ColdFusion

Our server keeps failing our PCI compliance test due to the Session ID's being non random. Description: Web Server Uses Non Random Session IDs       Synopsis: The remote web server generates predictable session IDs.      Impact: The remote web server generates a session ID for each connection.  A session ID is typically used to keep track of the actions of a user while he visits a web site.  The remote server generates non-random session IDs.  An attacker might use this flaw to guess the session IDs of other users and therefore steal their session.  See also : http://pdos.csail.mit.edu/cookies/seq_sessionid.html        Data Received: Sending several requests gives us the following session IDs : CFID=896744 CFID=896745 CFID=896746 CFID=896747 CFID=896748      Resolution: Configure the remote site and CGIs so as to use random session IDs.  &nbsp

Up until recently I only had Coldfusion 9 running on a 64-bit 2008 server. Today I installed the Coldfusion 10 trial. The installation went OK and the CF9 settings were migrated to the new CF10 installation as expected. The instalation did not remove the CF9, which is good as I have something to fall back to if I run into serious code compatibility problems. After sometime while I was happily testing I decided to stop the CF9 services as I didn't think they were necessary any more. But as soon as I did that everything became really slow and even the CF Administrator login page took around 2 minutes to load. Things got back to normal only when I restarted the CF9 from the services again...Why did this happen and what can I do about it? If there is no solution, is there a problem having both CF9 and CF10 running on the server even though CF10 is the version that controls all coldfusion pages?

Long story short.  We have a PC called Thor running CF 10 on a physical server.  We brought up a PC called vThor (which will be renamed to Thor when all is said and done) running the SAME LICENSE KEY AS THOR (cause it will be its replacement) running CF 10 on a VIRTUAL server.Well, the migration failed miserably so after reverting back, we're going with a different approach.  Both servers are on our domain and are brought up at the same time, however, we have an additional IP address with our Host that I can use to route to vThor while Thor still functions as a live production server.  In this setup, I can then use the IP to test the other server without having to worry about bringing the other down due to licensing restrictions.So what I'd like to do is temporarily downgrade vThor to 'DEVELOPER' (max 2 client connections, run with Enterprise functions), and I'd like to, if possible, withold from uninstalling the thing.Once I get that done, it's off to fight one of

I am going to start a new project and I am pretty new to the ColdFusion and would liek to start Application.cfc and want to know what's kind the information need specify for whole applications.Your help and information is great appreciated,Regards,Iccsi

CF7 works in windows server 2008 R2, can it connect with SQL  2008 R2?

Here's my mail header: <cfmail to="#session.user_email#" from="#application.siteName# <#application.siteEmail#>"  subject="You Are Registered for #getEvent.event_title#" type="html">The variables all work and the format complies with the documentation on CF9.  I have a cfcatch set up in case of failures and I'm getting notices of attribute failure.  The mail still goes through though.  I'd leave it alone except that this is on our community site and my mailbox is getting bombed.  Besides, I'd like to know why it's failing!Michael    

Hi All,I cannot use round function in Query of Query. I can cast the number as integer like:<cfquery dbtype="query">     select cast(myValue as integer) finalNumber     from myQuery</cfquery>where myValue = 65.7, but the result is 65, it should be 66.It is a work around this issue?Thanks!

I just wanted to know when I need use CFLOCK.For example, do I need to CFLOCK when I assign my data source database in my Application.cfc.If I use CFLOCK then web server will lock the database for timeout seconds to connect the database server?Your information and help is great appreciated,Regards,Iccsi,

I have a site with hundreds of HTML pages that need to be converted to coldfusion in order to password protect my site. Is there an easy way to do this? Mass convert the files somehow?

I need the  ColdFusion Update 8.0.1 (32 Bits)thanks

Hello,I am having troubles setting up the multiserver monitor in CF9. It seems after I get everything configured, I'll try to load it on a different workstation or browser and nothing will be configured. Is there a config file that I need to edit/change to set things permanently? Thank you in advance.

I'm a Information Security Analyst and currently I'm trying to strengthen our ColdFusion hardening standards and I have an issue that I need to understand.I'm referencing two separate Adobe documents, First document:ColdFusion 9 Lockdown Guide Recommends:Page 16 of 35.  Do not enable RDS. Click next...Next document:Security Advisory for ColdFusionRelease date: January 4, 2013Last updated: January 16, 2013Vulnerability identifier: APSA13-01Recommends:Setting the password for Remote Development Services (even if RDS is disabled)Enabling password protection for RDSSetting the Admin password and enabling password protection for AdministratorSo, Adobe recommends, 1st, not to Enable RDS at all, but then recommends as a "mitigation", Enabling RDS (post installation) to setup a username and password, but the ColdFusion 9 Lockdown Guide "Do not enable RDS.".  Maybe as a "Remediation", Adobe should just remove RDS since a) they recommend keeping it disabled and b) it's such a vulnerabi

I would like to use Tab controls on my page and realized that ColdFusion Server does not have tab controls.Please let me know if I am wrong,I would like to know any place I can get tab controls or any thing I can use from ColdFusion server.Your help and information is great appreciated,Regards,Iccsi

I'm trying to build a very basic web service that will sit on a remote server and query the live database<cfcomponent displayName="invoiceUtilities" output="false">    <cffunction name="getInvoiceDetailsFromWebService" returnType="Query" access="remote" output="false">        <cfargument name="invoiceDetailId" type="String" required="true">        <cfquery datasource="#dataSource#" name="invoiceQuery">            SELECT invoiceId,productType            FROM InvoiceDetails            WHERE InvoiceDetailId='#invoiceDetailId#'        </cfquery>        <cfreturn invoiceQuery/>    </cffunction></cfcomponent>Current

I'm running CF 9,0,2,282541 ON Windows Server 2008 R2 and recently upgraded to Java Version 1.7.0_17I'm not sure that this is related to the Java upgrade but... My users have been complaining of not being able to log into my websites.Upon further investigation - I find that on login, something goofy is going on in OnSessionStart() of my Application.cfc My sessions are not properly starting as they have in the past. On talking to some of the users - I find that they can sometimes have success by using a different browser. Is anyone having a similar issue?Thanks,Jack

Dear Colleagues:Does any of you know, or have experience with hosting a CF application in the Amazon Cloud? Do they have CF licenses for monthly rent under a hosting plan, or do you need to provide your own license and server maintenance? I seem not to be able to find this info, where a seasoned IT/Internet person suggested it to be a possibility (hosting, that is, other than CF of which he knew nothing).Hope to hear from you.Thanks!Hans

First of all let me give you a screenshot of my home PC (running CF10 Developer on Windows 7 x64), as even this page looks different than CF servers we have at work where the update was applied with no issue.I have tried clicking on DOWNLOAD and DOWNLOAD AND INSTALL and neither do anything.  Upon loading the page, I used Firebug and checked the console.  It has multiple entries of:Uncaught ReferenceError: ColdFusion is not defined (Truth be told I don't Firebug check the CF Admin page often, so I don't know if this is normal.  Many times Adobe's admin pages don't use standardized practices, but I just want to put this out there)I'm familiar with how to manually install updates, but I cannot find a place where Adobe offers manual download of the CF10 Update 8.  Can anyone shed some light?

Hi All,I have a component with couple methods, each method is the result of query from the database.I want to do some calculations after i get the data from the server. I am lokking for a solution with good performance because I have many calculations to do.Code:<cfset myObj = CreateObject("component", "cfcs.myComponent") /><cfset firstQry = myObj.getFirstResult(arguments.A, arguments.B) /><cfset secondQry = myObj.getSecondResult(arguments.A, arguments.B) />Both query results have the same structure myID, myDesc, year_1, year2, year3firstQry have 10 rows, how can I sum the years row 3 (myID = 3) and years row 5 (myID = 5) ? and add the result of the calculation into firstQry as line 11 (new myID = 11).secondQry have one row result.How can I multiple the firstQry years row 4 (myID=4) with the secondQry years row 1 (only row myID = 1)?  and add the result into firstQry as line 12 (new myId =12).I was thinking to use query of query but I wondering if it is a better

Hi everyone,   I have created a Blog page on our site and am setting up a page for anyone in the company to update the blog with some text and an image.    Does anyone know how to set up code so when the Browse button is clicked that it will resize the image automatically to what I want it to be with the pixel size and file size? I’m thinking having it be 200 pixels wide and height doesn't matter. Maybe have the file size at 4K or so. It would be like Facebook when you upload a large file image, but it re-sizes it automatically.     We have CF version 7, so I can't use the CFimage code that's in 8 and 9. I've found something called imageCFC.resize(), but I don't understand how to use this or incorporate this into my code. This is what I have on my pages now just to upload an image file:Add Page:<td><input type="file" name="Image1" id="Image1"></td>Add Action Page:<cfif isdefined("form.Image1")>   <cffile action="upload"

My ColdFusion Application has forms that are editable and upon submit the database is updated. I am using an Access database. All my forms work, except one.  I have recoded it several times to no avail.  I have rebuilt the table as well. When I submit the form, I get a error message - "500 internal server error, there is a problem with the resource you are looking for and it cannot be displayed".  All my other forms submit the same way and have the same code except for the table name and field names and they work. When I change to method="get", I get the correct page to come up if I remove all the query code and I get my debug statement to show I made it to the page.  However, when I try to see my hidden values that I am passing, I get an error telling me that I have a 500 internal server error and that my form element "ID" is undefined.  As I stated before, this page is almost identical to others except for the survey content. My form has this: I am using this

I have a form that was working in CF9 but now that I've moved over to CF10, it is generating an error.<cfinput type="datefield" mask="mm/dd/yyyy" name="dtfiled" required="yes" message="Enter the date the " value="#DateFormat(dtfiled,"mm/dd/yyyy")#">I had it working without the mask, but tried it to see if it would fix the problem.I am getting the error: 10/19/2011 is an invalid date or time string.If I'm displaying the date as month day year, then the date as it is displayed is correct.  Am I missing something or has something changed between CF9 and CF10?Thanks.Sue

This question was posted in response to the following article: http://help.adobe.com/en_US/ColdFusion/9.0/Developing/WSCAD9638E-2D2C-48d8-9069-AE5A220B75A6.html

This question was posted in response to the following article: http://help.adobe.com/en_US/ColdFusion/10.0/Developing/WSCAD9638E-2D2C-48d8-9069-AE5A220B75A6.html

Guys,I have the script PHP below.How I write this script in ColdFusion, sorry for the dummie's ask<?php          if(isset($_POST[“color”])) {                        for($i = 0; $i < count($_POST[“color”]); $i++) {                  echo “The color “.$_POST[“color”][$i].” was selected!<br />”;              }          } else {              echo “blablablablablablablabla”          } ?>[ ]'s

How can I use jquery Datepicker in a cfm application that used iframe? where should I link css and script reference?