ColdFusion

I have a war file that was created using CF2018 with all patches applied.  This war file was then submitted to a company named Veracode for a static security scan.  The results stated that there were over numerous jar files with what they rated as Very High to Medium vulnerablities.  They included jar files such as jackson-databind-2.8.8.jar, tika-core-1.21.jar, bcprov-jdk15on-153.jar, jetty-io-9.4.12.v20180830.jar and xercesImpl.jar.  I also tried this on a patched CF2021 instance with similar results.  I obviously cannot just go into the cfusion/lib and replace these jar files with updated versions.   Does ColdFusion really have that many vulnerablities?  Any suggestions on how to deal with this would be greatly appreciated. 

Okay, I have never worked with coldfusion database before. Here is the deal. I have a website structure like this: /root    /Register/index.cfm    /MembersOnly/DatabaseFiles/users.sqliteI am trying to access this users.sqlite db from index.cfm file but I keep getting error.  This is my code: <cfset request.pageTitle = "Registration"> <!--- Define the relative path to your SQLite database file ---> <cfset database_path = "../MembersOnly/DatabaseFiles/users.sqlite"> <cfif IsDefined("form.username") and IsDefined("form.email")> <!--- Establish Connection to SQLite Database ---> <cfquery name="insertUser" datasource="#database_path#"> INSERT INTO users (username, email) VALUES ( <cfqueryparam value="#form.username#" cfsqltype="CF_SQL_VARCHAR">, <cfqueryparam value="#form.email#" cfsqltype="CF_SQL_VARCHAR"> ) </cfquery> <!--- Che

If you have a query... and you output your results with groups...can you get a recordcount of how many records there are for each group? Much like you would do query.recordcount - can you do group.recordcount without having to do a mathematical approach such as doing <CFSET groupcount=groupcount +1>. Example: <query> <cfoutput query="query" group="name"> #name# <cfouptut query"query" group="city"> #city# </cfoutput> </cfoutput> I want to know how many records are contained in each group without having to do a CFSET.

I have a server with hard to access error logs. I keep getting an error on a certain page. Is there a way for me to output the error to the page, instead of just seeing the generic 500 error message?500 - Internal server error.There is a problem with the resource you are looking for, and it cannot be displayed.

Hello all - I am having an issue uninstalling our 2021 lockdown because it's missing the installvariables.properties file.  This file was missing from the very first uninstall attempt.  I saw where someone had a similar difficulty with CF 2018 and a responder mentioned that an installvariables.properties file was available for 2018. Is one available for 2021?  Would this file necessarily be compatible with my installation?  All work I am doing is on a clone so I am willing to give it a shot anyway if someone has one or knows where one resides. Thank you

Please find below  is home.cfm, I don't have experience in Vue framework. This application was working earlier however for the past few days I only see balnk screen but there no errors in console. I use Edge browser and Chrome browser. In both the browsers the I see only balnk screen. Please help in this regard. Thanks. <div id="app" style="display:none"><!--- start vuetify ---><v-app> <!-- to use Vuetify components and styles, the page needs to be wrapped in v-app --><cfloop array="#components#" index="component"><!--- each component file contains the vuetify markup ---><CFINCLUDE template="ui_components/#component#.cfm"></cfloop><v-main v-if="isLoaded"><v-container ><div class="text-h5 my-4">My System</div><v-card><v-card-text class="subtitle-1 font-weight-medium"><v-row><v-col cols="7" class="pr-4"><div class="title mb-4">Welcome</div><div style="line-height: 30px

This issue seems to be related to the post below. CFHTMLTOPDF Fails Under 2021/Update 5 After Upgrading Java to 11.0.17 It seems as though CFHTMLTOPDF will not work with JAVA 11.0.17 and above on CF2021. We have tested this out by updating CF2021 to the latest JAVA, 11.0.22. When we update the add-on service(jetty.lax LAX.NL.CURRENT.VM) to use the JVM, as per the section 2.7.4 of the 2021 Lockdown Guide, we get a Server Error. "coldfusion.document.webkit.PDFgErrorHandler$ServiceManagerConversionException: Error occurred while generating PDF."In ColdFusion Admin we can "update PDF service Manager" and receive a "Service Manager localhost updated." message and the connection status says "ok". Everything seems to be happy but if we try to run a simple hello world page we get the error. If we change the JVM in Jetty.lax to a version prior to 11.0.17(but still leaving CF on the latest) then the error goes away and the pdf is rendered as expected. We can also fi

Hi, I'm running CF 2023 Update 6 on Windows Server 2022. According to the package manager the htmltopdf package is installed but cfhtmltopdf isn't working. On the CF admin -> PDF Service page it looks like everything is setup properly:Name: localhostHost Name: 127.0.0.1Port 8995Engine: 2.0When I try to start the service I get "Error enabling PDF Service Manager. Check logs for more details" In the coldfusion-out.log I get: Mar 19, 2024 10:54:15 AM Error [http-nio-8500-exec-3] - Connect to 127.0.0.1:8995 [/127.0.0.1] failed: Connection refused: connect http://127.0.0.1:8995/PDFgServlet/verifyMar 19, 2024 10:54:15 AM Error [http-nio-8500-exec-3] - Error enabling PDF Service Manager.Mar 19, 2024 10:54:15 AM Error [http-nio-8500-exec-3] - coldfusion.document.webkit.PDFgErrorHandler$ConnectionVerificationFailedException: Connection verification failed. Using "netstat -an", I don't see any service listening on port 8995. What am I missing? Sincerely,  Alan Ya

This is really annoying.  When I use jquery selectors with #, cf builder's code coloring gets broken.For example, in this image, the rest of the page after the selector in the is that sickly yellow / brown color.  My code block is not surrounded with <cfoutput> tags.  Any way to fix this that doesn't involve doubling up on #? 

Hello there. I have over 5k pages where each has at least one image with extension .png or .jpg. Now, I was checking my website performance here: https://pagespeed.web.dev/ and it shows my images load very long which gives low google score.  They suggested to me to use webp files which is okay however, I have plenty of images. Do I really need to convert each image to webp and than brute force each .cfm file to edit HTML for each image. That would be crazy.  Another thing here is that I would like to set that webp but still keep compatibility for browsers that don't support webp. That would probably involve using <picture> tag.  But, my main question here is if there is something coldfusion can do about this to automate this so that I don't have to trouble myself with such robust job? 

After upgrading from Coldfusion 9 to Coldfusion 2021, I'm having issues with displaying Chinese/Japanese characters in the pdf files that are generated using cfdocument from html code. The characters display properly when output as html, but disappear when converted to pdf with cfdocument. Any one else encounter this? Was there any changes to the pdf engine that Coldfusion uses? Thanks!

I have downloaded the latest CF 2018 server to install a development server on my local machine.  However, during the installation process, my machine restarted.  I am not able to get the server to start.  So, when I launch the uninstall app I get the following pop-up error message. File Missing!installvariables.properties file is not present in install folder. Hence uninstallation has failed. My aim is is to uninstall so I can redo the installation process.  Even if I could fix the current installation, I would still like the ability to uninstall in the future.   I have searched online and in the forums but I might have missed an answer to this problem.  Any assistance that leads to a solution to my problem will be greatly appreciated!

Unwanted white-spaces appear when using inline HTML-tags, while converting HTML to PDF: <cfdocument format="PDF" pagetype="A4" orientation="portrait" overwrite="no" fontembed="yes"> This is a sentence with <i>italics</i>.<br /> And here <b>bold</b> is used.<br /> </cfdocument> The <i> and <b>-tags (actually: any tag) generates extra whitespaces. Anyone an idea to solve this problem/bug?

hi all, I'm having a problem with the implementation of new fonts to be used both in the cfdocument to create a pdf and in the cfreport. As you can see in the picture I downloaded the .ttf files and put them exactly in that path and put the correct path inside Font Management on the administrator cf . The folder exists and the path is right, I restarted CF but there is no way the fonts are displayed in both cfdocument and cfreport. Always use a default font, how can I fix this? 

We are trying to run our application using tomcat 10 . However, we are getting some issue because of JAVA EE to jakarta migration. Currently we are using :Java: 17 Tomcat : 10CF : 2023 Server : Windows 2019 JAVA EE to jakarta migration: We have tried with one third party migration tool (jakartaee-migration-1.0.8) to migrate the war file. Result: Deployment issue was fixed(Context [/cfusion] startup failed due to previous errors) after the migration. However,not getting the new issue as admin page is not working. Issue Details : http://localhost:8080/cfusion/CFIDE/adminnotinstalled.cfm?script=CF_ROOT/bin/cfpm.bat&module=administrator  (HTTP ERROR 500)javax/servlet/jsp/JspContext The specific sequence of files included or processed is: C:\CHAYAN\Local Setup\Apache\Tomcat-VSSInternal\webapps\cfusion\CFIDE\adminnotinstalled.cfm''Could anyone please help/guide me to resolve this issue? 

To the CF team -Please add an enhancement that allows us to select a datetime format for those date/time fields in our queries / structs. There are times when I want to maintain the data exactly from my database so that it shows the same way in my SerializeJSON output. Give me an option to select which dateformat to send to the client. Thanks

Hello,With Chrome's 3rd-party cookie changes, I haven't been able to find anything about adding a partition attr/state with cfcookie. Am I not looking in the right place or I missing something? Any insight would be much appreciated! Right now, I'm using cfheader to set that, but there are some instances (mainly iframes) where I would like to set them and immediately have CF access it.  Working Example: <cfheader name="Set-Cookie" value="__Host-testCookie=; Expires=Thur, 29 Feb 2024 00:00:00 GMT; Path=/; Secure; SameSite=None; Partitioned;"> - https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-c/cfcookie.html- https://developers.google.com/privacy-sandbox/3pcd/chips- https://developer.mozilla.org/en-US/docs/Web/Privacy/Privacy_sandbox/Partitioned_cookies  

Please find the below sample code, <cfif local.fields[myName].readOnly><cfset thisAction = "view"><cfelse><cfset thisAction = arguments.action></cfif> <cfoutput> <cfswitch expression="#thisAction#"><cfcase value="edit"><textarea id="#myName#"name="#myName#"rows="#local.fields[myName].rows#"cols="#local.fields[myName].cols#"onkeydown="maxlength#myName#(this,'#local.fields[myName].MaxLength#');maxlength1#myName#(this);"onkeyup="maxlength#myName#(this,'#local.fields[myName].MaxLength#');maxlength1#FmyName#(this);">#IIF(len(local.fields[myName].value), DE(URLDecode(local.fields[myName].value)), DE(local.fields[myName].DefaultValue))#</textarea> </cfcase> <cfdefaultcase> <cfif LEN(local.fields[myName].value)><pre>#IIF(len(local.fields[myName].value), DE(URLDecode(local.fields[myName].value)), DE(local.fields[myName].DefaultValue))#</pre> <cfelse><!--- nothing

 I have coldfusion 11 installed with its latest update, how can I change to coldfusion 2023 

Have installed ColdFusion 2021 with update 1, on 64-bit Windows server 2019 Datacenter.  I can either run it with Java 11.0.11 from Adobe, or with sandbox security (with Java 11.0.1), but the ColdFusion Application Service will not start if I have both Java 11.0.11 and sandbox security.

I believe when we set up CF2018 a couple of years ago, we set it up for CF Admin to be accessed only if index.cfm is present. For example,http://servername/CFIDE/Administrator/index.cfm - will serve it uphttp://servername/CFIDE/Administrator/ - will not serve it up I'm not sure whether this was done as part of lockdown guide but it appears this is no longer working and I don't see anything in the lockdown guide. We're migrating to 2023 and I would like to set this up. Where should I look? CF Admin is not showing up in IIS as of 2016 as it's using built-in web server.

Hello All, We recently migrated our application from CF2018 to CF2021 latest update 5 version. After we upgraded, we observed issue with our charts all over application.There are some glitches created/observed in graphs and graph is not displaying properly.Please help/advise if anyone has faced similar issue before.Thanks,Dhanshree Joshi

Hi,We have recently upgraded from 2021 to 2023, and we are facing an issue in cfforms, binding is not working on cfselect. we have checked the cfscript directory location and scripts and everything is alligned. It will be great if someone can provide a solution please.  

Howdy,We have a MySQL Community server packaged as an AWS RDS instance. We had been running MySQL 5.7, but AWS is forcing an upgrade to 8.0 unless you pay an extra charge.We have a datasource that works fine for 5.7, using the "MySQL" driver from the dropdown, but when we try to connect to an upgraded snapshot running MySQL 8.0.35, we get:Could not create connection to database server. Attempted reconnect 3 times. Giving up.Stack Trace:java.lang.NullPointerException at com.mysql.jdbc.ConnectionImpl.getServerCharacterEncoding(ConnectionImpl.java:3307) at com.mysql.jdbc.MysqlIO.sendConnectionAttributes(MysqlIO.java:1985) at com.mysql.jdbc.MysqlIO.proceedHandshakeWithPluggableAuthentication(MysqlIO.java:1911) at com.mysql.jdbc.MysqlIO.doHandshake(MysqlIO.java:1288) at com.mysql.jdbc.ConnectionImpl.coreConnect(ConnectionImpl.java:2506) at com.mysql.jdbc.ConnectionImpl.connectWithRetries(ConnectionImpl.java:2344) at com.mysql.jdbc.ConnectionImpl.createNewIO(ConnectionImpl.java:2326) at com.

We've used ColdFusion for decades and for the longest time used CFDocument for PDFs.  We still use it for some legacy jobs.  When we saw CF11 included the new CFHTMLTOPDF tag we were excited but that feeling died instantly the first time we used it.  In some instances the results were so bad we soldiered on with CFDocument.  It's been a few years and we've long since switched to using WXHTMLTOPDF.  Our PDFs come our nearly flawless now.  However, we recently were debugging a "WX" issue on a new layout we're installing and decided to re-visit CFHTMLTOPDF.  Hideous!  While we're getting about 90-95% accuracy with WX, CFHTMLTOPDF again disappoints.ColdFusion is made by Adobe for crying out loud!  The quality of PDFs ColdFusion produces, by the makers of Acrobat, is embarrassing.Why has there been no CF integration with Acrobat after all these years!Ok, rant over.