ColdFusion

Document history 04/10/2024: The following are the changes to the log file: The log files contain the name of the scope in which the variable exist. Files included using cfinclude tag will be logged.   In the last security updates of ColdFusion (ColdFusion (2023 release) Update 7 and ColdFusion (2021 release) Update 13), Adobe released hotfixes that addressed scope injection vulnerabilities. See the tech notes for more information.   New patch update   Adobe has released a patch for ColdFusion (2023 release) and ColdFusion (2021 release) to help identify the unscoped variables in a log file, and take corrective actions.   The patch applies to ColdFusion (2023 release) Update 6 and higher, and ColdFusion (2021 release) Update 12 and higher. Adobe recommends you to be on Update 6 or higher and Update 12 or higher.   View the tech note for more information.   Please send us your feedback.

The plugin in Visual Studio code doesn't read the older report.    How would I go about upgrading it, or updating in its currrent version/format? 

I just updated to update 14 and i know per the tech doc: https://helpx.adobe.com/coldfusion/kb/coldfusion-2021-update-14.html they replaced cfmx_compat algorithm as the default. They say to use a flag, which i did as i need things to stay the same until i update my code.   Here is my question. They indicate the flag will be available until next version after CF2023. Fine. They seem to indicate the jvm flag will go away and no matter what the default will not be cfmx_compat anymore. But they indicate higher up in the doc that cfmx_compat is not going away, just its not the default--meaning we can still use it if we specify it.   My question is about after CF2023: the way this is written, is it just the flag going away or will the entire algo leave also?   If all that is happening is they are changing the default algo (even after 2023 thats okay). My fear is if they remove it all together that will be problematic for me.  If they keep it but I have t

We run a mirror site for disaster recovery, but when I tried to test my Coldfusion server, it would not start the service.  I started manually and it was complaining about the cached license being invalid and then it tried to connect Adobe (which it can't do because of firewalls).  Anyway, I was wondering what impacts that Device ID because I see that they are different and I think that is related to why my license is considered invalid.  

Someone asked a question about implementing JWT in ColdFusion. After I composed a reply, I discovered the question had disappeared. My reply follows, in the hope it will help someone.   Search the community, for example, by putting JWT in the search field. Inspect the search-results to identify which ones pertain to ColdFusion.   One search-result you may find useful is Sdsinc_pmascari's "Generating JWT Token for Apple API Requests". It includes references to other JWT resources of interest to the ColdFusion developer.

I am new to this, I have setup clusters and two instances in each cluster. one instance is up and running and the sites are also working fine. i am on window server and using IIS. sending traffic from cloudfront to the server  ( http bindings)when i start the second instance in the cluster i am getting errors and the site is not available, when i check the log file i see these errors:exception.log file :"Error","FelixStartLevel","10/25/24","16:38:00","","The Runtime service is not available. This exception is usually caused by service startup failure. Check your server configuration."coldfusion.server.ServiceFactory$ServiceNotAvailableException: The Runtime service is not available.at coldfusion.server.ServiceFactory.getRuntimeService(ServiceFactory.java:633)at coldfusion.monitor.inmemory.module.InMemoryMonitoringServiceImpl.onMonitoringDisabled(InMemoryMonitoringServiceImpl.java:486)at coldfusion.monitor.inmemory.module.InMemoryMonitoringServiceImpl.disableMemoryMonitoring(InMemo

applied update 17 to some of our dev servers and was told that certain code no longer works - specifically when invoking the split command - the below code is something being actively worked on - my concern is that there might be other things it could affect -   is this unusual? <cfif len(trim(manager)) gt 0><cfset mgr = manager.split(",")[1]/><cfset mgr = mgr.substring(3,len(mgr))/><cfset mgr_fname = mgr.split(' ')[1]/><cfset mgr_lname = mgr.split(' ')[2]/><cfelse><cfset mgr = ''/><cfset mgr_fname = ''/><cfset mgr_lname = ''/></cfif> error from log:Error","ajp-nio-127.0.0.1-8020-exec-9","10/24/24","11:00:00","HumanscaleHostSite","The split method was not found.Either there are no methods with the specified method name and argument types or the split method is overloaded with argument types that ColdFusion cannot decipher reliably. ColdFusion found 0 methods that match the provided arguments. If t

I am trying to start up a development Coldfusion 2023 server using Docker that can run PDFg. I found the file https://github.com/carehart/awesome-cf-compose/blob/master/cf-2021-with-addons/compose.yaml and updated the images to CF2023. My first attempts at starting these servers had both services start up. But the main coldfusion service contantly "Checking addons startup status". I also didn't see the addons server listed under the PDF Service tab. After some experimentation I moved the - installModules above the -configureExternalAddons. This may be needed because I had to update the list of modules to be "all" due to the way our prod and test servers are set up. With this change the coldfusion server started up and was able to verify the PDFg Server status. At this point I used Docker Desktop to stop my container so I could work on another project. When I came back to this project I used the Desktop to start the container. The coldfusion container started up and produ

We are using coldfusion 11 and unable to upgrade to latest Java version 1.8..0_422. Is open jdk will work or only oracle jdk?

The Apache localhost service works correctly, it allows me to browse .html pages; but when I try to browse .cfm pages it shows me the following error:      I really appreciate your guidance in solving this problem.  

Hi,We are testing upgrading from CF2018 to 2023 and have noticed some odd behaviour when saving forms over and over. We have a form which updates a table in the database and when updating the values a number of times in a short space of time the values on the screen aren't matching whats in the database. The values save fine to database but when they reload the form it should have the saved values which are called via a query at the top of the page. I assume this is some caching but I havent specified any caching in the query and haven't changed anything in the Coldfusion Administrator in caching section. Its all just default values there. I've tested it on CF2018 and I can save and save and everything reloads as expected. I can understand how this may happen if I used 'cachedWithin' in the query object as the query is the same each time but it should return something different each time as we are saving the form and updating the values for that table. Anyone noticed anything similair

Note:  I posted this earlier, but forgot to tag it with topics & I don't see anyway to edit my post.  I apologize for the duplication.  But it is not showing up under discussions. Greetings all!In CF 4.51 the following validation code:"<INPUT TYPE="hidden" NAME="minPermSal_range" VALUE="MAX=999999;MIN=10000">"Produced the server side response if your field entry was invalid:*********************************************Form Entries Incomplete or InvalidOne or more problems exist with the data you have entered.The value entered for the Minpermsal field must be between 10000 and 999999 (your entry was 5).Use the Back button on your web browser to return to the previous page and correct the listed problems.*******************************************In CF2023 we get:*********************************************Form entries are incomplete or invalid."<ul><li>The range for the MINPERMSAL field ('5') must have numeric values. </li></ul> Go

I am strugging with downloadObject()  to fetch a PDF file from an S3 bucket. s3Svc = getCloudService("iamCreds", "s3config") bucket = s3Svc.bucket("mybucket", false) data = bucket.downloadOjbect({ key="myPdfFile.pdf" })The Adobe documentation states that "key" is the only required parameter but my server, CF2021u13, throws an error and states, "Field type is mandatory and must have a non-null value." The docs fail me again because they don't tell us what the acceptable values are other than "json".  Why is Adobe documentation so sparse? I tried the following:data = bucket.downloadOjbect({ key="myPdfFile.pdf", type="json" })This fetches the file content from s3 but then fails with a "JSON parsing failure at character 1" because it tries to parse the binary PDF content as JSON.  Adding useCustomSerializer=true|false doesn't make change anything. I tried changing the value of 'type' to "binary", "object", "struct", "pdf", and "string" but they all give m

Hi, Does the latest CF2023 Update 11 also include security updates for CVE-2023-29300, CVE-2023-29301, CVE-2023-29298. These security updates were previously released in July 11,2023 (APSB23-40)?

I am planning to upgrade CF2018 to CF2023 on a server with no internet access and am following the instructions at https://helpx.adobe.com/coldfusion/using/coldfusion-licensing-activation.html#Offlineactivation.  I would like to prepare as much as possible and was wondering if I could install CF2023 on, for example, my local PC to generate the activation request and then use the response on the actual server?   Thanks.

I'm having issues with a stored procedure that returns data to CF. The sp takes around 20 seconds to return the data (big sp) to CF but the database connection is left idle after the sp finshes and the data is passed to CF, as we can see from MS SQK management studio.Do I need to manualy manage the database connection? I thought the CF data source would manage all this?

I have just tried to install ColdFusion PMT & Datastore 2023 on a new VM (Microsoft Windows Server 2019 Standard, 64 bit).   Left all the values as default. But nothing has happened and there are no links to PMT.The VM is on a secure site, which means the other technical teams tend to lock things down (like ports).  Only IE is installed on the server. Before I uninstall and try install again, are there any ideas on what I should do?(or should I just re-install and see if I missed something?) There were some errors while installing Adobe ColdFusion 2023 Performance MonitoringErrors from exception log :com.adobe.pms.es.client.ElasticSearchClient - Datastore Service not available. Retrying to connect... I can see PMT in Control Panel > ProgramsI can see PMT and PMT Datastore Service in Services (& datastore is running). 

Hello I havent been using ColdFusion for years. Not a novice but after more than 10 years it would be true to say probably very rusty and not up to date on CF best practices. I havea requirement to create a document (well parts of the document using ColdFusion). I essentially want to creat a document that has a fair amout of text in it (i want to create a contract between half a dozen people - I will get the names of the people using a query and the results of the query will then be available to include in various places in the document. Thanks in advance for any tips on the best way to do this.  

Hey folks,question about the start parameter in the cfldap command- I am trying to work with our developers to automate the onboarding process; we want our intranet site based in CF to read from specific ou to create users in the intranet appThey seem to be having a hard time.Questions:1) Is this possible?2)can someone possibly provide an example if the OU I want is three levels down the tree:mycompany.com/Offices/Domain Users/New Hires(note the spaces in the names)the google say it is possible, but more times than not I see examples of people only using the dc portion of the name (dc-mycompany, dc=.com) 

I'm trying to setup SAML with ColdFusion 2021 by doing the SP and IDP configurations inside the ColdFusion Administrator. All settings appear to be complete and correct but when an InitSAMLAuthRequest gets itiniated I receive the following error. Error details: MSIS7093:The message is not signed with expected signature algorithm.Message is signed with signature algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1.Expected signature algorithm http://www.w3.org/2001/04/xmldsig-more#rsa-sha256. Is the signature algorithm (in this case SHA1) defined by CF? If so, how do I switch from SHA1 to SHA256?

When Security Sandbox is enabled, use of cftrace causes an exception to be logged to exception.log even though the sandbox grants Read & Write permissions the to {cf.instance.root}/logs/* directory whilst using jdk-11.0.24. I'm assuming RollingFileManagerFactory needs some additional permission to roll cftrace.log over into cftrace.%i.log. Does anyone know what additional sandbox permission needs to be granted to allow this? Thank you!  Error logged to {cf.instance.root}/logs/exception.log: "Error","ajp-nio-127.0.0.1-8020-exec-10","10/21/24","12:44:08","{cf.application.name}","ManagerFactory [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$RollingFileManagerFactory@44e1248d] unable to create manager for [{cf.instance.root}\logs\cftrace.log] with data [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$FactoryData@187a67d1[pattern={cf.instance.root}\logs\cftrace.%i.log, append=true, bufferedIO=true, bufferSize=

We are having a problem with cfgrid displaying column data inside the grid even though the columns are set to not display. Worked fine until yesterday. Have an office full of chrome users with the same issue. It seems like cfgrid uses different html for chrome than it does for firefox and there is a table with a class of x-grid-table-resizer. The first row columns set the width and hright to zero like this: <TH class="x-grid-col-resizer-request_grid_REQUEST_ITEM_ID" style="width: 0px; height: 0px;"></TH>The data rows are like this:<TD class=" x-grid-cell x-grid-cell-request_grid_REQUEST_ITEM_ID x-grid-cell-first"><DIV class="x-grid-cell-inner " style="text-align: left; ;"> 99917</DIV></TD> The problem is that the data rows are still displaying inside the grid even though the width and height on the first row cells are zero?  Firefox does not create this resizer table at all and works fine. So does Edge and my Chrome even though it is t

I upgraded Microsoft SQL Server, and after a restart, it would not start. I checked Event Viewer, cfusion/logs and Microsoft SQL logs, and the only thing I found, was this error message:"Error","ajp-nio-127.0.0.1-8018-exec-4","08/22/23","08:11:27","","Error Executing Database Query.[Macromedia][SQLServer JDBC Driver]Error establishing socket to host and port: IP:PORT. Reason: Connection refused: connect The specific sequence of files included or processed is: C:\Website\www\index.cfm, line: 59 ". Checking the community for similar messages, I found this, but my I had TCP/IP enabled, and IPALL was enabled, with PORT.I did remove the latest update for Microsoft SQL Server, but this did not change anything, but I did notice that cfusion/application.log did not update. So my questions are, is there a way to fix this? I was thinking about trying to just establish a new connection to the DB, but from the guides I found, it seems I have to use the Admin page, which I cant access sin

We have using the cfpdfform to populate the xmldata on the pdf, suddenly it stopped working. when we try to read the same pdf using the cfpdfform function it displays the content in struct. but when we open the pdf it shows blank. We are using coldfusion 2023 patch update upto 8. we haven't made any code changes recently, but it stop working suddenly after 30th Sept.

In the process of migrating sites from an environment that has ColdFusion 2018 to one that has ColdFusion2023. New environment has Java 17.0.6. The cacerts has been copied over exactly from the CF2018 to CF2023. This is not occurring on all sites that have LDAP configuration only some. Removed all restrictions in java.security. Not seeing anything at the time of failure in Coldfusion-error.log. Able to access LDAP endpoints from a LDAP tool on the servers so no blocking from the LDAP server end.  While I have not specifically gotten the LDAP server certificate manually to import into keystore I am presuming that if it exists in keystore and works in CF2018 there should not be a reason that it wouldnt work in CF2023.