ColdFusion

Hi, Adobe writes: The JVM flag -Dcoldfusion.searchimplicitscopes will be removed in the next major release of ColdFusion, hence disallowing searching of an unscoped variable in the implicit scopes. This may require application code changes. We are currently on Coldfusion2021.  Does "next major release of ColdFusion" mean something like Coldfusion2025 or some other version than Coldfusion2021 and until we upgrade to that version we can continue to use the flag?

I am playing around with the the SAML SP and IdP configurations in CF2021.  I am using CF as both IdP and SP.When I call initSAMLAuthRequest() I receive the following error:coldfusion.util.KeystoreUtils$CertificateException: Errors found in the certificate at coldfusion.saml.SamlHelper.stringToCert(SamlHelper.java:779) I assume this error is related to the IdP certificate. This certificate is a self-signed certficate that was generated with the following command:openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 \-nodes -keyout idp.key -out idp.crt \-subj "/C=US/O=IdP Test/OU=SSO/CN=test.internal" \-addext "subjectAltName=DNS:test.internal,IP:192.168.1.2" I used the Manual IdP configuration option and pasted the contents of idp.key  into the Signing Certificate box without the ----BEGIN|END PRIVATE KEY----- bits.  It looks like MIIJQg....Tnw== If I leave the -----BEGIN PRIVATE KEY----- bits in there then then I receive an error saying "The input string

Hello there. Me again 😛I have a website where I have a link https://whatever.com/membersDataNow, this folder membersData has other folders as well but the main point is that access to it should not be allowed. There should be a new page that is being shown each time somebody tries to enter and its IP doesn't match the IP of the website owner.  I would like to do this with Application.cfc or if it's not possible, do it with  https://whatever.com/membersData/index.cfm file inside. Keep in mind that index.cfm is always hidden in URL. 

What are the feature differences between ColdFusion Developer and Enterprise editions?  Is there any online documentation from Adobe that explains what they are?

I've been developing and testing Adobe's pdf autotag api and I'm pretty impressed. I'm wondering why autotag is not in <cfpdf>? With the price of CF these days and single version license upgrades... seems like we should be able to use CF to tag a pdf - not pay more to Adobe to use an api. Really, all the document services should be native to CF. Who's with me???

I have a legacy SOAP API built in Coldfusion. This API is well established and works most times, until it doesn't but just for some third parties integrating with it. The issue I am facing is quite odd, I have checked the logs but not able to pinpoint why it occurs or when.This is what the API Method in question looks like when I access the wsdl directly from browser: As you can see the parameters names for function SubmitJobApplocationRequest are defined and listed as expected; however quite regularly, after the API gets used for sometime (once again, I am not able to find out when it occurs unfortunately nor why it does), the parameter names change to the following:At this stage, some of the third party software's integrating with this API get the following error message back from Coldfusion: coldfusion.xml.rpc.CFCInvocationException: [coldfusion.runtime.MissingArgumentException : The TOKEN parameter to the SubmitJobApplication function is required but was not passed i

Hello, I am trying to keep my ColdFusion 2021 web server up to date and so far I have updated from update 8 to 10 but I am not able to update to 11 or 12. I have loaded the contents of hotfix-packages-cf2021-012-330257.zip into the bundles directory and then I have ran the update 11 / 12 updateinstaller jar from cmd as an admin and the application server service will not start after. This is exactly what I have done for all prior updates and it has worked without issue. It appear as though it is failing as the service is trying to authentice the license online and the web server does not have internet access. It also appears to uninstall a lot of required packages and so naturally after the upgrade I cannot access CF Admin. Feb 24, 2024 17:07:13 PM Information [main] - Uninstalling the package netty-common-4.1.45.FinalFeb 24, 2024 17:07:13 PM Information [main] - Uninstalling the package reactive-streams-1.0.2Feb 24, 2024 17:07:13 PM Information [main] - Uninstallin

I would like to automate setup of my cf install and wondered how one can set maximum number of post params via the API?

Hi, I use the below code to allow users to upload file(s) from the browser to our File Server.   <cffile action="UPLOAD"filefield="#ThisFile#"destination="#NewDir#"nameconflict="Overwrite" <!--- nameConflict="Error" ---> > Every now and then,  it will give users an error. "The page was not displayed because the request entity is too large." Today, a coworker was having this issue from his laptop from another location. So, I uploaded the file for him, using the same Cold Fusion interface.  Of the 10 attempts, 2 attempts yielded the SAME errors and the other attempts went through without problems.  When the error occurred, I could not find anything in the application.log. I have connection speed above 100MB/s both upload and download. The file in concern was only 100k in size.  I could only find the below thread on this topic. https://community.adobe.com/t5/coldfusion-discussions/http-er

I have Coldfusion running on Linux 8 behind a firewall. From CF admin, I was able to update from 2 to 3 and then to update 4.I'm having issues upgrading from update 4 to any other version. I selected update 5 download and install.  I clicked OK and then it shows  Unable to proceed beyong this point. I tried to run the command as suggested. [root@elcfxa03 bin]# pwd/opt/ColdFusion2021/cfusion/bin[root@elcfxa03 bin]# ./cfpm.sh install administratorThe packages repository https://www.adobe.com/go/coldfusion-packages is not accessible. You can only load the packages that are available locally in the /opt/ColdFusion2021/bundles directory.The following packages will be installed : adminapi:2021.0.05.330109,administrator:2021.0.05.330109Downloading the package adminapi-2021.0.05.330109.zipAn error has occurred while installing the package adminapi. Exception : nullThe package adminapi is marked for uninstallation. Uninstallation will be done, on the next server st

Is there a book available on the latest version of ColdFusion? Something akin to a learning guide?

I am using Fluend as a sidecar of a Coldfusion application in Azure AKS. I am facing issues with some log messages getting truncated.I am using this docker image fluent/fluentd-kubernetes-daemonset:v1.16-debian-elasticsearch8-1.FluentD configuration:apiVersion: v1 kind: ConfigMap metadata: name: fluentdconf data: fluent.conf: | <source> @TyPe tail path /opt/coldfusion/cfusion/logs/*.log path_key tailed_path pos_file /var/app/file.log.pos tag aks.coldfusionlog max_line_size 50MB <parse> @TyPe none </parse> </source> <match aks.coldfusionlog> @TyPe stdout </match>

CF2016 (OSX 10.11.6)In the CF Admin (Data & Services > REST Services I'm trying to register a REST service. When I select the path to the folder where my 3 test files live (all 3 files are in the same folder) and attempt to complete the registration process I get an error saying Error registering REST service. Please ensure that you have entered a proper mapping and path.No mapping found for path /Applications/ColdFusion2016/cfusion/wwwroot/CFC/testServices .If mapping is not specified, path should point to application root directory.In an effort to keep this as simple as possible I'm not using mappings of any kind and all of my files are in the same folder. The instructions on the form control say to use "Application path or root folder where CFCs reside"Does anyone know what I need to do to register my REST service in the CF Admin?I created 3 simple files: Application.cfc (contains only cfapplication name="test" tag, which is empty)service.cfc <cfcomponent rest="true">&n

Hello, I am developing an SSO Azure Ad from my localhost:When I run the InitSAMLAuthRequest(****) and call the ProcessSAMLResponse(“***”,”***”)The Azure Ad goes into constant loop and will not stop.  Looking at the error log files I see the below and a bunch of othersjava.lang.nullpointerexception at coldfusion.saml.samlResponseHandler.getid(samlResponseHandler.java:**)java.lang.nullpointerexception at coldfusion.saml.samlResponseHandler.<init>(samlResponseHandler.java:**)java.lang.nullpointerexception at coldfusion.saml.SAMLServiceImpl.ProcessSAMLResponse(SAMLServiceImpl.java:**) 

Hello,I am running CF2018 update 9 with Redis session storage enabled and I am finding that sessions are not consistently expiring on their configured expiration durations. Currently in CFAdministration I have the maximum session timeout set to 30 minutes, the default to 30 minutes, and in Application.cfc the timeout configured for 30 minutes.We are finding that often our session will not expire even after several hours of inactivity.  Has anyone else seen this?  Perhaps knows what could be going on? Thanks, -Curtis

We noticed an issue yesterday when with a cached CFC seemingly corrupted.  We ran a number of tests and are able to recreate the issue:Here's a test:- Run any web pages that use the cfc to make sure they're working- Add a space inside one of the comments in the CFC file- Try to run the web page again.  It'll error out.- In CF Admin, clear the cache- Test the web page again, it'll work Also, in cfclasses, related class files are updated the moment we change the CFC and run the web page, and they won't change after clear cache, indicating the problem doesn't initiate in class files.More details:- The CFC errors out with any change, even if with an additional space inside a comment. - Once we clear the cache in CF Admin, the problem goes away.  This never happened with older version of CF all the way to the begining of CFCs.  We used to have the problem of CFC not getting updated until we cleared the cache, but with CF2021, it actually errors out.- This is th

Revision history 13 Mar 2024: Added the impacted scopes and related code samples to both the tech notes. 14 Mar 2024: Add the Docker image locations of the updates.   We are pleased to announce that we have released security updates to ColdFusion (2023 release) Update 7 and ColdFusion (2021 release) Update 13.   This update includes several security fixes to ensure the safety and security of our systems. These changes address potential vulnerabilities and threats and are part of our ongoing commitment to protecting your data and privacy.   For more information, view the security bulletin,  APSB24-14.   Where do I download the updates from Download the updates from the following locations: ColdFusion (2023 release) Updates ColdFusion (2021 release) Updates   These updates address some significant changes in variable scope and cfdocument. In addition, we've updated a few libraries and packages.   For more information, view the following te

I have an application that periodically throws this errorError Executing Database Query.Communications link failure The last packet successfully received from the server was 878,178 milliseconds ago. The last packet sent successfully to the server was 18,954 milliseconds ago. The specific sequence of files included or processed is:  .......I think this is because the DB is on a different server.Is there any suggestions on how to fix this issue. The error occurs periodically.If the DB issue cant be fixed could I use cfcatch.cftry to keep trying until the connection doesnt fail?Maybe like this <cftry> Problem DB query goes here <cfcatch ...> <cftry> TRY DB query AGAIN? <cfcatch ...> TRY DB query AGAIN? </cfcatch </cftry> </cfcatch> </cftry> 

Hi have a date condition that i dont understand.Where it says <cfif #FORM.LogDate# is not "//">Does that mean NOT Null?I have never seen it before. Full statement below. <cfif #FORM.LogDate# is not "//">'#LSDateFormat(FORM.LogDate, 'dd-mmm-yyyy')#',<cfelse>NULL,</cfif> Thanks in advance

We have a table in an Oracle database with a data type CLOB.  We use the CF_SQL_CLOB CFSQLTYPE in the database query but we get an Oracle error indicating that the data exceeds the 4000 character limit with the VARCHAR2 datatype.  We tried using both the ColdFusion Oracle driver and the JDBC driver  from Oracle's site.  Both are throwing the same error (see below). What is this CF_SQL_CLOB type?  This site indicates that this is for CLOB or NCLOB data types.https://cfdocs.org/cfsqltype-cheatsheet Any suggestions would be greatly appreciated.  Thank you. Error:OriginalSql = select 1 as testfrom request_descwhere to_char(text) = ?and requests_id = ?, Error Msg = ORA-22835: Buffer too small for CLOB to CHAR or BLOB to RAW conversion (actual: 4030, maximum: 4000) This is the table definition:COLUMN_NAME DATA_TYPE--------------------    ------------------------------REQUESTS_ID       NUMBERTEXT  &

Using Coldfusion 2023 we are having an issue setting a cookie that we previously did not have an issue with when using Coldfusion 11.     As I understand it that / character is the reserved token; however, our software vendor is using this cookie name.   Is there a way to override this or otherwise work around this issue?  

I have a war file that was created using CF2018 with all patches applied.  This war file was then submitted to a company named Veracode for a static security scan.  The results stated that there were over numerous jar files with what they rated as Very High to Medium vulnerablities.  They included jar files such as jackson-databind-2.8.8.jar, tika-core-1.21.jar, bcprov-jdk15on-153.jar, jetty-io-9.4.12.v20180830.jar and xercesImpl.jar.  I also tried this on a patched CF2021 instance with similar results.  I obviously cannot just go into the cfusion/lib and replace these jar files with updated versions.   Does ColdFusion really have that many vulnerablities?  Any suggestions on how to deal with this would be greatly appreciated. 

Okay, I have never worked with coldfusion database before. Here is the deal. I have a website structure like this: /root    /Register/index.cfm    /MembersOnly/DatabaseFiles/users.sqliteI am trying to access this users.sqlite db from index.cfm file but I keep getting error.  This is my code: <cfset request.pageTitle = "Registration"> <!--- Define the relative path to your SQLite database file ---> <cfset database_path = "../MembersOnly/DatabaseFiles/users.sqlite"> <cfif IsDefined("form.username") and IsDefined("form.email")> <!--- Establish Connection to SQLite Database ---> <cfquery name="insertUser" datasource="#database_path#"> INSERT INTO users (username, email) VALUES ( <cfqueryparam value="#form.username#" cfsqltype="CF_SQL_VARCHAR">, <cfqueryparam value="#form.email#" cfsqltype="CF_SQL_VARCHAR"> ) </cfquery> <!--- Che

If you have a query... and you output your results with groups...can you get a recordcount of how many records there are for each group? Much like you would do query.recordcount - can you do group.recordcount without having to do a mathematical approach such as doing <CFSET groupcount=groupcount +1>. Example: <query> <cfoutput query="query" group="name"> #name# <cfouptut query"query" group="city"> #city# </cfoutput> </cfoutput> I want to know how many records are contained in each group without having to do a CFSET.

I have a server with hard to access error logs. I keep getting an error on a certain page. Is there a way for me to output the error to the page, instead of just seeing the generic 500 error message?500 - Internal server error.There is a problem with the resource you are looking for, and it cannot be displayed.