ColdFusion

ColdFusion 2016,0,13,316217Hi,We have been getting this in our coldfusion-error.logs multiple a *minute*:Oct 07, 2020 6:59:19 PM org.apache.catalina.core.StandardHostValve custom SEVERE: Exception Processing ErrorPage[exceptionType=java.lang.Exception, location=/CFIDE/administrator/templates/errors.jsp] org.apache.jasper.JasperException: javax.servlet.ServletException: java.lang.IllegalStateException: Cannot create a session after the response has been committed"java.lang.IllegalStateException: Cannot create a session after the response has been committed" This started showing up in our logs last month but only sporadically. ColdFusion has been restarted multiple times and these errors still exist.  If it only happend occasionally I wouldn't sweat it, but this is very concering. I don't really know how to figure out what is happening in a ColdFusion context.  I found three other mentions of this error on the message boards but no real solutions.  I'm not n

Im looking at using ehcache to cache some very large datasets. Im planning to use ehcache regions with eternal and diskPersistent settings turned on.  Would it be unwise to allow my ehcache regions to grow into a TB size worth of data? At what point would it be too big? Could I in theory have a 150 TB ehcache region without a performance degradation?   

Hi,I am using CFthread to upload a file to ftp sever, The requirement is to upload the file in background even after the browser window is closed after user start uploading the file. Is is possible with CFthread?Code that i am using:<cfif (IsDefined("form.FileContents") && form.FileContents NEQ "")><cfthread action="run" name="fileUploadThread"> <cfset FileInfo=GetFileInfo("#form.FileContents#")> <cfset fileSizeToUpload = FileInfo.size><cfset expectedCheckSum= form.actualCheckSum><cfset variables.uploadedFileServerName = "TestUploadFile" & "/" & "#fileName#" /><!---<cfset fileName =  uploadResult.serverfile/>---> <cfftp connection="session.ftpConn"action="open"server="someserverName"username="someuser"password="somepassword"stoponerror="Yes"timeout="90000">Did it open connection? <cfoutput>#cfftp.succeeded#</cfoutput><br /><cfif cfftp.succeeded> <cfftp connection =

Hi,I am trying to upload file to ftp server with CFFTP tag. the code that i am using is:<cfset variables.uploadedFileServerName = "TestUploadFile" & "/" & "#fileName#" /><!---<cfset fileName =  uploadResult.serverfile/>---> <cfftp connection="session.ftpConn"action="open"server="uploaduat.flexnetoperations.com"username="some user"password="password"stoponerror="Yes"timeout="90000">Did it open connection? <cfoutput>#cfftp.succeeded#</cfoutput><br /><cfif cfftp.succeeded> <cfftp connection = "session.ftpConn"action = "PutFile"localFile="#form.FileContents#"remoteFile="#variables.uploadedFileServerName#"stoponerror="Yes"passive = "Yes"timeout="90000"><P>Did it succeed? <CFOUTPUT>#CFFTP.Succeeded#</CFOUTPUT><cfif CFFTP.Succeeded><P>Close the connection:<CFFTP ACTION="close"CONNECTION="session.ftpConn"STOPONERROR="Yes"><P>Did it succeed? <CFOUTPUT>#CFFTP.Succeeded#&lt

Hi,Trying to using the Oracle DB instead of sqlserver DB, and ran into below error.ormSettings.dbcreate = "update";With above configuration after calling ormreload() call, application keeps spinning forever.  and getting below error.ORA-00955:name is already used by an existing object. when i change the above setting to "none",ormSettings.dbcreate = " none ";application throws table does not exist error, but in backend we have a table database.when i change the same setting to ormSettings.dbcreate = "dropcreate";we are losing all data and tables got created newly. Application loading/running successfully. By using “update” option, our application is working fine in MicrosoftSQLServer.When we use the same configuration for oracle database, by changing the required configuration like dialect and moreWe landed on this errors.ORA-00955:name is already used by an existing object UsingWindows Server 2022 StandardColdFusion 2021 server Enterprise Trial version 10 days

 I'm facing this error since 60 days and it's showing your account is suspended. Even I didn't break the rules and policies of Garena Free Fire. So, please fix this problem as soon as possible. Free Fire ID Name: PɢㅤLEꫝDER UID:521342191

Our company has completed a security review of ColdFusion 2021 update 4 and found it is using an outdated version of Tomcat (9.0.60). Does anyone know if Adobe will be updating Tomcat to the latest version (9.0.74)?

  We are thrilled to announce the highly anticipated release of 2023 release of Adobe ColdFusion! Packed with cutting-edge features and enhanced performance, this release takes ColdFusion to new heights of innovation. Experience accelerated development, robust security measures, and seamless integration with modern technologies.   Upgrade to the latest version now and harness the true potential of ColdFusion. Elevate your coding experience with Adobe ColdFusion – the ultimate platform for unmatched productivity and success.   What is new in this release? LDAP and SAML integration Integrate LDAP and SAML authentication seamlessly with ColdFusion, enabling secure and centralized user management, authentication, and single sign-on (SSO) capabilities for your applications, enhancing security and user experience.   Central Configuration Server Utilize ColdFusion's Central Configuration Server to manage and centralize configuration settings across multiple instances, sim

 Hello,when i try to add new datasource through administrator page, i'm getting below error message.NOTE:Im using cold fusion 2021 version with coldfusion builder 2018I tried to add microsoft access driver. Could you please let me know how to fix this issue?"The ColdFusion ODBC Server service is not running or has not been installed. You may also use the "MS Access with Unicode" driver to connect to MS Access datasources."

Just wondering if there is a way to implement a public key infrastructure like PGP WITHOUT having to install PGP on the server. We are on a shared host and want to send encrypted emails to one single e-mail client (for collecting credit card info)

Is there a date for the main 2023 release? Currently on 2018 , which is out of support on 13 July 2023.I could upgrade to 2021, but it goes out of support in Nov 2025.So better to wait for 2023 version. If  2023 is going to be a while, and we opt for extended support it costs 25% premium of the annual support for the current renewal term - but what is the " annual support for the current renewal term"?  Is that the licence cost we originally paid?

We just recently upgraded from CF2018 to CF2021. Since ColdFusion converts all struct keys into uppercase, we're now getting UndefinedElementException when we try to refer to struct keys in lowercase (it worked fine in cf2018). This is only happening in structs that are made from cfqueries. All other structs appear to be case-insensitive. We tried adding this.serialization.preserveCaseForStructKey in application settings, but it didn't help.

Someone at my company mentioned adobe tech support for coldfusion is going away? I couldn't get any further details from them. Are there new versions/developments of coldfusion underway and will coldfusion be supported going forward? Thanks

Hi,I am trying to upload large file 3-5 Gb to the ftp server and when i upload more then 2 larger files in parallel it stops the CF server, is there a way to see the number of active FTP connection so that i can restrict the user to not upload more then 2 files in parallel.Thanks in advance everyone.

The version of Tomcat installed on the remote host is prior to 9.0.71. It is, therefore, affected by a vulnerability as referenced in the fixed_in_apache_tomcat_9.0.71_security-9 advisory.- Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.(CVE-2023-24998)Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. How does one remediate the above?

How do you remediate the below issue after a Tenable scan reports the below Plugin Output:Path : c:\coldfusion2018\cfusion\bin\coldfusionsvc.exeUsed by services : ColdFusion 2018 Application ServerFile write allowed for groups : Authenticated Users (S-1-5-11)Path : c:\coldfusion2018\cfusion\db\slserver54\bin\swagent.exeUsed by services : ColdFusion 2018 ODBC AgentFile write allowed for groups : Authenticated Users (S-1-5-11)Path : c:\coldfusion2018\cfusion\db\slserver54\bin\swstrtr.exeUsed by services : ColdFusion 2018 ODBC ServerFile write allowed for groups : Authenticated Users (S-1-5-11)Path : c:\coldfusion2018\cfusion\jetty\jetty.exeUsed by services : ColdFusion2018Add-onServicesFile write allowed for groups : Authenticated Users (S-1-5-11)Path : c:\coldfusion2018\cfusion\jnbridge\cfdotnetsvc.exeUsed by services : ColdFusion 2018 .NET ServiceFile write allowed for groups : Authenticated Users (S-1-5-11)

We are pleased to announce that we have released the updates for the following ColdFusion versions: ColdFusion (2021 release) Update 6 ColdFusion (2018 release) Update 16   In this release, we've addressed some security vulnerabilities and added the following jvm flags to that effect. -Dcoldfusion.cfclient.enable=true/false -Dcoldfusion.cfclient.allowNonCfc=true/false   For more information, see the tech notes below: ColdFusion (2021 release) Update 6 ColdFusion (2018 release) Update 16   These updates fix security vulnerabilities that are mentioned in the security bulletin,  APSB23-25.   The Docker images will be hosted shortly on Docker Hub. Please update your ColdFusion versions and provide us your valuable feedback.

I've inherited responsibility for a ColdFusion 2016 installation and I am trying to install Update 5 build 303689 in ColdFusion administrator. When I click "Download and Install" nothing happens. I can see that the previous administrator successfully installed Update 4 last year. The "Download" button also does nothing. When I click "download" I see nothing being downloaded to the hf-updates folder. Can anyone point me in the right direction as to how to get this update installed?Thank you!

Hello Team,Our company is running an App service in AZURE as a PaaS environemnt. Currently we have issues trying to upgrade.Steps we have done:- We have installed the ColdFusion 2021 on a VM in the azure cloud environemnt and then created a WAR file through the CF Admin page - Within our AZURE portal that runs our APP service, we go into the KUDU console and identify all the files (CFIDE, cf_scripts,  META-INF,WEB-INF, crossdomain.xml) that our current CF2016 WAR file has deployed and then remove those. -We then deployed via TFS the CF2021 WAR file to the location in KUDU and we see all the folders appear. - We then turn on the app service and immediately get a 404 Error on our web url and CF Admin displays the same 404 error.  We don't know which app settings need to be changed or what else is actually needed to get this upgrade complete. I have never performed an upgrade to an AZURE app service before so please forgive the ignorance from my part on this

I'm wondering if there is a way to convert webp to jpg on upload using CF?

I'm migrating files from Windows ColdFusion 2018 to Linux ColdFusion 2018. On the Windows Server, I can successfully run the following code:<cffile action="rename" source="#srcDIR#" destination="#destDir#\#form.memID#.PNG" nameconflict="overwrite"> Where #srcDIR# is the path to the image that needs to be moved. But on Linux, the same command below fails "The source ... specified in the cffile tag is invalid." I added a CFIF FileExists check and it's returns as true, so #srcDIR# can be found.<cffile action="rename" source="#srcDIR#" destination="#destDir#/#form.memID#.PNG" nameconflict="overwrite"> If I change the cffile to move and remove nameconflict as shown next, it works:<cffile action="move" source="#srcDIR#" destination="#destDir#/#form.memID#.PNG"> Anybody have a clue why rename fails, but move works?

 I have a website where the navigation bar appears on every page. This is so I can edit the navbar in one location and it will change in each subsequent page automatically. However  I want to have the option to display the navbar or not display it based on the type of page that it is. I achieved the navbar being displayed on each page via my application.cfc under  the “request start“ tag. Is there a way that I can selectively omit my navigation bar depending on the page that I select? Any suggestions on the direction? I should go with my coding <cffunction name="onRequestStart" returnType="boolean" output="true"> <!--- Any variables set here can be used by all our pages ---> <!---02/20/2023---><cfinclude template="navbar_admin.cfm"><cfset request.companyName = "BK_Club"> 

We have a small internal deployment of Coldfusion MX 7. The server is dead so I am build a new one. I am facing and error when running the site. The original programmer has left and I am not good at this. Can someone help me on this? Thank you.

So I thought I was having firewall (norton 360) issues but tech support fixed the firewall to allow me to connect to the cf administrator.That effort failed, so I contacted my IP (xFinity) tech support folks and he turned their firewall off...and I still cannot connect.If I cannot connect to the administrator, then I won't connect to anything I do in the report builder.I've got to demo the report builder on the 2nd of October...staying up all night is my only option. So if you know, please do contact me!Would anyone have a fix or an explanation of WT...is going on?kevin@mesllc.net

Hi, I've installed CF Builder 2018 on a Windows Server 2012 R2 Standard machine.  Normally we don't use this tool but wanted to use the Security Analyzer.  After setting it up and pointing it to a project folder, I right-click on one of the files I want to analyze, on the fly-out menu choose Security Analyzer, Run Security Analyzer, and it returns the following error: An internal error occurred during: "Security Analyzer".java.lang.NullPointerException I have tried installing the CF Builder 2018 package on several other machines on our network with the same results.  Here are the version details that I could find. CF Builder:Version: 3.2.1Build: 313943 From the configuration log:com.adobe.ide.coldfusion.securityanalyzer (3.2.1.201902041055) "Htmlconverter" [Active]Id: com.adobe.ide.coldfusion.securityanalyzer, Version: 3.2.1.201902041055, Location: reference:file:plugins/com.adobe.ide.coldfusion.securityanalyzer_3.2.1.201902041055/Adobe ColdFusion Bui