RE: Weird URL request parameters

2014-05-13 Thread UXB
>> That country set looked suspicious so I googled registering+only+mode+is+ON Thanks Jen. I tried searching for the URL variables but came up empty. I assumed that whatever it was that was generating the requests was using proxies but couldn't make sense of what it's purpose was. The domain o

Re: Weird URL request parameters

2014-05-12 Thread Jen Larkin
That country set looked suspicious so I googled registering+only+mode+is+ON The top results were at a blackhat seo site, so I googled the tool mentioned there. It's a bot trying to post spam to forums. http://en.wikipedia.org/wiki/XRumer On Mon, May 12, 2014 at 6:35 PM, UXB wrote: > > Does anyo

Weird URL request parameters

2014-05-12 Thread UXB
Does anyone know or have a clue as to what is generating these requests? /index.cfm?fid=2889Result:+used+x_fields.txt;+chosen +nickname+%22pn49o0w5bs%22;+registered+%28registering+only+mode+is+ON%29; They are coming from various IP's in Europe, southeast Asia, Ukraine and

Re: weird issue with utility

2014-04-15 Thread Russ Michaels
I would suggest you log the responses you get back from the cfhttp request which may tell you if there is a problem. On Tue, Apr 15, 2014 at 8:32 PM, John M Bliss wrote: > > I have a little utility I run on my dev box which calls data-fetching > processes on my production box. Usually works gr

Re: weird issue with utility

2014-04-15 Thread John M Bliss
Good idea. I'll check... On Tue, Apr 15, 2014 at 4:13 PM, Byron Mann wrote: > > It sounds like maybe the first cfhttp call from the client is ending with > maybe a 500 error at the production.com URI and not really returning a > response to the client. In that instance I can see the first ite

Re: weird issue with utility

2014-04-15 Thread Byron Mann
It sounds like maybe the first cfhttp call from the client is ending with maybe a 500 error at the production.com URI and not really returning a response to the client. In that instance I can see the first iteration in the client side loop just stalling, while on the end point side, Fusion Reacto

Re: weird issue with utility

2014-04-15 Thread Dave Watts
> Right. Usually, it runs serially just fine. With this production URL, it > behaves in the way I described. I would then assume that this production URL is taking much longer to complete. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig

Re: weird issue with utility

2014-04-15 Thread John M Bliss
Right. Usually, it runs serially just fine. With this production URL, it behaves in the way I described. On Tue, Apr 15, 2014 at 3:42 PM, Dave Watts wrote: > > > I have a little utility I run on my dev box which calls data-fetching > > processes on my production box. Usually works great: > > >

Re: weird issue with utility

2014-04-15 Thread Dave Watts
> I have a little utility I run on my dev box which calls data-fetching > processes on my production box. Usually works great: > > > http://production.com/?Date=#DateFormat(DateAdd('d', i, > now()), 'm/d/')#"> > > > But now I have it pointed at a different process and here's what happens: >

weird issue with utility

2014-04-15 Thread John M Bliss
I have a little utility I run on my dev box which calls data-fetching processes on my production box. Usually works great: http://production.com/?Date=#DateFormat(DateAdd('d', i, now()), 'm/d/')#"> But now I have it pointed at a different process and here's what happens: 1. I tell util

Re: Weird "directoryList" problem after migration from CF8 to CF10

2013-05-10 Thread Edward Chanter
That would explain it Steve, thanks :) Turns out that when the client asked for all the functionality they didn't need it. Now all they want is to upload, view and delete so I can build a pretty simple page in CF for that. Problem solved. On 10 May 2013 13:14, DURETTE, STEVEN J wrote: > > Ed

RE: Weird "directoryList" problem after migration from CF8 to CF10

2013-05-10 Thread DURETTE, STEVEN J
Ed, This is most likely due to the fact that directoryList is now a built in function in ColdFusion 10. It doesn't seem to have the same inputs as the function that you are using. Steve ~| Order the Adobe Coldfusion Anthol

Re: Weird "directoryList" problem after migration from CF8 to CF10

2013-05-10 Thread Edward Chanter
t; Use the third argument to specify query and you should be fine. > > > > On Fri, May 10, 2013 at 6:06 AM, Edward Chanter > wrote: > > > > > I'm using the CFM filemanager, it's an old piece of code but has worked > > great until now. It's not sup

Re: Weird "directoryList" problem after migration from CF8 to CF10

2013-05-10 Thread Raymond Camden
should be fine. On Fri, May 10, 2013 at 6:06 AM, Edward Chanter wrote: > > I'm using the CFM filemanager, it's an old piece of code but has worked > great until now. It's not supported any more and I've encountered a weird > problem after migrating from CF

Weird "directoryList" problem after migration from CF8 to CF10

2013-05-10 Thread Edward Chanter
I'm using the CFM filemanager, it's an old piece of code but has worked great until now. It's not supported any more and I've encountered a weird problem after migrating from CF8 to CF10 I'm getting an error after a directoryList() The code in question is: the error

Re: Weird Issue, CF stops receiving requests

2013-04-27 Thread Russ Michaels
When did those errors occur, was it at the time u were restarting the cf instance, or were the errors showing before you did the restart, during the time everything seemed slow. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF

Weird Issue, CF stops receiving requests

2013-04-26 Thread Rick Root
So .. running CF9 enterprise on Windows, in a 3 instance cluster with FusionReactor monitoring.. we had an issue tonight (and this has happened before) where one of the instances starts lagging badly and causes the other instances to choke.. they're not really down but not much going on. So I res

Weird CFX Error

2013-04-14 Thread Drew Nathanson
Hi, I have written a CFX to perform a small task using iText. Code was compiled with 1.5 java and uses the CFX.JAR file along with the iText jar files. The module compiles correctly, and runs from a command line with NO problems. When I installed thee module on the server (CF 9 Standard - Buil

Re: Weird issue with SOLR and cfindex - it won't index more than 10k rows

2013-02-27 Thread Edward Chanter
Thanks for the insight James, I will definitely try that out. On 26 February 2013 23:40, James Mc wrote: > > The 10k records entry is only for autocommit which means that as soon as > your collections reaches 10k uncommitted docs it will commit them and then > start queuing up more. > > What c

Re: Weird issue with SOLR and cfindex - it won't index more than 10k rows

2013-02-26 Thread James Mc
The 10k records entry is only for autocommit which means that as soon as your collections reaches 10k uncommitted docs it will commit them and then start queuing up more. What could be happening is that you have more than 10k but less than 20k documents which would leave these documents uncom

Re: Weird issue with SOLR and cfindex - it won't index more than 10k rows

2013-02-26 Thread Edward Chanter
I did more digging into the Solr config XML for my collection, and found this in the updateHandler: 1 That seems to allow me to index more documents. Solr ended up not being able to do what I needed so I've used SQL full-text indexing instead. Just wanted to ask again

Weird issue with SOLR and cfindex - it won't index more than 10k rows

2013-02-25 Thread Edward Chanter
I'm trying to create a searchable index of database content using SOLR. It's a really simple implementation. The problem is that it won't let me index more that 10,000 rows of data. I can do 10k no problemo but as soon as I try to increase the number I get an HTTP 500 error from IIS, not CF, which

Re: Weird problem with IFRAME

2012-12-18 Thread Claude Schnéegans
>>I found this somewhat related article. Well, no it is not the same. This one seems to deal with an error when setting the SRC attribute by Javascript, which is not what I'm doing. Whet I have is a page like "myPage.cfm" which has an >Article does not mention it, but I believe the (with whic

Re: Weird problem with IFRAME

2012-12-18 Thread Byron Mann
I found this somewhat related article. http://stackoverflow.com/questions/11935458/ie9-bug-iframe-misbehaving-due-to-url-sensitivity Article does not mention it, but I believe the (with whichever IE mode you wind up with) has to be the first meta tag and must be in the . Bit more on X-UA-Comp

Re: Weird problem with IFRAME

2012-12-14 Thread Claude Schnéegans
>> it looks like you need a space between mondossier.cfm and type=#type# No, type here is a parameter in the url, not an attribute for http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353

Re: Weird problem with IFRAME

2012-12-14 Thread Maureen
If this is exact code, it looks like you need a space between mondossier.cfm and type=#type# On Thu, Dec 13, 2012 at 2:13 PM, <> wrote: > > Hi, > One of my customers is having a very weird problem with an IFRAME in my > site. > Here is the code in file mondossier.c

Re: Weird problem with IFRAME

2012-12-14 Thread Claude Schnéegans
>>Is it possible the IFrame src is getting redirected to the "root" It would be if the file is not found, but the file exists and it works with all other browsers, including IE8. Only IE9 seems to have trouble. And if it was redirectected, there would be a trace of it in the HTTP logs For insta

Re: Weird problem with IFRAME

2012-12-13 Thread Byron Mann
Is it possible the IFrame src is getting redirected to the "root" because the user is not logged in? On Thu, Dec 13, 2012 at 4:14 PM, <> wrote: > > >>Try ./file.cfm > > Ok, I tried, but it makes no difference. > > > ~| Order

Re: Weird problem with IFRAME

2012-12-13 Thread Claude Schnéegans
>>Try ./file.cfm Ok, I tried, but it makes no difference. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/gr

Re: Weird problem with IFRAME

2012-12-13 Thread Byron Mann
Think I ran into this before with relative paths without '/' Try ./file.cfm Byron Mann Lead Engineer & Architect HostMySite.com On Dec 13, 2012 2:14 PM, <> wrote: > > Hi, > One of my customers is having a very weird problem with an IFRAME in my > site. > Here

Weird problem with IFRAME

2012-12-13 Thread Claude Schnéegans
Hi, One of my customers is having a very weird problem with an IFRAME in my site. Here is the code in file mondossier.cfm: type is blank With all browsers, including my own Explorer it works perfectly. This is the trace how it look in tje server log when the page works normaly: GET 575

RE: Another weird SQL Injection attempt

2012-10-01 Thread Robert Harrison
Hmmm. One of my sites also had this exact attack (and some variations tried about a dozen times) yesterday also. Robert Harrison Director of Interactive Services Austin & Williams Advertising I Branding I Digital I Direct   125 Kennedy Drive,  Suite 100   I  Hauppauge, NY 11788 T 631.231.6600

Re: Another weird SQL Injection attempt

2012-09-30 Thread Wil Genovese
Looks like the same attack tried my servers too - too bad for them it failed. Long Live CFQueryParam amongst other little tools. Oh, and running PostgreSQL database :-) Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com wilg...@trunkful.com www.tr

Re: Another weird SQL Injection attempt

2012-09-30 Thread Scott Slone
Just battled this today myselfŠ Here's some more information on it. https://isc.sans.edu/diary.html?storyid=12127 On 9/30/12 5:58 PM, "Les Mizzell" wrote: > >Never seen this before! Script in Application file, as usual, caught it >before it got further... > >Here's what was tried: > > >/inde

Another weird SQL Injection attempt

2012-09-30 Thread Les Mizzell
Never seen this before! Script in Application file, as usual, caught it before it got further... Here's what was tried: /index.cfm?action=dance.school%29%29%2F%2A%2A%2For%2F%2A%2A%2F1%3D%40%40version--40version--=&MSOTlPn_View=0&MSOTlPn_ShowSettings=False%27%2F%2A%2A%2For%2F%2A%2A%2F1%3D%40%40

Re: Weird DNS issue

2012-06-07 Thread Phillip Vector
Yeah.. It was changed for me. Just needed to flush the DNS cache.. Stupid mistake, but I haven't had my coffee yet. :) On Thu, Jun 7, 2012 at 10:33 AM, Phillip Duba wrote: > > Remember, it could take up to 48 hours for DNS changes to propagate. We had > a site in which we changed hosts and it to

Re: Weird DNS issue

2012-06-07 Thread Phillip Duba
Remember, it could take up to 48 hours for DNS changes to propagate. We had a site in which we changed hosts and it took that long for everyone to see the changes (since we didn't control the TTL refresh rate). HTH, Phil On Thu, Jun 7, 2012 at 1:25 PM, Phillip Vector wrote: > > Nevermind.. *fac

Re: Weird DNS issue

2012-06-07 Thread Russ Michaels
its working fine for me, did you actually check the DNS locally using ping or something and see where it was resolving ? most likely you have a dns caching issue or have not allowed sufficient time for propagation. On Thu, Jun 7, 2012 at 6:10 PM, Phillip Vector wrote: > > So I own the domain 5t

Re: Weird DNS issue

2012-06-07 Thread Phillip Vector
Nevermind.. *facepalm* ipconfig /flushDNS On Thu, Jun 7, 2012 at 10:10 AM, Phillip Vector wrote: > So I own the domain 5thWallGaming.com > > I updated the DNS and since my subdomain is working, I know it's on > the new host. Also, FTP is pinging the new site... > > But everytime I go to www.5

Weird DNS issue

2012-06-07 Thread Phillip Vector
So I own the domain 5thWallGaming.com I updated the DNS and since my subdomain is working, I know it's on the new host. Also, FTP is pinging the new site... But everytime I go to www.5thWallGaming.com, I get the "We are updating" message (the old site). Any ideas on what I could be missing? ~~

Re: Weird SQL Query happenings...

2011-11-30 Thread Paul Hastings
On 12/1/2011 2:18 AM, DURETTE, STEVEN J wrote: > I have a stored procedure that when I run from SSMS it runs perfectly and > returns 2000 rows. When I run it from a cfstoredproc tag it returns no rows seen something somewhat similar w/sql server 2008 & datadirect drivers but this was always w/s

Re: Weird SQL Query happenings...

2011-11-30 Thread Russ Michaels
my memory is a little hazy on the subject, but I do recall some odd issues like this with cfstoredproc. Are you using cfstoredprocparam ? if so, make sure you pass the params in in the exact same order as they are defined in the stored proc itself, if I recall this is one of the causes of such beh

Re: Weird SQL Query happenings...

2011-11-30 Thread Judah McAuley
If you run the profiler and it says that it is returning the correct number of records in the sp that was run, you could also take a look at FusionReactor and use their JDBC wrappers to see if something is going on at the JDBC level. Judah On Wed, Nov 30, 2011 at 1:33 PM, Leigh wrote: > > Othe

Re: Weird SQL Query happenings...

2011-11-30 Thread Leigh
Other than that the only thing I can think of would be tracing it or using the profiler to see what is happening.at a db level. Because it does not make sense the same parameters would return different results. -Leigh ~| Order

RE: Weird SQL Query happenings...

2011-11-30 Thread DURETTE, STEVEN J
I checked, everything is exactly the same for both calls. Yes we do set NOCOUNT ON. Yes it returns the proper columns just no data. Steve -Original Message- From: Leigh [mailto:cfsearch...@yahoo.com] Sent: Wednesday, November 30, 2011 3:51 PM To: cf-talk Subject: Re: Weird SQL Query

Re: Weird SQL Query happenings...

2011-11-30 Thread Leigh
> don't return the same record set. Hm.. on second thought I may have read that wrong. If the resultset you are getting back contains the correct column names just no records - then ignore my comment about NOCOUNT. It does not apply.   -Leigh ~~

Re: Weird SQL Query happenings...

2011-11-30 Thread Leigh
Anything unusual about the procedure like optional parameters? (I know you said the input values are exactly the same, but ...) did you compare the debug information from cfquery and cfstoredproc? Just to verify everything truly is the same (values, data types, parameter position). Another

RE: Weird SQL Query happenings...

2011-11-30 Thread DURETTE, STEVEN J
Nope one record set. It just seems strange that exec myStoredProc and (a lot left out for brevity) don't return the same record set. Steve -Original Message- From: Judah McAuley [mailto:ju...@wiredotter.com] Sent: Wednesday, November 30, 2011 2:28 PM To: cf-talk Subject: Re:

Re: Weird SQL Query happenings...

2011-11-30 Thread Judah McAuley
Is it returning multiple recordsets perhaps? Or possibly returning a cursor to the recordset? Judah On Wed, Nov 30, 2011 at 11:18 AM, DURETTE, STEVEN J wrote: > > Hi all, > > Here is a little background... CF: ColdFusion Server Enterprise 8,0,1,195765 > SQL: Microsoft SQL Server 2008 R2 > > I h

Weird SQL Query happenings...

2011-11-30 Thread DURETTE, STEVEN J
Hi all, Here is a little background... CF: ColdFusion Server Enterprise 8,0,1,195765 SQL: Microsoft SQL Server 2008 R2 I have a stored procedure that when I run from SSMS it runs perfectly and returns 2000 rows. When I run it from a cfstoredproc tag it returns no rows at all. I just changed th

Re: Weird attack

2011-11-29 Thread Matt Blatchley
Thanks for the information Pete. I appreciate your response. Matt ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusio

Re: Weird attack

2011-11-29 Thread Pete Freitag
On Thu, Nov 24, 2011 at 9:41 AM, Matt Blatchley wrote: > > I've never used Fuseguard before, looks pretty good though.  Any > experience with the customizations?  It says fully customizable, but > is it all done via code, or a GUI? Hi Matt, Just wanted to provide some more details on how custom

Re: Weird attack

2011-11-24 Thread Aaron
In addition to ids/ips one could consider an application firewall. On Nov 23, 2011 7:48 PM, "Justin Scott" wrote: > > > > What I mean is that cfqueryparam will not protect you against > > attacks, il will just prevent attacks to be succesful. > > Well, that's mostly the point. > > > A better app

Re: Weird attack

2011-11-24 Thread Matt Blatchley
Found it, very cool. I've been using older anti-SQL Injection scripts and blocking IP's, which is a pain in the arse to manage over a long period of time. This should help save me time from having to worry too much about that now. ~~~

Re: Weird attack

2011-11-24 Thread Russ Michaels
it is all done via config files, but it pretty straightforward. On Thu, Nov 24, 2011 at 2:41 PM, Matt Blatchley wrote: > > I've never used Fuseguard before, looks pretty good though.  Any > experience with the customizations?  It says fully customizable, but > is it all done via code, or a GUI?

Re: Weird attack

2011-11-24 Thread Matt Blatchley
I've never used Fuseguard before, looks pretty good though.  Any experience with the customizations?  It says fully customizable, but is it all done via code, or a GUI? ~| Order the Adobe Coldfusion Anthology now! http://www.amaz

Re: Weird attack

2011-11-24 Thread Russ Michaels
Software >> 902-401-7689 >> http://www.webenergy.ca >> >> -Original Message- >> From: Paul Stewart [mailto:p...@whichfranchise.com] >> Sent: Thursday, November 24, 2011 8:13 AM >> To: cf-talk >> Subject: Re: Weird attack >> >> >>

Re: Weird attack

2011-11-24 Thread Paul Stewart
] > Sent: Thursday, November 24, 2011 8:13 AM > To: cf-talk > Subject: Re: Weird attack > > > On 24/11/2011 11:10, Russ Michaels wrote: >> or give Fuseguard a try >> >> http://foundeo.com/security/ >> >> On Thu, Nov 24, 2011 at 10:56 AM, Pa

RE: Weird attack

2011-11-24 Thread Rick Sanders
ve an antivirus. Good luck. Kind Regards, Rick Sanders Webenergy Software 902-401-7689 http://www.webenergy.ca -Original Message- From: Paul Stewart [mailto:p...@whichfranchise.com] Sent: Thursday, November 24, 2011 8:13 AM To: cf-talk Subject: Re: Weird attack On 24/11/2011 11:10, Russ Mic

Re: Weird attack

2011-11-24 Thread Paul Stewart
On 24/11/2011 11:10, Russ Michaels wrote: > or give Fuseguard a try > > http://foundeo.com/security/ > > On Thu, Nov 24, 2011 at 10:56 AM, Paul Stewart > wrote: >> On 18/11/2011 16:57, =?ISO-8859-1?Q?Claude_Schn=E9egans wrote: >>> Hi, >>> >>> Since a few days, I have all my sites receiving reque

Re: Weird attack

2011-11-24 Thread Russ Michaels
or give Fuseguard a try http://foundeo.com/security/ On Thu, Nov 24, 2011 at 10:56 AM, Paul Stewart wrote: > > On 18/11/2011 16:57, =?ISO-8859-1?Q?Claude_Schn=E9egans wrote: >> Hi, >> >> Since a few days, I have all my sites receiving requests in which a string >> like "/**/or/**/1=@@version)-

Re: Weird attack

2011-11-24 Thread Paul Stewart
On 18/11/2011 16:57, =?ISO-8859-1?Q?Claude_Schn=E9egans wrote: > Hi, > > Since a few days, I have all my sites receiving requests in which a string > like "/**/or/**/1=@@version)--" is added in the URL. > > Has someone any idea what this guy is actually trying to do ? > > ~~

Re: Weird attack

2011-11-23 Thread Justin Scott
> What I mean is that cfqueryparam will not protect you against > attacks, il will just prevent attacks to be succesful. Well, that's mostly the point. > A better approach is to check for a couple of key words like ... In other words, deploy an IDS/IPS system in front of your web application to

Re: Weird attack

2011-11-23 Thread Claude Schnéegans
>>The cfqueryparam tag doesn't care where data comes from What I mean is that cfqueryparam will not protect you against attacks, il will just prevent attacks to be succesful. A better approach is to check for a couple of key words like user declare script @@ exec,... (provided you don't use the

Re: Weird attack

2011-11-23 Thread Justin Scott
> If your template is not using URL parameters in a query, > cfqueryparam wont help. The cfqueryparam tag doesn't care where data comes from and works just as well on data imported from a CSV or XML file as it does on form, url, or cgi scope variables that the end-user can control. Aside from en

Re: Weird attack

2011-11-18 Thread Aaron
It is actually very difficult to change an application's rendered output, like in the case of obtaining version information. It is much easier to inject comparisons and see if the template continues to execute, and that would verify their inquiry. You are right an attacker that is just blanket a

Re: Weird attack

2011-11-18 Thread Claude Schnéegans
>>If your site returned what they wanted, in this case SQL server version information Ok, I see. In my case, I doubt the 403 error they get in return will help them a lot ;-) ~| Order the Adobe Coldfusion Anthology now! http:/

Re: Weird attack

2011-11-18 Thread Aaron
SQL Injection attacks are usually just one little possibility an attacker tries as fast and as many places as they can hoping one of them will give up the goods. That one in particular looks like they are banking on forcing their own parameterized query input comparison. If they can break your q

Re: Weird attack

2011-11-18 Thread Claude Schnéegans
>>Good old cfqueryparam has been working like a charm! If your template is not using URL parameters in a query, cfqueryparam wont help. And if the parameter is text, the scrap will get into your database as well. Happily, my moron trap is more general. ;-) ~~

Re: Weird attack

2011-11-18 Thread Wil Genovese
select @@VERSION does not work with PostgreSQL. This is the DB I use for all my sites. I scrub ALL data input, varchar fields get run through several scrubbers in my code. The one I am seeing this on are integer fields and I have cfqueryparam datatypes sets. Thus integers are scrubbed withou

Re: Weird attack

2011-11-18 Thread Russ Michaels
this is SQL Injection. most hackers will first use a simple URL hack like this to identify vulnerable websites, their bot will collect the response and flag the ones that gave back the required response. If your site returned what they wanted, in this case SQL server version information, then they

Re: Weird attack

2011-11-18 Thread Leigh
> MS SQL Server (@@VERSION). Btw: MySQL supports @@VERSION too. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.co

Re: Weird attack

2011-11-18 Thread Leigh
I do not know about the whole expression. But a few references mentioned using 1=@@version) to trigger an error disclosing the database version. The @@version variable works in MySQL and MS SQL, maybe others.   -Leigh ~| Order

Re: Weird attack

2011-11-18 Thread Phillip Vector
Ah.. Thank you. On Fri, Nov 18, 2011 at 9:05 AM, Aaron wrote: > > That is an attempted SQL Injection.  @@VERSION returns all the goodies you > would expect, and offers information an attacker might be able to use to > better expoit. > > MS SQL Server @@VERSION: > http://msdn.microsoft.com/en-US/

Re: Weird attack

2011-11-18 Thread Dave Watts
> Since a few days, I have all my sites receiving requests in which a string > like "/**/or/**/1=@@version)--" is added in the URL. I would guess it's targeting MS SQL Server (@@VERSION). Beyond that, I'd guess it's intended to identify vulnerable web apps using SQL Server and perhaps measure ti

Re: Weird attack

2011-11-18 Thread Aaron
That is an attempted SQL Injection. @@VERSION returns all the goodies you would expect, and offers information an attacker might be able to use to better expoit. MS SQL Server @@VERSION: http://msdn.microsoft.com/en-US/library/ms177512(v=SQL.90).aspx On Fri, Nov 18, 2011 at 11:02 AM, Wil Geno

Re: Weird attack

2011-11-18 Thread Phillip Vector
Well, if it wasn't cfqueryparam, I don't see any issues in the SQL that would cause ... anything. Am I missing something here? If it wasn't scrubbed, what would it do? On Fri, Nov 18, 2011 at 9:02 AM, Wil Genovese wrote: > > No clue what they are after, but I have been seeing that in my error

Re: Weird attack

2011-11-18 Thread Wil Genovese
No clue what they are after, but I have been seeing that in my error notification alerts the week. Good old cfqueryparam has been working like a charm! Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com wilg...@trunkful.com www.trunkful.com On

Re: Weird attack

2011-11-18 Thread Phillip Vector
I've gotten those as well. It appears he's using a proxy or it's a worm as it's traced to Germany and PA in the states. No clue as to what it's trying to accomplish. On Fri, Nov 18, 2011 at 8:57 AM, <> wrote: > > Hi, > > Since a few days, I have all my sites receiving requests in which a string

Weird attack

2011-11-18 Thread Claude Schnéegans
Hi, Since a few days, I have all my sites receiving requests in which a string like "/**/or/**/1=@@version)--" is added in the URL. Has someone any idea what this guy is actually trying to do ? ~| Order the Adobe Coldfusion An

Re: Weird issue with CFHTTP and redirect with cookie

2011-08-10 Thread Casey Dougall
On Tue, Aug 9, 2011 at 2:42 PM, kbutte...@yahoo.com kbutte...@yahoo.com < kbutte...@yahoo.com> wrote: > > Hi all, > > I am working on a screen-scraper app, and I have a site that has an > disclaimer front page. You have to click on the "I understand" button and > then you are redirected to the i

Re: Weird issue with CFHTTP and redirect with cookie

2011-08-09 Thread Dave Watts
> Do I need to grab that session ID manually?  I thought I might have to do > that so I have tried to set redirect="false", but I can't get the session ID > returned in the header You will need to read the cookies and send them on subsequent requests. The ASP.NET session ID is almost certainly a

Re: Weird issue with CFHTTP and redirect with cookie

2011-08-09 Thread kbutte...@yahoo.com kbutte...@yahoo.com
To clarify the below post, when I try to get the cookie by setting redirect="false" in my cfhttp call, I get an error and the message from cfcatch is " 302 Moved Temporarily " So that's why I can't get the cookie. > Hi all, > > I am working on a screen-scraper app, and I have a site that has

Weird issue with CFHTTP and redirect with cookie

2011-08-09 Thread kbutte...@yahoo.com kbutte...@yahoo.com
Hi all, I am working on a screen-scraper app, and I have a site that has an disclaimer front page. You have to click on the "I understand" button and then you are redirected to the inspections page that I need to get to. I can get to the disclaimer page, but I cannot get cfhttp to get past th

Re: Weird undefined error

2011-07-26 Thread Russ Michaels
have you upgraded your database server recently. ISTR that you have to use scope_identity on SQL2008 and the old reference no longer works. Russ On Tue, Jul 26, 2011 at 12:15 PM, Brian Polackoff wrote: > > Has anyone ever run into "identitycol" is undefined while using the result > attribute in

Weird undefined error

2011-07-26 Thread Brian Polackoff
Has anyone ever run into "identitycol" is undefined while using the result attribute in a cfquery while using cf8 enterprise on a windows 2k8 and a SQL 2005 server? This problem started on Sunday in our production environment. We have rebooted the database server and the web servers with no ef

Re: Weird ColdFusion Admin Error

2011-07-08 Thread Dave Watts
> Did you ever resolve this?  I'm getting it now on an MX 7 installation when I > try to access the administrator page.  It's a Virtual Private Server and I > bet some config change was made that screwed up the encryption.  May have to > reinstall and reconfigure ColdFusion -- ugh!  Bob Mack > >

Re: Weird ColdFusion Admin Error

2011-07-07 Thread Russ Michaels
have you just done an update by any chance ? try loading the cfadministrator Russ On Fri, Jul 8, 2011 at 1:19 AM, Robert Mack wrote: > > >500 coldfusion.runtime.CfJspPage._setCurrentLineNo(I)V > >coldfusion.runtime.CfJspPage._setCurrentLineNo(I)V > > > >anyone ever see this before? > > > >tw

Re: Weird ColdFusion Admin Error

2011-07-07 Thread Robert Mack
Did you ever resolve this? I'm getting it now on an MX 7 installation when I try to access the administrator page. It's a Virtual Private Server and I bet some config change was made that screwed up the encryption. May have to reinstall and reconfigure ColdFusion -- ugh! Bob Mack >500 cold

Re: Weird ColdFusion Admin Error

2011-07-07 Thread Robert Mack
>500 coldfusion.runtime.CfJspPage._setCurrentLineNo(I)V >coldfusion.runtime.CfJspPage._setCurrentLineNo(I)V > >anyone ever see this before? > >tw > >-- >'Never have anything in your life that you can't walk out on in thirty >seconds flat, if you spot the heat coming around the corner' > >robert d

Weird FckEditor problem with IE and Chrome..works in Firefox

2011-06-07 Thread Torrent Girl
Hello All. I went to great lengths to research any kind of way to prevent the fckEditor from stripping or changing tags. I modified the fckconfig.js file with the following which works great in Firefox: FCKConfig.ProtectedSource.Add( /<%[\s\S]*?%>/g ) ; // ASP style server side code <%.

Weird problem with CFPDF addheader/image

2010-11-02 Thread Ryan Bentley
Ok, so I am hoping someone out there has some kind of insight on this issue as I cannot find anything on this. We are having an issue with CF9 with images not printing. We do a ton of pdf generation each day, and right now have a clients code updated to cf9. Its very simple code, and below is

Re: Weird Time Thing

2010-06-30 Thread John M Bliss
< = "before" Try WHERE last_attempt > #DateAdd('n',15,Now())#; On Wed, Jun 30, 2010 at 2:31 PM, Robert Harrison wrote: > > This creates my time (SQL Insert): > >SET last_attempt=#CreateODBCTime(Now())# > > This is the query to get (after 15 minutes have passed): > >WHERE la

Weird Time Thing

2010-06-30 Thread Robert Harrison
This creates my time (SQL Insert): SET last_attempt=#CreateODBCTime(Now())# This is the query to get (after 15 minutes have passed): WHERE last_attempt < #DateAdd('n',15,Now())#; But it's selecting all records regardless of the time. What the heck? Robert B. Harrison

Re: CFMX7, Ubuntu, Virtual Hosts, and a weird CFLOCK issue

2009-07-22 Thread Tom Chiverton
On Wednesday 22 Jul 2009, Rob Barthle wrote: > > Wasn't Application.cfc introduced in CF8, not 7 ? > If that were the case, then I'd be having bigger problems... ;-) Coffee failure, oops. -- Helping to proactively compete essential cross-platform systems as part of the IT team of the year, '09

Re: CFMX7, Ubuntu, Virtual Hosts, and a weird CFLOCK issue

2009-07-22 Thread Rob Barthle
> Wasn't Application.cfc introduced in CF8, not 7 ? > If that were the case, then I'd be having bigger problems... ;-) ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion m

Re: CFMX7, Ubuntu, Virtual Hosts, and a weird CFLOCK issue

2009-07-22 Thread Tom Chiverton
On Tuesday 21 Jul 2009, Rob Barthle wrote: > Background: I have a local CFMX7 ... > The Application.cfc file has things set up properly: Wasn't Application.cfc introduced in CF8, not 7 ? -- Helping to professionally entrench open-source convergence as part of the IT team of the year, '09 and

Re: CFMX7, Ubuntu, Virtual Hosts, and a weird CFLOCK issue

2009-07-21 Thread Rob Barthle
>Perhaps with the direct domain name, you remove the ability to >traverse up the directory tree to get at the application.cfc? >Is the application.cfc in the same directory as the page you are calling? > > Al, you are the man. I set up the site directory name wrong compared to the working serve

Re: CFMX7, Ubuntu, Virtual Hosts, and a weird CFLOCK issue

2009-07-21 Thread Rob Barthle
>Perhaps with the direct domain name, you remove the ability to >traverse up the directory tree to get at the application.cfc? >Is the application.cfc in the same directory as the page you are calling? > > Yes it is. As I said before, this exact setup works properly on another server (only that

Re: CFMX7, Ubuntu, Virtual Hosts, and a weird CFLOCK issue

2009-07-21 Thread Al Musella, DPM
om) which points to a subdirectory of >/www/CFAPPS/ on my server (like the other sites that work do), and I >added a virtual host to Apache. It seems to have set up fine there, >but I get a weird error when I try to access the site: > >== &

  1   2   3   4   5   6   7   8   9   10   >