Questions

I am getting the following messages after applying cf 2016 update 17:Invalid attribute value cf_sql_int for attribute CFSQLType  any ideas?

Currently my cfhttp process works for the API I am calling on CF10 Enterprise version running on Windows Server 2008R2 but, on my CF2018 editon it will run once (sometimes) and then fail every call after that. I applied update 10 when I first noticed the issue to see if that may help but it did not and I recently applied Update 11 with same results. I am running ColdFusion 2018 Enterprise Version: 2018.0.11.326016 on Windows Server 2016 Standard. I then did as BKBK recommended in another post and installed latest Java from http://adobe.com/support/coldfusion/downloads.html which was 11.0.10 and pointed my jvm.config to the new Java home directory. When I dump out value for the version using <cfdump var="#server.system.properties.java.version#"> just to make sure, it does indeed show "11.0.10+8-LTS-162" is being used. I restarted both the server and ColdFusion service and still get this issue: Another thing I tried was importing the SSL cert

How can I set the "com.sun.jndi.ldap.read.timeout" value, or otherwise get a CFLDAP call to properly timeout. I have an Active Directory (AD) server that I'm making CFLDAP calls to.   Randomly the calls will hang for approximately 900 seconds.  The AD server admins say they don't see any issues on their end, but the 900 seconds does correspond to a default MaxConnIdleTime setting on the AD server.   In FusionReactor it will show that it's stuck on "java.net.SocketInputStream.socketRead0" This page matches with the issue I'm seeing:  java.net.socketinputstream.socketread0 Problem patterns  According to the various pages I've found on this issue I need to set the "com.sun.jndi.ldap.read.timeout" value.   I've tried setting this in the jvm.config, but I found web pages that say you can't set it there.  That it needs to be set in the jndi.properties file.  All of the web pages I find for ColdFusion and jndi.properties ar

Great news for CFML developers!   Adobe ColdFusion Developer Week 2021 is edging closer! This year, we’ve lined up a series of sessions and webinars that will give you a 360-degree view of ColdFusion 2021’s brand new features and updates. Right from developing cloud-native applications to reducing downtime, these webinars will let you in on the best tips to deploy applications rapidly and seamlessly.   This is your chance to meet coders from across the globe and exchange ideas with some of the best minds in the industry. And that’s not all! Your presence at the conference will earn you points that can help you win exciting prizes and vouchers. Our scoreboard will keep track of active participation!   When: 22-24 June, 2021 Register today!

Using the GET HTTP method, Nessus found that the following resources may be vulnerable to blind SQL injection :The 'method' parameter of the /CFIDE/componentutils/cfcexplorer.cfc CGI : Input: /CFIDE/componentutils/cfcexplorer.cfc?path=%2fCFIDE%2fappdeployment%2fID atasourcesEventsHandler.cfc&name=CFIDE.appdeployment.IDatasourcesEventsH andler&method=getcfcinhtml'||'%2fCFIDE%2fappdeployment%2fIDatasourcesEve ntsHandler.cfc&name=CFIDE.appdeployment.IDatasourcesEventsHandler&method =getcfcinhtml-------- output -------- HTTP/1.1 200 OK -------- vs -------- HTTP/1.1 400 Bad Request ------------------------" Is this vulnerabilty exists or it is a false positive?

Hi,While using CFINDEX to index the content of files with SOLR, I keep occasionally get this excpetion when indexing PDFs:coldfusion.pdf.PDFDocException: PDFDoc Exception <p/> Created on Sep 12, 2006. I am not getting any other indication of what is actually causing the exception and I can not yet find a pattern in the PDFs that this is happening with.  It is not all PDFs or even most - it only occurs occasionaly. Any ideas?  We are currently on:Server ProductColdFusionVersion2016,0,13,316217EditionEnterprise  Operating SystemUNIX Thanks for any help.

I've installed the CF 2021 developer edition on my machine which uses apache tomcat.  I then followed the guide below under the "Configure IIS for ColdFusion in Windows" section:https://helpx.adobe.com/coldfusion/user-guide.html/coldfusion/installing/configuring-your-system.ug.html  My site now appears to be using IIS.  I can browse to it under localhost and access cfm pages under my CF installation directory.  If I stop the IIS site, then my site is no longer available.  My question is where can I place a web.config file to make configuration changes to the site or is this even possible?  Putting a web.config file in the IIS wwwroot or the CF installation wwwroot seems to do nothing to the configuration.  For example I tried to restrict access to anonymous users in this web.config file and all users still had access.  If I restrict anonymous users in IIS management console, then it does work. 

Hello,I installed CF2018 on Win2016 server and moved my code into it from CF9. Now I am receiving errors that I did not receive in CF9.09:15:16.016 - Object Exception - in D:/Application.cfc : line 249 The getMetaData method was not found.09:15:16.016 - Application Exception - in D:/Application.cfc : line 249 An exception occurred while calling the function getMetaData.The line 249 refers to the <cfdump> tag in the following function in Application.cfm<cffunction name="onError" returnType="void" output="false"><cfargument name="exception" required="true"><cfargument name="eventname" type="string" required="true">        <cfset var errortext = "">            <cfif isDefined("arguments.exception.rootCause") AND arguments.exception.rootCause IS "coldfusion.runtime.AbortException">            <cfreturn/> &

I've created a rest API in ColdFusion 2016.  The first time a request is made to the API in the morning will generate an error:Application (myapp) could not be found. The specific sequence of files included or processed is: ''All subsequent requests to the API go through without errors after that.  Any idea why I am getting this error?

It would be great if smb from CFdev team can help find us how to add to debuggin EVENTs - some information. instead of phrase"COMLEX VALUE" -to show a dump of the argument( at least for structure and arrays) 

I received a nonfatal error when I tried to install either Adobe ColdFusion 2016 or ColdFusion 2021 on a Windows 10 computer.  The following is from the log file:Install File: C:\CF\runtime\manager\WEB-INF\jsp\401.jspStatus: ERRORAdditional Notes: ERROR - Flexeraak7: C:\CF\runtime\manager\WEB-INF\jsp\401.jsp (Access is denied)I have tried installing(as admin) several times, but I always get the same result. Any assistance would be appreciated.

I am installing 2018 on a new server and the installation choice is "Server configuration" and "JEE configuration". Server configuration is described as an embedded JEE server and JEE, I am assuming, is for an existing Tomcat installation.What I want is to duplicate the configuration of the old server and use IIS for web services. Did I miss a step somewhere or is there something I am not getting? TIA,Gary  

I am trying to create my first event gateway.  For now, I just want to log when a file is put into a specified directory.  It seems it should be simple, but I keep getting an error in the eventgateway log:Error","Thread-339","04/20/21","17:11:33","","Error invoking CFC for gateway videowatcher: Could not find the ColdFusion component or interface image. {GATEWAYTYPE={FileWatcher},CFCMETHOD={onAdd},DATA={{LASTMODIFIED={Tue Apr 20 17:11:24 CDT 2021},FILENAME={C:\home\safetyforward.com\wwwroot\safety\present\connectionsCameraTesting\uploads\drop98.webm},TYPE={ADD}}},GATEWAYID={videowatcher},ORIGINATORID={},CFCPATH={C:/ColdFusion2021/cfusion/gateway/cfc/examples/videowatcher.cfc}}. Ensure that the name is correct and that the component or interface exists." My gateway name is videowatcher.  When i put a file in the directory I'm watching the gateway is firing, but it can't seem to find the videowatcher.cfc.  This despite when I create the event watcher in CF Admin

Just recently, I am getting the following error on a CFDUMP command.  I have a routine that runs every hour and 95% of the time, it works perfectly fine.  Every once in a while I'll get this error.  Would love to hear any thoughts as to how to possibly tackle this mysterious error! COLUMN0LINE-1RAW_TRACEjava.security.AccessControlException: access denied ("java.io.FilePermission" "C:\ColdFusion11\cfusion\wwwroot\CFIDE" "read")TEMPLATE"java.io.FilePermission" "CTYPECFML

I've migrated the app and only one endpoint is having an issue. Java server does a form post to it. Every time I get this error. It looks like its failing where it validates data being passed in so my try catch inside the endpoint isn't catching it. The @FormParam is utilized when the content type of the request entity is not application/x-www-form-urlencoded The specific sequence of files included or processed is: d:\xx\xx.cfcjava.lang.IllegalStateException: The @FormParam is utilized when the content type of the request entity is not application/x-www-form-urlencodedat org.glassfish.jersey.server.internal.inject.FormParamValueFactoryProvider$FormParamValueFactory.ensureValidRequest(FormParamValueFactoryProvider.java:176)at org.glassfish.jersey.server.internal.inject.FormParamValueFactoryProvider$FormParamValueFactory.getForm(FormParamValueFactoryProvider.java:160)at org.glassfish.jersey.server.internal.inject.FormParamValueFactoryProvider$FormParamValueFactory.provide(FormParamV

I have an application inside an Iframe, in the first CFM page, I set a session variable, when I go to the next page in the Iframe, the session variable have disappeared. It seems that session variables are not working inside an Iframe ? Thansk for any comment. Pierre.

Started seeing some weird message today in my CF18 environment. The message is "The @FormParam is utilized when the content type of the request entity is not application/x-www-form-urlencoded" when calling a CF REST service in a cfc file. This has worked as recent as a week ago so not sure why it would be an issue now. Has anyone expereicned this before? The call we make to the REST service is shown below. I am thinking it is related to tthe headers but not sure if that value should be something different. $http({method: 'POST',url: strServiceUrl + 'admin/create/' + $scope.selectedRecall.id + '/retailblock/remove',headers: {'Content-Type': 'application/x-www-form-urlencoded'} Thanks.

I ran into a problem when applying the 11th update for CF2018 as the drive ran out of space, which corrupted the files and ended up having to uninstall and re-install on a separate drive in order to resolve the issue; however, now I am dealing with an odd quirk in that when a form with multiple checkboxes or multiple selections from a select lists is submitted -- I receive the variable as an array rather than a list, which causes issues when I attempt to pass that variable into a query via cfqueryparam.Is there an option that can be adjusted to control this behavior?   My code has not changed and now gives an error about a complex type.   I would prefer to have the items submitted as a list or string, as otherwise, I have to go into my code in all these places to test if it's an array and then call ArrayTolist, which was never needed before the reinstall.

不能辨識啊？

Good Afternoon,I installed Coldfusion 2018 on our test server. We have Coldfusion 11 but I turned off all the services before installing. But when I navigate to my website, it is giving me a 500 error with details below. Any idea what the issue is? I very much appreciate any help. Thanks!- Sheryl Expression in cfproperty value must have a constant value.coldfusion.compiler.TemplateAssembler$PropertyExpressionException: Expression in cfproperty value must have a constant value.

I would like to personally thank Charlie for providing valuable solutions that worked for my projects in ColdFusion and FusionReactor. Some of our projects required specialized and precise solutions, and Charlie's ideas sailed us through to complete the resolutions on time. Thanks again.    Ram 

I am running CF 2016 with update 3.Ever since upgrading from CF 8, none of our scheduled tasks that we create outside of the administrator will run.These tasks are date driven to run once and call a url which starts the task.Every time we execute the url, either through the CF admin or directly, we get the same error that "The following task could not be found: (name of task)"I've confirmed that the task in the admin and the name of the task in the database are the same. I've tried removing all spaces from the names, I've tried numbers only. I've tried changing the task from running one time to running on a schedule. Nothing helps.Here's the code that throws the error:<cfschedule task="#getSaleName.salename#" action="run">

Hi, We're in the process of upgrading from CF v11 to 2021 and have encountered a problem saving a value in the "On Complete" box (after clicking "Show Additional Tasks") to execute chaining.  That is, I enter the value in "On Complete" and click the "Submit"; even though the "The scheduled task has been updated successfully" message appears next, when I return to see the "On Complete" box it's back to being empty.This occurs both on RHEL v8 (server) and local Windows PC (client).  I also tried the recent hot fix 1 released last month, as it cited a similar issue being fixed in CF Admin, but still no luck.Has anyone else encountered this problem?Thanks.-Benny

Our application is scanned against penetration testing  found below vulnarability -comments from Vuln team-this application does not validate attESSec cookie if CFID and CFTOKEN represents specific session. These two tokens are also used (in GET request parameters) in one specific automatic request by every user of the app after they are loggedin by Logon. These two cookies are therefore severely weakened in its confidentiality. In conclusion this vulnerability is consisting of: 1. low entropy in CFID and CFTOKEN 2. these two are sent in GET request by the app logic 3. there is no validation in attESSec and attESHr cookie and that severely weakens authenticationResolutionIncrease entropy of CFID and CFTOKEN can you help me how to Increase entropy of CFID and CFTOKEN?

we have security vulnarability found in penetration testing :Cleartext Storage of Sensitive Information in a Cookiepage- administrator/index.cfmcoldfusion version 11 This app is using base64 encoding for admin console cookies. Base64 encoding is only making it harder to decode, therefore provides only weak protection mechanism. Cookies therefore include admin password. Also as is described in other parts of report this cookie is exchanged via unencrypted channel.ResolutionInstead of using base64 encoded plaintext with password use some random string to authenticate valid admin privilege session. Question - can someone help how to fix this it?