Hello,Here is my query<cfquery name="myQuery" datasource="myDataSource">SELECT *FROM TableWHERE myDate BETWEEN ThisDate AND ThatDate</cfQuery>I wonder if I need to use <CFQUERYPARAM> at WHERE to avoid SQL Injection please?Thanks for adviceHung Pham

9243

4 years ago

Matthew22377144yk0gKnown Participant

Questions

Security scans flagging older versions of log4j

Our IT department runs security scans using tenable and they are flagging older versions of log4j on our coldfusion servers.  We are running CF2018 patch 13, and have removed all our old hotfix history - the only older versions of log4j on our server now are log4j-1.2.15 in Coldfusion2018\cfusion\lib and log4j-1.2.17 in Coldfusion2018\cfusion\jetty\lib\ext.  Can we confirm whether or not these versions of log4j are vulnerable, and, if so, if there's any mitigation strategies that we can use to make sure these two log4j versions are secure?  Is there any plan to replace these with log4j 2.17?

36953

4 years ago

CFML22536058b50xParticipant

Questions

Row color is not rendered in CFGRID in CF2021

Row color displayed in red in CF2016. On migrating to CF2021, it is rendering default color.Please find attached code snippet for your reference.Please help. Thank you. <cfset myQuery = QueryNew("Name, Time, Advanced", "VarChar, Time, Bit")>  <cfset QueryAddRow(MyQuery, 2)>  <cfset QuerySetCell(myQuery, "Name", "The Wonderful World of CFML", 1)> <cfset QuerySetCell(myQuery, "Time", "9:15 AM", 1)> <cfset QuerySetCell(myQuery, "Advanced", False, 1)> <cfset QuerySetCell(myQuery, "Name", "CFCs for Enterprise Applications", 2)> <cfset QuerySetCell(myQuery, "Time", "12:15 PM", 2)> <cfset QuerySetCell(myQuery, "Advanced", True, 2)> <html> <head> <script language="javascript"> var gridName= "WorkListGrid"; var init = function ()

1300

4 years ago

sne_paulInspiring

Questions

ColdFusion generated wsdl showing axis prefix namespace

Hi,I have re-installed the ColdFusion 2016 Development versionwith update 16.My all existing Web Service (WSDL) format is changed.Before  :<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:mob="http://mobservice.itcssap"><soapenv:Header/><soapenv:Body><mob:TOKENRequest><mob:valUserName>?</mob:valUserName><mob:valPassword>?</mob:valPassword><mob:valDevUniqID>?</mob:valDevUniqID><mob:valDevName>?</mob:valDevName><mob:valDevPushNotif>?</mob:valDevPushNotif></mob:TOKENRequest></soapenv:Body></soapenv:Envelope>After Re-Install :<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:axis="http://ws.apache.org/axis2"><soap:Header/><soap:Body><axis:TOKENRequest><axis:valUserName>?</axis:valUserName><axis:valPassword>?</axis:valPassword><!--Optio

4681

4 years ago

MerchlinskiInspiring

Questions

<cfhtmltopdf> problem

I'm trying to get <cfthmltopdf> to work and am having problems.  We're running Coldfusion 11, on Red Hat 7.2.  We've done a fresh installation of CF and are sure that PDFG is installed.Following these steps ColdFusion Help | PDF Generation in ColdFusion , all additional packages are installed on the server except ias32-libs, which my sysadmin tells me does not exist.  Fonts have been extracted in the /usr/share/fonts directory.  I am able to select the 'Verify All Service Managers' button in the CF administrator on the PDF Service page.  The Connection Status returns as OK.I'm trying to run a simple test and am getting an error.<cfhtmltopdf>This is today: #now()#</cfhtmltopdf>Error occurred while generating PDF.coldfusion.document.webkit.PDFgErrorHandler$ServiceManagerConversionException: Error occurred while generating PDF.at coldfusion.tagext.lang.HtmlToPdfTag.handleRetryError(HtmlToPdfTag.java:1509)at coldfusion.tagext.lang.HtmlToPdfTag.han

23723

4 years ago

davidihillParticipant

Questions

Log4j 2.17 breaks cfhtmltopdf

When I updated Log4j to 2.17 as recommended (https://helpx.adobe.com/coldfusion/kb/log4j-2-16-vulnerability-coldfusion.html), cfhtmltopdf immediately started throwing a generic "server error". Anyone else encounter this? Workarounds? Thanks.

2163

4 years ago

NikhithaParticipant

Questions

Log4j vulnerability on CF 2016

we are using CF2016 which uses log4j 1.2.15 and 1.2.17 versions.  I would like to confirm whether the upgrade of Log4j jar to 2.17 version is still required. Also if we upgrade the jar file to 2.17 will that be compatible with CF2016. 

5031

4 years ago

Pete220652393l9rKnown Participant

Questions

strange behavior with check browser link on default CF error page

so one of developers point this out - and it seems not to be updated related.When you get the default error page on CF and under vistor information there is a link "Check Browser"it goes to the following link "https://user-agents.me/test/user-agent-parser") DO NOT CLICK on the link t b basically goes to a dating site (for lack of a better word). I thought this was a result of the recently installed Update 3  but I reverted to a previous snap and does not seem to be the case -  

5413

4 years ago

imad22375965ncv4Inspiring

Questions

Error Coldfusion 2021

Hello ,:) I have a problem with my configuration of coldfusion. I have this same error : Thu Dec 23 15:34:05 2021] [6687:140487759288064] [error] ajp_service::jk_ajp_common.c (3021): (cfusion) connecting to tomcat failed (rc=-3, errors=161, client_errors=0).[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] jk_open_socket::jk_connect.c (816): connect to 127.0.0.1:8020 failed (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] ajp_connect_to_endpoint::jk_ajp_common.c (1158): (cfusion) Failed opening socket to (127.0.0.1:8020) (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [error] ajp_send_request::jk_ajp_common.c (1829): (cfusion) connecting to backend failed. Tomcat is probably not started or is listening on the wrong port (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] ajp_service::jk_ajp_common.c (3000): (cfusion) sending request to tomcat failed (recoverable), because of error during request sending (attempt=2)[Thu

329531

4 years ago

David22437348wquzParticipant

Questions

ColdFusion site typo

Just letting someone @Adobe know there's a typo on: https://www.adobe.com/products/coldfusion-enterprise.html(bottom of page)  

1761

4 years ago

brents78709329Inspiring

Questions

SOLR cfsearch for CUSTOM2 integer value

Our SOLR database has records to delete that are best accessed by the CUSTOM2 field.  That field's been renamed to CUSTOM2_I and contains integer values. <cfsearch ...criteria = "custom2_i=32863"> doesn't filter any rows out.I'm hoping there's a syntax that will work. Thank youBrent 

1331

4 years ago

pham_mnKnown Participant

Questions

Clean up/remove unused tables

Hello all:I am assigned to clean up or remove some unused tables in our Oracle database.  I have never done it before therefore I am not sure what is best approaching. I asked my DB administrator if we could generate the report from backend that shows the statistics of each table.  The statistics should include the date and time when it hit last time.  He said they "scan" the DB daily, so all tables get hit daily.I wonder if we can approach the task using frontend via ColdFusion.  I wonder if there is anyone out there who has done it before.Thank you very much for your timeHung Phampham_mn@yahoo.com

4052

4 years ago

michaelh53276323Inspiring

Questions

CFSPREADSHEETWRITE needs up to 20th more time after install CF2021

Hi folks,I need help to get the right group to place my problem.We had several installations of CF2016 ENTERPRISE. Now we migrate to CF2021 ENTERPRISE on new server installation. In CF2016 CFSPREADSHEETWRITE needs 10 sec. to create XLSX file with 3.000 rows and 16 columns.In CF2021 the same code needs 120 sec. to create same XLSX file. I write these problem with detailed documentation to cfinstal@adobe.com at 25th of Nov. 2021 but get no reply.This is a show stopper for go live. I need a hint where is the right place to put this problem? Would be great if anybody can help. Thx in advanced. Stay safe!

14312

4 years ago

michaelr87782527Participant

Questions

XMPP Gateway

It seems after latest updates were applied to my Coldfusion 11 server my XMPP gateway stopped connecting. In my exception log I get:"coldfusion.eventgateway.im.IMGateway$IMGatewayMissingLicenseException: The JBuddy library does not appear to have a license for XMPP".It was working great before the updates.

7361

4 years ago

2CharlieInspiring

Questions

Calling LoadLibraryEx on ISAPI filter “E:\ColdFusion10\config\wsconfig\2\isapi_redirect.dll” failed

Why am I getting this error when I've used the wsconfig within my "site-name" folder to bind my site to ColdFusion? It keeps looking for the isapi_redirect.dll inside of wsconfig\2\ instead wsconfig\1\ folder. Where do I look to make this correction?

63251

4 years ago

richardm66198703Participant

Questions

LOG4J ColdFusion 2018 mitigation vulnerability

We've applied the Log4js mitigations outlied in https://helpx.adobe.com/coldfusion/kb/log4j-vulnerability-coldfusion.html and when Update 13 for Coldfusion 13 was available we applied it. I'm now getting warning of a vulnerability for log4j core 2.9.0 installed vi a the mitigation and advised to upgrade to 2.15 or later. Any guidance on either backing out or or upgrading the mitigaation installed via https://helpx.adobe.com/coldfusion/kb/log4j-vulnerability-coldfusion.html to prevent the new vulnerabilities?

1601

4 years ago

paul_durrantInspiring

Questions

Check if Windows server using IIS or Apache

How can I check if the Windows Server running ColdFusion is using IIS or Apache? I think we are running IIS since : IIS installedChecked Task Manager and cannot see apache or httpd entries.Looked under cfroot\config\wsconfig\1 and the README file contains : This file was created by the ColdFusion Connector Installer.Do not delete this directory or the files in it because your web serverconfiguration files contain references to the files in this directory.web server: IISweb server version: 10.0IIS web site: All (0) Is this enough proof or are there more checks I can do?

23122

4 years ago

Pete220652393l9rKnown Participant

Questions

SSO after Update 3 - Please help

Hello Community - need help badly as I am more of a infrastructure person then coder  We were in the process of setting up SSO with Azure as the identity provider - we had  it working with the simplest of code:  (basically from the Adobe help page)<cfset config = {idp = {name = "ptestidp"},sp = {name = "testsp"},relayState = "cart"}><cfset InitSAMLAuthRequest(config)> since the update I get the following -  line 11 being the call to initialize the azure call  Error Occurred: 12/20/2021 07:48:07 PM     Error Type: java.lang.NullPointerException     Error Message:     Error Detail:     Template: E:\internal\betahost.mycompany.com\pindex.cfm     Line: 11     Column: 0 

5422

4 years ago

Igor223670189ql7Participant

Questions

Is it safe to delete Coldfusion hotfix update backups?

An older version of log4j file in ..\cfusion\hf-updates\hf-2018-00003-314033\backup\ was flagged as a security risk in a recent Tenable report. Is it safe to delete the backup files? Will it break the Coldfusion update history, or cause any issues with the future updates?

4401

4 years ago

Saurav_GhoshCommunity Manager

Questions

ColdFusion and Log4J Vulnerability

Adobe engineering and security have been hard at work determining which versions of ColdFusion might be affected and what, if any, workaround/mitigation steps are available.   For the mitigation steps, see Log4J vulnerability on ColdFusion. It will be updated if/as things change. This article contains information related to ColdFusion 2021, ColdFusion 2018 as well as ColdFusion 2016. There are also sections concerning the Performance Monitoring Toolset for 2021/2018 and API Manager.   We shall be releasing a patch on 12/17 for the same. In the meantime, follow the steps mentioned in the document. If you need more information, please contact us or reply in this thread.

4753

4 years ago

woddelParticipating Frequently

Questions

coldfusion 2021 apache 2.4 win64 connector not working 'service unavailable'

hello all.i am at a loss...  i installed a vanilla windows 2019 server, coldfusion 2021 trial and apache 2.4.46 win64 (also vanilla).  i then run the coldfusion connector wizzard and that does what it does and says it's done afterwards.when i want to connect to a website then, i only get "Service Unavailable - The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later."i checked, also using https://helpx.adobe.com/coldfusion/kb/coldfusion-apache-manual-connector-configuration.html and basically, all seems ok:- mod_jk.conf, workers.properties and mod_jk.so is in apache/conf directory- the respective two lines are in http.conf:     Include "C:\Apache24\conf\mod_jk.conf"     Include "C:\ColdFusion2021\config\wsconfig\1\mod_jk_vhost.conf"- apache also starts and shows 'Apache/2.4.46 (Win64) OpenSSL/1.1.1h mod_jk/1.2.46' in services- but mod_jk.log in c:\ColdFusion2021\co

89491

4 years ago

RejithRKrishnanParticipant

Questions

Coldfusion 2018 Clustered Schedule Task (MySQL Database) not working after Update 13

We updated to update 13 (from update 11). The scheduled tasks are run on a cluster with MySQL. After the update all clustered schedule tasks disappeared. When tried to disable cluster and enable by selecting datasource and try to submit changes, it shows up with the following wierd error messages. I have verified scheduled task DSN and its working.   

900

4 years ago

ZNBInspiring

Questions

Textes avec accents - Texts with accents

Bonjour,Que ce soit en français ou dans d'autres langues, les accents posent un problème.Je passe par :<!DOCTYPE html public "-//W3C//DTD HTML 4.0 Transitional//EN">mais existe-t-il une autre définition pour ne pas passer par un parser ... qui marche mal.Merci par avance Hello,Whether in French or other languages, accents are a problem.I go by :<! DOCTYPE html public "- // W3C // DTD HTML 4.0 Transitional // EN">but is there another definition not to go through a parser ... which works badly.thanks in advance

5941

4 years ago

shawnm77282953Participant

Questions

CFScript deprecation question

In this post about the 2021 release (https://helpx.adobe.com/coldfusion/deprecated-features.html) it is mentioned that "cfscript support for script-based CFCs, such as query and storedproc." I can't find anything that clarfies what that means. My organization has applications that use pure script based CFCs and ones that mix tags and script inside CFSCRIPT tags. What precisely is being deprecated? Thanks,

Anonymous

Hello All- I'm trying to configure a webservice to work over https w/o any luck. The web server has ssl installed and the server housing the webservice also has ssl installed. I configured the directory containing the webservice to require ssl, then tried to update the webservice registration in CF Admin and it failed. I am able to view the wsdl via https. I guess my question is, what is required to make a webservice run over ssl? It appears that simply requiring 128-bit encryption on the directory containing the webservice does not work. TIA, Aaron

7412

4 years ago