ColdFusion

Hi All, TL;DR: Basically not sure how to stream text to the browser from a CFC. I'm sure this is either simple or not possible but how do you return a Server Side Event text stream, using cfcontent type="text/event-stream" from a CFC function as opposed to a .cfm page? I currently have a this code sample set up in a getmessages.cfm page and it works as expected: <cfscript> cfheader( name="cache-control", value="no-cache, no-store, must-revalidate" ); cfheader( name="pragma", value="no-cache" ); cfheader( name="expires", value=getHttpTimeString(now()) ); cfcontent( type="text/event-stream" ); cfsetting( requesttimeout=60 ); for ( i=1 ; i<=10 ; i++ ) { // end each data line with two #Chr(10)# if ( i == 1 ) { writeOutput("id: #createUUID()##Chr(10)#"); writeOutput("data: {""msg"": ""Starting Process..."", ""id"": #i#} #Chr(10)##Chr(10)#"); } writeOutput("retry: 10000#

Hello,I am trying to fix SQL injection inside an <CFSCRIPT> block.  Please see the below screen snap shot /* Determine if user has account */qryAuthEmp = queryExecute("SELECT a.*, facility_key, org_cdFROM staffing.auth_user_name a,(SELECT ndc_emp_id,(CASEWHEN (INSTR (email_id, '@') - 1) > 20THENUPPER (SUBSTR (email_id, 1, 20)) || '@FAA.GOV'ELSEUPPER (email_id)END)user_emailFROM staffing.auth_user_name) b,(SELECT DISTINCT facility_key, y.org_cd, email_idFROM #session.userProfile.emailAddress contains "CTR." ? "staffing.contractor x" : "staffing.employee x"#JOIN staffing.master_org_cc_lookup YON x.org_cd = y.org_cdWHERE active = 'Y'AND end_date > SYSDATE#session.userProfile.emailAddress contains "CTR." ? "" : "AND emp_stat_cd IN ('A','C','F','L','M','P')"#) dWHERE a.ndc_emp_id = b.ndc_emp_idAND a.email_id = d.email_idAND a.is_active = :ActiveStatusAND a.end_date > SYSDATEAND UPPER(b.user_email) = :email_id",{ActiveStatus={value='Y', cfsqltype='cf_sql_varchar'},//

When I try to install CF 2021 on OSX Moneterey, either with the unzip installer or GUI installer, the proces gets aborted because:“java” cannot be opened because the developer cannot be verified. Although you can often make an exception for certain files to run in the Security and Privacy settings panel, this one won't run. Has the CF team abandoned developers who use OSX or is there something I'm missing?  

Hi all, I've inherrited an old web server running CF 11 on Ubuntu 14.04.  The server hasn't had a problem in the last 2 years that I've been here. However, at about 2:00pm last Tuesday, it started to crash.  When a user tried to access the site with their browser, it would just spin.  On the server, we noted that the java task was using 100% cpu.  When we restart coldfusion and apache, we are back to normal... for a while. I've discovered that one particular url will consistently crash the server: /shop/ItemAdd.cfm I was working on that file, but I've backed out all of my changes, and to my knowledge, nothing else was changed on the server. We've done a lot to try to diagnose this. But here's where it gets odd. If I rename ItemAdd.cfm to ItemAdd.cfm.orig, I would expect to get a 404 error when I point a browser to /shop/ItemAdd.cfm, but I don't.  It still crashes!  So, I don't THINK it's a code issue. I've

Hi Community,Hopefully someone has seen this before. I have a line of code this is actually in several applications and has never causes problems before. The line of code causing the error is below. This is pretty basic stuff. Creating a object from a SOAP enabled website (it's actually a ColdFusion website from a cfc). var webservice = createObject("webservice", arguments.url); The plan for this morning is to recycle (restart) the server and see if that fixes it. If this continues to come up, has anyone seen or fixed this? The server is CF 2018, with the latest patches applied.

Our ColdFusion server only allows connections via ftps. Has anyone figured out how to do a ftps connection to a remote server in ColdFusion Builder?I see ftp ot SSH, but nothing for ftps.An ftp client connection requires TLS/SSL Explicit encryption

The following is running on a ColdFusion 2018 server (in the event this is a version-specific issue). I'm setting the Application datasource property in the onApplicationStart() LifeCycle Handler, but the datasource property isn't accessible in a CFM Template. I'm thinking it may have something to do with how the this Scope is handled inside the onApplicationStart() method, but I'm not certain. I tried setting the datasource property using this.datasource as well as Application.datasource, but it's not accessible in the CFM Template either way. Application.cfc// The usual App config stuff here... (omitted for brevity) // Instantiate Instance of Java System Object used to set System Env Vars this.System = createObject("java", "java.lang.System"); // Include Config files include "resources/config/AppSettings.cfm"; include "resources/config/onApplicationStart.cfm"; AppSettings.cfmif (! isDefined(this.System.getProperty("DB_DSN_CREATED"))) {

I have found that on two of my coldfusion 2021 servers, at random intervals, the CGI scope starts returning an empty struct.   When this happens, the only solution seems to be a restart of the ColdFusion service. there dont seem to be any relevant entries in any of the ColdFusion logs or the Windows Event Viewer. Has anybody ever experienced this?

Here is a simple 4x4 empty table made in CKEditor 5 on a page I am working on:The screenshot below is what the user sees after using the page's PDF export. Even after multiple attempts at altering the CSS (scroll down to end for code), which you can see if you look at the end of this post, yielded no result with the intended outcome. Hoping for any advice possible. Thanks.html, body, p, h1, h4, table, th, td { font-family:'Courier New', monospace, Monaco, 'Lucida Console'; font-size: 9pt; } html, body { margin: 0; padding: 0; border: 0; } h1 { text-align: center; font-size: 12pt; font-weight: bold; } h4 { text-align: center; font-size: 10pt; font-style: italic; } img { border: 1px solid #000000; display: block; margin-left: auto; margin-right: auto; } th, td{ border: 1px solid black ; text-align: center; margin: 0; padding: 0; } table { border-width: thin; border-color: black; border: 1px; width: 50%; } .table{ border-collapse: collapse; } .footer

Trying to install and connect to the PDFg Service.  Windows Server.  Installation of Add-On Services goes just fine and it starts up the Windows Service just fine.  In CF Admin, under the PDF Service page, I try to "Verify" the connection and it fails saying "Connection verification failed for PDF Service Manager.  Looking at the logs in the Coldfusion Add-On Services folder, the stderrout.log shows the service successfully starting up on port 8993.  However the next several lines show the error from when I try to verify the service.  I can't find any similar issues like this so turning to the community for help. Note: neo-document.xml has the same port (8993) that the service is running on. Any other ideas out there?  Log entries are below: Logs Upon Service Startup:2022-01-31 22:08:34.374:INFO:oejs.Server:main: jetty-9.4.31.v20200723; built: 2020-07-23T17:57:36.812Z; git: 450ba27947e13e66baa8cd1ce7e85a4461cacc1d; jvm 11.0.13+10-LTS-37

Hello, My client lives in Sydney and wants scheduled tasks to run every hour throughout their workday. The server is hosted in Central Time USA. Both locations go through timezone changes twice a year. I can set the JVM locale to be Sydney, making the setting of the time to run scheduled tasks straight-forward. When the server's clock changes, that will affect its execution time, right?   Thank youBrent [Edited by moderator.]

TLDR: I cannot access the CF2021 using the built-in webserver and via Apache. scenario: I need to install/configure CF2021 in a remote host (RHEL7 with Apache 2.4.*) that's console only. It currently has CF2016 but I've removed (via wsconfig -uninstall)the apache connectors for this version. ------------- I followed this guide: https://helpx.adobe.com/au/coldfusion/installing/understanding-coldfusion-server-profiles.html and the instructions provided in the installation file (ColdFusion_2021_GUI_WWEJ_linux64.bin) After installation, I ran "sudo coldfusion start" More info: 1. I needed to run the installer as root otherwise it won't run. 2. During installation, I selected "Server installation" (not WAR/EAR options since I have a feeling I need Tomcat/Websphere for this option). 3. I installed CF2021 on the default folder that was presented to me. In my case this folder is "/opt/ColdFusion2021" 4. When I ran "sudo coldfusion start", a log file

I may not have everything installed that I need. I recently lost my entire c: hard drive to a crash. I replaced it and reinstalled everything. But I'm having an issue with accessing a MySQL datasource. It was working fine prior to the crash. 1) I created a datasource in Win10 64-bit ODBC using the MySQL ODBC 8.0 Unicode Driver. It reads the remote MySQL database just fine. I've tried this, also, using the ANSI driver. FWIW, I downloaded and installed the drivers using mysql-connector-odbc-8.0.28-winx64.msi. I don't have the full Oracle application installed. 2) I created a datasource under CF admin (CF2018) using the ODBC Socket. It reads the previous datasource just fine also. I've set up my localhost site, and it runs without error. But when I try to run code that calls my DSN, I get an error. Datasource XXX could not be found.   I'm missing something that I did successfully, previously, but I just can't figure it out. Any help is really a

Is there any timeline for Coldfusion to gain ARM64 support?

Anyone have any insight into connecting to .net assemblies on a remote server while using ACF docker images?I am attempting to use CreateObject to point to the assemblies but the assembly file path keeps trying to point to the local file system on the docker container rather than the file path on the remote server.

Hi. We have Adobe ColdFusion 2018 with Update 13 applied. Can you provide any documentation that explains how this patch mitigates any Log4j vulneribilites on these two log4j files: log4j-1.2.15.jar and log4j-1.2.17.jar C:\ColdFusion2018\cfusion\lib\log4j-1.2.15.jar and C:\ColdFusion2018\cfusion\jetty\lib\ext\log4j-1.2.17.jar Thanks.

We are currently in the process of migrating from windows to ACF 2021 docker images.I have dropped the .dlls required for the dotnet integrations to work in the required directories and Coldfusion is able to find then when using cfobject but  I receieve the error "The assembly that contains the class must be provided to the assembly attribute"My question is whether or not I need extra configuration for the local dlls or need to point to dlls on a remote server for the .net integration to work.I have read https://helpx.adobe.com/coldfusion/developing-applications/using-web-elements-and-external-objects/using-microsoft-net-assemblies/accessing-net-assemblies.htmlBut it is still unclear to me.Any insight is much apperciated.

On the 16th of June, we'd announced support for Azul OpenJDK for ColdFusion going forward and we'd also posted a blog.   We have a breaking update for you all regarding the migration.   Our planned roll out of Coldfusion installers with Azul Zulu JDK has been put on hold. We will continue with our regular update cycles for now with Oracle JDK.   We expect to provide further updates on the Java migration by December 2021.   If you have questions (we know you do), please use this thread. We shall respond ASAP.

As part of the ongoing Log4j vulnerability remediation, I found, on one of our dev servers, where we have also installed ColdFusion Add-on Services, yet another copy of Log4j (log4j-1.2.17.jar), in x:\ColdFusionAdd-onServices\lib\ext.  Unlike the other copies on this system, the date stamp for this file was not updated by the installation of U13.  I do not see this copy of the jar file discussed in any of the remediation documentation, nor do I see anything listed on the ColdFusion Support Center Downloads page.  Please provide direction on whether or not this copy is a security risk and, if it is, how to address it.

Hello all.  Seems We have run into another issue with our newly deployed ColdFusion 2021 servers.  We experienced a similar error back with CF8, and earlier update levels of CF10.  It seems  the issue was resolved in later updates of CF10, but now with CF2021, this issue seems to be back again. We have three physical bare metal servers, each running four clustered instances of coldfusion.  All of these are behind a fortinet load balancer.  While the CF instances on each box are nammed the same (cfusion1 - cfusion4) each box's CF cluster is on a different port to eliminate multicast confusion between machines.  We have changed channelSendOptions to 6 in the server.xml files in order to reduce the number of "Session Already Invalidated" error messages in the coldfusion-error.log files. While we dont have much problem restarting instances when the server has been removed from the load balancer, we do see difficulty restarting instances even und

Hello all: We have a very strange issue. We have a large CF application that was originally written in CF9, upgraded to CF2016, then onto CF2021. There is a invoicing job that runs as a scheduled task everyday. This invoicing job does many steps (creates, checks, and pays) invoices. There are many components (functions) that are used during this process. We went live with this new server in late November of 2021 and since we have done that, the invoicing job has had issues about 4 or 5 times so far. The errors I am seeing are usually something like:Could not find the ColdFusion component or interface components/distributor.distribcontroller.I say usually, because even the "missing" component changes and they are different each time. I have checked every component for errors, so that should not be it and most days this invoice job runs fine. CF2021 is running on Ubuntu 20.04 LTS, 4 CPU.4GB ram. other than this invoice job, application is fine (users never experience

Good Afternoon, In regards to the log4j 1.2.15 JAR file found in "cfusion/lib" directory of ColdFusion2018. We have multiple instances running in multiple enclaves of in a government network, and this file is popping up as a CAT 1 vulnerability. This is an issue because they are saying the log4j-1.2.15 version is no longer supported by Apache. My SysAdmin team and Security team would like to know if there is a plan to resolve this issue and make sure Abode is aware.

HII have CF 9, try to query from DB with utf-8 chars.  it show Ok on web page.Then we tried to write to txt file so we can download and open the Excel.the txt file shows &#... charsPlease help.  I tried to google but can not find and help.I really appreaciate.I will buy you a Starbuck coffee. <!--- Lets make the file, and put the first row of Column headings in ---><cffile action="WRITE" file="#f_dir##f_name#" output="CamperType, FullName, LDName, MCNName, CamperID, Photo" addnewline="Yes" charset="windows-1252"><cfloop query="camperList"><cffile action="APPEND" file="#f_dir##f_name#" output="#camperTypeName#, #camperFullName#, #Ldname#, #mcnName#, #camperID#, #photoIDFile#" addnewline="Yes" charset="utf-8"><!--- End the loop here ---></cfloop><br><cfoutput><a href="reportDownload.cfm?FileName=#absolutefilepath#">Here is the file</a></cfoutput>

https://hub.docker.com/u/adobecoldfusionAny official word on this?

CF2018 Sys Admin here so I don't know alot about the code for the application but I'm getting an http 500 error on all of my instances at boot up. Only fix I have found so far is to clear template cache and then the web app will load. CF Error page and out log are not very descriptive either.  Exception occured before FW/1 was initializedError while resolving the relationship subsectionTemplate in cfc crms.model.beans.criterionTemplates. Check the column mapping for this property. Recently migrated these apps from CF2016 to 2018 and I'm running them on IIS8.5 This occasionally happened while they were on 2016 but not every time the instances startup.