ColdFusion

Hi, I am trying to find the hotfix file hf201800-4207395.jar. The Adobe ColdFusion support/download page does not have the hotfixes, and CF support have not answered me. Does anyone have the link and/or the file? Thanks,Mark

Greetings, We are running CF18 enterprise(latest update 10) on Windows server.  Tomcat version 9.0.21.0. Java version 11.0.3.Our security team informed us about following vulnerability after Nessus scan on CF server: Plugin ID: 133845 Port: www (8500/tcp)Plugin Output:  Installed version : 9.0.21  Fixed version     : 9.0.31Plugin Description:The version of Tomcat installed on the remote host is prior to 7.0.100, 8.xprior to 8.5.51, or 9.x prior to 9.0.31. It is, therefore, affected by multiplevulnerabilities.  - An HTTP request smuggling vulnerability exists in Tomcat due to mishandlingTransfer-Encoding headers     behind a reverse proxy. An unauthenticated, remoteattacker can exploit this, via crafted HTTP requests,     to cause unintendedHTTP requests to reach the back-end. (CVE-2019-17569)  - An HTTP request smuggling vulnerability exists in Tomcat due to badend-of-line (EOL) parsing that allowed&nb

We are in the process of upgrading from CF11 to CF2018. We are installing it with jdk 11.0.7. When attempting to reach out to another server through cfhttp, it appears to be rejecting the wildcard cert supplied by the destination server. I/O Exception: Certificate for <ourserver.test.local> doesn't match any of the subject alternative names: [*.test.local] The same certs work fine with CF11, so I'm hoping there is some configuration in CF2018 that I have missed. 

Our CF2018 application handles sessions manually using cookies, but we found that cfid and cftoken params are appearing on the URL in some cases. I expected that these URL params might just be an unwanted side effect of coders forgetting to put addtoken="no" on their cflocation tags, so I coded addtoken="no" on all cflocation tags and that seems to have fixed that issue. My concern is that during my analyis, I found that the Adobe docs say that ClientManagement must be set to true for the addToken param to work (From https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-j-l/cflocation.html😞 Our application has ClientManagement set to false, and yet the addToken param successfully passes or suppresses the URL params depending on the param value just fine. Why? Is this an error in the docs? I want to avoid any special case gotchas.

We are currently in the process of updating our Servers to Windows 2018. All of our ColdFusion web applications are being tested and re-written to work in ColdFusion 2018 Standard edition. We also are using Sybase databases connected in ColdFusion Adninistration. One of our applications was relying on a COM component generated in PowerBuilder which needed to be dropped and replaced. Its main function was to read entered passwords and encrypt or decrypt them to verify that the stored encrypted password is correct. The Encryption/Decryption was performed by a DLL written in C++ with Export functions. The component was easily declared and usable in PowerBuilder. The function has the form: FUNCTION long Decrypt(string password, string StringToDecrypt, ref string DecryptedString) LIBRARY 'UTIL.DLL" alias for "Decrypt:Ansi". We cannot decompile this 32bit library.We have not been able to declare this dll and function in ColdFusion Using CFOBJECT. Note: This dll is 32bit dynamic dll with no s

Please let me know how to display the query written in cold fusion page on web browser.

Hello, I am hoping someone can help me understand what the underlying issue is here 1: This issue is occurring throughout our domain (www.agcareers.com) and none of the pages (.cfm) are shareable on LinkedIn. But, if I create an HTML page, LinkedIn fetches the metadata of that page not .cfm pages2: URL:- https://www.agcareers.com/test-page-2.cfm On this page, there are two buttons at the top right corner. One with data-url of LinkedIn which works fine. The other button has data-url of our website which does not work The above URL when shared through: https://www.linkedin.com/sharing/share-offsite/?url=www.agcareers.com/test-page-2.cfm is throwing error as well but if I try html version using https://www.linkedin.com/sharing/share-offsite/?url=www.agcareers.com/test-page-2.htm it works fine. LinkedIn Post Inspector fetches metadata of the html page but not .cfm pagehttps://www.linkedin.com/post-inspector/inspect/https:%2F%2Fwww.agcareers.com%2Ftest-page-2.htmhttps://www.l

Hi,I would like to setup a Blue/Green deployment for CF2018.We are currently using IIS+CF on the same VM and in a separate VM we have the MSSQL instance. Image1   We would like to move to this other architecture in order to be able to perform Blue/Green Zero downtime deployments (see below) Solution we want to implement for Blue/Green  According to CF Administrator, Redis external session storage can only be enabled if J2EE sessions are disabled.   We do use J2EE because of the improved security they offer and we are not planning on giving that up. Is there a way to have the session storage to also manage the J2EE sessions?Is there any workaround that I might be missing to be able to implement this solution?How can we keep J2EE sessions replicated in those 2 servers so that we can change traffic requests to one or the other without affecting users? Thanks

I want to download CF2018 (but any link to download Cf2018  takes me to CF2021 download in Adobe site).Can someone please share the download link CF2018. 

Hello,i want to connect from the coldfusion server to an external server with docke.here is the docher mysql server... normally i connect with sequal pro with a tunnel over ssh...but how i can connect the coldfusion servr with the database? Kindly Regards Thorsten

Hello, We have recently update our ColdFusion 2016 install to 2018 on two load balanced RHEL 7.9 servers. Both servers are currently running CF2018 Update 7 with Java version 11.0.10 and we are having issues with making cfhttp calls to various HTTPS sites like Google and Facebook. These cfhttp calls work fine when CF is restarted but we eventually see errors like "I/O Exception: Could not generate secret" , "I/O Exception: Peer not authenticated", and "I/O Exception: Couldn't kickstart handshaking". After updating to Update 7, here's the more prominent error we've seen:  Here are my JVM arguments:-server --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED --add-opens=java.base/java.nio=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/sun.util.cldr=ALL-UNNAMED --add-opens=java.base/sun.util.locale.provider=ALL-UNNAMED -XX:MaxMetaspaceSize=1024m -XX:+UseParallelGC -Xbatch -Djdk.attach.allowAttachSelf=true -Dcoldfusion.home={application

What was coldfusion replaced with and how do I get a copy of it?

Environment Details:ColdFusion 2021 ReleaseMicrosoft SQLServer 2019Microsoft SQLServer Management Studio Version 18.8Error Message:"Connection verification failed for data source: TESTDBDSNjava.sql.SQLInvalidAuthorizationSpecException: [Macromedia][SQLServer JDBC Driver][SQLServer]Login failed for user 'admin'."Hello,when i add new datasource in coldfusion administration page by selecting Microsoft SQL Server Driver,Im getting above error message.I have entered only Server Name as "DAGEOP", the CF administrator by defalt adding user name as "admin" and some hidden password. Kindly let me know what mistake i have done and how to solve this error.Below are few details about my installation.

I created a fillable form with Adobe. I am using cfpdfform to populate it. I have made no programming changes or changes to the form. Suddenly, it has started filling the form (or the form has started displaying) in landscape mode. You can just see the beginning of the field contents before it disappears upwards. What happened? How do I fix it?

Does anyone have tips on getting clustering wroking across multiple servers in fully patched CF 2016?  Update patch 14 added extra security to the AJP connector in the form of a secret value and it limits what addresses an AJP connector listen on, apparently.  I have two servers in a cluster and I can see from the logs that server WEB01 is trying to connect to server WEB02 but the connections are refused.  specifically the error is this:ajp_connect_to_endpoint::jk_ajp_common.c (1124): (WEB02LocalClusterInstance_x.x.x.x) Failed opening socket to (x.x.x.x:8012)The port number is correct for the WEB02 instance.  In the WEB02 instance's server.xml, the connector tag has the matching secret attribute, allowedRequestAttributesPattern=".*" and I've tried various values in the address attribute, with no success. Does anyone have any suggestions for how to troubleshoot or fix this connection issue? ThanksAndy

My company has been running one of its websites on Coldfusion9 for the past 10 years and our developer is no longer supporting us and we need help.  Our website is down as of yesterday and we have determined it is the site not the hardware.  How can we go about finding someone to assist.

For a DataSource on the Admin page that is a Microsoft SQL connection, I need to set the ApplicationIntent to ReadOnly. We are running on an old CF10 version (upgrade scheduled for later this year), so is the only way to do this is by entering the Connection String value in the DataSource advanced options?(and of course only selecting the Read tick boxes below it, turning off the update, insert, etc) (and if it is, any typical examples would be really useful).

I have checked the documentation, but nothing is jumping out at me. Is there a function that returns the locale country and language codes? GetLocale() returns the "locale name as it is represented in ColdFusion": ie: English (US) Spanish (Standard) ... What I am looking for is the ISO codes en US es ES ... I can get the information using getPageContext(), but just wondered if I was overlooking a built-in CF function.

At one of our customers we’re migrating an old CFMX7 application to CF2021. In certain reports the Week() function is used. <cfset oldlocale = SetLocale (“Dutch (Standard)”)> We’re performing the initial tests in our CF2018 developer environment. In using Week() in CFMX7 the week starts at Mondays and weeknumbers are correct. Using the same source code in CF2018 the week suddenly starts at Sundays and weeknumbers are incorrect (for instance today – 21/01/2021 – returns week 4 instead of week 3). What could be the cause for this? Or is there some kind of setting we’re missing (I checked cfadmin, but couldn’t find a lead)?

AXIS2 ERROR org.apache.axis2.rpc.receivers.RPCMessageReceiver - org.apache.axis2.AxisFault: Mapping qname not fond for the package: coldfusion.runtimejava.lang.RuntimeException: org.apache.axis2.AxisFault: Mapping qname not fond for the package: coldfusion.runtimeThis is the error I'm getting from the AXIS2 log. I applied the latest updates hoping that might fix the problem but it hasn't. qname appears to be a function in axis 1 so I'm wondering if this is known bug CF 2018 and Java 10? Any help is appreciated.

I'm finally updating a site from CF9 to CF2018 and am having problems with my cffeed.  Can anyone see any obvious errors in my code?  This has worked for years in CF9, but in CF2018 I'm getting the error:"There is a problem in the column mappings specified in the columnMap structure.The cffeed query does not contain any column by the name of title." <!--- Map the orders column names to the feed query column names. ---> <cfset columnMapStruct = StructNew()> <!--- 2020.06.15 <cfset columnMapStruct.publisheddate = "PUBLISHDATE"> ---> <cfset columnMapStruct.pubdate = "PUBLISHDATE"> <cfset columnMapStruct.content = "SUMMARY"> <cfset columnMapStruct.title = "TITLE"> <cfset columnMapStruct.rsslink = "URL"> <cfset columnMapStruct.id = "GUID"> <!--- Set the feed metadata. ---> <cfset meta.title = "My Domain News"> <cfset meta.link = "http://mydomain.com/"> <cfset meta.description = "News fr

Any better ways to convert ColdFusion to work in all browsers ? Is ther any easy way to convert CFML forms to HTML instaed of complete rewrite.   [moderator: edited title for clarity and accuracy]

Hi, This is a continuation of the thread: https://community.adobe.com/t5/coldfusion/ever-increasing-number-of-database-connections-with-jdbc-and-odbc-drivers-mssql/m-p/11748504?page=1 For some reason I cannot post to that thread any longer, so am creating this one to carry on. 

Here's the deal, we have a CF web service which generates PDF files. You pass it HTML and the path to a file server and it writes a PDF there. Pretty simple. We have a Java app which generates appraisals on the fly and uses the CF web service to make a PDF. The problem: Once or twice a day a request would just hang. CPU usage would stay low, but the thread would just sit there. This was on CF 7.0.2 Standard which means cfdocument was single threaded and all other cfdocuments on the server would get in line and wait. We now have CF 7.0.2 Enterprise which multi-threads cfdocument, but it hasn't solved the initial problem. These hung threads will run for hours EVEN THOUH the timeout is 100 seconds. Furthermore, I CANNOT kill the thread with SeeFusion. I have to restart CF. So. I started digging. I would observe stack traces for the hung threads. Every time the thread hung it would be fetching images in the HTML. I knew this because the top of the thread stack always looks like this: "j

As I encountered a problem with the coldfusion-out.log rotation process I tried to change the value of the parameters maxOutFileBackup and maxOutLogSize in the neo-logging.xml file and restart the ColdFusion service. The new parameters are not systematically taken into account and I could have coldfusion-out.log bigger than the max size defined in the xml file. Content of the deployed neo-logging.xml: <wddxPacket version='1.0'><header/><data><array length='2'><array length='0'></array><struct type='coldfusion.server.ConfigMap'><var name='consoleVisible'><boolean value='false'/></var><var name='maxFileSize'><number>5000000.0</number></var><var name='enableOSLogging'><boolean value='false'/></var><var name='maxOutFileBackup'><number>20.0</number></var><var name='pattern'><string>"%p","%t",%d{"MM/dd/yy","HH:mm:ss"},%a,"%m%x"%n</string&