ColdFusion

We have been having Cyber attacks and I have handles most with error trapping. I would like to improve on this by trapping any page calls that are not from our domain. Is there a way in ColdFusion to identify the calling url? 

I've just installed ColdFusion 2021 as a Development server.  I'm trying to attach an Access database as a Datasource.  It comes back with something like "ODBC service not running, or is not installed."  When I was installing CF2021, the ODBC Services checkbox on the sub-components installation page is greyed-out, so I am unable to check it.  What next? 

Hello everyone,I wondering if there is any source out there to list all issues like syntax, etc. when upgrade from earlier version of ColdFusion applications to CF21 or CF23 applications?Thank you.

We're adding in a high availability cluster for SQL server and I can't seem to find the version of the DataDirect JDBC driver for ColdFusion 2021 (build 2021,0,12,330257).  Any ideas?  Need to know if it's going to support the MultiSubnetFailover=True parameter to all a LNN configuration.  

Hi.I have a large application that is composed of various sub directories.All of the subdirectories share the same Application.cfc and session, but I'd like to allow each subdirectory to have its own "java_lib" folder with jar files, and to set this.javasettings.loadPaths in each subdirectory/Application.cfc, extending from /Application.cfc and just change its loadPaths. The actual problem I am having, is that sometimes this work and sometimes I get a java.lang.ClassNotFoundException. Is it possible to do this, or do I need to restart the application with every loadPaths change?I understand that I could set all the paths in a single Application.cfc in my root folder, but I'd like to have these subfolders as independant as it could be from each other. Or perhaps is it possible to call some coldfusion.bootstrap.something method to refresh the class loader? 

Hi, We recently learned from ColdFusion 2018, Update 15 that log files page on ColdFusion Administrator has been modified to remove the buttons to View, Download, and Delete a log files. And, log files are no longer clickable.  Could you someone please provide any information that you may have on why it was modified and what alternatives we have to view the log files through administrator?  Thanks in advance!! -RP

Until this past spring, my sites CMS worked wonderfully. Multiple forms and processing pages.Then, my admin applied a series of patches to ColdFusion and now, all forms stopped working. In every case, the processing file returns the error "Form.Xvalue not found in form "and of course stops everything cold. The form values should be passing from "WebEdit.cfm" to "webeditprocess.cfm".Given this problem started with every form on the site at nearly the same time, and around the time of the patches, I'm inferring something is amiss on the server.Before I post lines and lines of code, does anyone know of an admin level setting in cold fusion that would cause the issue?Our server is running ColdFusion (2021 Release) Enterprise. Would that release make a difference?

Hello Experts, I’ve been succesfully running an application on CF2016 Standard which manipulates PDF files using the <cfpdf action="processddx" …> tag (adding some header / footer / watermark).After migrating the server to CF2021 everything works as expected under Developer License.As soon as I register the CF2021 Standard license the DDX processing gets ignored and PDF files remain unchanged. This behavior is reproducible by switching between the "dveloper" and "Standard" license key. Has anybody else encountered this issue?I wonder whether it is just a bug or a change in the license policy? And if so, where it has been announced - i didn't find any hints on the Adobe website. Thanks a lot,Peter 

Hi, Earlier this week we migrated from 2016 to 2021. The Microsoft SQL Server DSN no longer worked after migration. But since time was of the essence, I set that issue aside and tried ODBC Sockets. This worked just fine. I should note that I did this before running all the patches and updates. Today I migrated another server, same basic method but I did the patches before adding ODBC socket connections. Now if I select ODBC socket as driver type and click add, the form to enter connection info does not appear at all. Oddly, when I go back to the first server migrated, the same thing now happens if I try and add a new odbc socket or edit the existing ones. But the existing DSNs still work... Any thoughts? TIA!

In CF2016 and CF2018 you could change the service owner for CF and then leave the SQL Server DSN username and password blank and it would connect using the service owner credentials, providing Windows Authentication \ NTLM support This is quite handy when you have dozens of databases with many passwords. If you try the same with CF2021 if throws the below error. Connection verification failed for data source: testdsn2 java.sql.SQLException: [Macromedia][SQLServer JDBC Driver]Kerberos Authentication is not supported by this SQLServer. The driver attempted Kerberos authentication because the AuthenticationMethod connect option was "auto" and no username/password was specified.  I tried all the AuthenticationMethod options in the connect string and none of them allow a connection like CF2016 and CF2018.https://docs.progress.com/bundle/datadirect-connect-jdbc-51/page/AuthenticationMethod_6.html#AuthenticationMethod_6  I also found this Progress error report which tells

Hello,UPDATE: I restored my server from a backup, so I am now back in business. I still don't know what went wrong or how to retry the update though.I was trying to install ColdFusion 2023 update via the admin and it failed. And then there were errors trying to use the server.  For example: "The sqlserver package is not installed. You can install the package through the CLI package manager"I have now installed it with the java command: \coldfusion2023\jre\bin\java -jar zip-2023.0.05.330608.jar, but I still get the same error. I have tried using the uninstaller.jar, and it did uninstall, but it didn't restore ColdFusion, so I am still getting the error.I also ran "cfpm install all" but it still hit some kind of error and did not install the sqlserver package, so I still am stuck.I am not sure what to do at this point. Thank you

It's broken in spots I've run across like use of  ...CKEditor 4 downloadCKEditor 4 is now end-of-life software. Security patches are only released for CKEditor 4 LTS, which is available exclusively in our Extended Support Model Package.and likely others.It's incredibly valuable ... Shouldn't we keep it as relevant as possible ?

I have been a homesite user for many years now without any issues.  Last week after the adobe cloud updates my homesite keeps asking me for a serial, which i enter and the program zuns.  The issue is I have to enter the serial each time, the pc won't remember it, any idea ?This was never an issue, it has been since the last adobe suite updates. 

We recently installed CF 2023 and want to authenticate users via LDAP for access to the CFIDE administrator console.  However, verifying the LDAP connection always results in an error:The CONFIG parameter to the verifyConnection function is required but was not passed in. The specific sequence of files included or processed is: C:\ColdFusion2023\cfusion\wwwroot\CFIDE\administrator\security\ldapServices.cfc This runs as a AJAX request so it appears that the Verify Connection button does nothing.  But when you open the developer console, you can see that the request has failed.  Opening in another browser window shows this. Any ideas? 

We are having considerable difficulty applying Hotfix 12 to ColdFusion 2021.  We have tried 3 different times, firstly via CF Admin then twice manually from the CMD run as administrator.  I am attaching the log files which are recording the errors.

Morning folks, So in my wonderful time these last few days building CF2021 servers on windows server 2022 Standard I have encountered an intersting issue that is consistently happening with each build.I have built 4 servers and my process is as folows (brief version) 1) Build, patch, onboard and join the new server to our domain  2) Install IIS with requisite Application Server components 3) Install CF 2021 using the GUI installer. The one I have comes with update 5 I believe , despite downloading a new from the adobe licensing site (maybe I'm missing soemthing but anyway) 4) Confirm CF Installed and service is running. 5) Update the JVM to open jdk 11-21 - ive had no issues running this. Restart CF of course 5) Download update 12 from package manager and install it by running \ColdFusion2021\jre\bin\java -Djdk.util.zip.disableZip64ExtraFieldValidation=true -jar C:\ColdFusion2021\cfusion\hf-updates\hotfix-012-330257.jar rather than the Download a

Bonjour à la communauté Adobe,Je rencontre un problème difficile avec ColdFusion sur mon site web, PetPediaPro, et j'espère obtenir des perspectives ou des solutions de la part des experts ici.Description du problème :Nous utilisons ColdFusion pour gérer et afficher du contenu dynamique sur les animaux de compagnie, y compris des images, des informations sur les races et des conseils de soins. Récemment, nous avons commencé à rencontrer des erreurs intermittentes de récupération de données. Le problème semble être dû à l'échec intermittent du serveur ColdFusion à récupérer les données de notre base de données SQL. Cela entraîne des chargements de page partiels ou, parfois, des erreurs 503 Service Indisponible.Dépannage effectué :Vérification de la connexion à la base de données - aucun problème trouvé.Révision des journaux ColdFusion - quelques erreurs de délai, mais elles sont incohérentes.Mise en place de mécanismes de mise en cache pour réduire la charge, mais le problème persiste.Q

Bonjour,J'ai vu que cfmediaplayer est devenu obsolete !Par quelle balise l'a remplacée ?Merci par avance  

after ColdFusion 2021 Hotfix 12, my MongoDB code stopped working. In another environment, ColdFusion 2021 with Hotfix 11 is installed, and I don't encounter this issue in the test environment where I use the same code and the same database. When I execute the query, it returns an empty response, but I am sure that the data is present.<cfscript> db = getmongoservice("xxx").db("xxx"); // create a db response = db.xxx.find().sort( { createdAt: -1 } ).limit(1).toArray()[1]; </cfscript> 

(CF2016) I am using CFCHART and have a problem with the labels, making it difficult to read the dataa) Text being in the same color as the barb) Sitting too close to the bars Could anybody help me with either changing the colour (not sure that will help) and preferably moving the text further up so it sits on its own. Code and screenshot below. On another note, the defaul is a very nice looking blue gradient, but text was also light on pie and bar and extremely difficult to read, can anybody help with making it a gradient of the colour I have?Thanks <cfcharttitle="Revenue"format="html"show3d="yes"showlegend="yes"chartheight="400"chartwidth="500"labelFormat = "number"showborder="true"pieSliceStyle="sliced"sortXAxis = "yes"><cfchartseries type="bar" dataLabelStyle="pattern" seriescolor="4199d1" QUERY="GetRevenue" valuecolumn="totalrevenue" itemcolumn="revenue_country"></cfchartseries></cfchart>

I have loaded ColdFusion Stander Edition 2023 (fully licensed) on a fairly new windows server running server 2019, 64 GB. CF admin pages work fine but MY CF pages will not load. When a link is hit, the page tries to download, not render, regardless of broswer used. I have combed thru these posts but have not found an answer. IIS is running, Cf is running, WSconfig was executed and the Connector app was run. Like I said the CF Admin works fine but my .cfm pages download. Any help would be deeply appreciated as I have been fighting this since Monday. ISAPI Filters for TomCat are in place and Handler Mappings for .cfm are in place. What else can I check? 

Previously I was using Oracle11g now migrated at Oracle19c. The BLOB records dislaying fine in PDF with Oracle11g but show this with Oracle19c. ErrorFailed to load PDF document. I am using currently CF21. I have used tag to dispaly binary file(BLOB data). <cfparam name="rc.data" default=""><cfheader name="content-disposition" value="inline; filename="eid.pdf"><cfcontent type="application/pdf" variable="#rc.data.ATTACH_EMID#"> 

We are pleased to announce that we have released security updates to ColdFusion (2023 release) Update 6 and ColdFusion (2021 release) Update 12.   These updates resolve critical vulnerabilities that could lead to the deserialization of untrusted data, improper access control, and others. For more information, view the security bulletin,  APSB23-52.   Where do I download the updates from Download the updates from the following locations: ColdFusion (2023 release) Updates ColdFusion (2021 release) Updates   What do the updates contain For more information, view the following tech notes: ColdFusion (2023 release) Update 6 ColdFusion (2021 release) Update 12   Are the Docker images available The images are available on the Docker hub and ECR.   Please update your ColdFusion versions and provide us with your valuable feedback.

I see that patch 4 upgrades tomcat to Tomcat 9.0.60 but i have a current nessus scan in hand of my CF2021patch 6 server and it contains one critical severity and 3 high severity vulnerabilities in Tomcat 9 as follows: PluginPlugin NameSeverityCVE173251Apache Tomcat 9.0.0.M1 < 9.0.72CriticalCVE-2023-28708166906Apache Tomcat 9.0.0-M1 < 9.0.68 Request Smuggling VulnerabilityHighCVE-2022-42252169459Apache Tomcat 9.0.40 < 9.0.69HighCVE-2022-45143171657Apache Tomcat 9.0.0.M1 < 9.0.71HighCVE-2023-24998 I searched the forum for posts about these, but mostly what i got was 2016 CVEs and Tomcat 9.0.60.  I know that in some cases a CVE might not affect CF because the tomcat functionality isn't being used, so I am wondering if that is true for these in particular or if there is a way to mitigate these while Adobe works on integrating newer tomcats into CF patches. We are running CF2021 patch 6 on windows 2019 with IIS 10 Thanks

Hello all,I am aware that Adobe's bulletin reported a security vulnerability for CF2021 and 2023 with an update that remediates it. There was no mention of CF2018 (which I know is no longer supported) being affected by the vulnerability. However, I have read online from CyberCX that this affects CF2018 as well. Our MDR detected the vulnerability on our network despite us having already patched CF2023, so that leads me to believe it detected it on CF2018. Is there any confirmation that this vulnerability affects 2018, and is there any solution for it (besides the obvious upgrade to a supported version)?