ColdFusion

Hello, all,We have been alerted to a minor finding.  JSESSIONID session cookies are not secure.  The CFID and CFTOKEN are secure and httpOnly.We followed instructions from a 2014 thread to make JSESSIONID session cookies secure and httpOnly.Viewing in FireFox with DevTools, initially the JSESSIONID cookies are secure and httpOnly, but if you click on to another cookie, then come back to JSESSIONID, the cookie is NOT secure.Viewing in IE11 with DevTools, the JSESSIONID cookie shows twice; once as secure and httpOnly, once as not secure but httpOnly.What is happening??  I'm at a loss, on this one.V/r,^ _ ^

I am continuing to troublshoot some 503 issues with my new server.  I recently enabled the Dump Snapshot feature inside Server Monitor and whenever I have an Unresponsive Server alert and I am seeing tons of these in the snapshot.  Anyone know what this means exactly??"ajp-bio-8012-exec-384" prio=5 tid=1261 BLOCKED     at coldfusion.server.j2ee.sql.pool.JDBCPool.checkOut(JDBCPool.java:371)     at coldfusion.server.j2ee.sql.pool.JDBCPool.requestConnection(JDBCPool.java:825)     at coldfusion.server.j2ee.sql.pool.JDBCManager.requestConnection(JDBCManager.java:125)     at coldfusion.server.j2ee.sql.JRunDataSource.getConnection(JRunDataSource.java:135)     at coldfusion.sql.CFDataSource.getConnection(CFDataSource.java:42)     at coldfusion.sql.DataSrcImpl.getCachedConnection(DataSrcImpl.java:156)     at coldfusion.sql.DataSrcImpl.getConnectio

we are using 1250 charset in our reports. Since update 10 for CF 2016 only ????? are instead of čćžšđ.Any idea?

I have a problem calling WS on CF. I created a simple WS, which accepts PDF file (as a BASE64 string parameter).I user SOAP UI to test it. If I call it normally it works. But if I use chunked mode, I don't get parameters.I also try CF on Apache instead of IIS, but it also doesn't work.Also Lucee + IIS doesn't work. Only Lucee + Apache works fine.I can't use only normal mode for calling, because the WS will be for external user, which allways uses chunked mode!thx for ideas, how to solve this.

Hi there, We have purchased ColdFusion Standard 2018 13.0 ALP AOO License UE (65293634)Can someone please send me the URL for downloading this version  ?ThanksIQ

Following,  ColdFusion (2016 release) Update 10, the encryption / decryption  of url parameters we have used for the past 3 years is no longer workingWe tried rolling back the update on one of our servers and this worked. As update 10 is a Critical update, we cannot roll back our production server farm.Current encryption process which was deployed 2 or 3 years before:Created AES secret key using Coldfusion inbuilt function (generateSecretKey("AES"))Encrypted the entire URL parameters with the AES secret key. (AES encryption)Concatenated secret key and AES encrypted URL.Encrypted the concatenated data again with “CFMX_COMPAT” algorithm using a defined password. (Second level of encryption).Sent this data as URL string to the requested page.On the requested page, we decrypt the data again in the reverse order.Created URL parameters needed for that page from the decrypted data.When we got the issue on Update 10, we investigated whether it was because of “CFMX_COMPAT” algorithm.

Hello folks.We have a number of Windows 2008 R2 servers and a few are running CF 10 Enterprise.We are planning to upgrade all 2008 R2 servers to at least Windows 2016 Core or Data version. Which version of CF would you recommend knowing what you know now.I am leaning just towards CF 2018 standard as we don't need nor use any of the enterprise features from version 10 anyway. It is expensive so that is why we are thinking about which versions to use now. The only must is that it must be able to connect to our Oracle 11g+ enterprise database connected to our SIS (Ellucian Banner) and MySQL 5.7 or 8.0 and with some PostGres.How much ram would you need? I am thinking of at least 32 GB because it is Windows 🙂Would you use windows 2012 or 2016 even?Thanks

I have a device portal for IoT that I want to respond with a 404 unless specific criteria are met, to obfuscate for robots, scanning, etc.  How do I force an IIS 404 error from a valid template?

Hi All,I have a wierd problem. We had this application, which was running using application.cfm and now we changed to application.cfc. Everything is looking and running fine. One feature we added is to make the OnError function to log the error in the DB and show a customer friendly error.The issue: For some reason, the onError triggers the error and logs the error into the DB. But the user is never interrupted.  Any idea?. The error logged is variable is undefined. But I know, we have set the cfparam and default value as "". Not sure, if that was causing the problem, so I changed that to "0".I thought, onError will stop the application to run further, if any error found.I have posted this question to Ray as well. Just posting here to get others thought.

I am thinking about designing a coldfusion application that will allow my clients to sms their customers promos, news, etc.  I need to receive text message from the customers to add them to the text club, then at a pre-determined date/time, I send out a bulk sms to all the people that have signed up.  I noticed getting a short code is very expensive.  I would love to use a short code, but I cant manage the costs.  I also know there are companies that specialize in this, but I want to integrate into an already existing coldfusion app.  Does anyone here have any experience with bulk sms and coldfusion.  I have researched twilio a little, but are there any other companies that I could partner with in order to get this done?

I'm upgrading our server from CF9 to CF2016 now. CF2016 can successfully talking to Apache and our cfm web pages seems working perfectly with cf2016. However, all the .jsp files stopped working. When trying to access a simple test.jsp file throught https://our_web_url/test.jsp, the raw code displayed like this:Any hint on how to debug next would be really appreciate!

Hello, all,We are currently using Oracle as our database in both DEVELOPMENT and PRODUCTION environments.  However, since Oracle is so STUPID expensive, the higher-ups are considering switching our DEV to MySQL.I have a bad feeling about this, so I'm putting this out there:  How much of a difference is there in query between Oracle and MySQL?  Am I going to have to write conditionals to detect the environment and use different queries for each?  Or are they similar enough that I don't have to worry about it?V/r,^ _ ^

Hi We're in the process of setting up our new Windows 2016 server running ColdFusion 2018 with Update 1 installed. When firing an email via CFMAIL the "from" name is converted to lowercase. We can't find any settings in the administrator panel or in the neo-mail.xml file. It this behaviour when our mailserver is turned on, but to test it's Coldfusion that's causing this, we've turned off our mailserver so that the file automatically fails and is saved as a ".cfmail" file in the ColdFusion2018\cfusion\Mail\Undelivr folder.--------------------Example CFMAIL tag (note the capitalised Sender Name)<cfmail to="info@recipient.com" from="orders@sender.com (Sender Name)" subject="Example subject name">....</cfmail>--------------------In the failed ".cfmail" file (or delivered email) this shows as below (note the lowercase Sender Name)type:  text/plain; charset=UTF-8server:  servername:99server-username:  server@sender.comserver-password:  passwordfrom:  send

Hi there,I need HELP! Please, I build a Flex 3 Application using Flash Remoting using CF 8,Apache and MS-SQL Server 2005, have been working fine for the last year, until Thursday when then hosting provider upgrade to CF 9.01:Any time I try to access one of my components (CFC) I receive a this message:“Unable to invoke CFC - Invalid CFML construct found on line 1 at column 1”Above a simple example of one component, when I call from Flex,  I receive from Flex the same Error Message:<cfcomponent output="false"><cffunction name="testConnect" access="remote" returntype="string"output="false">        <cfset myResult="foo">    <cfreturn myResult></cffunction>        </cfcomponent>I really need your help…best regards

Hello, all,I'm feeling kind of foolish for asking this, but I've been tasked by my boss.We all know that in CF, one can access the remote hostname of the client system that is visiting a site/app.  If it's not immediately available, one can also do a reverse DNS lookup.  Even then, it's no guarantee that a valid value will be returned.I think I already know the answer to this, but I need to make sure.Is there a way to retrieve a client hostname in JavaScript?(There, I said it.  I'm not proud.)  V/r,^ _ ^

I am running CF 2016 and recently launched a site with a ton of traffic.  I see that there are a lot of active sessions.  I have set the application session timeout to 5 minutes but when the traffic gets high, the server stops slows down.  I am pretty certain that the issue is a tuning issue but I don't know enough about tuning to start testing a solution.

I'm using CFML on my application. I need help with developing a logout operation that destroys a session. For now, on the logout link I'm calling the login page that's how when the BACK Button on the browser is clicked the user is still logged in.<!---authenticationService.cfc---><cfcomponent>  <!---validateUser() Method--->  <cffunction name="validateUser" access="public" output="false" returntype="array">  <cfargument name="userEmail" type="string" required="true" />  <cfargument name="userPassword" type="string" required="true" />  <cfset var aErrorMessages=ArrayNew(1) />  <!---Validate the email--->  <cfif NOT isValid('email',arguments.userEmail)>  <cfset arrayAppend(aErrorMessages,'Please,provide a valid email address') />  </cfif>  <!---Validating the Password--->  <cfif arguments.userPassword EQ ''>  <cfset arrayAppend(aErrorMessages,'Pleas

Hello all,I am currently working with a simple coldfusion page that presents the user with a dropdown list. When a user selects one of the values a new page opens up and allows them to upload a photo to a specific directory based on their dropdown selection. This is working just fine but I've been asked to have the dropdown list reset back to the default value when the new page pops up. Is there a way to do this?See below the code for the dropdown list:<cfform name="directorySelection" method="post" action="photo.cfm?userID=#userID#" target="_blank" onchange="form.submit()">     <cfselect name="directName" onChange="form.submit()">          <option value="" selected="true" disblaed>-- Select One --</option>          <option value="nature">Nature</option>          <option value="city">City<

<cfset ftpurl=ftp.myserver.com><cfset ftpusername="myusername"><cfset ftppassword="mypassowrd"><cfset ftplocal="C:\Users\MyUser\Documents\MyFile.txt"><cfset ftpremote="MyFile.txt"><cfftp connection = "Myftp" action = "PutFile" localFile="#ftplocal#" remoteFile="#ftpremote#" failifexists="no" passive = "Yes">I use above code to copy a local file from local machine to FTP server.I checked that the file exists and spelling is correct, but I got following error(The system cannot find the path specified).            Any suggestions is great appreciated,Regards,Souries

I followed the steps in this StackOverflow response (coldfusionbuilder - ColdFusion Builder - Open project - Stack Overflow )  to import an already existing ColdFusion folder as a new project but now I can't find that project that was imported. I know it's imported because when I try to retrace my steps to import the folder, it says that it's already been imported but it doesn't exist anywhere for me to open as a project.Please advise on where I can find Projects. There's a tab that says Project with a drop down menu shows Open Project but it's greyed out and inaccessible. I also don't see a Navigator panel. Is there a way to enable having that panel show?

We use Amazon S3 for storing the majority of our products and the code is well established and has been working hundreds of times a day for well over 8 months, so it's very stable however today I've had loads and loads of problems with errors - Is anyone else seeing issues? The code is very simple: <cfset fileWrite("#baseS3Url#/#amazonFileName#", "#binFileData#")><cfset storeSetMetadata("#baseS3Url#/#amazonFileName#", { content_type="#setContentType(XML)#" })>OR <cfset fileWrite("#baseS3Url#/#amazonFileName##fileExtension#", "#binFileData#")><cfset storeSetMetadata("#baseS3Url#/#amazonFileName##fileExtension#", { content_type="#setContentType(fileExtension)#" })>but is throwing the following stack trace StackTrace: coldfusion.vfs.VFileOutputStream$VFSFileSystemException: Request Error. nullCould not close the output stream for file "s3://<cname>/0/0/1/1/3/4/5/1134503_SRBDG7FY8U.pdf"..    at coldfusion.vfs.VFileOutputStream.close(VFileOutputS

Dear support,I've installed CF 2018 to my PC with this following details:Windows Server 2012 R2 Standard16 Gb MemoryIntel Xeon 2.40 GHzI'm unable to click anything on the admin CF website.it looks like the path to access jquery.js not be set correctly. But I don't know how to update my neo-runtime.xml.Please advise.Here's my neo-runtime.xml<wddxPacket version='1.0'><header/><data><array length='19'><boolean value='true'/><struct type='coldfusion.server.ConfigMap'><var name='application_variables'><boolean value='false'/></var><var name='server_variables'><boolean value='false'/></var><var name='session_variables'><boolean value='false'/></var></struct><struct type='coldfusion.server.ConfigMap'></struct><struct type='coldfusion.server.ConfigMap'><var name='/WEB-INF/customtags10000'><string>#server.coldfusion.rootdir#/CustomTags</string></var></stru

Dear,Please advise for my current issue with CF 11. I have 3 instances under my CF 11. two of them are working well. But for the third one, I can't access the admin pages properly.I can log in but there are several pages that I can't open it such as Settings, memory variables, server updates.I got the error said: An error occurred while executing the application. Please try again or contact the administrator. And in the log said Apr 9, 2019 15:24:01 PM Error - Not able to connect to Update Site: The getProxyHost method was not found.Apr 9, 2019 15:24:01 PM Error - Not able to connect to Update Site: The getProxyHost method was not found.Apr 9, 2019 15:24:01 PM Error  - The getProxyHost method was not found.Either there are no methods with the specified method name and argument types or the getProxyHost method is overloaded with argument types that ColdFusion cannot decipher reliably. ColdFusion found 0 methods that match the provided arguments. If this is a Java object and you ver

Hi!I've installed the newest version of ColdFusion 2018 and its most recent update on my Windows 10 with IIS.Now the installation itself does not ask for IIS websites you want to put a ISAPI connection. After the installation, you need to run a CMD script that finds every IIS websites to put each one a configuration to run a cfm page, including the jakarta and cf_script virtual directories, the handler mappings for each ColdFusion file type and the ISAPI redirections.Although you finish the website connector configuration, you can access a index.cfm just typing the website url without describing the cfm template at the address bar. But, when you try to access any cfm page describing it's file name at the browser's address bar, a 404.0 error occurs:HTTP Error 404.0 - Not FoundThe resource you are looking for has been removed, had its name changed, or is temporarily unavailable.Most likely causes:The directory or file specified does not exist on the Web server.The URL contains a typograp

We are upgrading from ColdFusion 9 to ColdFusion 11.  We noticed a change in back button behavior.  On pages running CF 9 the back button works, but on pages running CF 11, when clicking the back button, we get a browser "confirm form resubmission" message.  Since it is the same browser, it is clearly a change in ColdFusion.  Does anyone know when the change was made?  Is there a setting that controls the behavior?Thank you,David