ColdFusion

My ColdFusion 2018 is installed successfully.  I can access its Admin page with no problem.  My Apache 2.4 is also running ok to access html files.  My OS is CentOS 7.6.   I used the following command to installed the external Apache connector: /opt/coldfusion2018/cfusion/runtime/bin/wsconfig \-ws apache -bin /usr/local/apache2/bin/httpd -script /usr/local/apache2/bin/apachectl -dir  \/usr/local/apache2/conf -v The command seems completed successful.  The following two entries are put into my httpd.conf file. Include "/usr/local/apache2/conf/mod_jk.conf"Include "/opt/coldfusion2018/config/wsconfig/1/mod_jk_vhost.conf" I also restarted Apache and ColdFusion servers. Then the access for any html files are still OK.  However, if I test any .cfm file, I got the following error message: 503 Service UnavailableThe server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please

Trying to test out <cfhtmltopdf>: <cfhtmltopdf source="http://www.google.com/" >Or when pojnting to an html document on a local drive, nothing happens, browser is blank.  When checking the application log on the CF server I get this:Could not initialize class coldfusion.vfs.VFile Any help would be appreciated. 

I have Windows server 2016IIS 10Coldfusion 2018 I created sample cfm app, and tried to configure this app in IISWhen I run the app - it gives me below error? Seems handler mapping needs to be added in IIS for cfm/cfc etc?HTTP Error 404.3 - Not Found The page you are requesting cannot be served because of the extension configuration. If the page is a script, add a handler. If the file should be downloaded, add a MIME map.

We are trying to use the cfdocument tag on coldfusion 2016 and getting errors on creating the pdf.I have found that the issue only appears on the coldfusion servers where we have defined multiple instances. On the default cfusion instance everything works perfectly.  When running from additional instances it does not.  In the coldfusion administrtor the Font Managment does not show any fonts on the additional instances.  On the cfusion instance I can see all the Adobe installed fonts that were part of the initial install.On startup of the additional instances I am getting the error May 27, 2020 21:45:47 PM Error [Thread-65] - com.lowagie.text.FontFactory.getFontFaces()Ljava/util/Map;May 27, 2020 21:45:47 PM Error [Thread-65] - com.lowagie.text.FontFactory.getFontFaces()Ljava/util/Map; This is also the same error that appears if I try to define my own font directory.How can I get the fonts to appear on the Font Management in the additional instances. W

We've had this issue for a while apparently (now running v11u18) where emails won't get sent but they are also not always logged by CF. We have been using Java 1.8.0_144 since it came out and use a third-party SMTP server (our domain host). Pretty much all errors that do get logged simply say this in the log:"Error","scheduler-2","04/09/19","14:08:40",,"com.sun.mail.smtp.SMTPSendFailedException: 250 Requested mail action okay, completed: id=0MFJUg-1h8QzQ2Nj2-00ERMH ;   nested exception is: com.sun.mail.smtp.SMTPAddressFailedException: 550-Requested action not taken: mailbox unavailable 550 invalid DNS MX or A/AAAA resource record "Even though the actual error for that message according to what is returned via Outlook is:503 Bad sequence of commandsOne of our client's is BCC'd on every email from their site, but they are not getting messages sent to one of their customer's that does have an invalid email. However, there has been no indication of an issue in CF, but Outlook ind

I need to create a drop down menu and then have the next drop down change its content based on the selection in the previous menuWould anybody have any code that I could play around with that would help me achieve this?Thanks!!Mark

I have installed ColdFusion 10 on a server running Windows Server 2016.  I then installed the Mandatory Update.  I am getting the following server error 404 - File or directory not found when I try to access the following URL https://saweb1.matrix.txstate.edu/CFIDE/administrator/index.cfm.  Searching the Adobe website I found an article that mentions installing an updated wsconfig.jar to correct the problem.  I have been unable to locate a copy of the wsconfig.jar to download.  Will an updated copy of the wsconfig.jar file resolve my error or do I need to install something else?

I have a partner that is going to pass a transactionid to me in the URL when a user clicks on an ad on their site.Like thiswww.mycompany.com/transactionid=12345abc8964 I need to postback variables to their site when a user converts.I have that part coded already using CFHTTP.My question what is the best way to detect that a user has entered my site with a transactionid and then be able to know that is the same user when they convert.Is it something like this?1. Detect transactionid when user enter website in application.cfc2. If  a transactionid  is detected - set a session variable like session.transactionid = yes or session.transactionid=12345abc89643. If user converts - check for the existence of transactionid session variable.4. if  transactionid session variable exists - postback info the partner siteIt almost seems too easy. So I'd thought I'd check with the ColdFusion geniuses.

Hello, all, I've got a RegEx edit on email addresses that is acting weird.  I could use a few more pairs of eyes on this. Okay, so for those not aware, Gmail has a feature whereby one can add arbitrary characters to an email address, I assume primarily for the purpose of tracking who is making your email address available to marketers.  For example, let's say someone registered "myname@gmail.com", and is filling out a form online for.. uh.. let's say a free meal at a local restaurant.  Said user can enter "myname+restaurantname@gmail.com" and if that restaurant ever makes this user contact information available to marketers, then anyone sending an email to "myname+restaurantname@gmail.com"  will alert the user to who gave out that information. I am using a RegEx replace to filter out that "+whatever" in an email address, and for the most part it works great.  However.. there is an odd quirk that I can't track. It will filter out that +whatev

On my HTTP request, I kept getting this error.handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path.Sep 16, 2016 10:26:14 AM Error [ajp-bio-8013-exec-2] - ERROR: failed to read from https://myapps.example.com/units.json. Response code: 'Connection Failure.  Status code unavailable.' Error details: 'I/O Exception: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path.'I found this page, https://www.hass.de/content/coldfusion-java-pkix-path-building-failed-javasecuritycertcertpathbuilderexception-could-not , that talks about the same exact error that I have. However, it didn't resolve my issue even though I verified that the certificate is already exist in my cacerts file.

I'm working towards using Redis to store ColdFusion sessions in an ElastiCache instance. ElastiCache has encryption options:Encryption at Rest (This works easily.  It is transparent to Redis Connections)Encryption in TransitRedis Auth Ideally both of the last two options should be enabled. Redis Auth can only be enabled when Encryption in Transit is enabled. When Encryption in Transit is enabled, connection timouts occur while verifying the Redis connections. Redis Connection Verification Failed. java.net.SocketTimeoutException: Read timed outFor this connection, I'm using a plain hostname.  I am not modifying the address to create different url in any way.   I've seen some articles about the redis url scheme and using redis:// for plain text connectionsrediss:// for SSL connections.However, when either of these are configured in the coldfusion administrator page, the connection verification throws an error.Redis Connection Verification

We are pleased to announce that we have released the updates for the following ColdFusion versions: ColdFusion (2018 release) Update 9 ColdFusion (2016 release) Update 15   In this update, apart from fixing the security vulnerabilities, we’ve also added SameSite cookie support for cfcookie.   For more information, see the tech notes below: ColdFusion (2018 release) Update 9 ColdFusion (2016 release) Update 15   These updates fix security vulnerabilities that are mentioned in the security bulletin,  APSB20-18.   Please update your ColdFusion versions today. Let us know if you face any issues while installing the updates. Your feedback is essential to further enhancing the product.   We thank you for your continuing support.

For security reasons, I am uploading photos to OUTSIDE the /inetpub/wwwroot/ area on my server. To c:\isolate\Then emailing the admin a copy of the photo for admin to approve photo. How do I get the photo display???Under normal circumstances, I simply do a:<img src="http://www.domain.com/images/photo_name.jpg">But what when it's outside the web root?I have tried what I thought was the obvious<img src="c:\isolate\photo.jpg">I do not get an "error" (a "symbol" top left of the image) but I get a blank. What am I missing?Not really a CF issue, more an HTML one?   

So I can create a CFForm and add 1 record to the database, working good.I am trying to add multiple records, but getting all sorts of issue, seached the internet but coming up empty.I found a javascript that lets me add another row to the form/table, works great in adding the form, however when I try to add the data I am either getting "Variable not defined" or itf I have 2 rows on the form then both datafields gets added to the same cell in the db twice.<FORM><cfform action="add.cfm" method="post"><table id="dataTable"><th><td></td><td>Activity</td></th><tr><td><INPUT type="checkbox" name="chk"/></td><td><cfinput type="text" name="activity" id="activity"></td></tr></table><INPUT type="button" value="Add Row" onclick="addRow('dataTable')" /><INPUT type="button" value="Delete Row" onclick="deleteRow('dataTable')" /><!--- submit button ---><cfinput type="Reset"

I've had essentially the same site-wide missing template and error handler setup since CFMX. However, with CF2018, something isn't right.  I'm using Windows Server 2018, Apache 2.4, and CF2018 (w/update9). In past setups, I've had entries like this for CF site-wide missing template and error handlers:/404error.cfm and /500error.cfm However, the CF administrator says this (even though these files are in the root folder of my site):The file specified as the site wide error handler does not exist. The default error handler will be used until a replacement is created.The file specified as the site wide missing template handler does not exist. The default missing template handler will be used until a replacement is created. Even so, if I request an non-existent cfm page, the expected error page is displayed.  Apache has error settings in httpd.conf for non-cfm pages like this: ErrorDocument 500 /500error.htmlErrorDocument 404 /404error.html However, b

Hi, I have Use J2EE session variables enabled on my server and now want to rotate the corresponding jessionid on login. I used to rotate the inbuilt coldfusion session variables using sessionRotate but now have no need so replaced this in my code with jeeSessionRotate (https://www.petefreitag.com/item/829.cfm).  I have also added the relevant code in onSessionStart but I keep getting an error a few lines after calling jeeSessionRotate. The error happens when I try and set some session variable and I get an "set attribute... session has already been invalidated" error because its trying to use the previous session. I assume the code in onSessionStart would cater for this. Am I missing something along the line here? I'm calling jeeSessionRotate on successful login and later on in that file i'm setting some variables. Seems from the post that all required was to create the new function and add the code to onSessionStart and it should work. Anyo

Running Windows, CF 2016, SQL Server db 2008R2Creating new queries that I need assistance on how to implement CFQUERYPARAM into the code.Below is an example of the code without the CFQUERYPARAM (my calendar dates are a text field, not a date field in the SQL Server db): SELECT date, day FROM calendar   WHERE (calendar.date >= '#todays_date#' and calendar.type = 'B')Is the placement of the CFQUERYPARAM correct on the below?  I haven't been able to find anything showing this type of SQL code.SELECT date, day FROM calendar   WHERE <cfqueryparam value="calendar.date" cfsqltype="cf_sql_char"></cfqueryparam> =                (<cfqueryparam value="'#todays_date#'" cfsqltype="cf_sql_char"></cfqueryparam> AND            calendar.type = 'B')I was able to find documented that you need not use CFQUERYPARAM around constants.Verification wo

I'm trying to find out what Coldfusion actually does when you instantiate or invoke a web service as a coldfusion object, either with the cfobject or cfinvoke tags.  Let's say I have the following code:<cfinvoke webservice="https://#application.webServiceURL#/getArticle.cfc?wsdl" method="getArticle" returnvariable="myArticle" timeout="10"> <cfinvokeargument name="Article" value="3"> </cfinvoke> What's actually happening behind the scenes here?   Is Coldfusion making an HTTPS request?  Is it a GET or a POST request?  Or is something else I don't know about?  What is the functional difference between that syntax versus something like this:<cfhttp url="https://#application.webServiceURL#/getArticle.cfc?method=getArticle&Article=3" method="get" result="resultJSON" timeout="10"> <cfhttpparam type="header" name="Accept" value="application/json" /> </cfhttp> <cfset myArticle= DeSerializeJSON(resultJSON.FileContent

I'm following the example usage as described here https://helpx.adobe.com/coldfusion/using/docker-images-coldfusion.html to create datasources using my setupColdFusion.cfm. I can create datasources just fine but apparently the default datasoruces cfartgallery, cfbookclub, cfcodeexplorer and cfdocexamples are not yet created when the setupColdFusion.cfm is run. Thus, statements like:  datasource.deleteDatasource("cfartgallery");in my setupColdFusion.cfm will result in errors like:  coldfusion.runtime.UndefinedElementException: Element cfartgallery is undefined in a Java object of type class coldfusion.server.ConfigMap.What is the suggested way to delete unwanted datasources at setup?

I have a fixed numeric list, let's say that's a list of numbers from 1 to 50 myfixedlist=1,2,3,4,5 etc.etc I then have another list which contains some of the values in the list above variablelist = 10,12,20,50 I need to create another list that gives me all of the values in myfixedlist that is not in variablelist Does anybody know of an efficient way to create this list in one swoop, using a CF command that doesn't involve a loop and lots of CFIF's

Hello, all, Just poking my head in to see if anyone else has registered for CFD2020?  I'm looking forward to some of the webinars.  Charlie Arehart, Dave Watts, and Pete Frietag, to name a few.  I don't think I'll have time for every webinar, but I'm going to make the best of it, as permitted. V/r, ^ _ ^

We are planning to upgrade to Coldfusion 2018. Is this CF2018 compatible with MS Windows OS 2016?

Hello,We have a server that was running fine...the CF service running as Local System. We renamed the server. Now, with the service running as Local System, we get 500 errors. There is nothing in the CF Error Log. The IIS log looks like this (ip addresses obfuscated):xxx.xxx.xxx.xxx, -, 5/15/2020, 9:52:37, W3SVC1, IPTest, xxx.xxx.xxx.xxx, 400, 122, 86238, 500, 0, GET, /, -, When I run the service under my network account (which is an admin on the machine), everything works great. I added another network account to the machine as an admin, started the service logged on as that user, and get the 500 errors again. Any thoughts? Thank you!Judi

Hi Team,We have our coldfusion application server running standalone in windows server. Now, we are planning to perform containerization. In this approach, we are trying to create windows image with coldfusion.So, can you please confirm whether windows based docker image for coldfusion is available.If available, do we need to get a seperate license for the same. Thanks. 

Hi,Our site was tested by one of the security scanner companies and found known vulnerability. It sounds as "Information Leakage is an application weakness where an application reveals sensitive data".  I need help to update server settings to hide error details, not do display server technlogy details. They run curl command as:    C:\curl\bin\curl.exe -i -s -k -X "GET" -H "Accept: application/json,text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5" -H "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7" -H "Accept-Language: en-us,en;q=0.5" -H "Host: whs'check" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0 Software Security Group" "https://www.[mysite.com]/"    The output is resulting in java stack error as:    <!doctype html><html lang="en"><head><title>HTTP Status 400 – Bad Request</title><