ColdFusion

I've recently upgraded a server to CF2023, which has many legacy apps that currently rely on implicit variable scoping. I've temporarily added the Dcoldfusion.searchimplicitscopes=true Java flag for the server, and was hoping to work through the individual apps and test them by overriding that in application.cfc with this.searchImplicitScopes = false.The application property does not appear to be working though. With this.searchImplicitScopes set to false, it's still searching scopes for undefined variables. If I add a new .cfm to the app, with only: <cfoutput>#testvar#</cfoutput> I get an undefined variable error as expected, unless I append ?testvar=whatever to the URL, then it pulls it from URL. Similarly, an empty page with just <cfoutput>#script_name#</cfoutput> finds the value from cgi.script_name. Does the application property not override the server Java flag? If I cfdump  <cfdump var="#this#"> from the same

Hello,We are using ColdFusion 2016 for our production server and the following vulnerablity has been reported. Currently we are on ColdFusion 2016 Update 11. In the below installation locations the log4j versions are log4j-1.2.15 and log4j-1.2.17.Security team is asking us to upgrade to latest log4j version i.e., log4j-core-2.23.1. Could you please help us here to remediate these vulnerabilities? C:\ColdFusion2016\cfusion\lib\log4j-1.2.15.jarC:\ColdFusion2016\cfusion\hf-updates\hf-2016-00011-314546\backup\jetty\lib\ext\log4j-1.2.17.jarC:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\plugins\org.apache.log4j_1.2.15\lib\log4j-1.2.15.jarC:\ColdFusion2016\cfusion\jetty\lib\ext\log4j-1.2.17.jar

Hi, I am running my coldfusion application via docker, the application has a onServerStart() method in a file called Server.cfc which lies inside the webroot of our coldfusion project, when building the container the Server.cfc does not get triggered, although I can do it from the admin console(that works) but is there any other way to do the same. I have also tried to create an object of Server.cfc and calling from the application.cfc, but using that the control goes into the server.cfc method but does not initialize the server with the details.Thanks in advance.

I cannot figure out how to install CF2023 using the GUI instead of cfinstall.bat.CF2018 is currently installed.The product installs but the settings, specifically scheduled tasks, are not transferred to the new admin console when it is first opened as expected.

I am having trouble getting the keystore to work with ColdFusion 2021. I can not seem to get past the following error: Connection verification failed for data source: <DBName>java.sql.SQLNonTransientConnectionException: [Macromedia][SQLServer JDBC Driver]An SSL socket connection could not be established because JRE 1.4 or above is required. I went through the same steps that worked for ColdFusion 2018.Using the Java Home folder from JVM Details in the Settings Summary run the following. <JavaHome>\bin\keytool -importkeystore -srckeystore C:\ColdFusion2021\jdk-11.0.15.1\lib\security\<DBServerName>.pfx -srcstoretype pkcs12 -destkeystore C:\ColdFusion2021\jdk-11.0.15.1\lib\security\<DBServerName>.keystore -deststoretype pkcs12 When filling out the Microsoft SQL Server Data Source information I use the following Connection String. EncryptionMethod=SSL;ValidateServerCertificate=true;TrustStore=C:\ColdFusion2021\jdk-11.0.15.1\lib\security\<

The following connection string worked in ColdFusion 2018: EncryptionMethod=SSL;ValidateServerCertificate=true;HostNameInCertificate=SQL-SERVER;TrustStore=e:\Java\jdk-11.0.13\lib\security\cacerts;TrustStorePassword=[mypassword] When I attempted the connection, I got the error message:  An SSL socket connection could not be established because JRE 1.4 or above required I attempted to connect without requiring SSL, but got a different error which I resolved by adding AuthenticationMethod=NTLM. After resolving that, I added the above to the connection string, but got the same error.  I figured the issue was the fact that I have ColdFusion running on jdk-17.0.11.  I went ahead and created a new truststore like we did in production and imported all three of the certificates.   Same error. I ran across a post with similar problems where the recommendation was to use cacerts instead of a custom truststore.  I imported the certif

I am using CF 2016 and found that CFIMAGE does not work with the image type webp Does anybody know if newer versions of CF support it?

Name: pmtagentDescription: The pmtagent package helps you configure ColdFusion with Performance Monitoring ToolsetI find this error during installing this package.  Help me asap!

I am trying to switch from ColdFusion Builder to VS Code extension. When I am trying to add a server the input panel looks like this (see attached image). i18n translations are not displayed. What am I missing? 

Greetings,I have not been able to find instructions on this, nor am I able to get it to work by trial and error. Currently I have 20 or so scheduled tasks that run in the ColdFusion 2021 Scheduled tasks manager as http://localhost....task.cfm format. I need them to run as https instead due to regulations where I work which disallows ALL http, even to localhost. Can anyone direct me to instructions on how to get this to work? I tried simply changing the url to https://localhost and https://ip and https://sitename but none of them execute properly. Also, when I try to run the same tasks via the command line using cf.bat, they error out, unable to find the variables such as the mail server specificed in the task. These tasks all run fine when submitted as http requests via the scheduler. Any guidance would be appreciated.

I upgraded our CF 2018 to CF 2023 using the zip install. I do not see a webserver connector in wsconfig.exe. Do I need to create one manually? I also do not see the uninstall.exe under the CF 2023 directory structure or the CF 2023 program in Control Panel>Programs and Features? Is the uninstall option only made aviable when installing using the GUI install?

I use a light-colored background in Vs Code.One code color in particular, which I would an "attribute name", is also a light color (orange / yellow) and I can't read it.For example, in the following, "Code" ad "Name" are unreadable.<cfset session.UserTagAgency = {Code = "", Name = ""}>How can I update the attribute names to be some color other than yellowy-orange?Does the ColdFusion Builder Extension have a .json file for themable colors... that I can edit?Thanks!P.S. That color is one of the original Window colors, called "money green" - 192,220,192.  I have used it as a background color for 20+ years (25+?) to avoid the glare of full-white backgrounds.

Hi All.I am seeing many of these installation messages in the cfpm-audit.log from this morning on our production server, and there are many others from June 18th. We are not installing anything! Can someone shed some light on what these entries are referring to? We absolutely don't want anything being installed without our testing first! We do have the "Automatically Check for Updates" checkbox checked in the cf administrator, but everythign on the web indicates that this will only send notifications of updates, and will not automatically install them.Thank you.

After upgrading MySQL to 8 we noticed some odd date behaviors.Example:2024-06-28T02:11:51.000 stored in a varchar type field named tstampWhen we execute this statement in mysql workbench directly:STR_TO_DATE(tstamp,'%Y-%m-%dT%H:%i') as listedonThe result is correct: 2024-06-28 02:11:00The same exact query when done using a coldfusion query on the same field and database returns:2024-06-27 22:11:00.0The coldfusion SELECT is subtracting 4 hours from the date stored in a varchar field when we use str_to_date to format it? Needless to say this is causing issues. Does anyone know of a possible cause or fix for this maybe changing db drivers so that I don't have to recoded all queries on our sites using str_to_date? ThanksForrest  

I am trying to install ColdFusion 2023 on a new Windows virtual machine.I set it up as Development Type - Development with CF Server Profile - Development Profile.  After installation I ran the Web Server Config tool and added the IIS website/all Here is what IIS has after installation & web config  After this I tried to access the localhost and receive this error message The ColdFusion administration doesn't load either Windows Virtual MachineMicrosoft Windows Server 2022 Standard64-bitVMware 7,1CPU: Dual 3.10 GHz Intel Xeon(r) Gold 6254@, Memory: 32768 MBC: 79.62 GB (43.86 GB free) Any help is greatly appreciated.  Thank you!

Hoping for some input/help. I have an IIS failover cluster freshly installed across two servers. We purchased CF2023 Enterprise and installed it on both servers. I ran the lockdown software per this document on both servers. When trying to add a remote instance per the instructions here (Registering a Remote Instance), the information seems to take but then the remote instance disappears from the list of servers after the form is submitted (and accepted). When attempting to edit/view the remote instance I just added, I get an error (An error occurred while executing the application. Please try again or contact the administrator.) and it is then removed from the list.In looking at the coldfusion-error.log file, I see a line "SEVERE: Error storing instances.xml" and an access denied error to the instances.xml file (\cfusion\..\config\instances.xml (Access is denied)). I believe the issue is related to the lockdown tool. I was able to add remote instances before running the lockdown tool.

Requesting some help with this one.I know the basic steps for creating the new connector. I am able to do that successfully, but upon using the new isapi_redirect.dll the isapi_redirect.log is being written with this error upon trying to access the ColdFusion Administrator: [warn] jk_check_path::jk_util.c (2476): Blocking this uri: [/CFIDE/Administrator/index.cfm] since its starting with cfideI know I've seen numerous posts about not accessing the CFIDE and that Adobe is helping us by blocking it, but this is my only way to administer this in my environment.If I go back to using the previous isapi_redirect.dll there is no issue and I am able to access the ColdFusion Administrator console without any issues.Is there a new exclusion that we need to include somewhere to allow access to CFIDE/Administrator with this new update?

I am not able to get line debugging to work.I have an up-to-date VS Code and believe the CF Extension to be up-to-date.I am devopling against a localhost instance of CF, and have administered its RDS to be enable. From VS Codes CF Server configuation, and can test connetion. That works.But when I choose a file with a breakpoint, nothing happens.The debug console output is this:Error on RDS request :: {"code":"ERR_SOCKET_BAD_PORT"} 323 :: {"statusCode":500,"data":[],"error":{"code":"ERR_SOCKET_BAD_PORT"}} Error on launchRequest :: 13 Error on RDS request :: {"code":"ERR_SOCKET_BAD_PORT"} Debugger stopped Error on RDS request :: {"code":"ERR_SOCKET_BAD_PORT"} Debugger stopped All, I know is that CF+Tomcat is configured for port 8500 and the RDS line debugger port is 5005. No changes from defaults. Everything about runing CF code and using RDS on my development platform but this appears to run as expected.There is a bug tracker report about something similar, but I see nothing that t

I have a virtual website running off of IIS (looks like version 8.5,) and ColdFusion 11.When I access a page as http://something.example.org/ which uses a ColdFusion template (index.cfm), the page correctly displays. However, when I request http://something.example.org/index.cfm it results in a 404.All .cfm pages result in a 404Other virtual websites on the same server behave correctly, returning successfully for both http://other.example.org and http://other.example.org/index.cfmSince I just set up this new website, I'm wondering if there is an additional setting I'm just missing that prevents this error from occurring?Pages with non .cfm extensions, like .htm & .pdf display properly.

Hi,We are having issues with the PDF engine after migrating to CF2023 Build 7. Though the HTML is correct converting to pdf using cfhtmltopdf is broken. Few issues are like1. text overflowing on the pdf2. lot of spaces between 2 div blocks.

I just try using coldfusion 2023, and get error rewriting.I use following- OS Ubuntu 24.01- Apache 2.4- FW/1 frameworkSo when I open example at browserhttp://xxxx.com/index.cfm/test/rewrite ====> working wellbuthttp://xxxx.com/test/rewrite ====>  error as belowPlease advice.Error log is :[warn] ajp_process_callback::jk_ajp_common.c (2263): (cfusion) AJP13 protocol: Reuse is set to false

I am trying to create a Coldfusion Docker image to run as a container that is created using Google Cloud Build and Google Cloud Run.Currently I have everything working correctly. My problem is that the .car and the mysql.jar files are not being copied, so when the Docker image is built (Google Cloud Build) there are no Coldfusion Datasources or settings. Security of these settings is very important and thus I am not inclined to use a setting.json file for importing settings.I have also tried building the file locally and pushing it to the Google Artifact Registry and using that image. That image had the same issue when I run it.Here is the Log from Google Cloud Run:```Starting ColdFusionStarting ColdFusion 2021 server ...session): Could not set limit for 'locks' to soft=-1, hard=-1: Operation not permitted; uid=0,euid=0session): Could not set limit for 'sigpending' to soft=0, hard=0: Operation not permitted; uid=0,euid=0session): Could not set limit for 'msgqueue' to soft=819200, hard=

I moved code from ColdFusion2016 (Linux) to ColdFusion2023 (Windows). The database and network share behind the website are identical.  I am using cffile read to read a file in a network share.  The website on the CF16 server can read the file and displays as expected.  The website (same code) on the CF23 server is unable to read the file and throws and error.  This is the value in our database that sits behind both CF16 & CF23 code 'PLN_29886_ Istanbul SIOT DAY 1 - 1to1 Turkish Thank You — Triggered Email.htm'On the network drive the filename is displayed as 'PLN_29886_ Istanbul SIOT DAY 1 - 1to1 Turkish Thank You — Triggered Email.htm' I do not have any control over the filenames that are placed into the network share. I can see that the em-dash is translated into — in the file. I'm at a loss as to why cffile on CF16 reads the file but cffile on CF23 an error is thrown. I would expect the same result either they both read the

Hi! Is there a way to clear template cache manually on a Windows ColdFusion 2023 server, please?We have multiple ColdFusion servers that point to a single location where our ColdFusion applications are stored. One specific application running from one specific server errors out, even after "clearing the template cache" using its ColdFusion Administrator.  This specific application runs just fine from all other ColdFusion servers.  Additionally, all  other applications that run from the server in question..  work just fine!In the past, when we where on ColdFusion 2018, we had seen a similar problem and deleting the "cfclasses" directory and then clearing the "Template Cache" fixed the problem.  However, in Coldfusion 2023, the "cfclasses" directory no longer seems to be use.  Any assistance would be greatly appreciated! Thank you very much!

Hi,I've never used cachedwithin parameter before in queries as the queries are generally dynamic but i'm potentially thinking it might be of benefit to us. The question I have is with a lot of users and active sessions, would adding this cachedwithin parameter to a few queries overload the cache or have negative affects to performance. I don't know enough about how the cache works or what kind of space it has to operate. Is there a benefit of using that parameter if the queries are dynamic. All I can see in the documentation is that for dynamic queries it will create a new one for each but it doesn't warn against using it if that is the case.Thanks