@Charlie, The hotfix from July was from July 2011, and was for CFBuilder 2.0.0 not for 2.0.1 (CFBuilder 2 Updater 1).  I'm guessing the hotfix is already rolled into the Updater 1. -Carl V. ... View more

It's possible some JVM tuning may be in order.  This can be a very complex process.  If this is something you aren't comfortable doing yourself, there are a few consultants who could assist for a fee (Charlie Arehart and Mike Brunt are two that come to mind). Upgrading the Windows version and adding memory will only help up to a point if you are running a 32-bit version of your operating system, as the 32-bit version of Java can typically only utilize up to about 1.8 GB of memory.  If you really want to give ColdFusion more memory, you should consider using a 64-bit operating system and the 64-bit version of Java.  I'm not sure if you can run ColdFusion on 64-bit though, so make sure that your edition of ColdFusion is supported on 64-bit operating systems (I know ColdFusion 9 Standard and Enterprise are, but I'm not sure about ColdFusion 8). -Carl V. ... View more

@Adam, You rock!!!  I had looked at the CFBuilder.ini file, and didn't see an argument in there for pointing to the internal JVM, so I assumed there wasn't a way to do it.  Thanks for correcting that misapprehension. -Carl V. ... View more

Also, did you install ColdFusion using the "Secure Profile".  If you did, you have to explicitly add IP addresses that can access the Administrator console (see the security settings). ... View more

You might want to check out Charlie Arehart's blog entries on hotfixes: http://www.carehart.org/blog/client/index.cfm/2010/12/11/cfmyths_latest_installer_includes_all_updates http://www.carehart.org/blog/client/index.cfm/2010/12/12/cfmyths_cumulative_hotfixes. -Carl V. Message was edited by: Carl Von Stetten ... View more

After looking at the original post again, I realized that CFBuilder ships with Java 6 JRE included in the installation, and that is what CFBuilder is using (rather than the Java 6 or 7 you installed separately).  I wonder if the JRE that installed with CF Builder is damaged in some way?  Unfortunately, there doesn't appear to be a way to tell CFBuilder to use a different JRE (like you can in ColdFusion itself).  However, if you're feeling adventurous, you can try the approach Paul Kukiek used to upgrade his CFBuilder installation to use Java 7: http://blog.kukiel.net/2011/08/how-to-upgrade-coldfusion-builder-2-to.html. -Carl V. ... View more

cf_junkie, Since you have sessionmanagement=true, you have enabled user sessions.  This means you can utilize the session scope.  Put your user's ID in the session scope (e.g.: session.UserID) when they log in.  As long as the session remains active (20 minutes is what you set your session timeout to, so as long as the user moves to another page within 20 minutes their session stays active), the UserID variable will remain in the session scope.  Now you don't need to pass any URL parameters just to maintain the user's identity.  Let ColdFusion do the "heavy lifting" on this for you. -Carl V. ... View more

Are you talking about read-only access to those portions of CF Administrator Console?  If so, then you can't.  Your choices there are either no access or full access.  You can grant access to the Administrator APIs to users, and still prevent access to the Administrator Console. -Carl V. ... View more

When you say you can query the table through SQL, do you mean using an external tool from ColdFusion?  Could it be a permissions issue with the account you configured in CF Admin for that datasource (which might be a different account from the one you use in the external tool)? -Carl V. ... View more

Are you using a source control plugin for Git or Subversion?  If so, they might not disappear until your next commit. -Carl V. ... View more

@Aaron - I just voted on that ticket. @Adam - couldn't agree with you more. Thank you, -Carl ... View more

OK.  Couldn't remember if you had said IIS or built-in, so that was a "red herring". -Carl V. ... View more

WolfShade, Just curious.  Does the IIS website for this application have the "jakarta" virtual directory created?  I ran into "permissions" errors last night on a CF10 site I created after I had run the WSCONFIG tool, so this particular site didn't have the "jakarta" virtual directory. -Carl V. ... View more

@Aaron, Thanks for the tip on the file extensions!   Under CF9, I was capturing the results of scheduled tasks to .htm files (CFDump outputs) for review.  Under CF10, I had to write to .log files and then remember to try to use "Open with" to open in a web browser instead of my default text editor.  I added .htm as a valid file type in neo-cron.xml, and now I can double-click those .htm result logs and open them in my web browser. -Carl V. ... View more

I think the version of Eclipse inside CFBuilder 2 is still on Java 6.  Try installing Java 6 instead of 7 to see if it resolves your issue. -Carl V. ... View more

No.  ColdFusion doesn't create its own user account.  It defaults to LocalService (I think).  Try enabling the Administrator account, and logging in under that account.  Sometimes Windows 7 will not give a user that is a member of the Administrator group full Administrator rights to everything.  Logging in as the actual Administrator account should allow you to see all the internal system accounts. You might actually want to create a ColdFusion user, and not make that user a member of Administrators.  You'll need to grant that user read and modfiy rights to the C:\ColdFusion9 directory, but nowhere else on your computer (unless you want ColdFusion to access files in other places).  Then go into the Administrative Tools --> Services applet and change the Login As settings for the "ColdFusion9 Application Server" service to the ColdFusion user. ... View more

Most of the internal system accounts don't show in the User administration.  But you should be able to see them when you examine the security on a folder or file. Again, what account is the ColdFusion service running as? Right click on the XCFC folder and select Properties.  Click on the Security tab. What group and user names are listed at the top?  If the account that ColdFusion is running as is not listed, add it.  Click the Edit... button.  In the dialog that pops up, click Add...  Another dialog will pop up.  Click the Advanced... button to open yet another dialog.  On this one, click Find Now. The bottom of this dialog should show all of the user and groups that exist on your computer, including all the internal system accounts.  Find the one that the ColdFusion service is using in the list, select it, and click OK.  Click OK to close the previous dialog.  That user will now show up in the Permissions dialog, with Read, Read & execute, and List folder contents checked.  If ColdFusion doesn't need to write to this folder, then click OK to close the permissions dialog, and OK to close the properties dialog. ... View more

The directory structure you cited shows the path as C:\ColdFusion9\xcfc, but the error message indicates your mapping may actually be pointing at C:\ColdFusion\xcfc (it's missing the 9 at the end of ColdFusion). -Carl V. ... View more

Are your servers behind a firewall that prohibits direct internet access?  If so, you might need to configure some kind of proxy server.  There is also supposed to be a way to set up your own update server, but I haven't looked into that myself.  If that applies to you, I'd look into the Adobe documentation to see how to do it. -Carl V. ... View more

Are you logged into CF Administrator as the default "admin" user or as another user?  I found that I couldn't run the updaters properly unless I was logged into the Administrator as the "admin" user. -Carl V. ... View more

Emily, You'll have to tap into JavaScript for this.  Take a look at the onChange attribute for <select> elements.  You can write a JavaScript function to clear the 2nd select element and resubmit the form, then call this function from the onChange attribute of the first select element. HTH, -Carl V. ... View more

Dan, I don't know where 'security plans' was mentioned in my post.  My conclusion is that query params and security plans are both good things, but they are unrelated. I'll stand by my SQL injection protection statement though.  When you use <cfqueryparam> and include the CFSQLType attribute in the tag, you not only tell your RDBMS what the data type of the parameter is, but if it is a string, it is automatically wrapped in single quotes.  This will prevent any embedded SQL statements from being parsed and executed by the RDBMS during the execution of the query.  This is backed up by the Adobe Livedocs section on <cfqueryparam>.  Utilizing <cfqueryparam> is Adobe's recommendation, as stated at the top of that document.  Here is an excerpt: "Adobe recommends that you use the cfqueryparam tag within every cfquery tag, to help secure your databases from unauthorized users. For more information, see Security Bulletin ASB99-04, “Multiple SQL Statements in Dynamic Queries,” at www.adobe.com/go/sn_asb99-04, and Accessing and Retrieving Data in the Developing ColdFusion Applications." I'll also stand by the explained behavior of query plans, as this too is backed up by the same Livedoc.  It refers to this functionality as "SQL bind parameters", and explains it this way: "To benefit from the enhanced performance of bind variables, use cfqueryparam for all ColdFusion variables, and your DBMS must support bind variables. If a DBMS does not support bind parameters, ColdFusion validates and substitutes the validated parameter value back into the string. If validation fails, it returns an error message." Looks like Jason beat me to this response while I was busy verifying the Livedocs! -Carl V. ... View more

Also, SQL injection protection is not the only benefit of using <cfqueryparam>.  By parameterizing queries, the RDBMS can reuse query plans effectively when processing each <cfquery> call.  Let's say this same CFM page is called over and over with different values in the where clause.  If you don't use <cfqueryparam>, the RDBMS will have to calculate the query plan every time the page is called, which will overall can increase the time taken to return results to ColdFusion.  If you use <cfqueryparam> however, the RDBMS will attempt to reuse the query plan from the last time the page was called (as long as the SQL query structure is the same), and will likely perform the query and return the results faster.  Even if you have a query with conditionally included parameters (like Jason suggests), each unique combination of included parameters will result in a distinct query plan, and the next time that same combination of included parameters is passed that specific query plan will likely be reused, which still saves RDBMS processing time. -Carl V. ... View more

I believe CFC paths in cfinvoke are relative to the webroot (unless you are using a mapping), so you should only need "cfc.myCFC" for it to work. -Carl V. ... View more

I was starting to wonder if there wasn't some kind of bug.  Nothing else was making sense. Thanks for filing the bug with Adobe! -Carl ... View more

Try removing the whole <defaultDocument> branch (all the way through </defaultDocument>).  It is redundant with what is already in the server config settings.  Other than that, I'm out of ideas at this point. -Carl V. ... View more

The only other thing I can think of is to look at any web.config files in the root of each site.  Are there any leftover CF9 settings in them? ... View more

In IIS Manager, click on the server (not any of the sites), and then open the ISAPI and CGI Restrictions feature.  You should have some entries like this: Check if you have the last one. ... View more

Anything in any of the ColdFusion or IIS logs?  And is that error message in your initial post one of IE's "friendly" error message (if so, turn off that setting in IE so you can see the more detailed message). ... View more