Hi, I was looking at some performance issues on a test server and I came across the following:   Tip: Our research has shown that in some versions of ColdFusion, leaving Report Execution Times enabled while Enable Request Debugging Output was disabled would still cause ColdFusion to perform excessive background processing on every request, leading to significant overhead. It is highly recommended to disable Report Execution Times regardless of the Enable Request Debugging Output setting in your production environment.   I noticed we had Report Execution Times enabled. We are using CF2018. Can anyone confirm if there is additional overhead having this enabled and should I disable it or does it not matter? Thanks ... View more

Hello,   Have an issue running a scheduled task on CF2018. Hitting the url in a browser window it runs fine, but via the schedule task when I output to a file all im getting in the file is error code: 1010   Not seeing anything wrong in execption.log or scheduler.log. Anyone any ideas?   Thanks ... View more

Hi, We updated our CF servers over the weekend and since the update we've had errors coming in from an area with a Query of Queries is used. Basically there is an order by in the QoQ and this is the field not being returned. It should be returned and it was until we did the updates and for now I had to manually add the field back into the select statement. It should be returned via a select query.* from original but not working now. The only one missing though is the one used in the order by clause. Anyone had similiar issues?   Thanks ... View more

Hello,   Just a query on 2 differing ways of calling a function from a component in Coldfusion. I've always called functions in one of 2 ways.    Method 1:     <cfset myComponent = createObject("component", "pathToMyComponent.componentGet")> <cfset myVariable= myComponent.getKey ( data = someDSN, key = myKey, ........)>​   Method 2:     <cfinvoke component="pathToMyComponent.componentGet" method="getKey " returnvariable="myVariable"> <cfinvokeargument name="data" value="#someDSN#"> <cfinvokeargument name="key" value="#myKey#"> ....... </cfinvoke>     My question would be is there any overhead using Method 1 over Method 2. I assume there must be as you are instantiating an entire component, then only using 1 function. Method 2 would be my preferred way of calling a function but we would still have lots of calls made using Method 1. Just wondering what the advantages of one over the other would be and whats best from system memory/performance point of view?   Thanks ... View more

Hi,   Just wondering if anyone has any experience of decrypting an EncryptedAssertion from an IDP. My current workflow is:-   1. Decrypt the symetric key from EncryptedKey element using RSA and my private key. This is giving me a string like �4Q��2�r���h` (doesn't look right, or is it?) 2. Use the key extracted above to decrypt the contents of the EncryptedData/CipherData/CipherValue element. This decryption is being done using AES. This is giving me "Invalid AES key length: 28 bytes" error.   The decoded xml looks like below:- <saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"> <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_1244b2f8ed8a27e5454455b4" Type="http://www.w3.org/2001/04/xmlenc#Element"> <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:RetrievalMethod Type="http://www.w3.org/2001/04/xmlenc#EncryptedKey" URI="#_81c4b6d490243e4e1cae5cf11e73102b"/> </ds:KeyInfo> <xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"> <xenc:CipherValue>VeBwqO/RmOs+aEtIsoZTlE8Gswa6+4z.....</xenc:CipherValue> </xenc:CipherData> </xenc:EncryptedData> <xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_81c4b6d490fdsfsdfdsf5453f11e73102b"> <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/> <xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"> <xenc:CipherValue>Gbl5+MF8srC2yvQu4A6m2CUCDVu7V1....</xenc:CipherValue> </xenc:CipherData> <xenc:ReferenceList> <xenc:DataReference URI="#_1244b2f8ed8a27e5454455b4"/> </xenc:ReferenceList> </xenc:EncryptedKey> </saml2:EncryptedAssertion>  And my functions to decrypt the key and then the actual data is below:-   <cffunction name="decrypt_key" hint="decrypts a base64 encoded string with RSA to its value" access="public" returntype="string" output="false"> <cfargument name="text" type="string" required="true" hint="the encrypted value as Base64 encoded string" /> <cfargument name="key" type="any" required="true" /> <cfargument name="key_type" type="string" default="private" hint="public or private"> <cfscript> var local = structNew(); /* Create a Java Cipher object and get a mode */ var cipher = createObject('java', 'javax.crypto.Cipher').getInstance("RSA"); if (NOT isObject(arguments.key)) { arguments.key = create_key_object_helper(arguments.key,arguments.key_type); } /* Initialize the cipher with the mode and the key */ cipher.init(cipher.DECRYPT_MODE, arguments.key); /* Perform the decryption */ local.decrypted = cipher.doFinal(toBinary(arguments.text)); /* Convert the bytes back to a string and return it */ return toString(local.decrypted,"UTF-8"); </cfscript> </cffunction> <cffunction name="decrypt_string" hint="decrypts a base64 encoded string with AES to its value" access="public" returntype="string" output="false"> <cfargument name="text" type="string" required="true" hint="the encrypted value as Base64 encoded string" /> <cfargument name="key" type="any" required="true" /> <cfscript> var local = structNew(); /* Create a Java Cipher object and get a mode */ var cipher = createObject('java', 'javax.crypto.Cipher').getInstance("AES/CBC/PKCS5Padding"); var secretkey = createObject('java', 'javax.crypto.spec.SecretKeySpec').init(toBinary(arguments.key), javaCast( "string","AES")); /* Initialize the cipher with the mode and the key */ var iv = createObject('java', 'javax.crypto.spec.IvParameterSpec').init(ToBinary(arguments.text), 0, 16); cipher.init(cipher.DECRYPT_MODE, secretkey , iv); /* Perform the decryption */ local.decrypted = cipher.doFinal(toBinary(arguments.text)); /* Convert the bytes back to a string and return it */ return toString(local.decrypted,"UTF-8"); </cfscript> </cffunction>  Can anyone shed some light on where I might be going wrong?   Thanks ... View more