Questions
Actividad reciente
Hello,Here is my query<cfquery name="myQuery" datasource="myDataSource">SELECT *FROM TableWHERE myDate BETWEEN ThisDate AND ThatDate</cfQuery>I wonder if I need to use <CFQUERYPARAM> at WHERE to avoid SQL Injection please?Thanks for adviceHung Pham
Our IT department runs security scans using tenable and they are flagging older versions of log4j on our coldfusion servers. We are running CF2018 patch 13, and have removed all our old hotfix history - the only older versions of log4j on our server now are log4j-1.2.15 in Coldfusion2018\cfusion\lib and log4j-1.2.17 in Coldfusion2018\cfusion\jetty\lib\ext. Can we confirm whether or not these versions of log4j are vulnerable, and, if so, if there's any mitigation strategies that we can use to make sure these two log4j versions are secure? Is there any plan to replace these with log4j 2.17?
Row color displayed in red in CF2016. On migrating to CF2021, it is rendering default color.Please find attached code snippet for your reference.Please help. Thank you.<!--- Create a new three-column query, specifying the column data types ---> <cfset myQuery = QueryNew("Name, Time, Advanced", "VarChar, Time, Bit")> <!--- Make two rows in the query ---> <cfset QueryAddRow(MyQuery, 2)> <!--- Set the values of the cells in the query ---> <cfset QuerySetCell(myQuery, "Name", "The Wonderful World of CFML", 1)> <cfset QuerySetCell(myQuery, "Time", "9:15 AM", 1)> <cfset QuerySetCell(myQuery, "Advanced", False, 1)> <cfset QuerySetCell(myQuery, "Name", "CFCs for Enterprise Applications", 2)> <cfset QuerySetCell(myQuery, "Time", "12:15 PM", 2)> <cfset QuerySetCell(myQuery, "Advanced", True, 2)> <html> <head> <script language="javascript"> var gridName= "WorkListGrid"; var init = function ()
Hi,I have re-installed the ColdFusion 2016 Development versionwith update 16.My all existing Web Service (WSDL) format is changed.Before :<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:mob="http://mobservice.itcssap"><soapenv:Header/><soapenv:Body><mob:TOKENRequest><mob:valUserName>?</mob:valUserName><mob:valPassword>?</mob:valPassword><mob:valDevUniqID>?</mob:valDevUniqID><mob:valDevName>?</mob:valDevName><mob:valDevPushNotif>?</mob:valDevPushNotif></mob:TOKENRequest></soapenv:Body></soapenv:Envelope>After Re-Install :<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:axis="http://ws.apache.org/axis2"><soap:Header/><soap:Body><axis:TOKENRequest><!--Optional:--><axis:valUserName>?</axis:valUserName><!--Optional:--><axis:valPassword>?</axis:valPassword><!--Optio
I'm trying to get <cfthmltopdf> to work and am having problems. We're running Coldfusion 11, on Red Hat 7.2. We've done a fresh installation of CF and are sure that PDFG is installed.Following these steps ColdFusion Help | PDF Generation in ColdFusion , all additional packages are installed on the server except ias32-libs, which my sysadmin tells me does not exist. Fonts have been extracted in the /usr/share/fonts directory. I am able to select the 'Verify All Service Managers' button in the CF administrator on the PDF Service page. The Connection Status returns as OK.I'm trying to run a simple test and am getting an error.<cfhtmltopdf>This is today: #now()#</cfhtmltopdf>Error occurred while generating PDF.coldfusion.document.webkit.PDFgErrorHandler$ServiceManagerConversionException: Error occurred while generating PDF.at coldfusion.tagext.lang.HtmlToPdfTag.handleRetryError(HtmlToPdfTag.java:1509)at coldfusion.tagext.lang.HtmlToPdfTag.han
When I updated Log4j to 2.17 as recommended (https://helpx.adobe.com/coldfusion/kb/log4j-2-16-vulnerability-coldfusion.html), cfhtmltopdf immediately started throwing a generic "server error". Anyone else encounter this? Workarounds? Thanks.
we are using CF2016 which uses log4j 1.2.15 and 1.2.17 versions. I would like to confirm whether the upgrade of Log4j jar to 2.17 version is still required. Also if we upgrade the jar file to 2.17 will that be compatible with CF2016.
so one of developers point this out - and it seems not to be updated related.When you get the default error page on CF and under vistor information there is a link "Check Browser"it goes to the following link "https://user-agents.me/test/user-agent-parser") DO NOT CLICK on the link t b basically goes to a dating site (for lack of a better word). I thought this was a result of the recently installed Update 3 but I reverted to a previous snap and does not seem to be the case -
Hello ,:) I have a problem with my configuration of coldfusion. I have this same error : Thu Dec 23 15:34:05 2021] [6687:140487759288064] [error] ajp_service::jk_ajp_common.c (3021): (cfusion) connecting to tomcat failed (rc=-3, errors=161, client_errors=0).[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] jk_open_socket::jk_connect.c (816): connect to 127.0.0.1:8020 failed (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] ajp_connect_to_endpoint::jk_ajp_common.c (1158): (cfusion) Failed opening socket to (127.0.0.1:8020) (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [error] ajp_send_request::jk_ajp_common.c (1829): (cfusion) connecting to backend failed. Tomcat is probably not started or is listening on the wrong port (errno=13)[Thu Dec 23 15:34:05 2021] [6688:140487964980992] [info] ajp_service::jk_ajp_common.c (3000): (cfusion) sending request to tomcat failed (recoverable), because of error during request sending (attempt=2)[Thu
Just letting someone @Adobe know there's a typo on: https://www.adobe.com/products/coldfusion-enterprise.html(bottom of page)
Our SOLR database has records to delete that are best accessed by the CUSTOM2 field. That field's been renamed to CUSTOM2_I and contains integer values. <cfsearch ...criteria = "custom2_i=32863"> doesn't filter any rows out.I'm hoping there's a syntax that will work. Thank youBrent
Hello all:I am assigned to clean up or remove some unused tables in our Oracle database. I have never done it before therefore I am not sure what is best approaching. I asked my DB administrator if we could generate the report from backend that shows the statistics of each table. The statistics should include the date and time when it hit last time. He said they "scan" the DB daily, so all tables get hit daily.I wonder if we can approach the task using frontend via ColdFusion. I wonder if there is anyone out there who has done it before.Thank you very much for your timeHung Phampham_mn@yahoo.com
Hi folks,I need help to get the right group to place my problem.We had several installations of CF2016 ENTERPRISE. Now we migrate to CF2021 ENTERPRISE on new server installation. In CF2016 CFSPREADSHEETWRITE needs 10 sec. to create XLSX file with 3.000 rows and 16 columns.In CF2021 the same code needs 120 sec. to create same XLSX file. I write these problem with detailed documentation to cfinstal@adobe.com at 25th of Nov. 2021 but get no reply.This is a show stopper for go live. I need a hint where is the right place to put this problem? Would be great if anybody can help. Thx in advanced. Stay safe!
It seems after latest updates were applied to my Coldfusion 11 server my XMPP gateway stopped connecting. In my exception log I get:"coldfusion.eventgateway.im.IMGateway$IMGatewayMissingLicenseException: The JBuddy library does not appear to have a license for XMPP".It was working great before the updates.
Why am I getting this error when I've used the wsconfig within my "site-name" folder to bind my site to ColdFusion? It keeps looking for the isapi_redirect.dll inside of wsconfig\2\ instead wsconfig\1\ folder. Where do I look to make this correction?
We've applied the Log4js mitigations outlied in https://helpx.adobe.com/coldfusion/kb/log4j-vulnerability-coldfusion.html and when Update 13 for Coldfusion 13 was available we applied it. I'm now getting warning of a vulnerability for log4j core 2.9.0 installed vi a the mitigation and advised to upgrade to 2.15 or later. Any guidance on either backing out or or upgrading the mitigaation installed via https://helpx.adobe.com/coldfusion/kb/log4j-vulnerability-coldfusion.html to prevent the new vulnerabilities?
How can I check if the Windows Server running ColdFusion is using IIS or Apache? I think we are running IIS since : IIS installedChecked Task Manager and cannot see apache or httpd entries.Looked under cfroot\config\wsconfig\1 and the README file contains : This file was created by the ColdFusion Connector Installer.Do not delete this directory or the files in it because your web serverconfiguration files contain references to the files in this directory.web server: IISweb server version: 10.0IIS web site: All (0) Is this enough proof or are there more checks I can do?
Hello Community - need help badly as I am more of a infrastructure person then coder We were in the process of setting up SSO with Azure as the identity provider - we had it working with the simplest of code: (basically from the Adobe help page)<cfset config = {idp = {name = "ptestidp"},sp = {name = "testsp"},relayState = "cart"}><cfset InitSAMLAuthRequest(config)> since the update I get the following - line 11 being the call to initialize the azure call Error Occurred: 12/20/2021 07:48:07 PM Error Type: java.lang.NullPointerException Error Message: Error Detail: Template: E:\internal\betahost.mycompany.com\pindex.cfm Line: 11 Column: 0
An older version of log4j file in ..\cfusion\hf-updates\hf-2018-00003-314033\backup\ was flagged as a security risk in a recent Tenable report. Is it safe to delete the backup files? Will it break the Coldfusion update history, or cause any issues with the future updates?
Adobe engineering and security have been hard at work determining which versions of ColdFusion might be affected and what, if any, workaround/mitigation steps are available. For the mitigation steps, see Log4J vulnerability on ColdFusion. It will be updated if/as things change. This article contains information related to ColdFusion 2021, ColdFusion 2018 as well as ColdFusion 2016. There are also sections concerning the Performance Monitoring Toolset for 2021/2018 and API Manager. We shall be releasing a patch on 12/17 for the same. In the meantime, follow the steps mentioned in the document. If you need more information, please contact us or reply in this thread.
hello all.i am at a loss... i installed a vanilla windows 2019 server, coldfusion 2021 trial and apache 2.4.46 win64 (also vanilla). i then run the coldfusion connector wizzard and that does what it does and says it's done afterwards.when i want to connect to a website then, i only get "Service Unavailable - The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later."i checked, also using https://helpx.adobe.com/coldfusion/kb/coldfusion-apache-manual-connector-configuration.html and basically, all seems ok:- mod_jk.conf, workers.properties and mod_jk.so is in apache/conf directory- the respective two lines are in http.conf: Include "C:\Apache24\conf\mod_jk.conf" Include "C:\ColdFusion2021\config\wsconfig\1\mod_jk_vhost.conf"- apache also starts and shows 'Apache/2.4.46 (Win64) OpenSSL/1.1.1h mod_jk/1.2.46' in services- but mod_jk.log in c:\ColdFusion2021\co
We updated to update 13 (from update 11). The scheduled tasks are run on a cluster with MySQL. After the update all clustered schedule tasks disappeared. When tried to disable cluster and enable by selecting datasource and try to submit changes, it shows up with the following wierd error messages. I have verified scheduled task DSN and its working.
Bonjour,Que ce soit en français ou dans d'autres langues, les accents posent un problème.Je passe par :<!DOCTYPE html public "-//W3C//DTD HTML 4.0 Transitional//EN">mais existe-t-il une autre définition pour ne pas passer par un parser ... qui marche mal.Merci par avance Hello,Whether in French or other languages, accents are a problem.I go by :<! DOCTYPE html public "- // W3C // DTD HTML 4.0 Transitional // EN">but is there another definition not to go through a parser ... which works badly.thanks in advance
In this post about the 2021 release (https://helpx.adobe.com/coldfusion/deprecated-features.html) it is mentioned that "cfscript support for script-based CFCs, such as query and storedproc." I can't find anything that clarfies what that means. My organization has applications that use pure script based CFCs and ones that mix tags and script inside CFSCRIPT tags. What precisely is being deprecated? Thanks,
Hello All- I'm trying to configure a webservice to work over https w/o any luck. The web server has ssl installed and the server housing the webservice also has ssl installed. I configured the directory containing the webservice to require ssl, then tried to update the webservice registration in CF Admin and it failed. I am able to view the wsdl via https. I guess my question is, what is required to make a webservice run over ssl? It appears that simply requiring 128-bit encryption on the directory containing the webservice does not work. TIA, Aaron
Remix with Firefly Community Gallery
Thousands of free creations to fall in love with and remix in Firefly.
¿Ya tiene cuenta? Iniciar sesión
¿Aún no tienes una cuenta? Crea una cuenta
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
AdChoices