I inherited this page today with 3 forms. All the forms have unique id's and form names. All 3 forms have a hidden field with the same form field name but different values.
When you submit form 2 or form 3 they concatenate each others hidden values when CF 8 dumps out the form structure. yikes!
After applying the CF 8.01 update file I notice sandbox security is suddenly pitching a fit for not having access to (cf_install)\CustomTags\ and denies all access. Pre 8.01 it didn't care if it was in there or not and never denied access to it if it wasn't listed under the files/dirs tab.
Just a friendly FYI to anyone pulling their hair our like I am today!
I've been finding myself setting up CF 8 instances more than getting haircuts recently. Our datasources are 80% consistent and our settings are 100% consistent. I've read some of the articles on exporting datasources but they scare me a bit on a production machine!
Anyone have any good advice or articles on exporting/importing an instance configuration? I know I could write something to handle some of it using the admin api, but I'm curious what other people are doing. I can't possibly be alone!
I've been struggling lately with setting up Sandbox Security in CF8, and running into some odd issues! The official press says there is no major difference in the sandboxes from v7 to v8, however I never ran into these issues in v7.
When I try to lock down the webroot (only has 1 dedicated app), to simply remove tags like cfexecute and cfregistry etc, I start getting java errors thrown out all over the place. The main error is access to the C: drive level java exe when I attempt a file upload. Anyone ever run into this before? In V7 I never needed to give the sandbox permissions on the OS partition to perform basic tasks, so this is a bit frustrating!!!!
Anyone experience this before??
I have a query that uses a queryparam of type integer for a session variable that stores a user id. It works fine in two development environments on CF8, and a one-off test environment running CF7 full hotfixed. It WAS working in production on a CF7 fully hotfixed until this morning.....
It is now returning an error: The variable cannot be converted to the type requested
If I remove the queryparam and wrap the session var in a val() it works fine again.
The variable tests for being numeric AND an integer fine.
boggling.
Adobe has published a white paper in the Security Dev Center for CF8 best practices and security guidelines. It weighs in at almost 50 pages, and is a must-have in my opinion.
ColdFusion 8 Developer Security Guidelines (direct pdf link)
I was rummaging through links today and found this one from awhile back. Ever had to use absolute positioning? Ever have to center the main div element like facebook or myspace does? Then you share the pain of cf debugging's positioning limitations with your design.
Well in case you weren't familiar with this approach and aware how easy it was to implement, and aren't fond of dockable debugging (like me)... here you go:
Originally taken from: http://www.numtopia.com/terry/blog/
so I was setting up some nice app action with cfdbinfo to try and match up indexes across database servers. I came across an oddity, possibly a bug?
My predecessors named the databases and data sources with hypens in them. For example, test-database. Any database or data source (haven't singled out which causes it, I suspect the data source to be the obvious choice?) will not populate using cfdbinfo. If you use the table browsing, it will actually tell you that valid tables inside the database do not exist, rather than show you a perceived error or an inability to connect to the database.
fun stuff.
I released a new version of CF Spry Forms today. This release includes the update to Spry 1.5 as well as: Radio Button widget, Autosuggest widget, autosuggest functionality added to the Textfield widget, Documentation added, and some small bug fixes.
CF 8 RC1 is open to the public. I assume that means the NDA is lifted, so I'll say you should definitely get this and play right away (if you haven't payed attention to every CF blog in the world right now :o ). This release is easily shaping up to be amazing and really shows a lot of Adobe's committment, and the benefits of them running the show.
