Re: [CFCDev] Application Data Source Names

2005-06-15 Thread Bill Rawlinson
Joe, thanks - i'll read up some on the SCOPE_IDENTITY method then. BillOn 6/13/05, Joseph Flanigan <[EMAIL PROTECTED]> wrote: Dave - the mental model does not submit the entire transaction to the DBuntil the stack is built but I don't think that can be entirely correcteither.Bill - SQL reference ma

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Dave Watts
> Dave - the mental model does not submit the entire > transaction to the DB until the stack is built but I > don't think that can be entirely correct either. I don't know about your mental model, but I can tell you what I can see from a database trace. As far as I can see, it's all sent at once

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Jim Davis
Of course with SQL Server you don't have to guess: turn on SQL Trace and see what happens when you call the DB using CFTransaction. It'll tell you in a hurry what's going on. ;^) Jim Davis -- You are subscribed to cfcdev. To unsubscrib

Re: [CFCDev] Application Data Source Names

2005-06-13 Thread Joseph Flanigan
Dave - the mental model does not submit the entire transaction to the DB until the stack is built but I don't think that can be entirely correct either. Bill - SQL reference manual has a discussion on @@identity vs SCOPE_IDENTITY(). Also several articles are around on the topic. SCOPE_IDENTIT

Re: [CFCDev] Application Data Source Names

2005-06-13 Thread Bill Rawlinson
Joe, Just an FYI you can do, what I think your trying to do in your example of two queries as follows:       SET NOCOUNT ON       INSERT INTO dbo.tContact            (            [ContactTypesID],            [StatusID],            [TimeZoneID]            )            VALUES      

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Dave Watts
> -- In any cfquery, use SQL transaction statements. > -- Build long cfquery with multiple SQL statements (cfquery > allows multiple SQL statements) > -- In the application-data base design, minimize the > transaction area. By keeping the area small, rollback has > less impact. > -- Do risk asse

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Dave Watts
> Here is an example of how to put 2 queries in a single > cfquery for SQL Server. That's nice, but I don't think all database drivers support that capability. The CFTRANSACTION tag provides that capability in a way that works with any database drivers that support transactional processing, I thi

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Joseph Flanigan
: CFCDev@cfczone.org Subject: RE: [CFCDev] Application Data Source Names Here is an example of how to put 2 queries in a single cfquery for SQL Server. The tContact table has a primary key, ContactID, that is of type identity. "Create" returntype="query"> "theP

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Joseph Flanigan
June 13, 2005 6:26 PM To: CFCDev@cfczone.org Subject: RE: [CFCDev] Application Data Source Names Here is an example of how to put 2 queries in a single cfquery for SQL Server. The tContact table has a primary key, ContactID, that is of type identity. "Create" returntype="quer

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Ung, Seng
Thanks, and insteresting of  maxrows=-1  Why -1 ?     -Original Message-From: Joseph Flanigan [mailto:[EMAIL PROTECTED]Sent: Monday, June 13, 2005 9:26 AMTo: CFCDev@cfczone.orgSubject: RE: [CFCDev] Application Data Source NamesHere is an example of how to put 2 queries

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread RADEMAKERS Tanguy
: [CFCDev] Application Data Source Names Here is an example of how to put 2 queries in a single cfquery for SQL Server. The tContact table has a primary key, ContactID, that is of type identity."Create" returntype="query"> "theParams" type="str

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Joseph Flanigan
Here is an example of how to put 2 queries in a single cfquery for SQL Server. The tContact table has a primary key, ContactID, that is of type identity. "Create" returntype="query"> "theParams" type="struct" default="#this#" required="yes" > "DSN" type="string" default="#this.DSN#">  

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Joseph Flanigan
> Unless you use stored procedures exclusively -- In any cfquery, use SQL transaction statements. -- Build long cfquery with multiple SQL statements (cfquery allows multiple SQL statements) -- In the application-data base design, minimize the transaction area. By keeping the area small, rollback

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Dave Watts
> ( I never use cftransaction because it has poor documentation. > I know Cornfied and others brag about it, but I do not consider > it a best practice tag. cfinsert and cfupdate fall into this > category as well.) Unless you use stored procedures exclusively, how else can you guarantee that tw

RE: [CFCDev] Application Data Source Names

2005-06-13 Thread Dave Watts
> When a DSN is put into the administrator with account and > password, the DSN becomes available to all applications on > the server. In a shared hosting environment, DSN are very > easy to discover. This means untrusted users can compromise > any shared user. Datasources can be sandboxed, us

RE: [CFCDev] Application Data Source Names

2005-06-12 Thread Roland Collins
: Sunday, June 12, 2005 8:28 PM To: CFCDev@cfczone.org Subject: RE: [CFCDev] Application Data Source Names What does "this" refer to? Do you mean that making DSN without account and passwords causes cftransaction to fail? If that is case, perhaps Macromedia should review the architecture.

Re: [CFCDev] Application Data Source Names

2005-06-12 Thread Gary Menzel
CFAdmin.  It doesn't always tell you it's >failing though!>>Roland>>-Original Message->From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf>Of Joseph Flanigan>Sent: Sunday, June 12, 2005 4:42 AM>To: CFCDev@cfczone.org>Subject: [CFCDev] Applic

RE: [CFCDev] Application Data Source Names

2005-06-12 Thread Joseph Flanigan
s tell you it's failing though! Roland -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joseph Flanigan Sent: Sunday, June 12, 2005 4:42 AM To: CFCDev@cfczone.org Subject: [CFCDev] Application Data Source Names There is a security problem / use problem w

RE: [CFCDev] Application Data Source Names

2005-06-12 Thread Roland Collins
nt: Sunday, June 12, 2005 4:42 AM To: CFCDev@cfczone.org Subject: [CFCDev] Application Data Source Names There is a security problem / use problem with CF's Data Source Name. When a DSN is put into the administrator with account and password, the DSN becomes available to all applications on t

Re: [CFCDev] Application Data Source Names

2005-06-12 Thread Nathan Dintenfass
But, in a shared hosting environment it's also easy to impersonate other's Application scope by just putting a CFAPPLICATION tag with the same name. The only truly secure way to run CF on a shared server is to have multiple instances of CF -- but, that is typically resource prohibitive. At s

[CFCDev] Application Data Source Names

2005-06-12 Thread Joseph Flanigan
There is a security problem / use problem with CF's Data Source Name. When a DSN is put into the administrator with account and password, the DSN becomes available to all applications on the server. In a shared hosting environment, DSN are very easy to discover. This means untrusted users can