated and provided by the web server not the
> ColdFusion server. It would be in IIS and/or Apache or whatever one
> is
king
>skills... Girls only want boyfriends who have great skills."
>- Napoleon Dynamite
>-Original Message-
>From: David Delbridge [mailto:[EMAIL PROTECTED]
>Sent: Tuesday, May 30, 2006 2:17 PM
>To: CF-Talk
>Subject: Disable CGI Variables?
>
>Hi all,
>
>Is
CGI variables are generated and provided by the web server not the ColdFusion
server. It would be in IIS and/or Apache or whatever one is using that this
kind of control may exist.
--
Ian Skinner
Web Programmer
BloodSource
www.BloodSource.org
Sacramento, CA
-
| 1
kills... Girls only want boyfriends who have great skills."
- Napoleon Dynamite
-Original Message-
From: David Delbridge [mailto:[EMAIL PROTECTED]
Sent: Tuesday, May 30, 2006 2:17 PM
To: CF-Talk
Subject: Disable CGI Variables?
Hi all,
Is there any way to disable or obfuscate the CGI
Hi all,
Is there any way to disable or obfuscate the CGI variables on an MX server?
More importantly, can this be done PER SITE on a multi-homed MS IIS server?
Any advice is greatly appreciated.
Dave
~|
Message: http
mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 10, 2006 9:40 AM
To: CF-Talk
Subject: Re: unable to see certain CGI variables :(
no one has seen this before, eh?
~|
Message: http://www.houseoffusion.com/lists.cfm/
Like Ian said, all coldfusion can see is what the webserver gives it.
Also, a simple dump of cgi variables does not give you all of the
variables that are available from the webserver, and also note that if
you ever do a structKeyExists() or isDefined() on any cgi variable, it
will always come
no one has seen this before, eh?
~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:240066
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubs
the
upgrade.
> ColdFusion only repeats the CGI variables given it by the web server.
> In you ASP and ColdFusion test page, are they running under the same
> web server? Or do you perchance have the ColdFusion running under
> it's built in testing web server?
>
>
upgrade.
-Original Message-
From: Ian Skinner [mailto:[EMAIL PROTECTED]
Sent: Friday, May 05, 2006 2:07 PM
To: CF-Talk
Subject: ***BULK*** RE: unable to see certain CGI variables :(
ColdFusion only repeats the CGI variables given it by the web server. In
you ASP and ColdFusion test page
ColdFusion only repeats the CGI variables given it by the web server. In you
ASP and ColdFusion test page, are they running under the same web server? Or
do you perchance have the ColdFusion running under it's built in testing web
server?
--
Ian Skinner
Web Progr
I'm running a production box with CF 5 and SiteMinder Affiliate Agent 4.x.
When a user authenticates via SiteMinder, I parse #CGI.http_sm_user# to get
their username, and connect them with the correct account in my system.
On a test system, I'm trying to understand whether I will be able to
Yep this is because CGI vars come from the web server, and CF will poll
the server for any Cgi variables it doesn't "know" about. When you dump
the CGI scope you're only seeing ones CF knows should exist, not
necessarily the ones that do.
For instance, on Apache you can acces
so I guess all those instances where I verify the existence of a CGI
variable are pointless! I often do this:
...
Guess I can change that to
...
Crazy.
Rick
Nathan Strutz wrote:
> Yes, it's been like this for a long time. #cgi.qwertyuiop# will just
> return an empty string. Why? I
Yes, it's been like this for a long time. #cgi.qwertyuiop# will just
return an empty string. Why? I don't know exactly, but I do know it is
fairly expected, and only works with the CGI scope.
-nathan strutz
http://www.dopefly.com/
On 2/10/06, Rick Root <[EMAIL PROTECTED]> wrote:
> I was having s
I was having some issues solving a problem today and eventually I
realized it was because I spelled a CGI variable.
On my system (CFMX 7 on Windows), the following does not generate an
exception, as I would think that it should:
#CGI.FAHRVERNUGEN#
The behavior is the same on CFMX7 for Linux an
That's kinda what I thought about IE jumping right in. I wasn't sure
about the other browsers.
Thanks for the clarification.
M!ke
-Original Message-
From: Munson, Jacob [mailto:[EMAIL PROTECTED]
Sent: Monday, November 28, 2005 10:56 AM
To: CF-Talk
Subject: RE: Blank CGI
via the active directory and we're
good to go.
The problem is that Apache doesn't support NTLM like IIS, and so CGI variables
just aren't cutting it --they are always coming up blank.
I -know- that Squid uses a module (internal to squid) to make the proxy server
listen to NTLM
alk
> Subject: RE: Blank CGI Variables
>
> It's been a while since I used this sort of authentication,
> but doesn't
> it require IE for it to work?
>
> I don't remember if non-IE browsers will support this process?
>
> As far as the feasibility of an &quo
omplained yet. ;^)
M!ke
-Original Message-
From: Jillian Koskie [mailto:[EMAIL PROTECTED]
Sent: Monday, November 28, 2005 8:45 AM
To: CF-Talk
Subject: Blank CGI Variables
Has anybody successfully used NTLM authentication on a Linux box with
Apache? There seem to be a few Apache modules
Has anybody successfully used NTLM authentication on a Linux box with Apache?
There seem to be a few Apache modules that help accomplish this --hard to know
if they are worth playing with.
When I do a dump of my CGI variables, they are all blank.
What I'm trying to accomplish:
I am bui
hi,
We have a cold fusion web application. Which is under the security of another applicaiton. Security application passes the user id to our application in form of something like below.
cgi.http_scempnum
We access this variable value in applicaiton.cfm file and query the user table for this
On Wednesday 08 Oct 2003 18:59 pm, Barney Boisvert wrote:
> into, which will cause the client to stop sending the auth-user header. I
> don't think you can do that.
I believe Mozilla will be able to logout of HTTP (basic) AUTH sites in the
next release - there is certainly a bugzilla for it.
--
CGI variables are provided by the web server, based on what information the
client sends to it. To get what you want, you have to tell the browser to
stop remembering the credentials for the realm they are currently logged
into, which will cause the client to stop sending the auth-user header. I
For many years our site has used the CGI.AUTH_USER variable
to determine if someone is logged in. This has become a
problem because we want to provide a "logout" option...but
there seems to be no way to clear the CGI variables
programmatically. We are running Deerfield
To: CF-Talk
> Subject: displaying CGI variables.. ?
>
>
> Hi,
>
> How to display all CGI variable info thru programmatically..
>
>
> Thanks
> ramesh
>
>
~|
Archives: http://w
Hi,
How to display all CGI variable info thru programmatically..
Thanks
ramesh
~|
Archives: http://www.houseoffusion.com/lists.cfm?link=t:4
Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4
Unsubscribe: http://www.h
***
Your mail has been scanned, and no virus was found.
***-***
Thanks.
Nate
- Original Message -
From: "Nick de Voil" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Thursday, March 27, 2003 12:44 PM
Su
> Sorry for the OT post, I'm a JSP newbie and need to know how I would do
>
>
> #cgi.server_name#
>
>
> on a JSP page?
<%=request.getServerName()%>
~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
S
***
Your mail has been scanned, and no virus was found.
***-***
Hello,
Sorry for the OT post, I'm a JSP newbie and need to know how I would do
#cgi.server_name#
on a JSP page?
Thanks,
Nate
Thanks for the help everyone.
I totally forgot about
-Original Message-
From: Ciliotta, Mario [mailto:mario.ciliotta@;csfb.com]
Sent: Monday, November 11, 2002 7:15 PM
To: CF-Talk
Subject: CGI Variables
Hi,
Does anyone know the cgi variable to capture a users ip address. I have used
> Does anyone know the cgi variable to capture a users ip
> address.
CGI.REMOTE_ADDR
> Also does anyone have a link to a list of all the
> available CGI variables.
RTFM* or
*
CF5:
http://livedocs.macromedia.com/cf50docs/CFML_Reference/Expressions4.jsp#2679
705
Matthew Walker wrote:
>
>
Neat, I didn't know about CFDUMP.
- Rick
~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription:
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&foru
Ciliotta, Mario wrote:
>
> Does anyone know the cgi variable to capture a users ip address. I have used it
>before but I just seem to be drawing a blank. Also does anyone have a link to a list
>of all the available CGI variables.
Well the question has already been answered, bu
#CGI.Remote_Addr# should do it...
dump the Cgi struct to see all the variables.
Joe
> -Original Message-
> From: Ciliotta, Mario [mailto:mario.ciliotta@;csfb.com]
> Sent: Monday, November 11, 2002 7:15 PM
> To: CF-Talk
> Subject: CGI Variables
>
>
> Hi,
>
as the IP Address, browser type,
and authenticated username. You can reference CGI environment variables for
a given page request anywhere in the page. All CGI variables are read-only.
Note The environment variables available to your applications depend on the
browser and server software in use f
cgi.remote_host
Matthew Walker
http://www.matthewwalker.net.nz/
> -Original Message-
> From: Ciliotta, Mario [mailto:mario.ciliotta@;csfb.com]
> Sent: Tuesday, 12 November 2002 1:15 p.m.
> To: CF-Talk
> Subject: CGI Variables
>
>
> Hi,
>
> Does a
cgi.remote_host
tw
-Original Message-
From: Ciliotta, Mario [mailto:mario.ciliotta@;csfb.com]
Sent: Monday, November 11, 2002 7:15 PM
To: CF-Talk
Subject: CGI Variables
Hi,
Does anyone know the cgi variable to capture a users ip address. I have
used it before but I just seem to be
cgi.remote_addr
I believe that'll do it for you.
> -Original Message-
> From: Ciliotta, Mario [mailto:mario.ciliotta@;csfb.com]
> Sent: Monday, November 11, 2002 6:15 PM
> To: CF-Talk
> Subject: CGI Variables
>
>
> Hi,
>
> Does anyone know the
Hi,
Does anyone know the cgi variable to capture a users ip address. I have used it
before but I just seem to be drawing a blank. Also does anyone have a link to a list
of all the available CGI variables.
Thanks
Mario
This message is for the named person's use only. It may co
Deanna,
I don't think what you're asking for is possible. With auth_user, you
are using NT authentication. IIS has that built in. Apache, does not.
Your easiest bet is to switch back to IIS.
FWIW, if you were to have your authentication information available via
LDAP, you could modify your
Hi Folks,
We were running NT, and yesterday switched to Apache. Lo and behold, there's
no cgi.auth_user variable. There's a similar variable (remote_user), though.
The server admin says there's no way to create or map auth_user to pick up
the remote_user's value. I know nothing about servers, but d
You need the Enterprise version to run JSP pages in CFMX.
-kumaran
-Original Message-
From: Julian McNamara [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 08, 2002 6:24 PM
To: CF-Talk
Subject: Sun One Webserver and CGI variables
Hi all,
I'm testing the Sun One Web Server with
See bug 3551963 - MX has the same problem with iPlanet on Solaris
-Shawn
-Original Message-
From: Julian McNamara [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 08, 2002 3:24 PM
To: CF-Talk
Subject: Sun One Webserver and CGI variables
Hi all,
I'm testing the Sun One Web S
Hi all,
I'm testing the Sun One Web Server with CFMX and finding that it does not
return all the CGI variables I'm used to seeing with Apache, IIS or even
Website.
Sun tech support sent me a JSP that appears to reference things like
USER_AGENT etc, stuff that I'm interested
> To: CF-Talk
> Subject: cfparam using CGI variables
>
> Hi,
>
> Please exuse this humble question about cfparam.
>
> I have an app where I want a server name variable to be optionally
> supplied
> to a template via the url.
>
> i.e.
>
> somepage.c
Hi,
Please exuse this humble question about cfparam.
I have an app where I want a server name variable to be optionally supplied
to a template via the url.
i.e.
somepage.cfm?server=myserver.com.au
If this parameter is not supplied I would like to default to the current
server name (stored in
> We're using cgi.server_name to build the local URL's we use.
> I'm a little nervous about depending on a cgi variable for
> such important stuff, but it seems to be coming through
> robustly from our web server, iPlanet. I set the default
> values for our Production server.
>
> Other folks
What is the difference between CGI.Auth_User and CGI.Remote_User?
They both contain the same information - 'domain\username'.
Are there any situations where you would reference one over another?
Thanks,
Dave
__
Get Your
t;
> -- Original Message --
> from: "Kreig Zimmerman" <[EMAIL PROTECTED]>
> >True.
> >
> >- Original Message -
> >From: "Jamie Jackson" <[EMAIL PROTECTED]>
> >Subject: CGI variables
>
> CGI variable detection is crap!
>
what about cgi.http_accept_language, my most favorite cgi var of them all? i
seem to turn it up as not defined from older and/or whacko browsers. also most
__
Why Share?
Dedicated Win 2
> > ALL CGI variables are ALWAYS "defined" within CF, so you
> > test for them using len() instead of isdefined().
>
> But isn't cgi.http_referer, for example, exist only if the
> page is called from a form? So it wouldn't exist if you came
> from a
ue.
>
>- Original Message -
>From: "Jamie Jackson" <[EMAIL PROTECTED]>
>Subject: CGI variables
>
>> True or False?
>>
>> ALL CGI variables are ALWAYS "defined" within CF, so you test for them
>> using len() instead of isdefined
CGI[i];
cgiVal = evaluate(aryCGI[i]);
if (len(cgiVal)) {
writeoutput(cgiKey & '=' & cgiVal & '');
}
}
Thanks,
Jamie
On Mon, 04 Feb 2002 17:48:33 -0500, in cf-talk you wrote:
>Yes (see notes for more)
>
>1. All CGI variables that
Yes (see notes for more)
1. All CGI variables that exist are stored in a structure called CGI.
2. A len() should be used to determine if a CGI variable exists because (for
some reason) it will ALWAYS exist. You can test this by outputting the
following:
#cgi.thisisafakevar# - #len
True.
- Original Message -
From: "Jamie Jackson" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Monday, February 04, 2002 5:40 PM
Subject: CGI variables
> True or False?
>
> ALL CGI variables are ALWAYS "defined" withi
True or False?
ALL CGI variables are ALWAYS "defined" within CF, so you test for them
using len() instead of isdefined().
I want to be 100% certain that I don't need to use isdefined() for
them.
Thanks,
Jamie
_
I am using a authentication software that uses/sets CGI variables. I wish to
call this software from my CF web pages. For me to do this, I have to set
the CGI variables from the CF application so that the authentication
software can use it. Is there any way to do this?
G. Venkatachalam
reciated.
>
> Details:
> O/S: Win2k
> Server: Sambar
> CF-Version: 4.5.1 professional SP2
>
> Yes, all the other CGI variables "work" and this individual
> has tried three different browsers with no effect?
>
> Virtual muffins for *any reply :)
I've
rver: Sambar
CF-Version: 4.5.1 professional SP2
Yes, all the other CGI variables "work" and this individual has tried three
different browsers with no effect?
Virtual muffins for *any reply :)
~~
Structure your ColdFusion code with Fusebox.
he CF code
> to conform to the standards that it wants.
Thanks for the information. However, it looks as though it might not be the
firewall after all *exasperated sigh*.
The cgi variables that had become empty strings (eg HTTP_REFERER and a few
others) on two servers are now displaying
that it wants.
- Original Message -
From: "Aidan Whitehall" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Wednesday, May 09, 2001 4:18 AM
Subject: Watchguard Firewall II stripping CGI variables?
> A Watchguard Firewall II has just b
A Watchguard Firewall II has just been installed and it looks as though the
default setting is to strip out "unknown HTTP headers", judging by the
information on their website. It appears to remove a raft of CGI variables
sent by the browser and the only ones available are the ones
http://advice.networkice.com/Advice/Underground/Hacking/Methods/Technical/Sp
oofing/default.htm
-Original Message-
From: Robert Everland III [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 18, 2001 6:36 PM
To: CF-Talk
Subject: RE: How secure are cgi variables
I'm just tryi
:20 PM
To: CF-Talk
Subject: Re: How secure are cgi variables
Are you working on some kind of IP based security? While cgi.remote_addr is
generated by the server, ip address spoofing is not hard, so any ip based
security will not keep out a resourcful hacker.
jon
- Original Message -
From:
> I'm just trying to figure out how it can be done. Can anyone
> say how ip
> spoofing could actually be done, wouldn't that be pretty darn
> complicated to
> do?
Not really. There are many 3l1t3 t00lz to do it - its basicly manufacturing
really odd TCP/IP packets...
~
t: Re: How secure are cgi variables
Are you working on some kind of IP based security? While cgi.remote_addr is
generated by the server, ip address spoofing is not hard, so any ip based
security will not keep out a resourcful hacker.
jon
- Original Message -
From: "Robert Everla
gt;
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Wednesday, April 18, 2001 7:10 PM
Subject: How secure are cgi variables
> I am playing around with cgi variables to see how secure they are. What I
> want to know is there anyway to change say the remote_addr or is that
> getting th
es with CF 4.5. For a full listing, you will need to reference the
CGI 1.1 spec.
Kevin
>>> [EMAIL PROTECTED] 04/18/01 04:10PM >>>
I am playing around with cgi variables to see how secure they are. What I
want to know is there anyway to change say the remote_addr or is
I am playing around with cgi variables to see how secure they are. What I
want to know is there anyway to change say the remote_addr or is that
getting the ip address from somewhere else. I tried changing it to see how
good my security is on a site I am coding and it wouldn't not c
/Webmaster
Spectrum Astro, Inc.
480.892.8200
[EMAIL PROTECTED]
http://www.spectrumastro.com
-Original Message-
From: Kelly Matthews [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 09, 2001 8:01 AM
To: CF-Talk
Subject: Question about CGI Variables Auth User & Auth Password
We are tr
CGI Variables Auth User & Auth Password
We are trying to get CF to pass the CGI Variables
Auth User and Auth Password. It's supposed to pass
your NT login info in those variables, but it's not. Is there something
special I need
We are trying to get CF to pass the CGI Variables
Auth User and Auth Password. It's supposed to pass
your NT login info in those variables, but it's not. Is there something
special I need to do??
Kelly
~~
Structure your ColdFusion
Hi, I hope this email goes through.
I am in a bit of a quandry. I am using CF 4.5.1 SP2 with APachae on a
win98 machine, and when I try to reference the CGI variables path_info
and path_translated, they come up blank?
Any thoughts, email me directly if possible (at least cc)
Brian
AIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: <[EMAIL PROTECTED]>
Subject: Re: HTTP request and CGI variables
Date: Mon, 24 Apr 2000 09:31:29 -0500
Why not physically go to the page, view source and match up parameter to
exactly what they're using. Oh just thought of somethin
4, 2000 8:45 AM
Subject: Re: HTTP request and CGI variables
>
> Pan,
>
> That is a good point. I just tried that. It still doesn't work - I also
> tried getting rid of the http_ as another person on this list recommended,
> and that does not work either. Could be that I am
th
a shot.
Andrea
Original Message Follows
From: "Lawrence B. Afrin, M.D." <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: HTTP request and CGI variables
Date: Sun, 23 Apr 2000 08:55:18 -0400
I had some difficulties with this problem
ginal Message Follows
From: "pan" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: <[EMAIL PROTECTED]>
Subject: Re: HTTP request and CGI variables
Date: Sat, 22 Apr 2000 21:21:33 -0700
From: Andrea W <[EMAIL PROTECTED]>
> I am sending an http request
4.5, upgrade, then use
> > > CFHTTP USERAGENT=...
> >
> > Actually, you can pass the desired user agent with CFHTTPPARAM.
> > You can pass any of the CGI variables normally sent by the browser
> > using CFHTTPPARAM; you just have to leave off the "HTTP_" part:
> &g
ser agent
>> via CFHTTPPARAM in earlier version of CF will accomplish
>> the desired effect. If you're not at 4.5, upgrade, then use
>> CFHTTP USERAGENT=...
>
>Actually, you can pass the desired user agent with CFHTTPPARAM. You can pass
>any of the CGI variables no
> I am sending an http request using cfhttp to register a user
> on a remote site - the remote site is using asp. The asp code
> is looking for the browser type in the cgi variables. I am
> sending it the browser type as follows:
>
> url="http://remote.server.com/sig
ctually, you can pass the desired user agent with CFHTTPPARAM. You can pass
any of the CGI variables normally sent by the browser using CFHTTPPARAM; you
just have to leave off the "HTTP_" part:
http://whatever.com"
METHOD="POST">
Dave Watts, CTO, Fig L
er???
>
>
> HTH
>
> Dick
>
>
>
> At 7:23 PM + 4/21/2000, Andrea W wrote:
>> I am sending an http request using cfhttp to register a user on a remote
>> site - the remote site is using asp. The asp code is looking for the
>> browser type in
a user on a remote
>site - the remote site is using asp. The asp code is looking for the browser
>type in the cgi variables. I am sending it the browser type as follows:
>
>url="http://remote.server.com/signup/signup.asp?username=andrea&passw
>ord=sesame"
>method="po
From: Andrea W <[EMAIL PROTECTED]>
> I am sending an http request using cfhttp to register a user on a remote
> site - the remote site is using asp. The asp code is looking for the browser
> type in the cgi variables. I am sending it the browser type as follows:
I am sending an http request using cfhttp to register a user on a remote
site - the remote site is using asp. The asp code is looking for the browser
type in the cgi variables. I am sending it the browser type as follows:
http://remote.server.com/signup/signup.asp?username=andrea&pass
89 matches
Mail list logo
