Your only hope in getting this patch for CF8 would be if you purchased an extended support contract for CF8, otherwise it has past its end of life date, and will receive no more updates of any kind. ... View more

In my opinion you cannot be PCI compliant on CF 7, it is an End of Life product for Adobe (see http://www.adobe.com/support/products/enterprise/eol/eol_matrix.html#63), meaning they no longer support or patch it, and there are security vulnerabilities that have come out leaving CF7 unpatched. You will need to upgrade to version CF9 or 10 (CF8 is now end of life to unless you have an extended support plan) ... View more

If you run the tool without options it runs a gui, but you can also run it from the shell, see this doc for reference: http://help.adobe.com/en_US/ColdFusion/9.0/Admin/WSc3ff6d0ea77859461172e0811cbf364104-7fd9.html ... View more

Regarding the nonFatalError, I have had that happen too on RHEL 6. I spoke with adobe engineering about it and they are aware of the issue, it is nothing you need to worry about. ... View more

I haven't used two versions of apache on the same server  myself but in theory I think it should work fine. You will want to run the wsconfig binary (in your case it is probably located at /data/cf8/bin/wsconfig)  to run the web server connector tool and then it will create an entry in /data/cf8/lib/wsconfig/{number} where {number} will probably be 2. The wsconfig binary should also edit the httpd.conf file to add the mod_jrun module config when you run it.  Make sure you backup your lib/wsconfig/ folder first.  You may be able to get this working without running wsconfig if you copy over the httpd.conf settings pertanent to mod_jrun from your first install, but I think apache 2.0.x is going to use mod_jrun20.so and apache 2.2.x is going to use mod_jrun22.so ... View more

It sounds like SELinux may be causing issue:  First check to see if you have SELinux in enforcing mode, if so you will need to run:  setsebool httpd_can_network_connect=1  To allow apache to make network connections to connect to the ColdFusion/Tomcat connector.  If that works your next result will probably be a 403 Forbidden, if so then you probably need to run chcon to allow apache to read / execute certain files, for example:  chcon --reference=/etc/httpd/modules/mod_rewrite.so /opt/coldfusion10/ config/wsconfig/1/mod_jk.so chcon --reference=/var/log/httpd/access_log /opt/coldfusion10/config/ wsconfig/1/mod_jk.log chcon --reference=/var/log/httpd/access_log /opt/coldfusion10/config/ wsconfig/1/jk_shm chcon -R --reference=/var/www /opt/coldfusion10/cfusion/wwwroot/CFIDE  Finally if your webroot is not in /var/www you will also need to run this:  chcon -R --reference=/var/www /your/web/root/ -- Pete Freitag Foundeo Inc. ... View more

You can probably ignore the casting, it is needed by the Java Compiler but CF uses reflection to invoke the java methods so casting should not be necessary. ... View more

Do you have more than 100 form fields in the FORM?, if so you might need to increase the postParameterLimit in ColdFusion admin (defaults to 100). More about that setting here: http://www.petefreitag.com/item/808.cfm ... View more

Why not just do <cfif arguments.name IS "NULL">IS NULL<cfelse> = <cfqueryparam value="#arguments.name#"></ciff> Also ListFindNoCase is probably not the correct function to use here, that is for dealing with lists, FindNoCase would be more appropriate... but that too may have an issue if the persons name is Nully it would still match. ... View more

Thanks for checking/clarifying charlie - I obviously misread that note as The setting is *now* exposed... ... View more

You can display any cookie in ColdFusion like this: <cfoutput> #cookie.cookiename# </cfoutput> If you want to see all the cookie names you can do this: <cfdump var="#cookie#"> Hope that helps. -- Pete Freitag Foundeo Inc. | HackMyCF.com ... View more

I believe it is restricted to localhost. You could write the bat file to invoke a cfm using something like curl.exe or wget.exe to make a http request. -- Pete Freitag Foundeo Inc. | HackMyCF.com ... View more

Yes you can give the JVM more memory if you are only using 1GB out of the 3 GB on your server. I would set the max heap size (in cf administrator) to 1024mb (1gb) instead of 200mb. If you are running 64 bit then you can go above 1gb, but if you are running 32 bit you can't get the max heap. You might consider setting the min heap size equivalent to or just below the max heap size, so you aren't wasting resources shrinking or growing the heap at runtime.  It's also worth noting that the slowness you are experiencing under load may not have anything to do with the heap size. The problem could be on the DB side of things, or elsewhere. -- Pete Freitag Foundeo Inc. | HackMyCF.com ... View more

CKEditor and TinyMCE are two popular open source WYSIWYG editors, ColdFusion 8+ also includes FCKeditor (the predecessor to CKEditor) which you can invoke via the cftextarea tag using richtext="yes". -- Foundeo Inc. | HackMyCF.com ... View more

Ben - actually I think 9.0.2 does now have a setting for this in the ColdFusion administrator, it was listed in the release notes, I have not yet tried 9.0.2 so I can't confirm. -- Pete Freitag Foundeo Inc. | HackMyCF.com ... View more

Take a look in your ColdFusion logs folder and the Windows Event Log, there is a number of things that might cause this not to start - but also make sure you try to stop the service (and give it time to fully stop) and then try hitting start, instead of using the restart button. ... View more

Hi Dave,   Portlets are not a hugely popular feature in CF, but there certainly are some people using it.  As for the HMTL5 charts, they are not supported in CF10 standard, which is unfortunate (that link I provided also shows that they are "Not available").   -pete ... View more

Hi Dave,  According to Adobe's buying guide it lists WSRP as available on both Enterprise and Standard: http://www.adobe.com/products/coldfusion-enterprise/buying-guide.html ... View more

ColdFusion 9 isn't supported on RHEL 6, you need to run 5, specifically version 5.3 is supported, see: http://www.adobe.com/products/coldfusion/pdfs/cf9_support_matrix_4_ue.pdf  ColdFusion 10 adds support for RHEL 6.1 (it was just released last week). ... View more

Nothing builtin to CF8 will tell you - the best way to get an idea is to look at the lib\updates folder and see what jar files are in there from that you can determine which patches have been applied (though some patches did not require placing a jar in the updates, they require updating files in CFIDE or elsewhere).  CF10 will have a hotfix updater builtin (you can checkout the public beta now) which will keep track of which have been installed. ... View more

One way is to run http://hackmycf.com/ on it, the paid service does a bit more inspection. The paid service can tell you 100% if you have all security patches for CF 9.0.1 for 8.0.0 it may not find all. ... View more

Two things to check:  1) make sure that you followed the installation instructions properly, there are a few jar files that you need to delete from the updates dir - if you missed that step you might see that error.  2) Is the page where you get this the result of a large form post, eg over 100mb or over 100 form fields? If so then you need to adjust settings, this is described in the KB article associated with the hotfix.  Hope that helps -- Pete Freitag http://hackmycf.com/ - Is your ColdFusion Server Secure? ... View more

Why not just use NULL (the SQL Keyword), it's not totally necessary to cfqueryparam it if the value is null. ... View more

Jeff,  Is it a 64 bit or 32 bit server? How much RAM is available to the OS?  It may not be a memory leak rather you may simply be running out of heap space, are you using the default 512mb?   When you run ColdFusion with a 512mb heap size on a server with 4GB of ram, ColdFusion will only be able to use 512mb of that 4GB. So you will certainly want to increase the heap size if it is at 512mb and you have more than 1gb of ram on the server.    Assuming you have roughly 2GB of ram on the server and If you are on 32 bit you can increase this to 1024MB (going much higher can cause CF not to start, but you should be able to get it higher if you experiment).  If you are on 64 bit you can go much higher, just make sure that you leave some room for the OS / IIS and anything else that may need to run.  SSL is likely not the problem, you would probably experience the same issue if you received the same amount of load you see on production on your development server.  As for which file to edit you want to edit:  {cf_root}/runtime/bin/jvm.config ... View more

Sure you can do this in CF using Java: <cfset factory = CreateObject("java", "javax.net.ssl.HttpsURLConnection").getDefaultSSLSocketFactory()> <cfset socket = factory.createSocket("foundeo.com", JavaCast("int",443))> <cfset socket.startHandshake()> <cfset certs = socket.getSession().getPeerCertificates()> <cfif IsArray(certs)>   <cfloop from="1" to="#ArrayLen(certs)#" index="i">                     <cfset cert = certs>                     <cfoutput>#cert.getSubjectDN().getName()# - Valid Until #DateFormat(cert.getNotAfter())#</cfoutput><br />   </cfloop>  </cfif> <cfset socket.close()> ... View more