APPLICATION variable is undefined when site is accessed from outside LAN

Question

Windows server 2003, coldfusion 9I recently dropped AT&T (yeah!) but was assigned a newstatic IP from our new internet service provider (uh oh…).We use a browser-based medical record system (old and nolonger supported) for a small medical practice. Inside the office LAN, it worksfine. I reconfigured our router with the new IP info and we can access theinternet fine. I port-forwarded incoming traffic to the server correctly, butwe can no longer log in to the site from outside the LAN. The login page shouldbe the first page to open (login.cfm).I can reach the server from outside, but receive acoldfusion error page which states “element COMPANYNAME is not defined inAPPLICATION”. “CompanyName” is just a part of the title of the login page – andthe login page is therefore never created.As you can tell from my question, I know next to nothingabout CF (or javascript, or even html for that matter). But I don’t understandwhy the site is no longer happy about a request from the router simply becausethe static IP for the outside world has changed. Isn’t an APPLICATIONscope variable set from within the server? How do the LAN machine browserssucceed where the outside browsers do not?I am happy to be ridiculed for my ignorance as long as Ilearn something. Thanks.

Carl Von Stetten · Accepted Answer

WOW, a lot of red flags went up with the first two sentences. Anytime you are dealing with medical records, there are strict legal requirements for security of that information (HIIPA in the USA, if that is where you are). CF9 and Windows 2003 are both no longer supported by Adobe and Microsoft, respectively, and are full of security vulnerabilities. Before you even consider resolving the issues you have, please consider the potential for a breach of the medical data involved and upgrade to versions that are actively supported and patched.

That said, it's hard to say without seeing any of your code. Check IIS to see if the site's bindings are set to a specific IP address or any domain/address filters set to restrict or alter incoming traffic. Also, review your Application.cfc/Application.cfm to see if there is any conditional logic based on handling remote IP addresses.

-Carl V.

novicewlm · Answer

Since I didn’t develop the website (I am only tasked with “fixing
the problem”), it will be too long a learning curve to keep troubleshooting.
Also, the only reason to keep the site alive is for our transcriptionist to
upload files. The cost of keeping a secure internet connection just for that
convenience is prohibitive. I have closed the ports; we will make those uploads
on physical media.

I wish to thank the responders. Internet communities like
this are very valuable. Sometimes a specific diagnosis remains elusive, but discussing
the problem makes the overall solution clear.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded