ColdFusion

My office uses something called "IBM Security AppScan Standard" to scan web apps.  Two of the things it scans for (of course) are XSS and SQL injection.One of my pages got flagged despite my use of cfqueryparam, isValid(), and htmleditformat().  What happens is if you intercept the post data from the form and append something like &foo to a numeric value, you get back a CF error page that looks something like this:500 - Internal server error. ROOT CAUSE: java.lang.IllegalArgumentException at coldfusion.filter.FormScope.parseQueryString(FormScope.java:349) at coldfusion.filter.FormScope.parsePostData(FormScope.java:321) at coldfusion.filter.FormScope.fillForm(FormScope.java:271) at coldfusion.filter.FusionContext.SymTab_initForRequest(FusionContext.java:437) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:33) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.filter.RequestThrottleFilter.invoke(RequestThrottleFilter.java:126

Hi,We have a CF9 multi-server, load balanced installation. All our sites share a common pool of files and the load balancer sets the server ID to either 1024 (server 1) or 1025 (server 2).We have a new site that is working fine on server 1, but on server 2 it doesn't seem to be storing session variables. I've double-checked the set up in both CF and IIS and everything seems fine. Bear in mind both sites use the same application.cfm file.The problem manifests itself when, on server 2, a product is added to the shopping cart; when you then browse to another product, the value of the basket is doubled. The log in facility fails too.Completely baffled; has anyone come across this sort of issue before? The domain is www.matrix-sports-nutrition.co.uk. Setting the ServerID cookie to 1024 will give you the version that works, 1025 the broken version.Cheers in advance,Simon

I have a MSSQL database schema question that I’d love to have the community's opinion on.  I’m looking for the optimal way of storing one-to-many relationships for a variety of table combinations.I’m familiar with the basic idea of relationship tables  (the green table links Table1 to Table2):Table1          Table2          Table1Table2Table1ID        Table2ID      Table1Table2ID                                            Table1ID                               &nbsp

I have been playing with CF10 performance on the CentOS 6.5 environment and so far I have lots of issues with it. I really appreciate any help on resolving the issues. It is upgraded version of CF from 8 to 10, both are 64-bit.It seems to be memory leaks issue with CF so I have tried to adjust jvm.config as well as when ahead and upgraded CF's java version to the 1.7.0.55 version (tried this solution, thread (Re: SEVERE: The web application [/] created a ThreadLocal). Some of the issues were resolved but not all, the CF still eats memory then gets stuck. I have tried to use the following jvm settings:Old one:----------------------------------------------------------------------java.args=-server  -Djava.awt.headless=true -Xms384m -Xmx1152m -Xmn128m -Dsun.io.useCanonCaches=false -XX:MaxPermSize=384m -XX:+UseParNewGC -XX:+CMSParallelRemarkEnabled -XX:ParallelGCThreads=2 -javaagent:/opt/coldfusion10/newrelic/newrelic.jar -Xbatch -Dcoldfusion.home={application.home} -Djava.security.egd

Hi, I've installed CF11 on Mac Mavericks.What's the url to cfadmin? http://127.0.0.1:8500/CFIDE/administrator/index.cfm doesnt workand neither does http://127.0.0.1:8600/CFIDE/administrator/index.cfm Any ideas?Thanks

I have a CFGRID in a small app that is passing wrong update information.  This is causing the updates to happen in the wrong rows in the data table.  Anyone have any ideas what could cause this?EXAMPLE:Grid has 300+ rowsSelect item with ID 103 and edit a value withing the data (happens to be decimal(8,2) in SQLServerSelect and edit ID 104On submit of changes, the data getting updated in the table is row 104 and row 108 !!!The ID row is set as primary keyI have used cfgrid in other scenarios without issue.Version is CF10Same happens whether I use CFGRIDUPDATE or use the passed form fields and update via SQL.Any thoughts?  Ideas?  This is very frustrating.Thanks in advance.Pete

How to read an Excel file ".xlsx" of 420 000 lines ?I used cfspreadsheet but,over 4000 lines  it fails, saying nothing.I tried the CFC (custom tag) : POIutility.cfc from Ben Nadel.but it seems it does not work with xlsx,does work fine with ".xls" , I can read 65 000 linesbecause ".xls" it limited to 65 000 lines.so I have no solution to read 400 000 :lines.Thanks for help. ideas ?Pierre.

Trying it install coldfusion builder 3 as an upgrade on a new computer but when I put in the previosu serial number for cfb1 its saying its not valid. However it is a valid key.

I and trying to do an output that will list the name of a apartment complex and it's corresponding task each time that their apartment number changes <cfquery name="Running_list" datasource="c124805-h217079">SELECT Lisid, LisUnitNo, LisTask,  LisNotes,  LisStatus,  LisPriority, Lisduedate, lissideoftown, proname FROM listrun LEFT JOIN property ON LisUnitNo = proid ORDER BY LisUnitNO, LisPriority desc, Lisduedate</cfquery> my output code looks like this<cfoutput query="running_list">#Running_list.proName# - Priority: #Running_list.LisPriority#<br />#Running_list.LisStatus##Running_list.LisTask#<br></cfoutput>My displayed drill-down result to looks like this:HMC 508 NAS - Priority: 3Install Carpet inside of Coat closetHMC 508 NAS - Priority: 3Install Doorstop behind the kitchen door so that it will not hit the cabinet.HMC 508 NAS - Priority: 3Paint the inside of the rear kitchen door HMC 508 NAS - Priority: 3Check the HVAC closet PVC pi

we have a website on cfmx7 and are looking to move it to a dedicated server and therefore need to purchase the latest cf software, but we do not want to amend the code.  Is it possible to buy a cf11 licence but downgrade it to cfmx7?

Since the release of ColdFusion 11 I have not been able to find any resellers with ColdFusion 10 licenses for sale.  I checked a large number of Adobe's partners to no avail.  Does anyone know where I might find ColdFusion 10 Standard licenses?

Does anyone have any information on how to integrate coldfusion and echosign, i am looking to have a pdf form filled out and then sent out to a customer to be signed through echo sign. Any help is very much appreciated.Thank you,

Hi, we've just moved a large application from CF8 to CF10 and are seeing that CFHTTP performance is *much* slower on the new system.We've verified this by sequentially running 50 CFHTTP calls to small static assets on an Apache server, measuring the response times with gettickcount(), and averaging over several runs.On our old (Ubuntu + JRun + CF 😎 installation, we're averaging about 1 ms per request.On our new (Centos + CF 10 standalone) installation, we're averaging 5000 ms per request. That's 5000 times slower.We initially suspected that this was related to entropy generation issues as the first request in a test run would return relatively faster (a few hundred ms in total) compared to all subsequent requests in that run.  However, attempting to modify the JVM settings as prescribed did not resolve the issue.  We've further tried using alternative entropy-generating tools (as recommended in the original blog post cited in the aforementioned thread), but that has n

Hi I'm suffering with this issue Bug#3506758 - MySQL 5.6 Unable to Execute Queries and therefore am trying to update cf 10 to version 13 (current version is 😎 however I get 'Error occurred while installing the update: Failed Signature verification'I'm running Mavericks on Mac.Can anyone point me to a step by step way to resovle this please (I'm new to Macs and am a cf coder but alas dont have any experience in server admin).Thanks very much indeed.Nick

Hello,I am trying to create a coldfusion report based on information i get from an adwords account. I have the report ready and i just need the data, does anyone know of a way to use coldfusion to login to adwords and get report data. I've been searching the web for the last week and i found a coldfusion adwords library but apparently it doesn't work anymore. Now google is forcing oauth2 authentication, does anyone know how to do that with coldfusion?What i need is fairly simple just need some help and trying to figure out how to do it, i just need to get specific report data? Any help is very much appreciated.

I've been googling for a while and I can't find the correct reason for why I cannot get <cfflush> to work.  Any time I use it on my server the output only appears once the page is done loading.  I've tried a small interval and tacking on lots of hidden data to verify it's not the browser.  I'm using Chrome and Firefox with the same results.  Can anyone tell me what I've configured incorrectly or any other additional information?Thanks in advance,

Hi,Basically,  I receive a hash of a pk and would like to compare that hash value a pk in SQL Server.  There is no stored hash value in that table.  So I have to use CF function Compare to compare while looping the whole table.  As a result, it's slow down.  Is there any functions in SQL server or something that I can get a quicker comparison result?Here is basically the loop of the table and comparing.<cfquery name="name">     SELECT id     FROM tbl</cfquery><cfloop query="name">     <cfset hashID = HASH(name.id,"SHA")>     <cfif COMPARE(url.id,hashID) EQ 0>          [do something]     </cfif></cfloop>

Hello,I've got some trouble to update a ColdFusion linux based. We have already tried to update from ASPB11-04 and ASPB11-14 but we always have the folloing erreor message : "returning error page for JRun too busy or out of memory"We really need a solution ASAP. Thanks!Jeff

When installing Adobe ColdFusion Builder 3, I found an URL that describes features available in the Express Edition. Knowing I'd need to discuss the differences I typed the URL in the browser, a clickable link would have been nice, and received a generic Adobe error page. http://www.adobe.com/go/cfb3_exp_std_features

There are lots of forums and chats about ColdFusion 10 connecting to Exchange Server 2010. Does anybody knows whether ColdFusion 10 can connects to Exchange Server 2013. If you do know, what are the steps involved? I have tried all the tricks used in ColdFusion 10 connecting to Exchange Server 2010 and still cannot connect to Exchange Server 2013.

I'm working for a few years on a school.When I started working they were using Coldfusion 9 Enterprise.I would like to upgrade to Coldfusion 11 Standard.Looking at Buying guide | Adobe ColdFusion I can' t see a reason to buy the Enterprise for our small website.Or is there a good reason?Is it possible to upgrade from Coldfusion 9 Enterprise to a Coldfusion 11 Standard and migrate it from one server to another?

Win/7, IIS 7.5, installed CF 11 Developer, set password, but it will not log me in with password, says invalid password

I have an issue that I just noticed in which encrypted data that is stored within a cookie seems to get altered in a way in which it cannot be decrypted successfully if the length of the text is over 45 characters.  However, if the encrypted data is stored in a simple variable it can be successfully decrypted regardless of size. Here is a code example:  I got the error in both CF9 Enterprise and CF11 Enterprise:<!---Begin code example---><cfset plainText = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"><cfset seed = "myseedvalue"><cfcookie name="testvalue" value="#encrypt(plainText,seed)#" expires="never"><cfset testvalue2 = encrypt(plainText,seed)><cfoutput>  The encrypted cookie value:<br>  #cookie.testvalue#<br>  The encrypted value outside of the cookie:<br>  #testvalue2#</cfoutput><br><br>A comparison of the two strings using the compare() method: <cfoutput >#compare(cooki

i have a js function that works fine when attached to the onClick event of a button, but i want it to execute when user clicks the tabis there a way to do that?function clearURL() {var testURL = document.URL;var urlQry = testURL.split("?")[1];if (urlQry != "")     {    var activeTab = ColdFusion.Layout.getTabLayout('myLayout').getActiveTab().title;    if (activeTab == 'myTabTitle')         {        var newURL = testURL.split("?")[0];        window.location = newURL;        }    }}thanks

Hi I created a report using  spreadsheet function.  I have a problem hiding rows since the the hidden="true" does not seem to workexample:<cfscript>    sHidden=StructNew() ;    sHidden.hidden="true";    sHidden.fontsize="8";     </cfscript>.....<cfset spreadsheetAddRows(s, qline)><cfset nEnd=nLine+qline.recordcount><cfloop index="n" from="#nLine#" to="#nend-1#" >     <cfif not isdefined("form.summary")>          <cfset SpreadsheetFormatRow(s, sLineDetail, n)>     <cfelse>          <cfset SpreadsheetFormatRow(s, sHidden, n)>       </cfif>\</cfloop>    No matter what I try the hidden format does not work.  Fontsize in the shidden structure was added to test whether it was