ColdFusion

Security vulnerablity exists within CF administrator log in page (/CFIDE/administrator/login.cfm) HTML form.  Does anyone know how to apply a solution or work-around?  Web site security scanning reports the CF adminstrator log in page uses <input> password field autocomplete=on (default).  Solution is to edit web page form appending attribute "autocomplete=off".  But since the entire CFIDE directory uses ColdFusion's encryption, page is not editable.  A week ago (1/8/14), at Adobe's telephone customer support direction, I submitted a request for help to Adobe's support site (bugbase.adobe.com).  Requests to this site go into the ether ("not externally visible"). No response whatever has been provided.  The basic fix is for Adobe to send or provide an updated web page.  Problem is a site security issue.

Has anyone ever been able to use the CFLDAP tag to connect to a secure LDAP Service without putting the username and password in clear text in the source code?  For example:<cfldap     action = "query"    server = "myserver.com"    attributes = "*"    start = "dc=myserver,dc=com"    name = "results"    secure = "CFSSL_BASIC"    username = "MyUserName"    password = "MyPa$$w0rD">I was wondering if using a Web Service Account (which would be granted access to the LDAP Service) would be able to run the code without putting the username and password in clear text as shown above?  Has anyone tested this out before or have any further information on it?Thanks for any insights you can give.

I used the cftextarea to get the FCK editor, like :<cftextarea name="txt_h_1" message="Insérer le texte d'Accueil !" height="400" width="700" disabled="No" required="Yes" toolbaronfocus="No" bindonload="No" html="No" enabled="Yes" visible="Yes" richtext="Yes" toolbar="Basic" skin="silver">#get_param.txt_home_1#</cftextarea>So the name of the element is : TXT_H_1Ans when I want to save the content via an update query, it says that :Element TXT_H_1 is undefined in FORMAll other FORM elements are well returned.then how to get the value of the cftextarea ?(I used a CFFORM with <input> inside instead of <cfinput>)thanks for answer.Pierre.

Does Adobe support installing Coldfusion 10 on a Virtual Server(VMWare) ???I check the documentation and could not find any statment that mention that they support it.

Alright, serializeJSON isn't creating pretty enough JSON for me to use with jQuery.So I decided to build it myself.Here is my code:<cffunction name="getActions" output="false" access="remote" returnformat="JSON">    <cfquery name="Actions">      SELECT * FROM Actions    </cfquery>    <cfset ActionsList = '{"success" : "true"}, {"Actions" : ['>    <cfloop query="Actions">      <cfset ActionsList = ActionsList & '{ "ID" : "' & ID & '", "Name" : "' & Name & '"},'>    </cfloop>    <cfset ActionsList = ActionsList & ']}'>    <cfreturn ActionsList>  </cffunction>So basically I send an AJAX Asynchronous call with jQuery to the cfc that contains this code.jQuery kept telling me the JSON was bad.So I output what Coldfusion was sending back to the browser.

Has ant one experienced cftextarea not displaying tool bar in ie 10.  Thanks in advance.

Hello,I'm trying to invoke the adminapi component, but when I do it overwrites my getauthuser() and logs me out of my application.How can i invoke the .login and user my existing cflogin credentials?I was hoping something as follows would work, but no luck.adminObj = createObject("component","cfide.adminapi.administrator").login(getauthuser());Does this mean I can only use this component outside of an application?Any help is appreciated.Thanks

Hi,I am trying to install the CF 10 Mandatory Update on my Mac OS X (Mountain Lion). I've tried it in standard mode, and GUI mode. It simply doesn't work. The install application launches, and in GUI mode the splash screen pops up, but the progress bar does not move.The commands I've tried:java -jar /Applications/ColdFusion10/cfusion/hf-updates/cf10_mdt_updt.jarjava -jar /Applications/ColdFusion10/cfusion/hf-updates/cf10_mdt_updt.jar -i GUIAny ideas?Thanks.

I am a newer programmer and I am not sure I would translate this into code..If the time is between 21-30 days, the cost is $50. If it is more than 30 days, there is an additional charge of $34 for each additional month. 31-60 days would calculate at 84, 61-90 days would calculate at 118 and so on. Thanks!

I have been running CF8. I stopped all CF8-related services, set them to manual, then installed CF10 with Developer option.Slow as molasses. Even getting the Administrator screen up takes 5 minutes or better.  The pictures are X's, apps won't run as either port 80 or port 8500 ("The connection was refused when attempting to contact localhost:8500"), windows 7, reasonably new hardware.This is on my desktop.  What odd is I did this exact same thing on a client laptop I use when I work on their project, and it all works wonderfully well.Going to uninstall/reinstall to see if I did something wrong during the first install.Suggestions welcomed.

Hi all,I'm at about my wits end on this...I can submit a row from a query set in cfgrid if I set it to format=html and it works just fine.  However, with that format, I cannot sort columns which is necessary.  So, I set format=flash and the formatting works great, but I cannot submit a row for processing.  I've searched Google, Google Groups, Adobe, everyplace to no avail.  Plenty of "Working" solutions, but none work for me.  Below is the latest attempt:<cfform name="logForm">     <cfgrid name="propOppGrid" height="500" selectmode="row" autowidth="true" format="flash" query = "session.allDefects" onchange="getUrl('cqStatus_s1.cfm?CFGRIDKEY='+propOppGrid.selectedItem.id, '_blank'); ">The query does indeed have a row called "ID" and it does display properly in the grid itself.  When I submit the form (which does indeed open up a new window ('_blank'), I get the following on my url and a blank page is displayed."cqStatus_s1.cf

I had a site on one server that I am moving to a new server.   I copied the files and database and created a new DSN.  I ran a simple query on a test page prior to moving the site, it was a one page site at that time.  I was able to connect to the database.Now I have a relatively simple application file.  I changed the name of the data souce in the file, but prior to that I made the mistake of opening a page on the site.  The old data souce is A, the new data source is B.  The application.cfc clearly (now) says B, but I get an error on every page saying it can't find A.  I did a search of the entire site and nowhere in any file does it list data source A.Here is the application file.<cfcomponent output="false">  <!--- Name the application. --->  <cfset this.name="SomeName">  <!--- Turn on session management. --->  <cfset this.sessionManagement=true>    <cffunction name="onApplicationS

java.lang.NullPointerException at java.util.Hashtable.put(Unknown Source) at coldfusion.runtime.SecurityScopeTracker.setSecurity(SecurityScopeTracker.java:235) at coldfusion.runtime.SecurityScopeTracker.getSecurity(SecurityScopeTracker.java:124) at coldfusion.runtime.SecurityScopeTracker.getSecurityTableFromSession(SecurityScopeTracker.java:349) at coldfusion.security.UserUtils.getAuthMap(UserUtils.java:164) at coldfusion.security.UserUtils.cflogin_GetAuthUser(UserUtils.java:146) at coldfusion.security.UserUtils.getAuthUser(UserUtils.java:37) at coldfusion.runtime.CFPage.GetAuthUser(CFPage.java:1053) at coldfusion.runtime.CFPage.IsUserLoggedIn(CFPage.java:1011) at I get random errors saying isuserloggedin null as you can see? what is causing this i didn't know that could be null? is it like a bug? i have used this code for about 3 years now and only since we move dup to coldfusion 10 have i seen this but all it does is this <cfif IsUserLoggedIn()><cfelse>   

So, this is an issue we've been dealing with indefinitely.  CF10 on a Win2008 environment just stops working.  I remote into the server, the ColdFusion services are using 0% CPU, usually eating about 600-850MB of memory, and no pages are being delivered.  Simply a white page.  Browser (Chrome 30) times out eventually reporting an 'ERR_UNEXPECTED' error.Restarting World Wide Web Service has no effect.  Restarting IIS sites/server (nodes) has no effect.  ONLY restarting the ColdFusion Application Server service results in services getting restored.  And it takes normal amount of time to STOP the service, but starting it up takes a long time (though it eventually starts, and ColdFusion is rendered again)I don't have troubleshooting skills necessary to know what log files to watch or a background in networking know-how, but I'd really love to start taking steps to finding out what the heck is doing this.  So if you guys can suggest any steps, I'll gl

HiI have some problem with cfcookie.No where CFCOOKIE tag or javascript fns are used to create  a cookie from the code. But cookies are created and stored in the local system once logged into appln. By default expire value displayed for the cookie file is 30yrs from now I.e., 1/5/2044.please suggest me some solution to delete the cookie file from client machine on session time out or browser close.Q : How can we delete CFID and CFTOKEN values from cookie file stored on client machine?Please let me know ASAP. Detaiils of my cfapplication tag<cfapplication name="xxxxxx" clientmanagement="yes" setclientcookies="yes" scriptprotect="all" clientstorage="Cookie">Thanks in advancekalyani.

Hello,I installed CF 9.0.2 and installed cumulative hotfix 1. This took the update level to "chf9020001". Is this the latest possible revision of CF 9.x series, or does ColdFusion have any update over CF9.0.2 and CF1 update level? Also, I believe after CF9.0.2, the next version is CF10.x - correct me if I am wrong. Thanks!-- arun

I would like to insert the firstname of a client within paragrapgFormat(). ie: paragraphFormat(Hi #firstname#, your info......) When I output this the firstname just shows as #firstname#. Is there a way to get his to work?

Hello,I am currently running ColdFusion 9.0.1 enterprise edition, and plan to upgrade to 9.0.2 version. I understand that this requires uninstallation of existing 9.0.1 and performing a fresh install of 9.0.2 version. My concerns are below:1. For installing 9.0.2, the 9.0.2 installer (demo/ trial version) needs to be downloaded and the existing serial number (used in 9.0.1) can be given during installation to convert this into the fully registered mode - Please correct me if my understanding is incorrect here. My question is will the existing serial key (as displayed in the CF Admin page of 9.0.1 version) work with the 9.0.2 version as well?2. There are lots of configurations that are present in the existing 9.0.1 version - for instance the data sources configured in CF Admin page. Is there a way I can save such configurations from the existing version, and migrate the settings over to the new 9.0.2 install, or do I need to do the entire configuration manually after doing the new insta

Hello,Where can I check to see the type of server that ColdFusion is configured to run currently? I have an existing installation of CF 9.0.1, which I will be removing and installing CF 9.0.2. During instalation of 9.0.2, I would need to specify the server to be used - ColdFusion server / Apache/ IIS etc. My question is, where should I see in the existing CF 9.0.1 to understand the server that is currently being used.Thanks!

ColdFusion 10 update 13 is now available for install. It includes support for OS X Mavericks(10.9). For details, please read this KB article: http://helpx.adobe.com/coldfusion/kb/coldfusion-10-update-13.htmlImportant: This update applies only to users who are on OS X Mavericks (10.9) or plan to upgrade to OS X Mavericks.

I have an xml file that I am trying to turn into a qury object so I can have the query interact with my SQL databaseThe XML file has 15 rows and I have successfully got 13 of them into a query.The problem is that the remaining 2 fields have hyphens  or dashes -  in the row names. Like (WORK_E-MAIL)..See the - between E-MailSo when I go to set the value in the query with this code   <cfset temp = QuerySetCell(orderquery,"WORK_E_MAIL",   #mydoc.rowset.ROW.WORK_E-MAIL.XmlText#, #i#)>   I get this error messageError Occurred While Processing RequestInvalid construct: Either argument or name is missing.Is there some way to alias the row name with the hypen, maybe like this {WORK_E-MAIL}  or like this [WORK_E-MAIL]I need to ge these 2 hypenated named rows into my query.Any ideas?

Hi All,I was able to install CF10 on MAC OSx 10.9 yesterday http://forums.adobe.com/message/6001420#6001420I create a FB/CF project using this configuration:CF Standalone option with:CF root folder = /Applications/ColdFusion10/cfusionWeb root = /Users/myName/SitesRoot URL = http://localhost/~myName/I got this message:The web server can be accessed but the CFIDE folder was not found. Please ensure the web root you have specified is the root folder of the web server and not a subfolder, or check the ColdFusion installation.I copy the CFIDE folder into /Users/myName/Sites and pass the message.I have a CFC in /Users/myName/Sites/CFtest1/cfcs/users.cfcMy remote  Object is declared as <mx:RemoteObject id="SM_RO" destination="ColdFusion" source="CFtest1.cfcs.users">When I test the app I am getting this error:Unable to invoke CFC - Could not find the ColdFusion component or interface CFtest1.cfcs.users.Ensure that the name is correct and that the component or interface exists.I chec

We have CF10 isntalled as a j2ee installation on a web logic cluster on enterprise class servers.  I was able to apply CF10 mandatory updates http://helpx.adobe.com/coldfusion/kb/coldfusion-10-mandatory-update.htmlBut when I try to install update 12 or update 13, it gives me a message which suggests that I need to be logged in as root on servers controlled by unix admins. Logging in as root to appy patches/updates is not an option in our enterprise.Your help is greately appreciatedThanksjhudeejay

We have a setup a new server running ColdFusion 9. We have installed ColdFusion and now I'm wondering how I would transfer the file system to the new server and use it as our Intranet server so we can demise the old server. After the ColdFusion install the CFIDE folder is in a different location on the new server. If I copy the old files to this directory (this is where our current files are stored) how do I point ColdFusion to this directory so we can use the new server for our Intranet? New to this so any information would be appreciated greatly.

(This is a partial repeat of a posting I added this morning to an old thread; reposting here in a new thread as I am not sure the old one will be seen by anyone)Through fits and starts, we have CF10 running on CF10 Standard on a VPS with Windows 2012 64 bit and IIS 8.0.  I did install the IIS6 options too, as well as the ASAPI and ASP options.  CFAdmin was installed with the "all sites" option.   At this point, I can freely uninstall/re-install CF if need be as all sites are down anyway, unfortunately.Every site gives me a 500 error but I CAN get the CF Administrator up and it runs and displays pages, updates, etc just fine.  Another thread I found here in the forums concentrated on the Application pools. I checked the application pools and they all say 32bit=true, so for one site I went through and set them all to false, but that did not fix the problem. Was I supposed to recycle IIS or CF before I tried to render the page again?For each site, there are 4 appl