ColdFusion

Hi, I have configured IIS and installed Cold Fusion 2021. When I try to launch the website URL, I am receiving 404 message: HTTP Error 404.3 - Not Found The page you are requesting cannot be served because of the extension configuration. If the page is a script, add a handler. If the file should be downloaded, add a MIME map. How can I add a Mime in the handler mapping? Thanks.

Hi, I am using ColdFusion 2018. I am printing a word document (dynamic) using the below code. But there are multiple issues. One is that the image (please refer screenshot) is not aligned.  I want the image to be placed on top on extreme left and top (topmargin=0 and leftmargin=0).  Also after the image i am placing a text which is not displayed in the generated word document.  Please help.  If there is a better way to generate word document in coldfusion please post that too.   <html><head><style> body { margin:0; } </style></head><body><img src="https://www.getinge-training.com/images/TopHeader.jpg" width="1429" height="496" border="0"></body><cfheader name="content-disposition" VALUE="attachment; filename=1.doc"><cfoutput><table border="0" cellpadding="0" cellspacing="0"><cfset type="application/msword"><tr><td><img src="https://www.getinge-training.com

I'm creating PowerPoint slides using cfpresentation and cfpresentationslide. Database values appear no problem, but images just get an X using hmtl <img src="image.jpg">. I tried putting the images into the same directory as the cfm page, but still nothing. I tried using <cfimage source="image.jpg" action="writeToBrowser"> and even put it in the database as a BLOB and pull it <cfimage source="#image#" action="writeToBrowser">. Nothing works. Please help. Using ColdFusion 11

how to do a two-dimension array in script?

We got a request in today to update java to 11.0.14 (latest). This is our only 2021 server, but it's been up for a bit and unfortunately was installed prior to the version that defaulted to java 11.0.11. We have no issue moving to any version from 11.0.2 up through 11.0.10. Any version after that won't start the service. The only output for an error is:Element JDKPATH is undefined in FORM. The specific sequence of files included or processed is: E:\ColdFusion2021\cfusion\wwwroot\CFIDE\administrator\settings\jvm.cfm, line: 227 "

Hello community,on our new server with CF2021 (Upd. 3), there are regular errors appearing in the exception.log with the following content:"Error","scheduler-2","03/01/22","10:17:21","","The cause of this output exception was that: coldfusion.tagext.sql.QueryParamTag$InvalidDataException: Invalid data value VERTEILER2_PROD_16409_c752c3705ca7899c-AF13A205-D150-F002-4AE23F50F4561FE2 exceeds maxlength setting 40.. The specific sequence of files included or processed is: '', line: 115 "The application "VERTEILER2_PROD" has long-running sessions which are kept alive by regular "pings" sent via javascript from the client's browser, even when there is no user interaction. Don't ask, this is a non-negotiable requirement by some high-level users and has not caused any trouble so far. Apart from the above entries in the exception.log, I haven't had any user feedback about problems. The application itself was migrated without any code changes from the previous CF2016 instance to the new one with

I have allowconcurrent set to FALSE for my CFLOGIN, and it works the way the documentation suggests: if someone starts a new session from a different browser or computer using the same credentials, the original session's Auth User is set to null (GetAuthUser()  EQ ""); it's easy for me to detect this and clear the old user's information. But this is the opposite of what I need. I want to trust the original session, and prevent any other user from logging in with those credentials while the first session is open. I can't figure out how to do that. Is there any way to detect in advance that the session for a particular credential already exists, and log out the NEW session instead of the OLD session? Or, rather, prevent the New session from being logged in at all? <cflogout session="others"> seems again to be weighted toward the new session always being the valid one, and that's not what I need. Thanks for your advice!

We have applied patch 13 to our ColdFusion 2018 Sunapsis server. The two files below are still on the server and are in use by ColdFusion. Regarding the information below, should we now have the security issue resolved? Thanks, Lewis I got more information about this.  I had wrong information before.  According to our lead developer, Tim, you will not be able to completely delete those files.  sunapsis does not use those .jar files but ColdFusion *does* so they should not be deleted.Per Tim:Adobe is moving off of Log4J 1.2 for whatever the next update is.Coldfusion has 2 different versions of Log4J.  It has Log4J 1.2.x and Log4J 2.x.  2.x was upgraded to 2.17 in Update 13.   1.2.x was left alone but is still used.You *could* unzip the .jar files and remove the specific class files and re-zip them, but you cannot delete the entire file.Adobe on Log4J 1.2.x vulnerability:           &n

Hola, Alguien podría ayudarme, busco una forma de aplicar variables de ambiente PROD/DEV, y poder desde ahí tomar los valores como URL o credenciales de servicios Web o APIs , etc.

Cron expression to schedule the task which will run at 11:45 pm at the end of the year

Hi community,we are moving from our old CF2016 environment (Apache 2.4 on SLES 12), which has been working without major problems for many years, to CF2021 with Apache 2.4 on SLES 15. Yes, I'm fully aware that SLES is NOT on the list of supported OSes for CF2021, but for the time being, I have no choice due to inhouse policy.With CF2021 (Update level 3) we now experience major problems with frequent crashes of Apache subprocesses, which seem to be related to cfhttp calls. These calls do not fail every time, but frequently and I cannot find a pattern to this. Only house-internal URLs, mostly https://, are called with cfhttp, I'm fairly certain that this is NOT a certificate problem since the inhouse Root- and Sub-CA-Certificates were imported into the cacerts store.In /var/log/warn there are countless entries like this:2022-02-24T14:55:59.909952+01:00 srvanawebx3 systemd-coredump[34008]: Process 33666 (httpd-prefork) of user 1004 dumped core.#012#012Stack trace of thread 33668:#012#0 0

Cordova version 11 android app crashes while Launch on emulator with Gradle 7.4 When i generate build using coldfusion builder 2018, the build is generated successfully. but when i run it on android emulator, it install successfully but app keeps crashing while Launch. Any clue as to why is it happening. its a very simple "Hello World" app with no plugin in use. Note: Cordova version 9.0.0 builds and runs the app on same emulator successfully without crashing. Any ideas?

Hi,I have a stuct that looks like this:If I need to display the attributes array. This works:<cfoutput>#shipment_response.data.rates["9"].attributes[1]#</cfoutput> However sometimes the Array is [empty]. How can I determine if it exists? I tried: <cfif StructKeyExists(shipment_response.data.rates["9"], "attributes[1]")> <cfoutput>#shipment_response.data.rates["9"].attributes[1]#</cfoutput> </cfif>It doesn't execute the cfoutput either way (exists or empty). What am I doing wrong with StructKeyExists? Thanks in advance for any suggestions!Gary

I read the security bullitins around this jar file coming up in security scans. I noticed that in one of my instances (test) for whatever reason that log4j.jar file is completly missing in the /jetty/lib/ext folder but yet the CF server is running fine. In our dev/prod instances though the log4j-1.2.17.jar is in the /jetty/lib/ext folder and can't be deleted or renamed becasue its in use even when the CF server is stopped.. I guess the question here is 1. Why would it be missing on one server but not the other (Identical deployment; Same versions; etc.). 2. Can these log4j versions be ignored as vulnerable. I know in previous discussions only certain CVES are mentioned but our scanners pick up reference to the jetty instance being vulnerable to.CVE 2020-9488CVE 2022-23302CVE 2022-23305CVE 2022-23307

Your client-side CFML code has encountered an initialization error. The required plugins cannot be loaded successfully within the timeout period. i am facing this issue and not sure as to how i can fix this issue. i am using coldfusion 2021 standard edition and i am trying to access device camera using following code:   <html><head><title>camera camera. aa aa.</title><script type="text/javascript">function src_to_img(img_id,data_to_write){document.getElementById(img_id).src=data_to_write;}</script></head><body><cfclientsettings enableDeviceAPI=true><cfclient><cffunction access="public" name="getpiccam" returntype="void" verifyclient="Yes"><cfset opt = cfclient.camera.getOptions()><cfset response = cfclient.camera.getPicture(opt,true)><cfset response ='data:image/jpeg;base64,'+ response><cfset src_to_img("myimg", response)></cffunction></cfclient><button

Will Adobe provide a Coldfusion 2018 hotfix to address vulnerability in Tomcat 9? We currently have version 9.0.50. See CVE-2021-42340.Thank you.

I'm trying to migrate from cf11 to cf21 and I'm getting a series of errors which I assume are related to hibernate.I already tried to use the .car generated in cf11 for cf21....this is the entire stack trace:java.lang.NullPointerException at com.sun.xml.bind.v2.runtime.unmarshaller.StAXConnector$1.getPublicId(StAXConnector.java:101) at org.apache.xerces.util.SAXLocatorWrapper.getPublicId(Unknown Source) at org.apache.xerces.xni.parser.XMLParseException.<init>(Unknown Source) at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source) at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source) at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source) at org.apache.xerces.impl.xs.XMLSchemaValidator$XSIErrorReporter.reportError(Unknown Source) at org.apache.xerces.impl.xs.XMLSchemaValidator.reportSchemaError(Unknown Source) at org.apache.xerces.impl.xs.XMLSchemaValidator.handleStartElement(Unknown Source) at org.apache.xerces.impl.xs.XMLSchemaValid

So this is a new installation running some old apps (which do work).One thing, though, is that try as I might, I can't get the debug information to get tacked onto the page.I've enabled it in cfadministratorEnable Robust Exception Information And I believe my IP address is listed in View / Remove Selected IP Addresses for Debug OutputAnd I've created a test page with<cfsetting showdebugoutput="Yes">What am I missing?!  

Hello,I just installed ubuntu 13.10, and it comes with apache 2.4, which means the next LTS of ubuntu will include apache 2.4.  I also read that Fedora 18 and up come with apache 2.4, and so RHEL 7 could also use apache 2.4 instead of 2.2.I understand that 2.4 is not supported now.  When will ColdFusion support apache 2.4?Thanks,Jonathan Morgan

I'm working with an application running on ColdFusion 2018 and Java 11. It uses threads to make multiple http requests at once to reduce the wait time of loading data. About once a month, sometimes more, we start to get error reports of java.lang.NoSuchMethodException: coldfusion.runtime.CFDummyComponent.<init>() on the line of code that creates a thread. I haven't found any pattern to it and the error seems to just keep happening for every request that goes through the affected code path after it's first triggered until the server is restarted. This is occurring in production but I haven't been able to reproduce it locally so I have a feeling it's related to the number of users of the system. Can anyone offer a suggestion on what could be the cause? Please see the related code and error dump snippets below. threadService.cfc/* * Runs all supplied threads and returns the results in a structure where each key * is the name of a thread and contains the results of running

Good day, We are working with an Education facility in the Middle East whom are a ColdFusion users. We're seeking a Cf expert to work with us remotely on the project. Please send me a private message if you're interested. Zaid

Hello,  I recently upgraded from CF2016 to CF2021.  Now i'm not heavily into ColdFusion, our previous developer has retired so I got put into this.  Mostly I have been upgrading/changing links and troubleshooting some syntax in coding or troubleshooting minor issues.  I basically have been tasked to keep this legacy system working.  (Our company is in the end stages and will most likely not be around in a few more years). So after the upgrade, i'm able to open up my dev site for our HR portal.  The login page comes up, but i'm unable to login.  I"m getting "User Doesn't Exist or Password Expired" error.  We have a EZ-SSO client that handles our login and I can't tell if that is what is causing the issue.  If the upgrade made changes that affects the code accessing the Active Directory.  I am using a <CFLDAP> command to query the active directory.

I have the CF Admin setting for cookies set to Secure and HTTPOnly, however when I browse the app, the session cookies are NOT secure. Is there something else that needs to happen to make the cookies secure? Thanks,Tom Muck

How can i link pivot table data to another sheet? As i want to link and save my all sites data at one place. Can anybody here help me out ?Thanks ! 

I recently did an upgrade from CF 2016 to  CF 2021 and all went well, Thanks to the inputs from the community.  One strange thing I noticed is that one of the menu options which usually renders a login/pwd page is garbled and not working, All other menu options in our site are clearly rendering the login page fine. Anything that I'm missing here? This is what I see in the our page, other similar menu comes up with login/pwd perfectly Any help is appreciated. ThanksSajan