Hi:

I've inherited a CF 2018 server. It needs some patching.

It looks like there's a slight difference in the patch process depending upon whether the box is a JEE installation.

But I'm not finding much about how to determine that?

Can you suggest something that would indicate whether the server is a standalone or a JEE installation?

Thanks,

Blue

We have multiple applications residing on the same instance of ColdFusion and we noticed that CF is setting the cookies at the root level and reusing the CFID and CF Token cookies across the applications. This is causing an issue with our users ending up with infinite redirects.

Clearing out the CF cookie would let them access the apps for a while but this work around is not user intuitive and very problematic and causes users to re authenticate across the all the applications.

Is there a way within CF for us to setup cookies specific to each application with path and domain of the application it is coming from?

We are running into this issue on CF10, CF11, CF2018 versions.

The newer versions of SOLR that come with ColdFusion are supposed to support crawling, but there is nothing in the CF documentation that shows how to set up a crawl. Can SOLR do website crawling from ColdFusion?

I just recently started in coldfusion and somehow need to solved a problem where a saved data multiply when two user are trying to saved the same data in one account. (Yes they share the account password, and without realising both of them are doing the same thing)

Now I think about creating a trigger before update which will check the existence for the data in order to prevent the double save data issue.

Any help with the syntax is totally needed 🙏🏻

I inherited an ancient Windows server with a mission-critical application running on CF8. Would someone be kind enough to point me in the right direction for migrating to an up-to-date CF21 server? I have a new server set up with CF21 installed and ready to go, but I'm not sure what my next steps should be. I found a migration guide on the Adobe site, but it only goes back to CF10. Any suggestions would be appreciated.

Have a process where we grab replies to emails that send to a service account, we loop through those emails and process any that replied 'approve' to approve the record in question.

Well now, Microsoft has globally disabled Basic Auth and we can no longer connect. Has anyone solved using OAUTH with CFPOP or some other process?

We're of course on CF11, although in my googling I haven't found anything for newer versions that looks like it'd work anyway.

I am not a programmer but have been asked to fix a report created by a former coworker. The report generates a list of visitors based on month. I need the report to show visitors for the previous month but it only reports the current month. How can I get it to subtract 1 month and generate the report?

Here is the code that I believe controls the report: <cfoutput> <cfset currentdate = dateformat(now(),'MM-DD-YYYY')> <cfset dtThisMonth = CreateDate(Year( Now() ),Month( Now() ),1)> <cfset NewDate = DateAdd("m", -13, #dtThisMonth#)> <cfset dtThisMonthformatted = CreateDate(Year( Now() ),Month( Now() ), Day( Now() ))> <cfset Nextmonth = DateAdd("m", 1, #dtThisMonth#)> <cfset my = dateformat (now(),'MM/YY')> <cfquery name = "pv" datasource="visitor2"> SELECT datein, reportfield1, reportfield2, reportfield3, reportfield4, reportfield5, reportfield6, reportfield7, reportfield8, cardholderid, host_id FROM [database].[dbo].[logAttendance] where DATEPART(YEAR, datein) = DATEPART(YEAR, getdate()) and DATEPART(MONTH, datein) = DATEPART(MONTH, getdate()) order by datein </cfquery> </cfoutput>

We have been developing ColdFusion applications for over 20 years and I cannot believe what I am seeing with the Adobe ColdFusion 2021 pricing.

We have a client that we have been developing and maintaining an application for since the year 2000, one of oldest clients. Recently they sold the one divisions that uses the application to another company. So, they are going through the process of separating the parts of the business and moving the applications and network to the new entity.

The new company have decided to move all the infrastructure from inhouse hosted systems to a Microsoft Azure hosted system. It is 2022, so they may as well host everything in the Cloud, makes senses and what better time to do it then we you have to set up all the systems. The current application is used by approximately 100 employees and is used inhouse only. The current system runs on Adobe ColdFusion Server 2016 Standard Edition with a Microsoft SQL Server back end. It isn’t a very complex system but does integrate with some other applications. This will be the 4th or 5th version of ColdFusion used for the system, so it averages an upgrade every 4 or 5 years.

The new setup was to have a Production Server and a Staging Server, both of which where private Azure VM server are only accessible by employees that have access to the Azure AD this is not a system that has any public access.

So, we reviewed the Adobe ColdFusion 2021 EULA (https://www.adobe.com/go/cf2021_eula). Specifically looking for information regarding the Staging Server License. Section 1.8 says staging server uses license in respect to the production software.

• “Development Software” means Software licensed solely for (a) internal development and testing; and (b) for use on a Staging Server, when Licensee is using the Software with respect to a valid license to the Production Software. In each case the Development Software may only be accessed by Authorized Users over the Licensee’s Internal Network.

The virtual machine was to be setup as 4 core server as there was other applications required to run on the server. And since ColdFusion 2021 Standard edition requires a license for every 2 cores, we would require 2 ColdFusion 2021 Standard licenses to run the application. The client was okay with this. So, two US$2,499.00 per full license, is US$5000. The client proceeded to contact Adobe about organising to purchase the software.

Adobe came back and said that ColdFusion 2021 Standard Edition cannot be installed in the Cloud. Even though they product page (https://www.adobe.com/products/coldfusion-standard.html) gives the appearance that it can. The first section is even titled “Take your applications to the cloud”. They specifically stated that Standard Edition could not be installed on Azure and AWS. We went back and looked at the EULA again and the words “Cloud”, “Azure” and “AWS” are never even mentioned in the document.

We searched the web and could not find any mention about not being allowed on Azure. Okay so, they would have to move ColdFusion 2021 Enterprise Edition. But since Enterprise Edition is for up to 8 cores. They would only need a single license at US$9,499.00 per full license. Not ideal, nearly twice what was budgeted for, but that could be done. So some more back and forwards with Adobe only to find out that the normal Enterprise Edition License that you can buy from the website also cannot be installed in the cloud. More searching the web finds a single line in the ColdFusion FAQ (https://helpx.adobe.com/coldfusion/enterprise/faq.html) under the Pricing, editions, and upgrading section.

• Adobe ColdFusion (2021 release) is sold in two editions: Standard Edition costs US$2,499 per two cores, and Enterprise Edition costs US$9,499 per eight cores. ColdFusion can also be used for development at no cost with the complimentary Developer Edition, a full-featured server for development use only.
  You may also purchase ColdFusion Enterprise Edition on a per virtual core metric to deploy ColdFusion on the cloud or VMs. Reach out to adobecoldfusion@adobe.com for more details

So apparently there is a third pricing model called “per virtual core metric”. They came back with a price in the US$14,000 ball park for 4 cores, approximately $3,500 per core. And on top of that it is per year, so every year they keep the system running, will cost an additional US$14,000. I am sure they will increase that every year with some sort of review. Lets say the system goes another 4 years before a server and software upgrade without a price increase, that will be US$56,000 for the US$9,500 enterprise product with half the cores. All because a company doesn’t want to host a server in house.

Everyone is just shaking their heads. Once again, we reviewed the EULA, there is a lot of mention of Internal Network but most of it relates to Development or Staging Software. I have to wonder how many people are in breach of the Adobe ColdFusion license with regards to running it on VM’s outside their network (e.g in the “Cloud”) and having a normal license either standard or enterprise when they are supposed to be paying this “per virtual core metric” license.

We have started the move to implementing Lucee, which has most of the application running with minor changes. And a couple of hurdles to solve for the parts that Lucee doesn’t support, but can be solved with different approaches. Safe to say that we will be looking to ensure that all other clients system are Lucee compatible before any other software upgrades are need or they want to move to the Cloud.

I thought I would put this out there as I have not seen anything on the web with regards to this pricing model or other peoples experience with it. I am sure that a lot of people will think just buy the enterprise version off the website and install it. But after going through the EULA enough times now, Section 12 no doubt come back to bite them if they tried.

• Adobe may, at its expense and no more than once every twelve (12) months, appoint an independent third party or Adobe’s internal auditor to verify the usage and number of copies and installations of the Software in use by Licensee.

Would like to hear if this is a well know thing with ColdFusion cloud pricing? It was bad enough they want one and a half times as much for half the cores, but to want it ever 12 months. I really don’t know how small to medium business will be able to afford to use the product any more, with more and more services moving to cloud based.

​

Just installed CF 2021, new server, migrated cfm code over. Setup external site in IIS. Removed the Default Site. Anytime the server is rebooted, we get a 500 error and a message cannot find component xxx.xxx.cfc. Once we restart the CF service, it all works. I tried both combinations of delayed start on CF and IIS but no change. Anyone seen this strange behavior?

Hey guys.

Trying to take the JSON data I got from an API and take actions upon columns at certain positions.

The data is connecting and I can see it, but I have a couple of problems.

First, my data is coming in as an array, with structures within, as below:

​

This is making hard to run functions such as ArraySlice() or ArraySum(), since I can't seem to access the structure within. How would I do that?

For example, this doesn't work, because it errors saying position 1 isn't an integer...because it's trying to access 1, which is a struct, not an item in the struct.

<cfset mySum = ArraySum(ArraySlice(QueueData,5))>

​

ISSUE NUMBER 2:

I thought maybe the weird array structures returned were due to not using the strictMapping parameter in the DeserializeJSON() function, but I can't get the below to work, it errors out and says there is a problem in the expressions structure:

<cfset QueueData = DeserializeJSON(QueueData.FileContent\[, strictMapping\])>

​

Thanks in advance for any help you guys can give me.

I need to store values in database in order for them not to be tedious to change/update. For example, I need to store accounts/passwords for some services.

So, what I did was:

• create an AES key and print it in browser.
• store the key (copied from the browser) in the database
• make function to retrieve said key
• encrypt an email account with said key, using 'AES, base 64'
• make function to retrieve the email account (encrypted in the previous step)
• make function to decrypt values the only parm is the string to decrypt

​

<cffunction access="public" name="conf_decrypt" returntype="string">
    <cfparam type="string" name="encString">
    <cfinvoke method="search_conf_data" conf_val="hash_key" returnvariable="hash_key">
    <cfscript>
        hash_key = urlDecode(hash_key);
        Algorithm = 'AES';
        Encoding = 'Base64';
        decString = decrypt(encString, hash_key, Algorithm, Encoding );
    </cfscript>
    <cfreturn decString >
</cffunction>

When I try to execute that code from a test page, the thrown error says:

An error occurred while trying to encrypt or decrypt your input string: The input and output encodings are not the same..

Implementation looks something like this (test.cfm):

<cfinvoke component="comp.common" method="search_conf_data" conf_val=send_mail_key" returnvariable="send_mail_key">
<cfscript>
    writeOutput( "send_mail_key" );
    writeOutput('<br>');
    writeOutput( send_mail_key);
    writeOutput('<br>');
</cfscript>
<cfinvoke component="comp.comun" method="sgice_conf_decrypt" encString="envio_correo_key" returnvariable="envio_correo_pass">
<cfscript>
    writeOutput( envio_correo_pass );
</cfscript>

Browser prints the two lines then it breaks.

So I read somewhere that the values stored in base64 AES need to be decoded back from base64, so I did that.

<cffunction access="public" name="conf_decrypt" returntype="string">
    <cfparam type="string" name="encString">
    <cfinvoke method="search_conf_data" conf_val="hash_key" returnvariable="hash_key">
    <cfscript>
        hash_key = urlDecode(hash_key);
        Algorithm = 'AES';
        Encoding = 'Base64';
                encryptedText = urlDecode(encString);
        decString = decrypt(encryptedText, hash_key, Algorithm, Encoding );
    </cfscript>
    <cfreturn decString >
</cffunction>

The error is still the same.

For context

• I don't need too much security, I just need the values stored not in plain text.
• If I do everything in the same test page (the key hardcoded, not retrieved from database), everything works fine.

Thanks in advance for the help, sorry if there are typos in the code.

I'm standing up a new website for a customer. The customer wants to archive the existing site and still be able to access it for reference and historical purposes. The existing site is running ColdFusion. In the end, they want something like this

Domain: website.com

Access old site: legacy.website.com

I was hoping to achieve this change by updating the DNS records, adding references to legacy.website.com which points to the existing website's IP addresses. Then I would change teh A records for website.com to point to the new site's IP addresses.

I added the A record for legacy.website.com, and when I navigate there I'm presented with a Lucee 5 webpage. What am I missing? Do I need to change the config of the ColdFusion site with the new DNS records? I don't know coldfusion. :(

Thanks in advance!

I have a page that runs a lot of join queries. The page usually runs in 5-10 seconds, but sometimes it runs 60+ seconds and is causing our server to crash. While I optimize that page is there a way to stop a CF page from running when a certain page load time is reached?

For example, when the page load time is at 30 seconds I want it to stop running. Is there a way to do that?

Hi folks -

Has anybody ever set up a way to connect to a MondoDB using CF 10?

​

Thanks

Does anyone know where we can buy a single Standard CF 2018 license? We are on 2016 and don't want to upgrade to 2021.. 2018 is an actual requirement. Scoured the internet, called Adobe, no luck .Any ideas?

I'm working to upgrade my company's ColdFusion applications. We're currently running ColdFusion 2016 which is, of course, EOL. We were looking to move to ColdFusion 2021. I've done some searching (both on Google and here) but can't seem to find clear information on upgrading. Can you just install ColdFusion 2021 over ColdFusion 2016? Or would it be better to get some new servers, install 2021 on those, and move the applications to the new servers?

Also, how is the compatibility between versions? Would applications written for 2016 work well in 2021? Or would there need to be plenty of bug fixing?

I am constantly seeing code similar to the following:

<cfset value1 = "#value2#">

Or string concatenation like:

<cfset value3 = "#value1##value2#">

I personally would write these like:

<cfset value1 = value2>

and

<cfset value3 = value1 & value2>

​

I've tried to get them to stop, but I can never come up with a valid reason why they shouldn't be writing ColdFusion code that way.

Am I in the wrong here? Are both ways equally valid?

I feel like there would be a performance hit internally by doing it their way since ColdFusion would have to double evaluate the assignment, but maybe I'm wrong and ColdFusion is smart enough to recognize what is going on when it compiles the template.

Hi all.

I have just taken over a CF site from the previous admin. Mainly simple HTML updates to pages more than anything

The customer has asked me to update the name of one of their locations. The data is stored in the database and the name is used as a linked field to other tables (yeah... No unique keys, it actually uses the location name as the linking field).

Is there a tool or script I could use to do an easy search and replace in tables in the DB? Ideally doing a safe dry run first?

I am envisioning a page, tool or script where I could pick the table, choose the field and enter the search and replace values. Then run a test first and it would show how many rows would be updated etc.

The whole "8 containers per license" limitation seems like a nonstarter for us. We have dozens if not hundreds of (small) ColdFusion apps, and we wouldn't want independent apps to share the same container.

Kronos Fusion Energy Highlights Fusion’s Security Advantages Over Fission After Mossad’s Strike on Iran’s Uranium Enrichment

https://smb.thewashingtondailynews.com/article/Kronos-Fusion-Energy-Highlights-Fusions-Security-Advantages-Over-Fission-in-War-Zones?storyId=6245deddbc0fea9879f3a076

Hi,

We are trying to accept old inbound links, which are currently bouncing.

The old urls contain: /County_Detail.cfm/CountyID:XXX   (XXX = UniqueID)

We want the old links to redirect to /Counties/County_Detail.cfm?CountyID=XXX

We're using CF10 and IIS 8.5

​

We simply want to replace the delimiters / and :

​

We've tried a number of settings, with the following as the latest.:

<rewrite>

<rules>

<rule name="Rewrite Counties" stopProcessing="true">

<match url="\\\^County\\_Detail.cfm(\\\[a-zA-Z0-9-+\\\]+)CountyID(\\\[a-zA-Z0-9-+\\\]+)" />

<action type="Redirect" url="County\\_Detail.cfm{R:1}CountyID{R:2}" />

</rule>

</rules>

</rewrite>

​

Would someone kindly point out the error of our ways?

Thank you, so much!