ColdFusion

Trying to get the actual ip address of a user with coldfusion sitting behind an F5 appliance.  Researching I found the RemoteIpValve which can be placed in server.xml, but it does not seem to work on CF 11.  Does anyone know of any tricks to getting this to work or does it not work at all in CF 11?Thanks

I have a cloud share drive recently assigned to my project, and I was able to copy a number of PDF files into it.   I can use Windows Explorer to navigate to that drive and bring up any PDF file with ease -- double click, view in Acrobat, no problem.I can use CFDIRECTORY to list the contents of the directory, and I can use FileExists and CFFILE to test and grab a copy of the file, no sweat.I put a text file in the directory, and I can pull that up with:<cfheader name="Content-disposition" value="attachment;filename=filenamehere.txt"><cfcontent reset="true" type="text/plain" file="file:///\\sharedDirectoryHere\filenamehere.txt">I put a GIF in place and <image> displayed it easily.I can use the following code pair to view PDF's on another project's share with no issue, PDF pops right up...<cfheader name="Content-disposition" value="attachment;filename=filenamehere.pdf"><cfcontent reset="true" type="application/pdf" file="file:///\\otherSharedDirectory

I am familiar with several list functions in CF but I can't seem to figure out how to do this thing:I have a long list (from a query in coldfusion) of names, e.g. "john" or "silverfox" or "7" (all "user aliases").  say, query.aliasI have to put this out on a page and it's way too many for sanity.I want to break it up by the first letter of the name. Like:*: (list from the point before names begin with letters, like numbers and special chars)A: (list from the point where names begin with A)B: (list from the point where names begin with B)C: (list from the point where names begin with C)But listfind just finds the first "a" (and none of are just 'a' as a name), and listcontains just finds the first name that contains an A anywhere.How can I find the location in the list of where a value BEGINS WITH a certain string ("a"), so I can make a var of that value, and then loop the query out with a rowcount and 'start/stop' it at the appropriate places? (I guess that's how it would be done,

Hi Community,To start with I'm very new to the ColudFusion applications and development.We have an old coldFusion Mx application hosted on IIS server. It is production application. Now, we are in planing to change the application url, however we are not sure where to change the configurations so that application functionalities work seamlessly with the new url.any help is highly appreciated.Thank you,Regards,Venky

Good Morning,I spent all of last friday trying to figure out why the ColdFusion 2018 Auto-Lockdown will not complete.We successfully migrated from CF10 to CF2018 on our test site as well as our production system. No errors on install or in the code analyst.But when I tried to run auto-lockdown, I received the error "windows error 2 java vm". I installed an older version of Java and created the specified path in "Path" in the Environment Variables. It will NOW start and I am able to input all of the information it asks for.But now auto-lockdown gets to one point every time and just stalls. In the CF2018 auto-lock down window it stalls on " Installing... Coldfusion Lockdown".In the ColdFusion log file it shows that it tried to delete a file, the file exists, and then Deletion of file successful.Then nothing.Any help would be greatly appriciated.Thanks,Rob

I am attempting to upload a file using the Dropbox API.  Dropbox requires Contact-Type = "application/octet-stream", which I am tried to set in the cfhttpparam type = "header".  However when I post the data to the API.  I get an error stating: Bad HTTP "Content-Type" header: "application/octet-stream,multipart/form-data; boundary=-----------------------------7d0d117230764".  I am guessing that when a cfhttpparam type = "file" is included, the content-type is modified to also include multipart/form-data.  The api will not accept this content-type.  Is there a way to avoid this behavior?  This is the code I am using to attempt the upload.  Thank you.<cfhttp method="post" url="https://content.dropboxapi.com/2/files/upload" result="uploadFile">  <cfhttpparam type="header" name="Authorization" value="Bearer #DropboxAccessToken#">  <cfhttpparam type="header" name="Dropbox-API-Arg" value="#serializeJSON(stFields)#">  &lt

Hi. We are experiencing some binding issues in several forms after upgrading to CF 2016 from CF 10. All work fine in 10 but not in 2016. Are their new setting I should be looking at?Thanks in advance. Any help is appreciated.

I've been forced by my ISP to moved from an MS Access database to MySQL. The ISP ported my Access db to MySQL on their server. I've been trying to set it up for my use on localhost. I have the database created and working in MySQL Workbench. I created a MySQL ODBC dsn that tests good in Microsoft ODBC Administrator.Initially, I renamed my Access dsn and applied the original name to the MySQL dsn. When I hit a script with a query, I got: "Specified driver could not be loaded due to system error 182"Then I thought to open CF Administrator to check the datasource there. I deleted the record for the (working) MS Access dsn and created one for MySQL. CF Admin indicates that my "data source updated successfully." I'm using the MySQL (4/5) driver. However, when I open a script with a query, I get the error in my debugger: "Could not create connection to database server. Attempted reconnect 3 times. Giving up."Any thoughts on how I make this DSN work for my application on localhost?Many thanks

Hello, all,We have been alerted to a minor finding.  JSESSIONID session cookies are not secure.  The CFID and CFTOKEN are secure and httpOnly.We followed instructions from a 2014 thread to make JSESSIONID session cookies secure and httpOnly.Viewing in FireFox with DevTools, initially the JSESSIONID cookies are secure and httpOnly, but if you click on to another cookie, then come back to JSESSIONID, the cookie is NOT secure.Viewing in IE11 with DevTools, the JSESSIONID cookie shows twice; once as secure and httpOnly, once as not secure but httpOnly.What is happening??  I'm at a loss, on this one.V/r,^ _ ^

I am continuing to troublshoot some 503 issues with my new server.  I recently enabled the Dump Snapshot feature inside Server Monitor and whenever I have an Unresponsive Server alert and I am seeing tons of these in the snapshot.  Anyone know what this means exactly??"ajp-bio-8012-exec-384" prio=5 tid=1261 BLOCKED     at coldfusion.server.j2ee.sql.pool.JDBCPool.checkOut(JDBCPool.java:371)     at coldfusion.server.j2ee.sql.pool.JDBCPool.requestConnection(JDBCPool.java:825)     at coldfusion.server.j2ee.sql.pool.JDBCManager.requestConnection(JDBCManager.java:125)     at coldfusion.server.j2ee.sql.JRunDataSource.getConnection(JRunDataSource.java:135)     at coldfusion.sql.CFDataSource.getConnection(CFDataSource.java:42)     at coldfusion.sql.DataSrcImpl.getCachedConnection(DataSrcImpl.java:156)     at coldfusion.sql.DataSrcImpl.getConnectio

we are using 1250 charset in our reports. Since update 10 for CF 2016 only ????? are instead of čćžšđ.Any idea?

I have a problem calling WS on CF. I created a simple WS, which accepts PDF file (as a BASE64 string parameter).I user SOAP UI to test it. If I call it normally it works. But if I use chunked mode, I don't get parameters.I also try CF on Apache instead of IIS, but it also doesn't work.Also Lucee + IIS doesn't work. Only Lucee + Apache works fine.I can't use only normal mode for calling, because the WS will be for external user, which allways uses chunked mode!thx for ideas, how to solve this.

Hi there, We have purchased ColdFusion Standard 2018 13.0 ALP AOO License UE (65293634)Can someone please send me the URL for downloading this version  ?ThanksIQ

Following,  ColdFusion (2016 release) Update 10, the encryption / decryption  of url parameters we have used for the past 3 years is no longer workingWe tried rolling back the update on one of our servers and this worked. As update 10 is a Critical update, we cannot roll back our production server farm.Current encryption process which was deployed 2 or 3 years before:Created AES secret key using Coldfusion inbuilt function (generateSecretKey("AES"))Encrypted the entire URL parameters with the AES secret key. (AES encryption)Concatenated secret key and AES encrypted URL.Encrypted the concatenated data again with “CFMX_COMPAT” algorithm using a defined password. (Second level of encryption).Sent this data as URL string to the requested page.On the requested page, we decrypt the data again in the reverse order.Created URL parameters needed for that page from the decrypted data.When we got the issue on Update 10, we investigated whether it was because of “CFMX_COMPAT” algorithm.

Hello folks.We have a number of Windows 2008 R2 servers and a few are running CF 10 Enterprise.We are planning to upgrade all 2008 R2 servers to at least Windows 2016 Core or Data version. Which version of CF would you recommend knowing what you know now.I am leaning just towards CF 2018 standard as we don't need nor use any of the enterprise features from version 10 anyway. It is expensive so that is why we are thinking about which versions to use now. The only must is that it must be able to connect to our Oracle 11g+ enterprise database connected to our SIS (Ellucian Banner) and MySQL 5.7 or 8.0 and with some PostGres.How much ram would you need? I am thinking of at least 32 GB because it is Windows 🙂Would you use windows 2012 or 2016 even?Thanks

I have a device portal for IoT that I want to respond with a 404 unless specific criteria are met, to obfuscate for robots, scanning, etc.  How do I force an IIS 404 error from a valid template?

Hi All,I have a wierd problem. We had this application, which was running using application.cfm and now we changed to application.cfc. Everything is looking and running fine. One feature we added is to make the OnError function to log the error in the DB and show a customer friendly error.The issue: For some reason, the onError triggers the error and logs the error into the DB. But the user is never interrupted.  Any idea?. The error logged is variable is undefined. But I know, we have set the cfparam and default value as "". Not sure, if that was causing the problem, so I changed that to "0".I thought, onError will stop the application to run further, if any error found.I have posted this question to Ray as well. Just posting here to get others thought.

I am thinking about designing a coldfusion application that will allow my clients to sms their customers promos, news, etc.  I need to receive text message from the customers to add them to the text club, then at a pre-determined date/time, I send out a bulk sms to all the people that have signed up.  I noticed getting a short code is very expensive.  I would love to use a short code, but I cant manage the costs.  I also know there are companies that specialize in this, but I want to integrate into an already existing coldfusion app.  Does anyone here have any experience with bulk sms and coldfusion.  I have researched twilio a little, but are there any other companies that I could partner with in order to get this done?

I'm upgrading our server from CF9 to CF2016 now. CF2016 can successfully talking to Apache and our cfm web pages seems working perfectly with cf2016. However, all the .jsp files stopped working. When trying to access a simple test.jsp file throught https://our_web_url/test.jsp, the raw code displayed like this:Any hint on how to debug next would be really appreciate!

Hello, all,We are currently using Oracle as our database in both DEVELOPMENT and PRODUCTION environments.  However, since Oracle is so STUPID expensive, the higher-ups are considering switching our DEV to MySQL.I have a bad feeling about this, so I'm putting this out there:  How much of a difference is there in query between Oracle and MySQL?  Am I going to have to write conditionals to detect the environment and use different queries for each?  Or are they similar enough that I don't have to worry about it?V/r,^ _ ^

Hi We're in the process of setting up our new Windows 2016 server running ColdFusion 2018 with Update 1 installed. When firing an email via CFMAIL the "from" name is converted to lowercase. We can't find any settings in the administrator panel or in the neo-mail.xml file. It this behaviour when our mailserver is turned on, but to test it's Coldfusion that's causing this, we've turned off our mailserver so that the file automatically fails and is saved as a ".cfmail" file in the ColdFusion2018\cfusion\Mail\Undelivr folder.--------------------Example CFMAIL tag (note the capitalised Sender Name)<cfmail to="info@recipient.com" from="orders@sender.com (Sender Name)" subject="Example subject name">....</cfmail>--------------------In the failed ".cfmail" file (or delivered email) this shows as below (note the lowercase Sender Name)type:  text/plain; charset=UTF-8server:  servername:99server-username:  server@sender.comserver-password:  passwordfrom:  send

Hi there,I need HELP! Please, I build a Flex 3 Application using Flash Remoting using CF 8,Apache and MS-SQL Server 2005, have been working fine for the last year, until Thursday when then hosting provider upgrade to CF 9.01:Any time I try to access one of my components (CFC) I receive a this message:“Unable to invoke CFC - Invalid CFML construct found on line 1 at column 1”Above a simple example of one component, when I call from Flex,  I receive from Flex the same Error Message:<cfcomponent output="false"><cffunction name="testConnect" access="remote" returntype="string"output="false">        <cfset myResult="foo">    <cfreturn myResult></cffunction>        </cfcomponent>I really need your help…best regards

Hello, all,I'm feeling kind of foolish for asking this, but I've been tasked by my boss.We all know that in CF, one can access the remote hostname of the client system that is visiting a site/app.  If it's not immediately available, one can also do a reverse DNS lookup.  Even then, it's no guarantee that a valid value will be returned.I think I already know the answer to this, but I need to make sure.Is there a way to retrieve a client hostname in JavaScript?(There, I said it.  I'm not proud.)  V/r,^ _ ^

I am running CF 2016 and recently launched a site with a ton of traffic.  I see that there are a lot of active sessions.  I have set the application session timeout to 5 minutes but when the traffic gets high, the server stops slows down.  I am pretty certain that the issue is a tuning issue but I don't know enough about tuning to start testing a solution.

I'm using CFML on my application. I need help with developing a logout operation that destroys a session. For now, on the logout link I'm calling the login page that's how when the BACK Button on the browser is clicked the user is still logged in.<!---authenticationService.cfc---><cfcomponent>  <!---validateUser() Method--->  <cffunction name="validateUser" access="public" output="false" returntype="array">  <cfargument name="userEmail" type="string" required="true" />  <cfargument name="userPassword" type="string" required="true" />  <cfset var aErrorMessages=ArrayNew(1) />  <!---Validate the email--->  <cfif NOT isValid('email',arguments.userEmail)>  <cfset arrayAppend(aErrorMessages,'Please,provide a valid email address') />  </cfif>  <!---Validating the Password--->  <cfif arguments.userPassword EQ ''>  <cfset arrayAppend(aErrorMessages,'Pleas