Questions

How can I prevent someone from downloading the web.xml file using a Nessus exploit. I do have access to the ColdFusion administrator and enabled several security settings but WEB-INF/web.xml can still be accessed.I have spent the last 2 hours trying to find the solution online.Sorry if that is an obvious setting but I don't know much about ColdFusion as I am a IBM Notes administrator...

Using ColdFusion Builder Version: 3.0.0, Build: 292922I am having a problem with file encoding.  I have set the encoding to UTF-8 everywhere I can find but files are still in ANSI and words like résumé are saved as Résumé.  You can actually see the corrupted text if you look at the file with Notepad so it's not a content encoding display issue with http headers.  Brand new blank .cfm files created from the "New..." dialog in CF Builder seem to begin as UTF-8 but switch to ANSI if I re-save them.I have set UTF-8 in the following locations in CF Builder, none of which seem to help:Window > Preferences > General > Content Types > Text:  Default encoding set to "UTF-8" in field at bottomWindow > Preferences > General > Workspace > Text File EncodingFrom Navigator window, R-Click my project and click "Properties", Resource, under Text file encoding set to UTF-8 (tried to inherited and explicitly set under "other")Edit > Set EncodingIs there a

I inheirited links ending with .jsp.  The domain is now pointing to my cf9 standard / iis7.5 web server. When I tried to open the my version of the .jsp file or perform a url rewrite, I recevied an error that JSP is not licenced on Standard edition.However, I don't want to run a jsp as a jsp template.  I would like it to run as a .cfm file.  Or ignore the file completely so I can use a url rewrite to point to my cfm file.I tried to disable JSP from the default-web.xml files.  I am now getting an error 403:Forbidden. What else needs to be done to stop Coldfusion from recognizing jsp files?Thanks,Gary

I asked this question over in stack exchange as well but I'm curious to hear the opinions from my fellow CF developers to see if anyone has any insight on this.  If you'd like to chime in on the stack exchange thread instead, click here.I'd like to know the correct/optimal way to create a database schema for a ColdFusion based online store that allows customers to pay their invoices in full or in X number of monthly installments.I've played around with a couple different ways of accomplishing this and the first issue that came up for me was whether the scheduled payments should be calculated on the fly (by ColdFusion) or whether each scheduled payment should exist as a record in a database.I'm going to assume that the best-practices way would be to have a separate database table to store these scheduled payments (even if it's just one record for a pay-in-full situation). Here's the database schema I have been playing around with:The current plan is to create a single invoice when

I know little to nothing about coldfusion. I need to create a form. The info the user enters needs to be encrypted or secure somehow, and this info will be emailed to it's destination. Is this even possible? 

Using CF 11 on Windows 10 with MS SQL Server 2014When I try to connect to my database, I get the errorThe root cause was that: java.sql.SQLInvalidAuthorizationSpecException: [Macromedia][SQLServer JDBC Driver][SQLServer]Login failed for user 'admin'.I have opened TCP/IP and Port 1433.The settings in the CF connection panel are the same as I had before with Win 7, CF 10 and SQL Server 2008R2.Can anyone give me a clue as to what else I need to do?Doug

We're running CF9 and recently upgrade to Java 1.7 from 1.6, all of a sudden we're seeing something very strange.  We're returning query results and for each row we're converting it to a struct (to return an array of structs) using a UDF method (the UDF library is loaded in the application scope), queryRowToStruct().  Each call to this method is taking 1000 ms. Previously it was taking 15-30 ms.The weird thing is, that restarting the CF service brings it back down to 15-30 ms (which we discovered after rolling back to Java 1.6 which also reduced time down to 15+ ms, and then back to 1.7 and it was still at 15-30 ms).  The UDF is pretty simple (it is included below), but the array and string functions appear to be running super slow. What could cause this??The UDF code: function queryRowToStruct(query,row,cols,padyesno){         //a var for looping         var ii = 1;      &nb

I have installed 64 bit versions of SQL server express 2014 and ColdFusion 11 developer edition 64 bit in a Windows 8.1 machine that never had earlier versions of these applications installed.  I successfully created the SQL Server ODBC driver (64 bit) in Windows.  I then tried to create in ColdFusion the ODBC Socket connector.  It recognized the existence of the Windows ODBC configurations (it was in the drop down box).  Yet when I tried to complete the process I got the following error message:java.sql.SQLException: [Macromedia][SequeLink JDBC Driver][ODBC Socket]internal error: The specified DSN contains an architecture mismatch between the Driver and ApplicationThe root cause was that: java.sql.SQLException: [Macromedia][SequeLink JDBC Driver][ODBC Socket]internal error: The specified DSN contains an architecture mismatch between the Driver and ApplicationThank you in advance for any help!

Hello, all,I'm trying to implement a process for missing templates, so that the user will never see a CF error message for missing pages.The problem is that even though it will trigger my onError function, it's still outputting CF errors at the bottom of the page.Here is my onMissingTemplate() function: <cffunction name="onMissingTemplate" returntype="boolean" output="false" >     <cfargument name="template" type="string" required="true" />     <cfset this.onRequestStart(arguments.template) />     <cfset this.onRequest(arguments.template) />     <cfreturn true /> </cffunction> How can I get this to stop processing after displaying the onError page, so that it won't show the CF error mesages?V/r,^_^

Cannot download ColdFusion Builder trial edition.  Akamai works, but hangs when it starts the download:Using the help, it says to click the link to download without Akamai, but there is no such link.  About to give up even trying this product with the trouble I've had even downloading the trial.Thanks

Is there a way to connect to an IRC server with ColdFusion? If so any example to get inspired!? thanks!

All other datasource connections are verified OK except one connection to SQL Server and on verification it gives an error Login failed for user".I'm using mixed mode authentication in SQL Server. Can 't seem to think what else to get rid of the error.Please advise,Thanks,Jyoti.

I installed ColdFusion builder and set up the administrator page. I accessed it using http://127.0.0.1:8600/CFIDE/administrator/index.cfm. I logged out.when I attempted to get back in I got "cannot display page" error in the browser.I have not changed any configurations on the machine I installed it on. It does have IIS on it but I shut IIS down.This is frustrating... any suggestions?

We have many existing scripts that don't seem to behave in ColdFusion Builder 3. Wherever we have jQuery selectors that use the id selector $("#..."), the function collapsing stops on the first line where the id selector is used. It becomes annoying since the remainder of the file will not collapse. I'd prefer not to have to wrap every selector in cfoutput so I can escape the pound sign.The javascript is being saved in cfsavecontent tag. Below is a simplified code snippet. Function collapsing stops at the bold line and the remainder of the file does not collapse.<cfcomponent displayname="content">...<cffunction name="getHomeContent" returntype="string"><cfset var html = "" /><cfsavecontent variable="html">...<script>$('#myid').change(function() {$('#myid-nav').val($('#myid').find(':selected').val());});</script>...</cfsavecontent><cfreturn html /></cffunction>...</cfcomponent>

Hi Charlie,How do you show the Source Firefox IE button at the bottom??Message was edited by: Carl Von Stetten after branching from a previous topic. Changed title to match new question.

Hi All,I have a formatting issue when outputting RSS feeds.Here's my page: http://www.ukagriculture.com/farming_news/farming_news_feeds.cfm<br /><h1>Economist - Agriculture</h1><hr / style="width:100%"><cfset rssUrl = "http://www.economist.com/topics/agriculture/index.xml"><cffeed action="read" source="#rssUrl#" query="entries" properties="info"><cfoutput query="entries" maxrows="5"><br /><a href="#rsslink#" target="new"><strong>#title#</strong></a> - <span class="xxsmall">#publisheddate#</span><p>#content#</p></cfoutput>I've been trying to find a way to clean up the results and display images in the feed, any suggestion gratefully received.CheersTrevor

HiI wanted to upgrade our Coldfusion 10 to 11. We are using MongoDB as additional database, so we use Java MongoDB driver. And until this point everything is fine & everything works.All data to Mongo and from Mongo are in JSON format. Problem we have is that serialization changed in CF 11 what broke all queries.Here is an example:CF10: { "VAL1" : 0 , "VAL2" : { "$ne" : false} , "VAL3" : true , "VAL4" : { "$gt" : 5}} CF11: { "VAL1" : "0" , "VAL2" : { "$ne" : "false"} , "VAL3" : "true" , "VAL4" : { "$gt" : "5"}}Problem is that 0 != "0", true != "true", 5 != "5". Mongo can't compare string with int or bool (same issue with floats)When i put data to database have same issue. Something that was before integer or bool now is string.I found a way to make it work Javacast('int',value), Javacast('boolean',value) but changing it in every place in big project will take far too much time. Is there a way to make SerializeJson work like it worked before? Why it changes types now?

Can ColdFusion v.11 Standard be installed and run on a Windows Virtual Server, or must it be installed on a Physical Server ?

I have tried to get this to open within the internal browser and even with the settings, I can't remove the check mark for the default browser, not sure what I'm missing here.

I'm running CF 9,0,0,251028 on Server 2008 R2 x64 with IIS 7.5. I installed APSB13-10 without any issues. I then installed APSB13-03 and after doing so the CF Administrator page returned a 500 Internal Server error. My CF websites continued to function. I rolled back and everything started working again. The problem is I am required to install this patch due to network security requirements. Is there anything I can do to get the Admin page to function after installing APSB13-03? Or am I missing something?I am a little bit confused with the complexity of installing CF updates as I already have hf900-00010.jar and hf900-00013.jar files in my {ColdFusion-Home}/WEB-INF/cfusion/lib/updates folder, and this update puts an hf900-00009.jar in there, which seems like it might be an older file. Currently everything is working since I rolled back, but I have to install this update and after troubleshooting the 500 error I finally had to roll back. I have no idea what could be happening. Thank you

Is something like this planned as an update? When?Currently we have to write really ugly code (script and tag code mixed) to get some legacy module files loaded into our components. I'm not talking about few files here, we have been using CF since version 5 and refactoring everything isn't an option.Only workaround seems to create the ModuleTag java object in the coldfusion.tagext.lang package and call out the module that way. This is really hacky though since cfusion.jar can have class updates. Or perhaps there are some better solutions?

Is anybody using Oracle Dead Connection Detection with ColdFusion? thanks,Chris(also posted to StackExchange)

Is there a way to get ColdFusion Builder 3 to run using Java 8?

Could you please tell me how can I download ColdFusion_11_WWEJ_win64.exe

Running CF Version  9,0,1,274733 One of our error reports showed:----------------------------------------------------------------Error Page: /CFIDE/beta.cfmQuery String: page=quicklyHTTP Referer: [removed for this post]/CFIDE/beta.cfm?page=quicklyDiagnostics: ColdFusion could not delete the file C:\ColdFusion9\runtime\servers\coldfusion\SERVER-INF\temp\wwwroot-tmp\session_log0.txt for an unknown reason.----------------------------------------------------------------This pointed us to that beta.cfm file that was somehow put into the CFIDE root.  No FTP access to that directory and they have cleared the CF logs so no real record of what might have been done.  Did find a few CF files that had been modified around the same time but nothing in them seemed out of the ordinary.  Have removed access to them for now to be safe.Any suggestions on where to start to figure out how they got that file into the CFIDE root?  I do have the file (moved out of CFIDE) which I can