ColdFusion

As part of generating an XML document (using CFXML and ToString), we have a section for user comments. As it's user input, we have to treat it as potentially malicous so we wrap the user comment with<![CDATA[#userComment#]]>This doesn't cover the corner case of the userComment containing ]]> itself. So we tried to use replace to "escape" the corner case like so<![CDATA[#replace(userComment, "]]>", "]]]]><![CDATA[>", "ALL")#]]>This works in testing"Test ]]> comment" becomes "Test ]]]]><![CDATA[> comment" but when we use CFXML (and then toString), it seems that CFXML strips out the ]]><![CDATA[.Can we use the CDATA approach or should we drop that and just use EncodeForXML? More detailsCF Version: 2021 Update 6Code summary:<cfxml variable="xmlReport" casesensitive="yes"> ... <COMMENTS><![CDATA[#replace(userComment, "]]>", "]]]]><![CDATA[>", "ALL")#]]></COMMENTS> ... </cfxml> <cfset xmlStri

I am wondering if anyone has any ideas about this: I am trying to solve some sort of mail issue with ColdFusion 2016:The same message keeps appearing in the mail spool several times per minute.Nothing seems to be actively sending it out - it doesn't seem to be a scheduled task or a human doing it. I have no idea what could be causing this. If it matters, the mail is being sent via a Google Workspace account and does make it to its destination - repeatedly.I have tried restarting the server but the problem still lives on. I'd emphasize that it seems to be one particular email that was originally generated by ColdFusion...and if I go back to the source and change the code for the email/text of the email, it doesn't actually change the email that keeps appearing in the mail/spool directory.

Hello, I'm on Coldfusion 2021. When I try to load a pdf from a cfdocument it doesn't see the CSS at all. The thing I'm exporting to it has a lot of div in it, and the format is always wrong. Does cfdocument not work at all with CSS or is there a hot fix for this? Thanks,Chad

After the upgrade to CF 2021 Enterprise, when we attempt to unzip a file we are getting a new error message I have not seen before: "Exception while extracting 69_campaign.zip: Uncompressed contents cross maximum permissible size of 405.52734375 KB" The file is only 41526Kb in size (small) and the import routine worked perfectly BEFORE the upgrade. I can find no info on this error anywhere - help?

Seems there is a cache stuck somewhere that has old database fields.  For example, it keeps telling me I am missing a PK called p_id.  That is an old field that does not exist any longer the DB. ```Incomplete primary keys provided.The table you are attempting to update, products requires the following primary keys ('P_ID,RECORD_ID,'). Ensure that all the primary keys are provided in the form.``` I can simply change the name of the table and everything works fine. So Coldfusion has to have that table metadata cached but I have tried everything to clear it out and I cant find anywhere to completelty wipe out that metadata. Anyone ran into this and have any suggestions?

Hi all, I test the use of access="package" in a cfc function and it doesn't work, although I do exactly what the documentation says. It says that1) cfcs in the same folder are considered a package and2) a func having access="package" can be accessed by the functions of the all the other components of the same package (folder). Please see the simple code below. All 3 files are in the same folder.When I call  index.cfm  I get the message "Variable CFC2FUNC is undefined" <!--- index.cfm ---><cfobject name="oX" component="cfc1"><cfset x = oX.cfc1func()><cfoutput>#x#</cfoutput> <!--- cfc1.cfc ---><cfcomponent><cffunction name="cfc1func" access="public" returntype="string">    <cfset local.ret = cfc2func()>    <cfreturn Ret></cffunction></cfcomponent> <!--- cfc2.cfc ---><cfcomponent><cffunction name="cfc2func" access="package" returntype="string"&

I have a table with the column StatusSubStr char(2)In it are many instances of "00"I want it to print in a table cell with another string from the tableStatusStr char(2)which contains either 1 or 2 number characters#FQ.StatusStr#.#FQ.StatusSubStr# prints as an example 1.01 or 1.10but when StatusSubStr = "00"it prints 1 or 2it only prints the string StatusStrThey were both integer fields in the database and I tried every kind of cast and concatenation I could find doing them both in mariadb before returning the results and in Coldfusion with the results.  I finally changed the database to char(2) on both fields with alot of confidence that it would work.  I filled all the StatusSubStr directly with "00" because some were null, and with lpad(statussubstr, 2, "0") so that the field has every record filled with 2 characters.  And cold fusion still refuses to print the string "00".  Any help would be super appreciated.  This piece should have taken me

We are running CF2021 2021,0,04,330004 on Centos 7.9.I jsut started noticing extra character in the subject line. I'm not sure where its coming from, I tried to use all combinations of cfmail - script and tag, with subject being a variable and hard coded string. I added the utf-8 to the cfmail without any change. cfmail( to = "me@example.com", from = "them@example.com", subject = "Example email" ) { WriteOutput("test") } savecontent variable="local.mailBody" { writeDump(now()); }; variables._mailto = "me@example.com"; variables._mailfrom = "them@example.com"; variables._mailsubj = "Example Email"; local.mailService = new mail( to = variables._mailto, from = variables._mailfrom, //subject = variables._mailsubj, subject = "Example Email", body = local.mailBody, type = 'html' ); local.mailService.send(); mailerService = new mail(); /* set mail attributes using implicit setters provided */ mailerService.setTo("me@example.com"); mailerService.setFr

I am not sure if anyone is old enough to remember Coldfusion 9? I need to come up with a tactical plan to remediate a security issue with an enteprise app using Coldfusion 9, wrapped in .Net running on Server 2008.Have a strategic plan however need to buy 24 months for it to be in place and the tactical is to try and re-deploy it to server 2012 or 2016 with as little code work as possible.I understand that only 2008 is supported for CF9 however has anyone tried deploying it to Server 2012 onwards? What issues are encountered? Any help would be appreciated.

After applying update 16 to our Coldfusion (2018 release) server, the remains available externally but CF Admin is inaccessible, with a "The Cron service is not available" error.  Looking through other threads, I checked neo-cron.xml and does not appear to be corrupted, and I tried replacing it with the pre-update file with no result. Uninstalling the update returns CF Admin to an accessible state. Error text is:The Cron service is not available.This exception is usually caused by service startup failure. Check your server configuration.The error occurred in Application.cfm: line 105
Called from Application.cfm: line 89
Called from Application.cfm: line 4
Called from Application.cfm: line 1
-1 : Unable to display error's location in a CFML template.Resources:Check the ColdFusion documentation to verify that you are using the correct syntax.Search the Knowledge Base to find a solution to your problem.BrowserMozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) l

CF:2016 | IIS10 I know this is a little more of an IIS question, but wondering if anybody can advise I need to put keywords into a URL without using actual variables and then redirect and collect the keyword Example:https://SomeWebSite/discount1 The folder discount1 does not exist and that is the keyword I need to detect on a CFM page. I guess I could set up a redirect on 404 errors, to go to a CFM page, and then use CFM to pick up the refer information and then find the word in the URL. After typing this I tried it out using a redirect in IIS for 404 errors, setting it to removed with a 302 redirect to an absolute URL, a CFM page. In the CFM page I displayed the HTTP_REFERER only to see that it was blank, so it's not passed on and therefore I can't extract the discount1 at the end of the URL I'm wondering if anybody knows how to retain the original URL or how I should do it so that it actually works. Thanks  

Hi , Can you please help me with this error mentioned below : The description for Event ID 4 from source ColdFusion 11 Application Server cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.If the event originated on another computer, the display information had to be saved with the event.The following information was included with the event:ColdFusion 11 Application Serverthe message resource is present but the message is not found in the string/message table

Just restricting CFExecute and CFRegistry for now in the website and custom tags directory. All datasources are allowed, and nothing else is restricted. When using names for datasources (which works Sandbox Security unchecked), I get the following upon restart: Error [ajp-nio-127.0.0.1-8018-exec-1] - Error Executing Database Query.'' This is on localhosts with Windows 11. One Windows 10 localhost appears to work fine with server names in the datasources, although there might be something else going on with that setup that isn't obvious. The most I could track down with this is that it appears that Java Security Manager takes over database connections once Sandbox Security is enabled. Maybe Java Security Manager just allows IPs? I couldn't find anything related to that. I don't want to apply this on our live server without understanding why only IPs work, if this is the case, or if something more serious is set up incorrectly with our servers. Any help on t

Hi all, I need to create a timestamp of difference in milliseconds between the date and time now and 00:00:00 01/01/1970. I am currently using: <cfset timeStamp = dateDiff("s", createDateTime(1970,01,01,00,00,00), REQUEST.dateTimeNow)*1000> but that gives me a value of 1.170170719E+012; however I require a string containing 13 numeric characters. Any advice appreciated. Thanks, Paul

I am running Coldfusion 2018 on my Windows 11 machine as my local development environment.  I use Coldfusion Builder 2018.  I have been unable to get debugging to work.  Yesterday I tried to set it up.  I access the Coldfusion administrator on 127.0.0.1:8500 and run my local instance of my web site on https://localhost.In the Coldfusion administrator I went to the debug page and told it to use 127.0.0.1 and I think I entered in the default port (5005? 8005?).Since then I am unable to access the Coldfusion administrator to undo what I have wrought and my local instance of the coldfusion app won't run.  In both cases the page load indicator spins and spins continuously until I stop the page.I can't find Apache or Tomcat in my processes running under Windows.  I think I did see the apache server in the RDS window.  The stop and start didn't work and I deleted the server hoping that would help, but no.I don't really know what's wrong but I think it is col

Hello, I have migrated our Coldfusion apps from a server running ColdFusion 11 to 21, most have been successful but I am having difficulty resolving one error and would appreciate if anybody has any advice. The block that errors is: <CFLOOP INDEX="i" FROM="1" TO="#listlen(Form.Net)#"><CFSET #Net# = #listgetat(Form.Net,i,",","true")#><CFSET #vat# = #listgetat(Form.vat,i,",","true")#><CFSET #Dep# = #listgetat(Form.dep,i,",","true")#><cfif #len(Dep)# eq "0"><cfset #Dep# ="XX"></cfif><CFSET #Act# = #listgetat(Form.act,i,",","true")#><cfif #len(Act)# eq "0"><cfset #Act# ="Null"></cfif><CFSET #Prj# = #listgetat(Form.prj,i,",","true")#><cfif #len(prj)# eq "0"><cfset #prj# ="Null"></cfif><CFSET #Loc# = #listgetat(Form.loc,i,",","true")#><cfif #len(loc)# eq "0"><cfset #loc# =""></cfif><CFSET #PO# = #listgetat(Form.po,i,",","true")#><cfif #len(PO)# eq "0">&

I just recently upgraded to ColdFusion 2021 from ColdFusion 2016 and I have run into an odd issue.  I am populating a PDFForm with values using the CFPDFForm tag, and writing the PDF data to a variable.  Later I go to write out this PDF file to disk, flattening the form, and I get an error.  <cfpdf action="write" source="PDFFormVariableName" destination="#pathToWritePDF#" flatten="yes" overwrite="true">With this code, I get an error:Error: Variables written as a file by specifying destination in a tag cannot be used again.coldfusion.pdf.core.PDFException$PDFInvalidDocumentVariableException: An error occurred while reading source for the cfpdf tag. at coldfusion.pdf.PDFDocHandler.readInternal(PDFDocHandler.java:324) at coldfusion.pdf.PDFDocOperation.write(PDFDocOperation.java:427) at coldfusion.pdf.PDFDocOperation.write(PDFDocOperation.java:469) at coldfusion.tagext.pdf.PDFTag.doEndTag(PDFTag.java:1963) at ....    If I change the code t

Since installing CF 2021 HF 1, we have had issues with CFHTMLTOPDF after a service restart. The error in the application log after trying to generate even a simple PDF is: Error occurred while generating PDF.Reason: SERVER ERROR The stacktrace is: 58472 "Error","cfthread-3","04/08/21","14:38:11","","GENERATEPDFS: Error occurred while generating PDF. Reason: SERVER ERROR"58473 coldfusion.document.webkit.PDFgErrorHandler$ServiceManagerConversionException: Error occurred while generating PDF.58474 at coldfusion.document.webkit.PDFgErrorHandler.handleConversionError(PDFgErrorHandler.java:190)58475 at coldfusion.document.webkit.HttpPDFRequestHandler.requestPDFGeneration(HttpPDFRequestHandler.java:178)58476 at coldfusion.tagext.htmltopdf.HtmlToPdfTag.processPDFgRequest(HtmlToPdfTag.java:1149)58477 at coldfusion.tagext.htmltopdf.HtmlToPdfTag.handlePDFgConversionRequest(HtmlToPdfTag.java:1299)58478 at coldfusion.tagext.htmltopdf.HtmlToPdfTag.convertToPDF(HtmlToPdfTag.java:1236)5

I installed ColdFusion Version 2021. Updated to version 6. But our IT using Rapid7 still seeing as 2021.0.0.0 build and flagging security risk. How do I update version of installed programs

HiWondering if anyone can help. We have had a few issues where our intranet site stops responding and it appears to be a problem with the cfdotnetsvc as if we restart that the site comes back up. I have set our RMM software to monitor the status of this service but I wanted to monitor the windows events for this service. Cant seem to find any event id's, event codes anywhereDoes anyone have a list of these?

Hello,I am trying to send out signed emails with an S/MIME signature through CFMAIL, and I have been able to get it working. However, when the emails are received in Outlook, the signature is flagged as invalid. On other mail clients, such as the Apple Mail App, the signature is flagged as valid. What's more, after inspecting the certificate / signature in Outlook, the signature is suddenly valid and any incoming messages with this signature are no longer flagged (See attached image. After clicking the Button marked Red, the Cert becomes valid). I have tested this on many different versions of CF from 11 to 2021 with the same result. I have also tried converting the signature to other formats, such as .jks. I imported the certificates used into different mail clients such as Thunderbird and Outlook to test if the certificates are really invalid. However, when sending emails directly from these mail clients and signing them, I did not get any messages that the certificates wer

 I am outputting the results of a query that shows the person who are scheduled to come to work, the date that they are working, the times that they should be in, and the shift number. I am having difficulties trying to highlight the upcoming day if that day is within seven days of the current date. The conditional code that I am using either highlights all the dates or doesn’t highlight. Any dates at all. I know that there is a way to do it. I am just stuck. i've attached an image of the result that im looking for. Any help would be great. Please see my code below. My initial query<cfquery name="security_admin" datasource="master">select <!---concat(fname,' ',xholyabbv) as FOI,---> concat(fname) as FOI, cell, squadlt, secfoiid, secid, secdate as DATE, secshift, shift.shift as TIMES, shinumber, shiweek, lt_initialsFROM nameLEFT JOIN security ON foiid = secfoiidLEFT JOIN shift ON shiid = secshiftLEFT JOIN squadlt ON ltid = squadltWHERE secfoiid is not nullAND secda

Hi, i have a problem with fonts in CF2021.I have implemented fonts into Font Management ( .ttf ) , the path is right but when i try to put fonts into cfreports doesn't work.. can you help me? thank you

Hello. It seems that to be able to view variables when debugging, I have to turn on Enable Request Debugging Output, which causes a whole bunch of information to be appended to the returned HTML.If a whole bunch of HTML is returned in each response, the application I'm debugging doesn't really work, as it expects a certain kind of output (basic strings or xml) and the extra HTML messes that up. How can I view variables while debugging, but not get all of that extra HTML that breaks the application?

I've create a excel file with CFSpreadSheet and now I want to change the color of a cell to a hexcolor that is not available with CFSpreadSheet.  Can it be done with javascript? <cfset xl = spreadsheetNew("Hazard Details",true)><cfset SpreadsheetAddRow(xl,"Test")><cfset SpreadsheetFormatCell(xl,{color="red",bold="true"},#xl.rowcount#,1)> Will set it to red.  But I want to use a color that is not available with cfspreadsheet like hexcolor #355f91something like:<cfset SpreadsheetFormatCell(xl,{color="#355f91",bold="true"},#xl.rowcount#,1)>