which is better - cfx_image or cfimage?
Rather than having the site owner have to create thumbnails for each product, I was planning on having cfimage resize the images as needed. I am having a security issue that support is working on with me. The cfimage only needs to run once so performance is not a huge issue. Looking through the SBA knowledge base, I saw an article on cfx_image. Is this a better solution? My current solution uses a background color that matches the site's, so I am not sure if this is possible with CFX_image. Anyone know? Thanks! ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358661 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Mapping differences between CF9 and CF10?
I'm moving from CF9/IIS/Win2008 to CF10/IIS/Win2012 and am having issues with my Coldfusion mappings. Both machines have the CF apps in C:\Webroot\ On CF9 I have one mapping in the admin \ maps to C:\Webroot\ With that mapping, any absolute path in CFML is relative to that. e.g. I can reference "\" from within and it knows what it's talking about. This doesn't work on the CF10 install. I have to manually map "\" to "C:\Webroot\" in the admin or application.cfc to get it to know where things are. How can I get CF10 to think map correctly? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358660 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
security issue with reading file with cfimage read and write
/Had it working a couple of times but I think I am having pathing issues here and there. NOt sure where I am off... Any help is appreciated... ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358659 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
httponly and cookie-secure
Not sure what I am missing here. We are running Coldfusion 9.0.2 in a clustered environment. I added the -Dcoldfusion.sessioncookie.httponly=true to the jvm.config file. I restart the coldfusion instances. Run an application scan and it still says the y are not httponly (also check using Chrome and it says the same thing). I also added the true true to the jrun-web.xml file in each cf instance as well and the scan comes back with the cookies not being set to secure. This is a very straight forward process that I have implemented on other setups.. so I am really puzzled as to why this is not working on this current environment. Any ideas? I am using CF 9.0.2 w/ built-in JRUN and Windows 2008 R2 OS. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358658 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
