Questions

Every two years I have to create a web form for people to submit online nominations for transportation awards.  Every time I create it, I think I'll be able to reuse it the next time, but too much ends up changing (the questions, security requirements, etc) that I end up having to do more than half of it over.The form has JS validation for all fields for data type, max length, etc, but it also has serverside validation.  If you submit the form with JS disabled and there's an error, the form reloads (populated with the data you just entered) and displays error messages telling you what's wrong, so you can edit the data and resubmit. It's a large form, so I don't want to have more than one copy of it, so my single copy has to:1) Be a new (blank) form.2) Be the form that gets populate from the database when people want to edit their existing nomination.3) Retain the information that someone just entered when there's an error.The way I've been doing this is to <cfparam> all

I recently installed CF10 standalone on IIS 7.5.  I notice a new /jakarta/ virtual folder on the root of all my web sites.  Most are public sites.  This seems like an obvious security issue since anyone could just point to the operating files (.dll's) in that directory.  So my questions are:1) What is this folder for, and what is it doing there anyway?  I've been using CF since v3 and I can't seem to find a quick and easy answer except that it has something to do with Tomcat. 2) What happens if I simply remove it?3) If I can't remove it, how do I hide it to prevent anyone in the public realm from going there?Thanks.

I know there must be an obvious answer, but I can't see it.I have a search form that passes form variables.  Is there a way for the end-user to bookmark the results page since the variables are not in the url?

Hi folks,I posted a comment on the coldfusion blog but didn't get any bites, so I thought I would try here.I have just applied hotfix 009 to my development server and have noticed that the owner of /opt/coldfusion10 and all files and subdirectories have been changed to bin.I had previously gone through the lockdown guide so the group had been webservices. I have an account with ssh access on the box with so I can read/tail log files and look at at config files if needed.I'm wondering if I should go through the post installation instructions of the lockdown guide and change the permissions back to cfusion:webservices? What do you guys think?Cheers,Simon

I have been waitning on hold for some technical service with ColdFusion Builder now for over 2 HOURS and counting

Hi,We are running ColdFusion 9.02 with all the hotfixes and updates and as of late I'm starting to get more "Internal Server Error 500" instead of the standard ColdFusion Errors.  It seems to happen in CF 10 too.It seems like these errors come from the web server (IIS in this case), but it makes it difficult to troubleshoot the problem.  I feel like something changed because I'm seeing more of these rather than getting the typical CF error when something goes wrong.  When I see error 500 I feel like it is more of a web server error, but maybe I'm wrong.I use Firefox a lot and have the Firebug plugin and at times I see the actual ColdFusion error message listed in Firebug, but in my browser window I see "Error 500 internal server error.Does anyone know why I might be getting general Error 500 issues versus seeing the standard CF error messages when something goes wrong?Any help appreciated.

Trying to define ODBC datasource for Excel.  Getting foloowing error:Connection verification failed for data source: ABCDEFjava.sql.SQLException: [Macromedia][SequeLink JDBC Driver]TCP/IP error, connection refused.The root cause was that: java.sql.SQLException: [Macromedia][SequeLink JDBC Driver]TCP/IP error, connection refused.Also, getting same errot for a Microsoft Access datasource.Any suggestions?  Thanks in advance.

We have some sites in production that were working fine before we went from CF8 to CF10.  We upgraded to CF10 yesterday and our data analysts couldn't update the site with HTML files. We were getting a 500 server error without any information to go on. Don't you hate that? We do. At least give me a CF errror I can chase down. Anyway, the first issue was on 3 seperate webpages, Coldfusion 10 not interpreting HTML files when uploaded through a form. The Mime type that was used a day earlier and for the previous 5 years the site has been live is: text/html. It's always worked perfectly. It turns out, when you upgrade to CF10 and you use CFFILE or regular INPUT TYPE="File" with the ACCEPT attribute, you must inlude: application/xhtml+xml to be able to upload an HTML file now.  One word: STUPID! Now here is current issue. In 4 separate webpages, our data analysts cannot update the site with ZIP files. Coldfusion 10 is not interpreting ZIP files. we assume it was a  MIME typ

i am using the following code to open a file on a cfm page ie.,when user clicking on a hyperlink it opens the cfm page and displays the pop up to save the file  <cfif isdefined("url.isemailPopUP") and trim(url.isemailPopUP) eq "Y"> <cfif isdefined("url.fileName")> <cfif #find(url.fileName,#fileWithThePath#,1)#> <cfheader name="Content-Disposition" value="attachment; filename=#url.fileName#"> <cfcontent type="text/plain" file="#fileWithThePath#">  </cfif> </cfif> </cfif>but after the file has been downloaded .it does not displays the contents of the page or  redirects to the same page ....i have used cflocation. but it does not help....

Recently I use cfthread writing a multithread samples. Each thread ask a http request.When I run this cfc file with coldfusion9 on windows, it runs well. Then I run the same cfc file on coldfusion9 on linux(RedHat and centOS), unfortunately, it seems do not work, I found the multi thread do not run parallely, they run one by one. The both coldfusion configuration files are same, and the web server use the built-in one of coldfusion. Is there anyone meet the same probelm? And is there something wrong with cfthread to run on linux? Really need your help. Many thanks!

I am receving contents in japnese language from server , and i am unable to display unicode characters.cfm code:<cfhttp           method="post"          url=" http://localhost/sampleWeb/readLetter.do"          resolveurl="Yes"           charset = "utf-8">           <cfhttpparam type="header" name="accept-encoding" value="deflate;q=0">          <cfhttpparam name="docID" type="FormField" value="595"></cfhttp>     <cfset source="#cfhttp.fileContent#">  <cfprocessingdirective suppressWhiteSpace = "yes" pageEncoding = "utf-8"><cfoutput>          #html_src#</cfoutput>  </cfprocessingdirective>&n

hi allhow can i get of number of total pages in a cfreport?i try with a custom field with count on calc.PAGE_NUMBERbut i obtain this error: Error: calc.PAGE_NUMBER is not a valid ColdFusion expression.any idea?many thanks

Hi,I have a link on another page the take me over to the page that contains the code below:<CFOUTPUT><CFSET FPATH = #GetDirectoryFromPath(ExpandPath("*.*"))#><cfdirectory directory="#FPATH#" name="FILES" action="LIST"><TABLE><CFLOOP Query="FILES"> <TR><TD><CFIF #FILES.NAME# EQ "test.cfm">  <A href="#FILES.NAME#"> #FILES.NAME#  <cfheader name="Content-Disposition" value="attachment;filename=#FILES.NAME#"></A></CFIF></TD></TR></CFLOOP> </TABLE></CFOUTPUT>When I select the test.cfm link, a dialog box appears asking to either Save or Open the file.The issue is the file, test.cfm, contents is not what is being saved or displayed when Open is selected.Is there something I'm missing?Thanks,Mike

I have two requests that I am not sure can be done with CF's spreadsheet functions.  The first is to insert cr/lf after multiple values in a cell.  It is done in Excel with alt-enter.  The other is adding AutoFilter to the header row.Are either of these possible?Thanks

Can someone please give me a definative answer if there is a work around for this bug.     I am creating a new web app on CF8 and IIS 7 in which I would like to utilize IIS for SEO friendly URLS - Inbound and Outbound.I know there are other ways of doing this w/ frameworks, ISAPI etc...   I am not looking to do that. I have inbound rewrite rules working great.   As soon as the outbound rules are enabled in IIS, all requests that go through the CF Server get killed w/ connection reset.   HTML pages will work fine - just anything processed through the CF server is killed.   I have tried many suggestions like:make sure static or dynamic copression is disabled...try disabling and re-enabling compression... set outboundRules rewriteBeforeCache="false"... None of these have worked so far.    I even tried the old hack of adding .htm into the web.xml file for CF server to process - didn't work as anticipated. &nbsp

Just installed Developer edition of CF10.  On a new Windows 2008 server.  Registrar pointing to correct server; everything working OK.  Sort of. When I type in to my browser at the office (no where near Data Center), the domain resolves fine and I get the home.cfm page display just as it should. CF is picking up from IIS the default document home.cfm. The menu and other hyperlinks appear and when I click on them I get a 404.  All the files are there. When I type in the URL www10.mydomain.com  the home page comes up.  When I type in www10.mydomain.com/home.cfm it fails.  Which tells me that IIS is correctly going to the right path and displaying the right file.  In the debugging screen I see where a whole bunch of other files have been included.  Also when I enable directory browsing in IIS I do not get a listing screen ... be nice to see where IIS thinks it is. Why would the inclusion of the actual template send IIS into a tizzy?  I res

I'd like to do the following in CF.I understand the CF vars will be resolved on the server side and clients won't see the CF, but just making sure.I want to do this in my CF pages.<title>#title_info#</title><meta name="keywords" content="#keyword_info#">Then I can update #keyword_info# and #title# elsewhere.(Maybe this is also good for a Google site question, but SEO won't be affected, right?)Thanks for any suggestions/advice.Cheers.

Our plattform is:Coldfusion 9.01Windows 2003IIS 6We did not upload any code or did anything on the server.  Our site was unresponsive and we restarted the server. After that we are getting  following when hitting the pages that try to accdess cookies, also I can't access coldfusion admin that was running on coldfusion built in server.: Any ideas?05/01 17:24:07 error ROOT CAUSE: java.lang.IllegalAccessError: tried to access method coldfusion.runtime.NeoPageContext.isUnderCFThread()Z from class coldfusion.runtime.CookieScope          at coldfusion.runtime.CookieScope.bindName(CookieScope.java:90)          at coldfusion.runtime.CookieScope.bindAsScaler(CookieScope.java:81)          at coldfusion.runtime.NeoPageContext.SymTab_setSplitNameInMap(NeoPageContext.java:1389)          at coldfusion.runtime.Neo

We recently applied the APSB13-10 update to CF9 and have run into issues with applications.  With the setting defaulted only to 100, compared to tomcat's 10,000 max post param default, I am wondering what the reason behind the 100 default is and what is considered the max safe value for this setting.  There are no specific details in the CVEs or the APSB-13-10 bulletin that seem to indicate what this is for.  Also the details in the adobe bulletin versus the CVEs seem to contradict each other murkying exactly what the vulnerabilities are that are being patched.  The descrepency I am refering to is in the adobe bulletin you state "This hotfix resolves an information leak that can occur in certain multi-threaded use cases. This issue is not exploitable remotely (CVE-2013-1387)."  However when looking at that particular CVE it says "Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Updat

Hello,I am running a local CF10 dev server and and full version on my test server.  Both have all of the latest updates. I moved a template from my local instance to my test server and CFFLUSH does not output at the set interval.  Is there a setting in the administrator that much be put in place for this to work properly?

Currently have a client with SQL 2008 and ColdFusion 9.  They are upgrading to SQL 2012. Do they need to upgrade CF to 10? Or will 9 work?

Is it possible to upgrade from 7 to 9 instead of having to purchase 10?  I was not able to find a way to purchase 9 on the Adobe website.

This question was posted in response to the following article: http://help.adobe.com/en_US/ColdFusion/10.0/Developing/WSc3ff6d0ea77859461172e0811cbec0c35c-7fd5.html

There are some organizations like DISA/DOD that require when using IIS 7/7.5/8 that you set the Request Filtering -> File Name Extensions -> Edit Features Settings -> Allow unlisted file name extensions to be disabled.  This then forces you to add every single file extension type needed as an Allow entry in the File Names Extensions section for them to run.  I wanted to make this post because it's easy to miss one of the items required which will then result in the system not functioning as expected.  There are several obvious ones as without them allowed the CFIDE will not load at all.  However if you miss the .js item you run into issues.  The system will continuously inform you that your password is invalid when it really is not.  Unlike all of the others the lack of .js will not show itself visually except that all menu items are pre-colapsed and you can't login via username/password making you have to bypass security.Here is the list of items

Hi everyone,I have a problem while using the function deserializeJSON.I have a request looking like this :Request: {   'config': {   'bgSubtractor': {   'config': {   'learningRate': 1e-06,                                                    'mogHistory': 52,                                                    'mogSigmaSquared': 80.456140350877},                 &n