cfml

Picking a ColdFusion MVC Framework [closed]

由 假装没事ソ 提交于 2019-11-27 03:49:30
I am taking over a lot of the ColdFusion stuff that is lingering at our shop and they are insistent it stay on ColdFusion and that new projects in this area MUST be done in CF - basically this part is non-negotiable. I am not very experienced in CF (haven't touched it since 2003) so most of my development has been in .Net, MVC, C#, Linq-to-SQL in the past 4-5 years. I was doing some looking around for a MVC framework that I could relate my Asp.Net MVC experience to and hopefully an integrated ORM (I am stuck using CF 8 at least for a while). I have found a few like Model-and-glue, Mach II and

ColdFusion Query - Injection Protection

由 我与影子孤独终老i 提交于 2019-11-26 23:39:36
问题 I ask this question with a bit of sheepishness because I should know the answer. Could someone be kind and explain if and how injection could occur in the following code? <cfquery> select * from tableName where fieldName = '#value#' </cfquery> I'm specifically curious about injection attempts and other malicious input, not about best practices or input validation for handling "normal" user input. I see folks strongly advocating use of CFQueryParam, but don't think I see the point. If user

ColdFusion adding extra quotes when constructing database queries in strings

由 为君一笑 提交于 2019-11-26 23:11:17
I am coding in ColdFusion, but trying to stay in cfscript, so I have a function that allows me to pass in a query to run it with <cfquery blah > #query# </cfquery> Somehow though, when I construct my queries with sql = "SELECT * FROM a WHERE b='#c#'" and pass it in, ColdFusion has replaced the single quotes with 2 single quotes. so it becomes WHERE b=''c'' in the final query. I have tried creating the strings a lot of different ways, but I cannot get it to leave just one quote. Even doing a string replace has no effect. Any idea why this is happening? It is ruining my hopes of living in

Wrapping lists into columns

由 こ雲淡風輕ζ 提交于 2019-11-26 18:13:00
问题 I'm using ColdFusion to populate a template that includes HTML unordered lists ( <ul> s). Most of these aren't that long, but a few have ridiculously long lengths and could really stand to be in 2-3 columns. Is there an HTML, ColdFusion or perhaps JavaScript (I'm accepting jQuery solutions) way to do this easily? It's not worth some over-complicated heavyweight solution to save some scrolling. 回答1: So I dug up this article from A List Apart CSS Swag: Multi-Column Lists. I ended up using the

ColdFusion adding extra quotes when constructing database queries in strings

由 隐身守侯 提交于 2019-11-26 07:49:13
问题 I am coding in ColdFusion, but trying to stay in cfscript, so I have a function that allows me to pass in a query to run it with <cfquery blah > #query# </cfquery> Somehow though, when I construct my queries with sql = \"SELECT * FROM a WHERE b=\'#c#\'\" and pass it in, ColdFusion has replaced the single quotes with 2 single quotes. so it becomes WHERE b=\'\'c\'\' in the final query. I have tried creating the strings a lot of different ways, but I cannot get it to leave just one quote. Even
订阅 cfml