Questions

I have a partner that is going to pass a transactionid to me in the URL when a user clicks on an ad on their site.Like thiswww.mycompany.com/transactionid=12345abc8964 I need to postback variables to their site when a user converts.I have that part coded already using CFHTTP.My question what is the best way to detect that a user has entered my site with a transactionid and then be able to know that is the same user when they convert.Is it something like this?1. Detect transactionid when user enter website in application.cfc2. If  a transactionid  is detected - set a session variable like session.transactionid = yes or session.transactionid=12345abc89643. If user converts - check for the existence of transactionid session variable.4. if  transactionid session variable exists - postback info the partner siteIt almost seems too easy. So I'd thought I'd check with the ColdFusion geniuses.

Hello, all, I've got a RegEx edit on email addresses that is acting weird.  I could use a few more pairs of eyes on this. Okay, so for those not aware, Gmail has a feature whereby one can add arbitrary characters to an email address, I assume primarily for the purpose of tracking who is making your email address available to marketers.  For example, let's say someone registered "myname@gmail.com", and is filling out a form online for.. uh.. let's say a free meal at a local restaurant.  Said user can enter "myname+restaurantname@gmail.com" and if that restaurant ever makes this user contact information available to marketers, then anyone sending an email to "myname+restaurantname@gmail.com"  will alert the user to who gave out that information. I am using a RegEx replace to filter out that "+whatever" in an email address, and for the most part it works great.  However.. there is an odd quirk that I can't track. It will filter out that +whatev

On my HTTP request, I kept getting this error.handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path.Sep 16, 2016 10:26:14 AM Error [ajp-bio-8013-exec-2] - ERROR: failed to read from https://myapps.example.com/units.json. Response code: 'Connection Failure.  Status code unavailable.' Error details: 'I/O Exception: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path.'I found this page, https://www.hass.de/content/coldfusion-java-pkix-path-building-failed-javasecuritycertcertpathbuilderexception-could-not , that talks about the same exact error that I have. However, it didn't resolve my issue even though I verified that the certificate is already exist in my cacerts file.

I'm working towards using Redis to store ColdFusion sessions in an ElastiCache instance. ElastiCache has encryption options:Encryption at Rest (This works easily.  It is transparent to Redis Connections)Encryption in TransitRedis Auth Ideally both of the last two options should be enabled. Redis Auth can only be enabled when Encryption in Transit is enabled. When Encryption in Transit is enabled, connection timouts occur while verifying the Redis connections. Redis Connection Verification Failed. java.net.SocketTimeoutException: Read timed outFor this connection, I'm using a plain hostname.  I am not modifying the address to create different url in any way.   I've seen some articles about the redis url scheme and using redis:// for plain text connectionsrediss:// for SSL connections.However, when either of these are configured in the coldfusion administrator page, the connection verification throws an error.Redis Connection Verification

We are pleased to announce that we have released the updates for the following ColdFusion versions: ColdFusion (2018 release) Update 9 ColdFusion (2016 release) Update 15   In this update, apart from fixing the security vulnerabilities, we’ve also added SameSite cookie support for cfcookie.   For more information, see the tech notes below: ColdFusion (2018 release) Update 9 ColdFusion (2016 release) Update 15   These updates fix security vulnerabilities that are mentioned in the security bulletin,  APSB20-18.   Please update your ColdFusion versions today. Let us know if you face any issues while installing the updates. Your feedback is essential to further enhancing the product.   We thank you for your continuing support.

For security reasons, I am uploading photos to OUTSIDE the /inetpub/wwwroot/ area on my server. To c:\isolate\Then emailing the admin a copy of the photo for admin to approve photo. How do I get the photo display???Under normal circumstances, I simply do a:<img src="http://www.domain.com/images/photo_name.jpg">But what when it's outside the web root?I have tried what I thought was the obvious<img src="c:\isolate\photo.jpg">I do not get an "error" (a "symbol" top left of the image) but I get a blank. What am I missing?Not really a CF issue, more an HTML one?   

So I can create a CFForm and add 1 record to the database, working good.I am trying to add multiple records, but getting all sorts of issue, seached the internet but coming up empty.I found a javascript that lets me add another row to the form/table, works great in adding the form, however when I try to add the data I am either getting "Variable not defined" or itf I have 2 rows on the form then both datafields gets added to the same cell in the db twice.<FORM><cfform action="add.cfm" method="post"><table id="dataTable"><th><td></td><td>Activity</td></th><tr><td><INPUT type="checkbox" name="chk"/></td><td><cfinput type="text" name="activity" id="activity"></td></tr></table><INPUT type="button" value="Add Row" onclick="addRow('dataTable')" /><INPUT type="button" value="Delete Row" onclick="deleteRow('dataTable')" /><!--- submit button ---><cfinput type="Reset"

I've had essentially the same site-wide missing template and error handler setup since CFMX. However, with CF2018, something isn't right.  I'm using Windows Server 2018, Apache 2.4, and CF2018 (w/update9). In past setups, I've had entries like this for CF site-wide missing template and error handlers:/404error.cfm and /500error.cfm However, the CF administrator says this (even though these files are in the root folder of my site):The file specified as the site wide error handler does not exist. The default error handler will be used until a replacement is created.The file specified as the site wide missing template handler does not exist. The default missing template handler will be used until a replacement is created. Even so, if I request an non-existent cfm page, the expected error page is displayed.  Apache has error settings in httpd.conf for non-cfm pages like this: ErrorDocument 500 /500error.htmlErrorDocument 404 /404error.html However, b

Hi, I have Use J2EE session variables enabled on my server and now want to rotate the corresponding jessionid on login. I used to rotate the inbuilt coldfusion session variables using sessionRotate but now have no need so replaced this in my code with jeeSessionRotate (https://www.petefreitag.com/item/829.cfm).  I have also added the relevant code in onSessionStart but I keep getting an error a few lines after calling jeeSessionRotate. The error happens when I try and set some session variable and I get an "set attribute... session has already been invalidated" error because its trying to use the previous session. I assume the code in onSessionStart would cater for this. Am I missing something along the line here? I'm calling jeeSessionRotate on successful login and later on in that file i'm setting some variables. Seems from the post that all required was to create the new function and add the code to onSessionStart and it should work. Anyo

Running Windows, CF 2016, SQL Server db 2008R2Creating new queries that I need assistance on how to implement CFQUERYPARAM into the code.Below is an example of the code without the CFQUERYPARAM (my calendar dates are a text field, not a date field in the SQL Server db): SELECT date, day FROM calendar   WHERE (calendar.date >= '#todays_date#' and calendar.type = 'B')Is the placement of the CFQUERYPARAM correct on the below?  I haven't been able to find anything showing this type of SQL code.SELECT date, day FROM calendar   WHERE <cfqueryparam value="calendar.date" cfsqltype="cf_sql_char"></cfqueryparam> =                (<cfqueryparam value="'#todays_date#'" cfsqltype="cf_sql_char"></cfqueryparam> AND            calendar.type = 'B')I was able to find documented that you need not use CFQUERYPARAM around constants.Verification wo

I'm trying to find out what Coldfusion actually does when you instantiate or invoke a web service as a coldfusion object, either with the cfobject or cfinvoke tags.  Let's say I have the following code:<cfinvoke webservice="https://#application.webServiceURL#/getArticle.cfc?wsdl" method="getArticle" returnvariable="myArticle" timeout="10"> <cfinvokeargument name="Article" value="3"> </cfinvoke> What's actually happening behind the scenes here?   Is Coldfusion making an HTTPS request?  Is it a GET or a POST request?  Or is something else I don't know about?  What is the functional difference between that syntax versus something like this:<cfhttp url="https://#application.webServiceURL#/getArticle.cfc?method=getArticle&Article=3" method="get" result="resultJSON" timeout="10"> <cfhttpparam type="header" name="Accept" value="application/json" /> </cfhttp> <cfset myArticle= DeSerializeJSON(resultJSON.FileContent

I'm following the example usage as described here https://helpx.adobe.com/coldfusion/using/docker-images-coldfusion.html to create datasources using my setupColdFusion.cfm. I can create datasources just fine but apparently the default datasoruces cfartgallery, cfbookclub, cfcodeexplorer and cfdocexamples are not yet created when the setupColdFusion.cfm is run. Thus, statements like:  datasource.deleteDatasource("cfartgallery");in my setupColdFusion.cfm will result in errors like:  coldfusion.runtime.UndefinedElementException: Element cfartgallery is undefined in a Java object of type class coldfusion.server.ConfigMap.What is the suggested way to delete unwanted datasources at setup?

I have a fixed numeric list, let's say that's a list of numbers from 1 to 50 myfixedlist=1,2,3,4,5 etc.etc I then have another list which contains some of the values in the list above variablelist = 10,12,20,50 I need to create another list that gives me all of the values in myfixedlist that is not in variablelist Does anybody know of an efficient way to create this list in one swoop, using a CF command that doesn't involve a loop and lots of CFIF's

Hello, all, Just poking my head in to see if anyone else has registered for CFD2020?  I'm looking forward to some of the webinars.  Charlie Arehart, Dave Watts, and Pete Frietag, to name a few.  I don't think I'll have time for every webinar, but I'm going to make the best of it, as permitted. V/r, ^ _ ^

We are planning to upgrade to Coldfusion 2018. Is this CF2018 compatible with MS Windows OS 2016?

Hello,We have a server that was running fine...the CF service running as Local System. We renamed the server. Now, with the service running as Local System, we get 500 errors. There is nothing in the CF Error Log. The IIS log looks like this (ip addresses obfuscated):xxx.xxx.xxx.xxx, -, 5/15/2020, 9:52:37, W3SVC1, IPTest, xxx.xxx.xxx.xxx, 400, 122, 86238, 500, 0, GET, /, -, When I run the service under my network account (which is an admin on the machine), everything works great. I added another network account to the machine as an admin, started the service logged on as that user, and get the 500 errors again. Any thoughts? Thank you!Judi

Hi Team,We have our coldfusion application server running standalone in windows server. Now, we are planning to perform containerization. In this approach, we are trying to create windows image with coldfusion.So, can you please confirm whether windows based docker image for coldfusion is available.If available, do we need to get a seperate license for the same. Thanks. 

Hi,Our site was tested by one of the security scanner companies and found known vulnerability. It sounds as "Information Leakage is an application weakness where an application reveals sensitive data".  I need help to update server settings to hide error details, not do display server technlogy details. They run curl command as:    C:\curl\bin\curl.exe -i -s -k -X "GET" -H "Accept: application/json,text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5" -H "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7" -H "Accept-Language: en-us,en;q=0.5" -H "Host: whs'check" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0 Software Security Group" "https://www.[mysite.com]/"    The output is resulting in java stack error as:    <!doctype html><html lang="en"><head><title>HTTP Status 400 – Bad Request</title><

So I am trying to convert my JSON into a cfquery object to use it in my application.Here is what my JSON looks like. Its a structure containing an array of structures.  But when I look at other CF posts on this topic I see the JSON data looks like this.A Structure of Arrays. Which there is a lot of documentation on how to work within cf.  QUESTION: How do I get my deserialized JSON file to be a Structure of Arrays instead of a structure containing an array of structures

Hello, Just wondering how people would handle the following problem. So we have export functionality which is called via a JavaScript post. Now this export could take a couple of minutes to generate so I'd like to explain that to the user and let them carry on to other pages and eventually notify them when their download is ready. My immediate thoughts were to have a scheduled task running which would be checking a table every couple of minutes to see if there was any exports generated in the previous 2 minutes for the logged in user and if so could Let them know. Problem is I don't want a scheduled task running away when there may be no exports to be downloaded. It just seems like unnecessary processing. Anyone any ideas on how to accomplish this in the easiest and most elegant manner. Thanks

Hi there,I have a simple xlsx with 5 columns and 6 rows created in excel 2010.      1234514345123451234512345 When I use <cfspreadsheet action="read" src="#path##cffile.serverFile#"columns="1-2" rows="2-6"query = "getProductionDAta" sheetname = #worksheet#> and do a cfdump, I get this: query  col_1col_2col_3col_4col_5112[empty string][empty string][empty string]214[empty string][empty string][empty string]312[empty string][empty string][empty string]412[empty string][empty string][empty string]512[empty string][empty string][empty string] Looks like it is reading the columns that I don't want and just clearing them.  Normally, that is fine as I know how many columns I am requesting and can ignore the extra columns.  But in production, I am trying to extract a few hundred columns from a large spreadsheet and there are around 1000 blank columns in the query result. Just wondering whether this is normal behav

I'm looking for a tutorial for converting my older Access databases (running on CF9) to MySQL so I can upgrade to the latest CF.  Is there one around?

Hi, Is there a reliable function to convert a specific date (with hours set as 00:00:00) to UTC time in UNIX epoch format? I have some success, but many of the epoch times are wrong. I need a date in UTC that is always set to midnight. The time is the issue. I've used a number of functions mentioned on the forums and none work all of the time. So if a person enters a date of 22/9/1970 (dd/mm/yyyy) I need a epoch date in milliseconds that is exactly for 22/9/1970 00:00:00. This is what I have so far: <cfset tzinfo = GetTimeZoneInfo()><cfset offset_seconds = tzinfo.utcTotalOffset><cfset startDateEpoch = CreateDateTime(1970, 1, 1, 0, 0, 0)><cfset dobDate = CreateDateTime(Year(MY_DATE), Month(MY_DATE), DAY(MY_DATE), 0, 0, 0)><cfset DATE_EPOCH = (DateDiff("s", startDateEpoch, dobDate) + offset_seconds) & "000">   Problem is, the hour is sometimes 23:00:00, not 00:00:00, or 01:00:00 - always an hour around midnight. I am trying

Hello community, hope you are all doing well and safe.I am running a script to insert all email information within a particular folder to a Database table.It is working fine but it is starting form the oldest ones instead of the most recent ones.This is my cfimap block: I am doing 4 emails at the time otherwise the process is slow.Is there a way to revert the "get all" order, getting the most recenct first? Thank you in advance!

Hi,Can anyone please tell me if ColdFusion2018 and REDIS (on Azure, or even another REDIS service) are currently viable?Thanks,Mark