Questions

we have security vulnarability found in penetration testing :Cleartext Storage of Sensitive Information in a Cookiepage- administrator/index.cfmcoldfusion version 11 This app is using base64 encoding for admin console cookies. Base64 encoding is only making it harder to decode, therefore provides only weak protection mechanism. Cookies therefore include admin password. Also as is described in other parts of report this cookie is exchanged via unencrypted channel.ResolutionInstead of using base64 encoded plaintext with password use some random string to authenticate valid admin privilege session. Question - can someone help how to fix this it?

 I'm having a problem where my datasource connections are not timing out in CF 2021 and I'm accumulating more and more DB connections. In the Data & Services -> Data Sources -> My Data Source (Advanced) settings in the Administrator I have "Maintain Connections " checked, I have "Timeout (min) " set to 20 and " Interval (min)" set to 7, and the "Limit Connections" is not checked. Do I need to alter any other settings, and if so, which ones, to get my datasource connections to time out after a period of inactivity?

I am trying to write a cold fusion program which splits up a pdf file with multiple pages into separate files for each page. In other words, let's say I have a pdf document (document.pdf) that has 100 pages, I want the program to break it up so I end up with 100 files, one for each page (document0001.pdf, document0002.pdf,document0003.pdf,document0004.pdf,document0005.pdf etc, etc.). Any help would be greatly appreciated.

I have a customer who is trying to use my ODBC 3 driver with ColdFusion 2018. Their website worked with my ODBC 2.5 driver, but didn't with my ODBC 3 driver. Of course, I assumed that it was my Driver, and I investigated to see what we were doing wrong. Looking at the ODBC Trace, I'm seeing ColdFusion calling SQLSetStmtAttr with the attribute SQL_ATTR_ROW_ARRAY_SIZE of 1191. My driver returns 01S02, indicating that is more rows than it can support, and I see ColdFusion call SQLGetStmtAttr with SQL_ATTR_ROW_ARRAY_SIZE to fetch the number of rows that are supported. Then, ColdFusion calls SQLFetch, which fetchs 14 rows into the array that it allocated. ColdFusion then displays the first row from the array and calls SQLFetch again, gets a SQL_NO_DATA_FOUND, and stops. ColdFusion needs to call SQLSetStmtAttr with the attribute SQL_ATTR_ROW_FETCHED_PTR to determine the number of rows that were actually fetched, or it needs to stop trying to use SQL_ATTR_ROW_ARRAY_SIZE. I have investigated m

I have several production servers that can't access the internet so I need to do the update manually. When I try to install it the I get the message that it's already been installed. I'm the only one that patches the servers so I know I didn't install it and the admin shows its updated to 10. I'm trying to figure out how to either get around the issue with manually installing the update or finding a way to trick the CF admin into thinking it downloaded the update and using the update file I downloaded. Any suggestions?

With the news that bintray is being deprecated what is Adobe planning to do with the ColdFusion images hosted there? Has there been any official word from Adobe yet?https://jfrog.com/blog/into-the-sunset-bintray-jcenter-gocenter-and-chartcenter/https://bintray.com/eaps/coldfusion/cf%3Acoldfusion

HI!I'm trying to install Coldfusion 2021 (trial version) on a test machine. The installation wizard is stuck on "Import Settings" with a message of "Importing your Coldfusion settings. This might take a few minutes.". It's been on the screen overnight and nothing is happening. I tried to close it, updated the adminconfig file to RunSetupWizard = True. But it goes directly to that screen. Any ideas? Please help. Thanks.-Sheryl

Hi!Where can I find the installer for Coldfusion 2018? I aprpeciate your help. Thanks!- Sheryl S.

Hi,We are running CF2021 on Centos 7.9 on three servers with the same CF instance on all three, which are network load balanced. We are getting this error only on one instance when trying to use mail. All three instances are identical.Could not find the ColdFusion component or interface Mail.Ensure that the name is correct and that the component or interface exists. The specific sequence of files included or processed is: /..../test_mail.cfm, line: 2Here is the code:<cfdump var = "#now()#"> <cfscript> foo = new Mail(); </cfscript>The mail package is installed. I reinstalled it but still getting the same error.<cfmail> works fine.Anything I can do to troubleshoot the issue? Something I can compare with working instance to see if something is not configured?

I put a <cflog> command in a tag called ccilog.  This allows me to turn log entries on/off depending on a session variable, while still allowing the full functionality of the <cflog> command. When I use it, though, all my log entries are duplicated.  The full tag is this:<cfparam name="Attributes.application" > <cfparam name="Attributes.file" default="cci-out" > <cfparam name="Attributes.text" > <cfif ! isdefined("session.debug")> <cfset session.debug = false> </cfif> <cfif session.debug> <cflog application="#attributes.application#" file="#attributes.file#" text="#attributes.text#"> </cfif>An example call is this:<cf_ccilog file="adipostlog" application="yes" text="Process Documents"/>The entry in adipostlog looks like this:"Information","ajp-nio-127.0.0.1-8016-exec-8","04/13/21","16:11:04","CCI-QUASI","Process Documents" "Information","ajp-nio-127.0.0.1-8016-exec-8","04/13/21","16

Hi all,i have a problem.If i try cfhttp with google https://www.google.de All is fine.If i try it with my own site with ssl by letsencrypt, it shows Connection Failure What shall i do?Why dont accept the letsencrypt cert?I have Coldfusion 2016 and Ubuntu 16 / Apache Kindly RegardsThorsten  

I am trying to get the link inside my excel to open a file on my CF folder. The Excel file is in the same folder.For the sake of explaining this is how the folders and files are structured:I have 3 folders A, B, and C.In folder A I have PDF_A1.pdf, PDF_A2.pdf and an excel file EXCEL_A.xlsx. The Excel file has 2 links to the 2 PDF files as described. Folder B and C are also similarly structured.I use cfdirectory and navigating in and out of each folders and able to open the PDF files - no issue.The problem is when I clicked to open the Excel file which opens fine, the link to the PDF points to my local temporary folder. But I wanted it to point the PDF file inside folder AThank you.

Windows Server 2019, IIS running.  Database engine is SQL Server Express 2019, Cold Fusion 2021.I created a new database (Westfield_New) using SQL Server Management Studio, using Administrator (owner) and the password.  Can add tables, etc from SSMS, so database and connection good.I now try to add a new datasource from ColdFusion Administrator.  Data Source Name = Westfield, Driver = Microsoft SQL Server, click 'Add'.CF Data Source Name = Westfield, Database=Westfield_New(what it's called in SQL Server),Server=WindowsServer, Port=1433, User Name=Administrator(owner of the database in SQL Server), Password=[Administrator password], Description blank.  Click 'Submit'.I get the following error message;"Connection verification failed for data source: Westfieldjava.sql.SQLInvalidAuthorizationSpecException: [Macromedia][SQLServer JDBC Driver][SQLServer]Login failed for user 'Administrator'."Any ideas, as I'm using the same credentials to access the database from CF as I

I would like to use the ColdFusion 2021 with Apache. OS                     :  Windows10 (64bit)Apache Version :  2.4.41-win64-VC14Adobe                : ColdFusion 2021(Developer Version) ColdFusion and Apache are already installed and both are working fine.But the problem is I can not add the Apache server to ColdFusion.The error message is "An unknown error has occurred."

HiI have created a python script that genarete a word document. I want to call this script from coldfusion app. so i add this code :<cfexecute name="C:\tmp\docGen.exe" outputFile = "C:\tmp\output.txt" timeout="10000" errorVariable="error" /> But notthing happens , only output.txt is created. But no result.docx file and no error displayed  

Hi,I have recently upgraded to CF2021.I am having an issue with date formatting.I have the code below. & #DateFormat(Now(),'YYYY')#& "_" & #DateFormat(Now(),'MM')# & "_" & #DateFormat(Now(),'DD')the output is    2021_04_91 But it should be 2021_04_01 It appears to put a 9 instead of a 0Would anyone might know what would be causing this?

I am using Coldfusion 2018 cfsearch, which uses SOLR. When I do a search on a dynamic boolean field like so, it works and returns correct results.<CFSEARCH name = "GetResults" collection = "mycollection" criteria="is_ethics_b:1" >When I try to query more than one dynamic boolean fields:<CFSEARCH name = "GetResults" collection = "mycollection" criteria="is_ethics_b:1 is_visible_b:0" ><CFSEARCH name = "GetResults" collection = "mycollection" criteria="is_ethics_b:1 AND is_visible_b:0"><CFSEARCH name = 'GetResults' collection = 'mycollection' criteria=' ""is_ethics_b:1"" AND ""is_visible_b:0"" '> I have tried other combinations but I get variations of the same error:cannot convert the value "1 AND is_visible_b:0" to a boolean What is best way to query two dynamic _b fields?Also, is there a way to test the query directly on the SOLR server?  Thank you for any help. 

Hi all,i create a xsl file with: <cfcontent type="application/vnd.ms-excel" ><cfheader name="Content-Disposition" value="filename=fehlmenge2.xls"> But the browser wat everytime to download the file.i want to make a shedule cfm site and save the file to the server... but how can i say save as to server not open in browser? Kindly regards.thorsten 

I'm coding a CF11 application on a Windows virtual machine. I made the mistake of seeing the orange icon flashing telling me I needed to do a Java update. After running through the update and restarting everything, the Coldfusion Application did not start. I got the "Service Not Avaialble" error in the browser. So I tried restart the Coldfusion Application and it wouldn't let me start it at all. Then went to Google and located these two somewhat helpful articles:https://handyman.dulare.com/service-not-available-on-coldfusion-host-after-java-update/https://community.hostek.com/t/coldfusion-service-startup-failures/550On there they mentioned going into the CF files to the cfusion\bin\jvm.config file and updating the "java.home" variable with the current path to the Java directory. Which I did. That variable is now: C:\Program Files\Java\jre1.8.0_281 for me. I tried starting the Coldfusion Application again and now it tries to start, but then stops. Which is better than nothing at all, bu

Hello All- I have a strange problem with CFHTTP. I am sending JSON to a server using HTTPS via CFHTTP.  My code worked successfully under CF2016 for quite a while.  I migrated servers, now using CF2018, on Windows 2019.   My problem is that now I can send ONE post successfully via cfhttp, then it will no longer work.  I receive a 'Connection Failure' error after the first success.  I've repeated this exercise at least 30 times, with the same result each time. This is secure, and initially I thought the problem was with my Java certificates.  I installed what I believe are the correct certs. The strange part, is that it will work ONCE every time I restart CF.  I can successfully POST the JSON, and view the results on the target server, as well as receiving the appropriate response from the server.  The next POST will fail.  Every attempt after that will fail- even re-running the initial post that was successful p

Is it possible to see the actual query sent to the Solr server in a log? If yes, where is it located?

We've installed CF 2018 but are having an issue running the Auto-lockdown tool for 2018 Server.  It won't accept the CF admin credentials we put in as valid.  We've confirmed multiple times including copy/paste from notepad into both CF admin and into Auto-lockdown tool and CF Admin logs in fine.  Just Auto-lockdown won't accept.  Anyone else hit this?

Will there be any support for Australians to get this information too or are only Americans being given this information?      The first of this webinar series begins on Thursday at 3am (Sydney time)  and the second is on Friday at 3am (Sydney time) .  Will there be a recording made available so we can share the knowledge too?   Incidentally i've spent yet another frustrating hour trying to find someone who will talk to me about it but no.   There are no Australian phone numbers for Adobe and the online support just sends me to the CF Documentation.       Help for those of us trying to sell the Adobe ColdFusion product is as non-existent as it has always been here.  Mike KearWIndsor, NSW, Australia  

I am not having any success in changing the Solr defaultOperator to AND so that searches are more like web searches.  If I add an AND between words in my search form, I get what I want.  Without the AND it defaults to OR.I've changed the defaultOperator  parameter in all the schema.xml files I could find:\ColdFusion2018\cfusion\jetty\solr\conf\schema.xml\ColdFusion2018\cfusion\jetty\multicore\collections\CollectionName\conf\schema.xmlI also tried deleting and rebuilding all the collections once the changes to the \ColdFusion2018\cfusion\jetty\solr\conf\schema.xml were made without any joy.  The schema.xml files for each collection had the default set as desired after being deleted and rebuilt, but it still doesn't work right. My recollection is that I had to do this to get the default operator to work right in CF10.  I'm not seeing any documented changes to <cfsearch> or <cfindex> that should affect this. Ideas anyone?

I have PMT 2021 installed on my MacOS laptop and all is good. I then began the install on a Windows server we use as backup. First go install completed and all looked good but service wouldn't start. I tried making some progress reviewing logs and starting the services at the command prompt but decided reinstalling was worth the effort. I used the uninstall option from Windows control panel and then started over. This time however the only option I have to install is the datastore. There's no option for installing PMT any more, and going with just datastore installs just that. There doesn't appear to be any other trace of the previous install. Any idea on how I can get back to installing the entire package?