Questions

Hello, all, I was just giving some thought to encryption, and considered something.  But I don't know how to do it, and I'm wondering if it's even possible. Is there a way to bring CF jCrypt to the client?  Hear me out. In a MITM attack, the malicious actor gets in between the client and the server, with the client encryption to the MITM device, which decrypts it, logs it, re-encrypts it to the server.  So, if I understand correctly, a user logging on to, say, their banking would provide the username and password for their account in, ostensibly, clear text to the malicious actor. Now, I know about ajaxproxy and it's ability to connect Javascript to CF functions.  But using ajaxproxy to access a jCrypt function to hash the password is still sending in 'clear text' in a MITM attack scenario.  Right?  Or am I missing something?  I assumed that the ajaxproxy just made server-side functions available, but information still has to be pa

I thought I'd update the JVM to the latest version, but the "JAVA SE 11.0.8(LTS)" links on Adobe's  download page all seem to be broken. Anybody know how to reach someone to get these fixed, or if there are alternative downloads anywhere that are in compliance with Oracle's Java license?https://www.adobe.com/support/coldfusion/downloads.htmlThanks!

I've been having lots of problems with the Performance Monitoring Toolset since putting my CF2018 Enterprise intranet into production about a month ago.  I have the PMT installed on my Test/Dev server (Windows Server 2019, 64Gb RAM, running a Development instance of CF18 plus the PMT), and it's monitoring my Dev site plus my production site on another server (same hardware/setup).What seems to keep happening every couple days or so is that the Elasticsearch datastore services that underlie the PMT are crashing, which initially makes it impossible to login.  When I find that, I go to restart the Datastore service, then the PMT service itself, but the PMT service won't start because it fails to connect to the Datastore.  After several attempts, I usually get frustrated and uninstall and reinstall the whole thing, which is clearly not a viable long-term solution.The datastore/logs files show stuff like:org.elasticsearch.action.search.SearchPhaseExecutionException: all shard

I applied all the hotfix updates 4-10 manually to ColdFusion 2018, but when we run the Nessus scanner, it's showing the server as unpatched. Looks like Nessus is looking in a different directory: Nessus detected the following unpatched instances :Update directory : D:\ColdFusion2018\cfusion\lib\updatesMissing cumulative hotfix : chf2018000005.jar It shows this error for each update, even though they were all applied through the hf-updates folder. Anyone run into this? Nessus is wrong, obviously.Tom Muck

Hi, We are migrating from MSSQLserver to POSTGRESQL database.We are getting column doesn't exists, even thoough column exists in the perticular table.org.postgresql.util.PSQLException: ERROR: column "exampleid" does not exists Below is the code snippet for MSSQL server<cfstoredproc procedure="spexample" datasource="#odbc1#" returncode="Yes">         <cfprocparam type="In" cfsqltype="CF_SQL_INTEGER" dbvarname="@ExampleID" value="#ExampleID#">          <cfprocparam type="Out" cfsqltype="CF_SQL_INTEGER" variable="NewExampleID" dbvarname="@oIdentity" null="No"> </cfstoredproc> Any changes need to be done for PostgreSQL?

Lately, I have noticed the following in the exception log.  It started around 36 hours after installing update 10 for CF18.  Perhaps a coincidence.  Server seems to operate normally. "Error","DefaultQuartzScheduler_Worker-5","07/25/20","15:47:12","","500 Internal Server Error "coldfusion.tagext.net.HttpTag$HttpTagServerErrorException: 500 Internal Server Errorat coldfusion.tagext.net.HttpTag.<clinit>(HttpTag.java:1113)at java.base/java.lang.Class.forName0(Native Method)at java.base/java.lang.Class.forName(Class.java:315)at cfadministrator2ecfc207599677$funcGETUPDATES.<clinit>(/CFIDE/adminapi/administrator.cfc)at cfadministrator2ecfc207599677.<clinit>(/CFIDE/adminapi/administrator.cfc)at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)at java.base/jdk.internal.reflect.DelegatingConstructorAccessorI

Hello, all, I had a bad feeling when I registered for CF DEV 2020 that the third-party company Carahsoft would use this as a way to gather contact information to be used in the form of SPAM and cold-calling.  But I really wanted to see what CF DEV 2020 had to offer, and I gleaned some good info from it. But then the SPAM emails started hitting my WORK email address.  Okay, they provided a link to stop the sending of unsolicited emails.  Cool.  But then the calls started.  I should have read the EULA; I would have skipped the convention. So, for now I've got one of those cordless phones that has call block baked into it, and I've added the number that was displayed on my CID to the block list.  But this won't last long, I'm sure. Any ideas on how to get Carahsoft to stop sending unsolicited offers? V/r, ^ _ ^

We have an old flash app that uses the flex2gateway thing that was in cf9, we currently are migrating to cf2018 and not quite sure what to do to move this service.has anybody delt with this before? Thanks in advance for any insite.

Getting a weird error all of a sudden, unsure when it started happening, having to do with populating a form that previously had no issues: OS: Windows 2016 (Virtual machine) Version: 2016.0.16.320445 (Enterprise) Has anyone come across this error when using the CFPDFFORMPARAM: Could not initialize class com.adobe.agl.text.BreakIterator null Source code kinda looks like this (tagless):cfpdfform action="populate" source="#tmpfile#"cfpdfformparam name="stockno" value="#stockno#"cfpdfformparam name="title" value="#title#"cfpdfformparam name="ctrlno" value="#ctrlno#"cfpdfformparam name="formno" value="#formno#"cfpdfformparam name="qpc" value="#qpc#"/cfpdfform The form was not createed with extensions, just within adobe acrobat.

I have a doubt related to the license. I want to know which is the best practice related to instances that can live in a license. I don´t want to affect my actual services performance. Now, my server has 16gb ram, 8 cores, and the Enterprise 2018 license. Thanks for your help. 

I will preface this as I do most posts, I am not a developer / programmer.  We have a CF10 server for our department intranet.We need to be able to notify a small group of people (less than 100) at once, and thought it would be best to use text messaging.I tried searching for examples of sending text messages using CF, I found a great article from Ben Nadel from 2007 but that was using mail to forward to the text message service.  I was hoping to find an example of testing that I could modify to suit us.Is anyone aware of a sample text page I could modify?Thanks

Does the ColdFusion 2018 installer now available contain all the latest hotfixes? I downloaded the installer a few months ago, and it was a very old version with no hotfixes installed. Installing hotfixes caused the server to become corrupted and I had to reinstall the original. This happened on two different machines. Tom Muck

Hello, We use Adobe Campaign Classic and import audiences from Adobe Audience Manager which we combine with data to send emails.  There has been a use case to target people from different Audience Manager lists with different copy within the email but I can't seem to figure out how to personalize from the event you are in a list from Adobe Audience Manager from within the email in Adobe Campaign. Does anyone have any use cases or tips to get this to work?  Considering the audiences are coming in fine it should be easy but I can't seem to define whether they are in an Adobe Audience Manager from within the email.  Funny enough I can't seem to find specific lists in generic query editor either from within the data but can choose a list fine from within a workflow.  Any tips appreciated.

I have an .htaccess file in a /reports/ folder with the following rule:RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^(.*)$ index.cfm?path=$1 [L,QSA]There is an index.cfm in the /reports/ folder that loads a list of all manufacturers, if one is not specified in ?path=The rewrite is working on my dev server, and my staging server, but on my production server I get an error from Tomcat:HTTP Status 403 – Forbidden Type Status Report Description The server understood the request but refuses to authorize it. Apache Tomcat/9.0.21I'm on CentOS 7 with Apache 2.4.The .htaccess file is part of the source code.I have another site on the server that uses a RewriteRule in the vhost.conf file and that works fine in dev, staging and production.If I change the RewriteRule to this, it redirects fine. RewriteRule ^(.*)$ https://google.co.uk [L,QSA] If I visit the page directly (/reports/?path=BMW/) the page loads fine.The only thing I've been able to

Hello,I am stuck with a very unique but confusing issue. The charts toolip is not working as expected in modal dialog box. The tooltip is apearing under it rather than on top of it. The same is working fine when directly called in the web page. Direct Call in Page Changing the "position" in json stye hasn't workedAny help will be much approciated.

I have always managed my own CF servers, but over the past couple of years we have moved from CF to WP (not my choice) and we now only have our project management app that I created running on the servers. We would like to move off these servers as there is a not going on (network/hardware) wise that does not justify the expense or time. It's a very simple app running on CF9, and I am looking for a company that hosts CF apps, very similar to what a managed WordPress hosting company would provide. I don't need access to the server or configuration, just the ability to host the site and database and have FTP access to the root dir for updates and changes. Any recommendations would be appreciated.

Hi, I have a problem with cfquery tag inside cfclient tag for Coldfusion 2018.Cfquery is working outside cfclient tag...but inside cfclient is not workingthis code is not working:<cfclient><cfquery name="q1" datasource = "storebooksdmx">select * from collection</cfquery><cfoutput>#serializeJSON(q1)#</cfoutput></cfclient> but this code is working ok: <cfquery name="q1" datasource = "storebooksdmx">select * from collection</cfquery><cfoutput>#serializeJSON(q1)#</cfoutput> Any help please?Thanks!

I need to find information about using ColdFusion as a client for an OData 4 REST service. Is this possible? Is there anyone who has implemented this who could give me direction or point me to some sites or documentation? 

Good evening,For my recordings, I have always gone through CFForm but this leads to the opening of another page.Is there another way that does not go through a new page in order to be able to easily use the modal windowsthanks in advance

Update 7/15/2020: The Docker images for both these versions are up.   We are pleased to announce that we have released the updates for the following ColdFusion versions: ColdFusion (2018 release) Update 10 ColdFusion (2016 release) Update 16   In this update, we’ve fixed a few security bugs and some other bugs, which are mentioned in the tech notes.   Charlie Arehart has written an excellent blog on the importance of securing the CAR files. Read it here.   For more information, see the tech notes below: ColdFusion (2018 release) Update 10 ColdFusion (2016 release) Update 16   These updates fix security vulnerabilities that are mentioned in the security bulletin,  APSB20-43.   Please update your ColdFusion versions today. Let us know if you face any issues while installing the updates. Your feedback is essential to further enhancing the product.   Note: We’ve also updated the add-on installers.   We thank you for your conti

Hello! This might be a stupid question, but I'm a bit confused and can't find anything anywhere. I am building a new internal application in ColdFusion 2018.  A team member has said that it needs to be entirely RESTful.  I have built RESTful APIs to applications to expose portions of the application funtionality or data to outside tools/applications.  However, there will be no outside tools inegrating with this application.  If I am already using an MVC design, is there a good reason for the apparent extra work of making RESTful methods and access if everything is only accessible within the single application? Thank you for any input.

It is considered bad practice to allow other systems and users to connect to a database using the 'sa' login on SQL Server, so the best method would be to use Windows Authentication.... but how?I have gone to Datasources in CF9 administrator, added a new Datasource, put in the correct server name and database names. I have left the username and password blank as per the instructions on Adobe's CF documentation:http://help.adobe.com/en_US/ColdFusion/9.0/Admin/WSc3ff6d0ea77859461172e0811cbf364104-7fe5.html#WS7EBC2C2B-C1AE-45cf-9374-F468BC63AF0A It simply will not connect, I get a notice along the lines of "login failed" for the database. If I put in 'SA' as the username and the password it will connect fine.How can I allow CF to accces my SQL Server database through just Windows Authentication? My CF9 and SQL Server installation are on the same machine on the same hard drive.I am running Windows Server 2008 R2 with SQL Server 2012 Enterprise.

I am migrating our db from Oracle (12c) to SQL Server (2019) but I am new to SQL Server, and I am on CF 2016. One stored procedure that runs just fine in Oracle is giving me trouble. It’s a SP developed by someone and I don’t have control over, but I know it basically generates a primary key from a table and returns an integer (only one number). In Oracle environment I would use:<cfstoredproc procedure="mySP" datasource="#dsn#"><cfprocparam cfsqltype="cf_sql_numeric" type="out" name=”next_pk”></cfstoredproc>Then I can access the value of #next_pk# and insert it into a table for a new record. In SQL Server environment, if I use the same code, it says “has too many arguments”. I saw someone said we can’t use type=”out” in SQL Server. So I use:<cfstoredproc procedure="mySP" datasource="#dsn#"><cfprocresult resultset="1" name="next_pk"></cfstoredproc>and try to output #next_pk#, it says next_pk is undefined. If I try to output #next_pk.UseKey#,

I am doing a cfinclude in my Application.cfc and the include sets variables in a cfscript. <cffunction name="OnRequestStart">        <cfinclude template="encryption.cfm"></cffunction> The varialbes that are set are known within the Application.cfc but are not available to the .cfm that made the call to the Application.cfc Is there a workaround? 

Generate a keystore pkcs12 Follow the steps below: Generate the keystore using JRE keytool. Navigate to the JRE/JDK\bin folder in your machine. Run the commands: keytool -genkeypair -keystore myKeystore.p12 -storetype PKCS12 -storepass changeit -alias mycert -keyalg RSA -keysize 2048 -validity 99999 keytool -exportcert -keystore myKeystore.p12 -storepass changeit -alias mycert -rfc -file mycert.pem Once the .p12 and .PEM files are generated, copy these to an appropriate location. Take the backup of server.xml in your instances. The file is located in ColdFusion\{instance}\runtime\conf. Once you back up the file, search for 8443 in server.xml. There is an entry, which is commented. <!--<Connector packetSize="65535" port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" SSLEnabled="true" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" />--> The code above is commented in serve