Wait... what? Are these two browsers on the same computer? If they are then that is not two browsers, that is one browser. You cannot open two instances of IE on the same machine and expect them to maintain different sessions. If that is what you are doing then when you "delete the cookies in the second browser" you are also deleting the cookies in the first. When you were doing this in CF9, what version were you using?  Did you have any of the security hotfixes installed? Of course CF10 allows multiple browser sessions, but to do that you have to actually use multiple browsers, not the same browser twice. jason ... View more

Mucharla Raja wrote: <cfif IsDefined("Cookie.CFID") and IsDefined("Cookie.CFTOKEN")> <cfset cfid_local = Cookie.CFID> <cfset cftoken_local = Cookie.CFTOKEN> <cfcookie name="CFID" value="#cfid_local#"> <cfcookie name="CFTOKEN" value="#cftoken_local#"> </cfif> What is the point of this code? The way I read this is: If the cookies exists, reset them with their same names and values. Seems kinda pointless. Try this: <cfif NOT IsDefined("Cookie.CFID") OR NOT IsDefined("Cookie.CFTOKEN")>      <cfcookie name="CFID" value="#session.CFID#">      <cfcookie name="CFTOKEN" value="#session.CFTOKEN#"> </cfif> You should be getting session token information from the session, not from cookies. The session stored on the server is the authority. Also, I would encourage you to look at the HTTP headers going back and forth on the browser that is failing. See what is being passed back and forth. If you are using FireFox you can get a plugin called HTTPLive Headers that will show you. One final thing, when you do these First-Browser / Second-Browser tests, are you always using the same two browsers in the same order? Or are you mixing it up?  Have you tried using different combinations to see if they yield different results? For example: First Browser     Second Browser IE                         Firefox FireFox                    IE Chrome               FIreFox IE                         Chrome Safari                    Chrome Jason ... View more

So are you still putting extends="/app.application"?  That's the part I meant not to do.  Lose the slash, it should work without it. Having the slash there is NOT the right way to do it, even if in some situations it does work. Jason ... View more

You said it did not work after you added the cfqueryparams.  I don't see any query params there.  Show us the version that doesn't work. Not the one that does. Jason ... View more

Is www part of your FQN? When you create an instance of slave.cfc do you use the FQN www.app.coms.slave? By the way, more appropriate names are Parent.cfc and Child.cfc. It is not really a master/slave relationship, it is a parent/child relationship. The extended CFC does not control the CFC doing the extending. Jason ... View more

And you cannot retype a sample of the code? Jason ... View more

You can't use cfqueryparam with the value going into the ORDER BY clause. cfqueryparam is only for statements in the WHERE clause. You'll need to find another way to sanitize the input for ORDER BY. Jason ... View more

Squiggy2, I apologize for being so flippant in my response to you last night. Something about your response irritated me and I responded poorly to it. I hope that the code part of my response was helpful even if my snarkiness was not. Jason ... View more

Really?  You think that functionality is built into JavaScript and it's not the third-party service http://www.ip2phrase.com/ that is being called that's doing it? You could call the service just as easily with CF using CFHTTP, but since that particular service returns an executable JS statement you would need to parse out the pieces that you want. <cfhttp url="http://www.ip2phrase.com/ip2phrase.asp?template=Looks%20like%20you%20live%20in%20<CITY>." result="response" method="get" /> <cfdump var="#response.filecontent#" /> ... View more

There is noting built into CF (or any language that I am aware of) that would do this. You would need to use third-party service. Do a web search for "ISP Lookup Service" or "GeoIP Service" and you'll likely find what you're looking for. The only part CF will play in the process is make the request to the service (either a CFHTTP or CF Web Service call) and process the data that is returned. Jason ... View more

http://ray.camdenfamily.com/index.cfm/2005/11/8/Ask-a-Jedi-Whats-up-with-CFIDE-And-some-cool-Allaire-history-to-boot Excerpt: Back before Allaire acquired the Homesite product from Nick Bradbury, a fully web-based ColdFusion administration AND development experience was envisioned. It was to use a combination of client-side Java and ColdFusion server-side code. The "/CFIDE" (or "ColdFusion Integrated Development Environment") directory was the designated location for this administrator and development environment. ... View more

Of course.  I knew that too. Sorry, I was too focused on the idea that completely decoded output is dangerous. The moral of the story, and the point I was trying to get across, and the reason that AllowMultipleEncoding and AllowMixedEncoding are set to false by default is because if those characteristics are present then the string is likely an attack and you should not be trying to avoid the error unless you know what you're doing. The secondary moral is, encode ALL untrusted data before outputing it to the screen. Canonicalize does not add security, it actually removes it, by removing any encoding that may exist. It is a helper function that is there to avoid unintentional double-encoding. Thanks for correcting me. ... View more

Actually, you should NOT call canonicalize before passing to decodeURL. Canonicalize should be called prior to encoding, not decoding. In fact, calling canonicalize before outputting data to the browser will create security holes. The reason that the decode methods throw errors when faced with double or mixed encoding is because double/mixed encoding is a red-flag for an attack. If you canonicalize that user input before sticking it on your page you are enabling the attack. Something that was double/mix encoded should NOT be display, especially not in a canonicalized form. Canonicalize removes all encoding (including URL encoding, so it would not make sense to do it before decodeForURL for that reason either). If you remove all the encoding from an injeciton attack then that injection will likely succeed. If you then intend to reencode properly you would be protected, however you would be hiding a likely attack. If you are properly canonicalizing prior to encoding data then there is no reason to canonicalize when decoding. ... View more

What am I? Chopped Liver? Anyway, you marked the wrong part of this thread as the correct answer. It should have been #11. Glad you got it working (even though I don't agree with what you're trying to do). Jason ... View more

Look at the code in the pseudo-constructor this way. This is how it runs everytime (every request) that Application.cfc is instantiated. 1. <!--- A variable named "name" is created in the this scope ---> 2. <cfset THIS.name = hash( getCurrentTemplatePath() )> 3. 4. <!-- A variable named "customTagPaths" is created in the this scope ---> 5. <cfset THIS.customTagPaths = 'c:|inetpub\wwwroot\project\custom-tags'> 6. 7. <!--- You try to use the param.cfm custom tag ---> 8. <cf_param name="test" type="string" default="foo" hint="YES! WE CAN PUT HINTS ON PARAMS!"> Did any code get executed between lines 5 and 8 to actually tell CF to take the value set in line 5 and make that a custom tag path? The answer is no. At this point in the code THIS.customTagPaths is just a string variable sitting in the Application.cfc object. ColdFusion does not come across that line and say "Oh, this is a special variable, let me pause this thread, run out and set those custom tag paths, and then go back and continue processing this code".  AFTER the pseudo constructor code finishes running CF will start processing that stuff.  It will go set up the custom tag paths, it will create per-application mappings, etc etc. Then it will start firing event handlers. oAS will run, oSS will run, etc. Finally it will include the requested template. When it comes across like 8 above it will search for the param.cfm where it can (same directory, server directory), but at this point it has not yet executed any code that will set up custom tags per-application based on the value in App.cfc's pseudo constructor. I hope this makes sense. Jason ... View more

Aegis Kleais wrote: If invoking the custom tag from the pseudo-constructor area of the application.cfc works, I'm not sure if executing it from a request would be any different. I suggest you try it.  That would give you your answer. ... View more

I would guess that, for whatever reason, those paths are not yet ready at that point in the application (you're trying this from App.cfc, right)?  I would bet that if you tried it from a cfm that they would work. Hints are not really there for commenting though. They exist for creating API documentation. Since cfparams cannot really be a part of an API, it doesn't really make sense for them to have hint attributes. Jason ... View more

I'm sorry, I don't really have an answer for you except for routine stuff.  Does CF have read/execute permission to that directory? Have you tried dropping the cfm into the CF custom_tags server directory? I am curious though, why do you think (so strongly) that cfparam needs a hint attribute? What purpose would it server? Jason ... View more

Can you modify the first DDL to accept an instance of the second as an argument and store it internally?  Then use CF to instantiate and instance of the second and pass it into the first for use? Just a thought, sorry if it is not helpful. Jason ... View more

I would say check the mail server. I know that our mail servers are set up so that only certain servers can send emails to domains other than our own. I had to request that my CF server be allowed to do it otherwise it could only send mail to our domain. I believe it will only show up in undeliverable if the mail server responds with a problem. If the mail server just ignores the email bound for a different domain and never sends an undeliverable back, then it won't show up there. Jason ... View more

OK, modified. <!DOCTYPE html> <html>     <head>         <meta charset="UTF-8" />         <title>jQuery Demo</title>                 <script src="http://code.jquery.com/jquery-1.8.2.min.js"></script>         <script>             // When the DOM is ready, this will run             $(function(){                 // The URL to the remote CFC                 var url = "/serviceticket/cfcs/menudata.cfc";                 // The data to be passed along as params to the call                 var params = {                     method : "getData",                     returnformat : "json"                 }                 // make the ajax call                 $.ajax({                     url: url,                     data: params,                     dataType: "json",                     success: function(data, txt, xhr) {                         // When the ajax call is successful                                                 // Get the array of values out of the response                         values = data.DATA;                         // Loop over each element of the array                         $.each(values, function(i, n){                             // Create an option element                             var $tempOption = $("<option></option>");                             //Set the value and display text for the option                             $tempOption.attr({value:values});                              // In This case they value and display text are the same.                             $tempOption.html(values);                             // Append the option to the select element                             $('#mySelect').append($tempOption);                         })                     },                     error: function(xhr, txt, error) {                         console.log("Error:" + error);                     }                 });             });         </script>     </head>     <body>         <select id="mySelect"></select>     </body> </html> ... View more

Well now, hold on. That output is *very* different than the output you showed us earlier. Recall this from your previous post: info:http: CFC invocation response:                   [[1,"Dinner"],[6,"Friday"],[2,"Monday"],[7,"Saturday"],[8,"Sunday"],[ 5,"Thursday"],[3,"Tuesday"],[4,"Wednesday"]] I will try to modify the code to work. jason ... View more

I just realized I forgot an important param. Modify the param code like this: var params = {      method : "getData",      returnFormat : "json" } ... View more

There are tutorials all over for jQuery. But to get you started, try this out.  It should work with your remote function based on the output you showed above. <!DOCTYPE html> <html>     <head>         <meta charset="UTF-8" />         <title>jQuery Demo</title>                 <script src="http://code.jquery.com/jquery-1.8.2.min.js"></script>         <script>             // When the DOM is ready, this will run             $(function(){                 // The URL to the remote CFC                // Replace this value with the path to your CFC if I don't have it right                 var url = "/serviceticket/cfcs/menudata.cfc";                 // The data to be passed along as params to the call                 var params = {                     method : "getData"                 }                 // make the ajax call                 $.ajax({                     url: url,                     data: params,                     dataType: "json",                     success: function(data, txt, xhr) {                         // When the ajax call is successful                         // Loop over each element of the array                         $.each(data, function(i, n){                             // Create an option element                             var $tempOption = $("<option></option>");                             //Set the value and display text for the option                             $tempOption.attr({value:data[0]});                             $tempOption.html(data[1]);                             // Append the option to the select element                             $('#mySelect').append($tempOption);                         })                     },                     error: function(xhr, txt, error) {                         console.log("Error:" + error);                     }                 });             });         </script>     </head>     <body>         <select id="mySelect"></select>     </body> </html> ... View more

I tried to help already. Don't get too snotty. The simple fact is that cfforms suck. They really do. I can't recommend using them, ever. I'm not sure what else to do except encourage you to use a better solution. As far as I am concerned, that *is* helpful. Jason ... View more

I could have rewritten that functionality with jQuery 170 times in so many days.  Just sayin'. Jason ... View more

HTML forms combined with jQuery or another JS library (prototype, Mootools, Dojo, etc). jason ... View more

My usual advice is not to use cfform (for anything), but I'll offer this. I see in this example from Dan Short (http://www.dansshorts.com/post/cfselect-binding-and-selectedvalues) that he is specifying which columns to use for the "value" and "display" of the list. I don't see you doing that. It looks like since you are only returning a single value you could get away with *just* specifying the value. <cfselect name="category" bind="cfc:cfcs.menudata.getData()" bindonload="true" value="description"></cfselect> Hope that helps. Jason ... View more

Dan Bracuk wrote: Custom tags and cfc's can be set up outside the webroot.  You have to specify the location in CF Admin. Or in Application.cfc. Everything that Adam already said. jason ... View more