OWASP

OWASP Intro to XSS Attacks:

Railo 3.3 on Jelastic.. socks officially blown off!

Wow. A one-click .war distribution on scalable hosting... this could be a game changer... Unfortunately:

- Jelastic doesn't use MS-SQL.. which means no management console. An alternative might be the fact that mySQL does have a GUI via workbench
- Jelastic uses Maven.. and has no support for Checkout only.. which means old-school ftp based updates for your site, instead of an svn-update to a specific version Railo In The Cloud  I'll let you know when they take my "good idea" and implement it :-)

Turning an email address into an image using ColdFusion ( Railo 3.3 )

I've come across the need to be able to render text in a browser (specifically, in this case an email address) that is not easily robot-readable, and is painless to show inline in the browser.

<cfset request.newImage = imageNew("",250,15,"rgb","white")>
 <cfset request.textRow1="email@email.com">
 <cfset attr = { font="SansSerif.plain", size="12", style="bold"}>
 <cfset imageSetDrawingColor(request.newImage,"black")>
 <cfset imageDrawText(request.newImage, request.textRow1, 0, 10, attr)>

 <cfimage action = "writeToBrowser"
   source = "#request.newImage#"  
   format="png"
isBase64="no"
 >

Thanks to: http://www.bjw.co.nz/developer/coldfusion/94-turning-an-email-address-into-an-image-using-coldfusion

Here we go again. Railo Setup Apache-Tomcat with IIS7.5 on Win7x64

My notes from a recent IIS7.5 setup on Win7x64 for Railo 3.3.1.000 Final (which uses Apache-Tomcat)

Started with a blank installation of IIS, by adding it as a feature in Windows 7x64bit

Using my already installed and running Railo 3.2 on Apache:

Edited C:\railoserver\tomcat\conf\server.xml. I changed line 55 back to default port 8888 (Had mine set to 80 previously)

<Connector port="8888" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" />

Restarted Apache.

For some reason, on my workstation the railoserver's connector hadn't been modified by the vivio installer to have the correct path variable "@@installdir@@" replaced with a static value.. (Which is required!)

Edited C:\railoserver\connector\iis7connect.bat and iis7remove.bat

Replaced "@@installdir@@" with "C:\railoserver" 

Ran iis7connect.bat

Created website in IIS, added jakarta as a virtual directory, pointing to C:\railoserver\connector as usual.

Then... Nuts... "Insert picture of ambiguous error here"

Eventually figured out that it wasn't lying to me.. there was a problem with the isapiFilterModule..

Edited: C:\railoserver\connector\isapi_redirect-1.2.30.properties
Replaced "@@installdir@@" with "C:\railoserver" 

(This workstation must have installed strangely... I thought this @@ stuff was supposed to be changed by the installer.. anyways...)

Restarted IIS.

Victory!!

Other Notes:

Read through: http://wiki.getrailo.org/wiki/Server_2008_R2_IIS_7.5_with_Tomcat_and_Plesk

Which mentions about 500.19  .. I only seem to get this error when attempting to setup a webroot outside of IIS   C:\inetpub\wwwroot    and I specifically get 0x8007000d   (Notice the d at the end... which microsoft says is an web.config error.. which it isn't in my case.. removing web.config just changes the error to 500... so I have a permissions issue in this case... great...)


I incorrectly thought it was something to do with web.config attempting to override a setting that had overrides disabled... (It wasn't) : http://learn.iis.net/page.aspx/376/delegating-configuration-to-webconfig-files/

This was actually caused by attempting to enable the rewrite module, when the rewrite module was not installed: http://www.microsoft.com/web/gallery/install.aspx?appid=urlrewrite2

RESTful resources

Learning about REST. http://tomayko.com/writings/rest-to-my-wife

Live Data Ottawa Barometric Pressure

Win 7 64Bit with SQL 2008 DSN Railo 3.2 Connection Problem?

I Just found: http://groups.google.com/group/railo/browse_thread/thread/b7c9614cf39090b5

Not for lack of trying, I couldn't get Railo 3.2 to connect to my local sql2008 datasource on my new 64bit windows pc. Turns out, microsoft changed something for datasources in windows 7..

The solution as it turns out is to create a datasource under "MSSQL - Microsoft SQL Server (Vendor jTDS)"  ... Apparently the regular Microsoft Vendor driver doesn't work for Microsoft anymore.