ColdFusion

Just restricting CFExecute and CFRegistry for now in the website and custom tags directory. All datasources are allowed, and nothing else is restricted. When using names for datasources (which works Sandbox Security unchecked), I get the following upon restart: Error [ajp-nio-127.0.0.1-8018-exec-1] - Error Executing Database Query.'' This is on localhosts with Windows 11. One Windows 10 localhost appears to work fine with server names in the datasources, although there might be something else going on with that setup that isn't obvious. The most I could track down with this is that it appears that Java Security Manager takes over database connections once Sandbox Security is enabled. Maybe Java Security Manager just allows IPs? I couldn't find anything related to that. I don't want to apply this on our live server without understanding why only IPs work, if this is the case, or if something more serious is set up incorrectly with our servers. Any help on t

Hi all, I need to create a timestamp of difference in milliseconds between the date and time now and 00:00:00 01/01/1970. I am currently using: <cfset timeStamp = dateDiff("s", createDateTime(1970,01,01,00,00,00), REQUEST.dateTimeNow)*1000> but that gives me a value of 1.170170719E+012; however I require a string containing 13 numeric characters. Any advice appreciated. Thanks, Paul

I am running Coldfusion 2018 on my Windows 11 machine as my local development environment.  I use Coldfusion Builder 2018.  I have been unable to get debugging to work.  Yesterday I tried to set it up.  I access the Coldfusion administrator on 127.0.0.1:8500 and run my local instance of my web site on https://localhost.In the Coldfusion administrator I went to the debug page and told it to use 127.0.0.1 and I think I entered in the default port (5005? 8005?).Since then I am unable to access the Coldfusion administrator to undo what I have wrought and my local instance of the coldfusion app won't run.  In both cases the page load indicator spins and spins continuously until I stop the page.I can't find Apache or Tomcat in my processes running under Windows.  I think I did see the apache server in the RDS window.  The stop and start didn't work and I deleted the server hoping that would help, but no.I don't really know what's wrong but I think it is col

Hello, I have migrated our Coldfusion apps from a server running ColdFusion 11 to 21, most have been successful but I am having difficulty resolving one error and would appreciate if anybody has any advice. The block that errors is: <CFLOOP INDEX="i" FROM="1" TO="#listlen(Form.Net)#"><CFSET #Net# = #listgetat(Form.Net,i,",","true")#><CFSET #vat# = #listgetat(Form.vat,i,",","true")#><CFSET #Dep# = #listgetat(Form.dep,i,",","true")#><cfif #len(Dep)# eq "0"><cfset #Dep# ="XX"></cfif><CFSET #Act# = #listgetat(Form.act,i,",","true")#><cfif #len(Act)# eq "0"><cfset #Act# ="Null"></cfif><CFSET #Prj# = #listgetat(Form.prj,i,",","true")#><cfif #len(prj)# eq "0"><cfset #prj# ="Null"></cfif><CFSET #Loc# = #listgetat(Form.loc,i,",","true")#><cfif #len(loc)# eq "0"><cfset #loc# =""></cfif><CFSET #PO# = #listgetat(Form.po,i,",","true")#><cfif #len(PO)# eq "0">&

I just recently upgraded to ColdFusion 2021 from ColdFusion 2016 and I have run into an odd issue.  I am populating a PDFForm with values using the CFPDFForm tag, and writing the PDF data to a variable.  Later I go to write out this PDF file to disk, flattening the form, and I get an error.  <cfpdf action="write" source="PDFFormVariableName" destination="#pathToWritePDF#" flatten="yes" overwrite="true">With this code, I get an error:Error: Variables written as a file by specifying destination in a tag cannot be used again.coldfusion.pdf.core.PDFException$PDFInvalidDocumentVariableException: An error occurred while reading source for the cfpdf tag. at coldfusion.pdf.PDFDocHandler.readInternal(PDFDocHandler.java:324) at coldfusion.pdf.PDFDocOperation.write(PDFDocOperation.java:427) at coldfusion.pdf.PDFDocOperation.write(PDFDocOperation.java:469) at coldfusion.tagext.pdf.PDFTag.doEndTag(PDFTag.java:1963) at ....    If I change the code t

Since installing CF 2021 HF 1, we have had issues with CFHTMLTOPDF after a service restart. The error in the application log after trying to generate even a simple PDF is: Error occurred while generating PDF.Reason: SERVER ERROR The stacktrace is: 58472 "Error","cfthread-3","04/08/21","14:38:11","","GENERATEPDFS: Error occurred while generating PDF. Reason: SERVER ERROR"58473 coldfusion.document.webkit.PDFgErrorHandler$ServiceManagerConversionException: Error occurred while generating PDF.58474 at coldfusion.document.webkit.PDFgErrorHandler.handleConversionError(PDFgErrorHandler.java:190)58475 at coldfusion.document.webkit.HttpPDFRequestHandler.requestPDFGeneration(HttpPDFRequestHandler.java:178)58476 at coldfusion.tagext.htmltopdf.HtmlToPdfTag.processPDFgRequest(HtmlToPdfTag.java:1149)58477 at coldfusion.tagext.htmltopdf.HtmlToPdfTag.handlePDFgConversionRequest(HtmlToPdfTag.java:1299)58478 at coldfusion.tagext.htmltopdf.HtmlToPdfTag.convertToPDF(HtmlToPdfTag.java:1236)5

I installed ColdFusion Version 2021. Updated to version 6. But our IT using Rapid7 still seeing as 2021.0.0.0 build and flagging security risk. How do I update version of installed programs

HiWondering if anyone can help. We have had a few issues where our intranet site stops responding and it appears to be a problem with the cfdotnetsvc as if we restart that the site comes back up. I have set our RMM software to monitor the status of this service but I wanted to monitor the windows events for this service. Cant seem to find any event id's, event codes anywhereDoes anyone have a list of these?

Hello,I am trying to send out signed emails with an S/MIME signature through CFMAIL, and I have been able to get it working. However, when the emails are received in Outlook, the signature is flagged as invalid. On other mail clients, such as the Apple Mail App, the signature is flagged as valid. What's more, after inspecting the certificate / signature in Outlook, the signature is suddenly valid and any incoming messages with this signature are no longer flagged (See attached image. After clicking the Button marked Red, the Cert becomes valid). I have tested this on many different versions of CF from 11 to 2021 with the same result. I have also tried converting the signature to other formats, such as .jks. I imported the certificates used into different mail clients such as Thunderbird and Outlook to test if the certificates are really invalid. However, when sending emails directly from these mail clients and signing them, I did not get any messages that the certificates wer

 I am outputting the results of a query that shows the person who are scheduled to come to work, the date that they are working, the times that they should be in, and the shift number. I am having difficulties trying to highlight the upcoming day if that day is within seven days of the current date. The conditional code that I am using either highlights all the dates or doesn’t highlight. Any dates at all. I know that there is a way to do it. I am just stuck. i've attached an image of the result that im looking for. Any help would be great. Please see my code below. My initial query<cfquery name="security_admin" datasource="master">select <!---concat(fname,' ',xholyabbv) as FOI,---> concat(fname) as FOI, cell, squadlt, secfoiid, secid, secdate as DATE, secshift, shift.shift as TIMES, shinumber, shiweek, lt_initialsFROM nameLEFT JOIN security ON foiid = secfoiidLEFT JOIN shift ON shiid = secshiftLEFT JOIN squadlt ON ltid = squadltWHERE secfoiid is not nullAND secda

Hi, i have a problem with fonts in CF2021.I have implemented fonts into Font Management ( .ttf ) , the path is right but when i try to put fonts into cfreports doesn't work.. can you help me? thank you

Hello. It seems that to be able to view variables when debugging, I have to turn on Enable Request Debugging Output, which causes a whole bunch of information to be appended to the returned HTML.If a whole bunch of HTML is returned in each response, the application I'm debugging doesn't really work, as it expects a certain kind of output (basic strings or xml) and the extra HTML messes that up. How can I view variables while debugging, but not get all of that extra HTML that breaks the application?

I've create a excel file with CFSpreadSheet and now I want to change the color of a cell to a hexcolor that is not available with CFSpreadSheet.  Can it be done with javascript? <cfset xl = spreadsheetNew("Hazard Details",true)><cfset SpreadsheetAddRow(xl,"Test")><cfset SpreadsheetFormatCell(xl,{color="red",bold="true"},#xl.rowcount#,1)> Will set it to red.  But I want to use a color that is not available with cfspreadsheet like hexcolor #355f91something like:<cfset SpreadsheetFormatCell(xl,{color="#355f91",bold="true"},#xl.rowcount#,1)>

Do you have to configure the Coldfusion server to use SMS or is it built it. I am on a shared hosting service with Coldfusion and I am not sure if the owner has config'd his server to use SMS (if it needs to). Is there a way to test this? I am very interested in building SMS into my system but am just begining to learn more about it. Also, other than the live docs, anyone know a good source to learn more about SMS & Coldfusion? -- Wally Kolcz Developer / Support

User copying Arabic words from PDF file and pasting into Text box.After pasting words shows all fine with no any alien characters. But at submit, taking alien characters mix-up with special characters along with numeric values.Please provide us solution to identify alien string value at client side and validate user right there.e.g. دھﺎﻧﺎراج ﺗﻮﻣﺎس ﺟﯿﺎراج

I have an app where users can upload files that get attached to an email message. Whenever the file size exceeds 7Mb in my testing, the mail fails, goes into the Undelivr directory and the mail.log shows:"IOException while sending message." The exception.log shows: "javax.mail.MessagingException: IOException while sending message; nested exception is: java.net.SocketException: Software caused connection abort: socket write error" The file was successfully uploaded and exists as specified on the cfmailparam tag. Any ideas?

I installed successful ColdFusion 2021 developer in Ubuntu 20, I can access admin panel with http://127.0.0.1:8500/CFIDE/administrator/index.cfm but when I try create a file in wwwroot is index.cfm and then I hit http://127.0.0.1:8500/index.cfm, it saysFile not found: /index.cfmHow do I fix it? And may I create routing or do something like this.

Hi, Approximately one week ago we had an issue with one of our ColdFusion 2018 servers (something along the lines of "could not process Application.cfc"), which required a restart of both instances running on the server. I am not sure if this part is relevant but when restarted the first instance came back fine, while the second would not start for approximately 10 minutes (it took I think three separate service "start" attempts before it eventually came back online). Prior to the restart we had consistent memory ussage on both instances of ~10-12% (average daily), while it has now been in the 25-40% daily average range for the last week according to FusionReactor. While there were minor changes to three cfm/cfc files on the same day, I don't believe they were anything that would explain this increase. Other metrics like CPU usage appear to be consistent with what they were previously. Both instances have a minimum JVM heap size of 256MB, and a maximum of 5120MB. The ser

There is a custom code that create objects of a cfc (with almost 56 level of inheritance) using create object function, apparently its taking almost 10 to 13 mins to complete and causing the request to time out. We are using the JRE inside the Coldfusion 2021 with Java 11. The same code works fine with 2016 and Java 1.8 with almost 7 mins Are there any limitation for level of inheritance when creating object with 2021 or anything to do with Java 11 with CF 2021 Any help will be much appreciated  

Facing issue somtimes showing this error at browser when trying to open an PDF attachment file:An error occurred while trying to encrypt or decrypt your input string: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.. At application.cfc:<cfset application.sKey = generateSecretKey('AES')> At view CFM:<td><a target="_blank" href="#buildurl('newonlinesc.view_pdf&id=#encrypt("2||#rc.data.pass_no#", '#application.Key#', "AES", "HEX")#')#">View Emirates</td> Opening a PDF file (view_pdf.cfm):<cftry><cfif structkeyexists(rc, 'type') AND len(rc.type)>   <cfheader name="content-disposition" value="inline; filename=#rc.pass_no#_#rc.type#"><cfif listlast(rc.type,'.') EQ 'pdf'>    <cfset ctype = 'application/pdf'><cfelse>    <cfset ctype = 'image/jpeg'></cfif>   <cfcontent type="#ctype#" variable="#rc.docdata#">&

My rhel8.7 server has both IPv6 and IPv4 enabled. It seems ColdFusion and Tomcat are both picking IPv6 instead of IPv4.  I added Java options to the jvm.config "-Djava.net.preferIPv4Stack=true -Djava.net.preferIPv4Addresses=true" but they don't seem to have any effect.  Is there another way to have ColdFusion builtin web server use IPv4? Thanks,Dan Mather

All Set      

BREAKING!! We are pleased to announce that ColdFusion Fortuna Open Beta is live and ready for testing! As usual, we are reaching out to you for initial feedback on how we can shape the future of ColdFusion.   What's in it for me? The Beta builds are power-packed with several new and enhanced features, like: GCP Services (Storage, Firestore, PubSub) GraphQL (*NEW* perhaps the most anticipated feature) Central Config Server JSON Web Tokens (JWT) (*NEW* security, enough said!) SAML and LDAP support PDF 2.0 (A whole lot better PDFs) Performance Monitoring Toolset (Monitor the GCP services and flag potential bottlenecks) Docker and PMT enhancements   What builds are available? The following are available for download: ColdFusion Zip Installers (Win/Linux/Mac/WAR) ColdFusion GUI Installers (Win/Mac/Linux) .NET Integration Services Installers AddOns Installers (Win/Mac/Linux) VS Code Builder Extension VSIX compatible with Fortuna   I don't see CFFiddle CFFiddle will be avai

We are pleased to announce that we have released the updates for the following ColdFusion versions: ColdFusion (2021 release) Update 3 ColdFusion (2018 release) Update 13 ColdFusion 2021 Performance Monitoring Toolset Update 3 ColdFusion 2018 Performance Monitoring Toolset Update 4 ColdFusion API Manager updates   These updates address vulnerabilities that are mentioned in CVE-2021-44228 and CVE-2021-45046.   After applying the update, all Log4j 2.x-related jars will be upgraded to version 2.16.0.   Update Jan 11 2022: To address the vulnerabilities later found in log4j 2.17, those who have applied the most recent update can now implement the log4j 2.17.1 updates, as provided along with instructions here: https://helpx.adobe.com/coldfusion/kb/log4j-2-17-0-vulnerability-coldfusion.html    Update Dec 21: To address the vulnerabilities later found in log4j 2.16, those who have applied the most recent update can n

I just installed ColdFusion 11. I am pretty sure I selected the option to install the addons like Solr, but when I am in the coldfusion administrator under Data & Services, I click ColdFusion Collections and I get nothing. It won't go to the page at all. If I click on Solr Services a page will come up. If I click on ColdFusion collections and then restart the coldfusion addons I get a page that comes up saying"Unable to retrieve collections from the Search Services.Ensure that you have installed ColdFusion Search Service and it is running."I am assuming it means it isn't installed.So I went to Adobe - ColdFusion Support Center : More Downloads and downloaded/installed the Windows Add-on Services Standalone Installer. I didn't change any of the settings or folders and installed it. I restarted the server. I logged back into the coldfusion administrator and I see the same thing. Nothing changed. When I go to view the file folders I have c:coldfuion11 and a c:coldfusionAdd-onServices.