CFTOKEN CFID cookies with long gibberish prefix... CF11?
Hi We have one CF web server running CF11 and noticed that the CFTOKEN and CFID cookies on that server have a long (51 char) string of random looking characters before the actual CFID or CFOTKEN numeric value. Ex: CFTOKEN = Z3epk1hxi861r0je68dw9xjrpf2oqa1vm0ygobljizhhw2d5gjh-22151980 Within CF, the COOKIE.CFTOKEN value looks normal... 22151980 from my example above. So, it looks like CF is adding the prefix when it sets the cookie and strips it off when parsing cookies for apps to use. We see the same prefix each time. (No other cookies have this prefix; we tried setting a CFTOKEN cookie value manually in code and the new value ends up with the prefix.) The problem if that we use domain cookies (for cross-server session management and user tracking) so these funky values are being presented to other web servers that are not running CF11 (all the rest of CF10), and they are getting confused by it. I didn't see anything like this mentioned in CF11 docs. I really need to disable it in the short term to keep things running smoothly until we have CF11 everywhere. Is this new behavior? Is it documented anywhere? Can I turn it off? (We are aware of the GUID session management cookie; for the time being we need to continue to use CFTOKEN CFID.) Help! Thanks Mark ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360386 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Enable Request Debugging Output not working
I have added 127.0.0.1 as a ip to serve debug output to, and I have also removed all ips to have debug info served to all ips. Neither results in output. On Sun, Apr 5, 2015 at 4:59 AM, Russ Michaels r...@michaels.me.uk wrote: Do you have any ip restrictions set for the debug output? On Sun, Apr 5, 2015 at 3:49 AM, Mark Spence markpence...@gmail.com wrote: For some reason, suddenly debug output has stopped working on my development machine. I'm not sure why. I have tried turning it off and on, restarting the server, restarting the box. Nothing has helped. Google has failed me. Running on windows 8.1 and IIS. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360377 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Enable Request Debugging Output not working
For some reason, suddenly debug output has stopped working on my development machine. I'm not sure why. I have tried turning it off and on, restarting the server, restarting the box. Nothing has helped. Google has failed me. Running on windows 8.1 and IIS. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360375 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Handling invalid recipient in mailing list
Dave, A) What is the error. Fixing the error will keep your loop going. B) Using a try/catch INSIDE the loop will allow you to keep it going - with the caveat that you will miss whatever email throws the error so you might want to log that inside the catch. -Mark -Original Message- From: Dave Long [mailto:d...@northgoods.com] Sent: Thursday, April 02, 2015 5:12 PM To: cf-talk Subject: Handling invalid recipient in mailing list I am trying to send a mass mailing to a somewhat carelessly created list of contacts using e-mail addresses which were not verified at the time of entry. Whenever the cfloop tag comes to an erroneous recipient, it quits and throws an error. Is there anything I can do to the code to make it keep going? Here's the code: CFLOOP list=#Form.SelectedRecipients# index=Recipient CFMAIL from=#Form.Sender# to=#Recipient# subject=#Form.Subject# type=HTML htmlheadlink rel=stylesheet href=http://www.northgoods.com/global.css; type=text/css //headbody bgcolor=black table width=800 align=center TR TD align=center colspan=2 table width=800 align=center border=4 cellpadding=10 bgcolor=blacktrtd strongfont face=Arial size=+1 color=##FF6600 #Form.Message# /font/strong /td/tr/table table align=center trth colspan=2strongfont face=Arial size=-1 color=##FF6600If you would like to be removed frombrour mailing list, please click here:/font/strongbr a href=http://www.northgoods.com/unsubscribe.cfm?delEmail=#Recipient#; title=UNSUBSCRIBEfont face=Arial size=-1 color=whitestrongUNSUBSCRIBE/strong/font/abr font face=Arial size=-1 color=##FF6600You will receive one last message from us to confirm your removal from our list./font/strong/th/tr /TABLE/body/html /CFMAIL /CFLOOP ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360352 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: considering two options for changing hosting
Ow! That hurt. -Original Message- From: Russ Michaels [mailto:r...@michaels.me.uk] Sent: Tuesday, March 31, 2015 3:37 PM To: cf-talk Subject: Re: considering two options for changing hosting Mark, there is a very good reason I do not tell people there is a workaround to get MSAccess working on 64bit, and no you definitely should not encourage such things, you are a bad bad man and I am giving you a virtual slap right now.. On Tue, Mar 31, 2015 at 9:06 PM, Mark A Kruger mkru...@cfwebtools.com wrote: Russ, You can make access Run on 64bit - it's just not very easy :) I know I know I should NOT be encouraging such things (ha). http://www.coldfusionmuse.com/index.cfm/2010/12/31/Access.on.64bit.ColdFusio n -Mark -Original Message- From: Russ Michaels [mailto:r...@michaels.me.uk] Sent: Tuesday, March 31, 2015 1:52 PM To: cf-talk Subject: Re: considering two options for changing hosting MSAccess does not work since windows server 2008 as the jet drivers do not exist for 64bit OS, so your host must be running 2003 still on 32bit. So the days of running MSAccess have already gone years ago, you are just running on a legacy windows 2003 system, which reaches EOL this July. If you want to know why CF has so many issues on shared hosting, then read this http://www.michaels.me.uk/post.cfm/why-coldfusion-railo-are-not-suited-to-sh ared-hosting On Tue, Mar 31, 2015 at 6:31 PM, Stephens, Larry V steph...@iu.edu wrote: I echo everything said below except I am on shared hosting. I've had some issues with slow response and failure to connect and, at least twice, they volunteered to move me to a different host to solve the problem. I'm running multiple sites with them. There have been times when I'm pretty sure they didn't read all my support request and gave a kneejerk response, but we worked through that. If I was starting any new sites they would go there. I'm pretty sure the days of running Access are limited. I still have a couple of sites, too, and they don't work real well. The connections keep dying and have to be restarted by the support staff. I'm converting them to MSSQL. Larry V. Stephens I made the switch to Hostek (https://cp.hostek.com/aff.php?aff=931) a few years back and I have been very happy with the decision. I just went through a server upgrade over the weekend in which we ran into an issue with a couple of old sites that are still running on MS Access. Their support staff were very diligent and were able to work out the issue for me. I have not worked with their shared hosting, but their VPS service has been top notch. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360337 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: considering two options for changing hosting
PS. I agree his host is probably using 32bit. -Original Message- From: Russ Michaels [mailto:r...@michaels.me.uk] Sent: Tuesday, March 31, 2015 1:52 PM To: cf-talk Subject: Re: considering two options for changing hosting MSAccess does not work since windows server 2008 as the jet drivers do not exist for 64bit OS, so your host must be running 2003 still on 32bit. So the days of running MSAccess have already gone years ago, you are just running on a legacy windows 2003 system, which reaches EOL this July. If you want to know why CF has so many issues on shared hosting, then read this http://www.michaels.me.uk/post.cfm/why-coldfusion-railo-are-not-suited-to-sh ared-hosting On Tue, Mar 31, 2015 at 6:31 PM, Stephens, Larry V steph...@iu.edu wrote: I echo everything said below except I am on shared hosting. I've had some issues with slow response and failure to connect and, at least twice, they volunteered to move me to a different host to solve the problem. I'm running multiple sites with them. There have been times when I'm pretty sure they didn't read all my support request and gave a kneejerk response, but we worked through that. If I was starting any new sites they would go there. I'm pretty sure the days of running Access are limited. I still have a couple of sites, too, and they don't work real well. The connections keep dying and have to be restarted by the support staff. I'm converting them to MSSQL. Larry V. Stephens I made the switch to Hostek (https://cp.hostek.com/aff.php?aff=931) a few years back and I have been very happy with the decision. I just went through a server upgrade over the weekend in which we ran into an issue with a couple of old sites that are still running on MS Access. Their support staff were very diligent and were able to work out the issue for me. I have not worked with their shared hosting, but their VPS service has been top notch. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360334 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: SOLR config in CF10
Les, Are you running an external Solr instance? Check the CF admin settings under Solr Host Name. It might give you a host or IP for an external server. -mark -Original Message- From: Les Irvin [mailto:les.cft...@gmail.com] Sent: Thursday, March 26, 2015 2:46 PM To: cf-talk Subject: SOLR config in CF10 The Adobe docs say that in order to configure SOLR (as in upping the memory available to it) in CF10 one needs to edit the solr.lax file. Problem is, I don't have a solr.lax file anywhere on the server. Does anyone know the name/location of the actual file to do configurations? Thanks in advance, Les ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360305 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
considering two options for changing hosting
I am currently using Newtek/Crystaltek for a client site and have a couple of issues with them I am able to resolve. The site has been with them for several years. 1. Lately the Wordpress portion of the site has become slow and I can't figure out why. It's not the db and it is not the plug-ins. It's a simple site with not many posts or widgets and it should be faster. The CF portion of the site is fast. 2. They don't support http compression. This is more a minor annoyance, but it is something I want. So I am looking at the Hostek Personal Plus for $7.99 CF shared hosting. Has anyone used both hosts and can compare the two? Will I see a performance difference? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360306 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Line breaks being lost in textarea form field
I don't know if this specifically a CF question so sorry if it is considered OT. I have an admin section of the site that lets the owner add and edit items/products. I am having an issue with the description field where the newline/enter key input is being lost when editing an entry. To give more detail, we have a product description saved in the db like so: This is product description1. This is paragraph 2. This is paragraph 3 I am using the tag ParagraphFormat2.cfm from cflib and the output is working fine on the product page. However, when the owner goes to edit the item, and the description is pulled from the db, it appears like this: This is product description1.This is paragraph 2.This is paragraph 3 After saving the item the text now appers on the product page without any paragraph breaks as a single paragraph. So if the owner wants to make any edits to the item they have to reformat the description re-adding the paragraph breaks. I tried adding htmleditformat() with no luck. Here is the tag: tdtextarea name=productDescription rows=10 cols=39#htmleditformat(attributes.itemForm.productDescription)#/textarea/td Any ideas? I would really appreciate it. Thank you. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360225 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
trying to shorten long string
I have a long product description I am trying to truncate. I could just truncate it, but I don't want to break off sentences. Here is the solution I came up with but it does not seem to have any effect. Any ideas? cfset variables.description = qry_productsGet.productdescription cfif len(variables.description) gt 200 cfloop condition=i eq false cfset variables.description = listDeleteAt(variables.description,listLen(variables.description, .), .) cfif len(variables.description) lte 200 cfset i = true /cfif /cfloop /cfif ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360222 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Embedding files in a PDF
Yes but he's talking about arbitrary files I think - supporting documents. I think the first step is to identify what document types you wish to support. If you can specify only PDF's and images for example, you could make this work with CF natively. If you have to do (for example) word doc conversions, then you will need to use a 3rd party jar file or tool to do the conversion to PDF and then merge the results. Doable, but a lot trickier :) -Original Message- From: Michael Grant [mailto:mgr...@modus.bz] Sent: Wednesday, February 25, 2015 8:34 AM To: cf-talk Subject: Re: Embedding files in a PDF Hi Kevin, The CF8 documentation seems to indicate that PDF merging is supported with cfpdf. http://help.adobe.com/livedocs/coldfusion/8/htmldocs/help.html?content=Tags_ p-q_02.html From the docs: *Merge PDF documents into an output PDF file* cfpdf*required* action = merge *one of the following:* directory = *directory of PDF files to merge* source = *comma-separated list of PDF source files|absolute or relative pathname **to a PDF file*|*PDF document variable*|*cfdocument variable* cfpdfparam ... *required if directory is specified:* order = name|time *one of the following if cfpdfparam ... is specified:* name = *PDF document variable name* destination = *PDF output file pathname**optional* ascending = yes|no keepBookmark = yes|no overwrite = yes|no pages = *pages to merge in PDF source file* password = *PDF source file password* stopOnError = yes|no*one of the following:* destination = *PDF output file pathname* name = *PDF document variable name* On Wed, Feb 25, 2015 at 6:07 AM, Kevin Parker tras...@internode.on.net wrote: Be grateful for a little advice or confirmation please. Putting together a little award nomination system. User submits the nomination via a web form and attaches any supporting documents to the nomination. I then need to produce a PDF of the nomination which in itself is not an issue e.g. cfdocument. However, I was looking for a way to embed the submitted documents in the PDF version of the nomination. While embedding other (types of) files is supported in Acrobat there appears to be no way to do this via CF be it cfdocument or even cfpdf (platform is CF8) - is my summation correct. Thank you ++ Kevin Parker ++ ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360152 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: ColdFusion_10_WWEJ_win64.exe error
Sorry this one! http://www.coldfusionmuse.com/index.cfm/2010/2/24/CF8-Install-Windows-2003-64bit -mark -Original Message- From: John M Bliss [mailto:bliss.j...@gmail.com] Sent: Wednesday, February 25, 2015 3:15 PM To: cf-talk Subject: Re: ColdFusion_10_WWEJ_win64.exe error Do you know where that's located? On Wed, Feb 25, 2015 at 4:13 PM, Russ Michaels r...@michaels.me.uk wrote: Try running as administrator. Take a look at the installer log for more info. On Wed, Feb 25, 2015 at 19:44 PM, John M Bliss bliss.j...@gmail.com wrote: That's why I: ;-) I'm constantly posting dumb questions here. :-) On Feb 25, 2015 2:42 PM, Russ Michaels r...@michaels.me.uk javascript:; wrote: Hey everyone does something dumb occasionally ðŸËÅ On Wed, Feb 25, 2015 at 19:38 PM, John M Bliss bliss.j...@gmail.com javascript:; wrote: No. Come on, Russ, you've known me for, like, a decade on here! ;-) On Feb 25, 2015 2:36 PM, Russ Michaels r...@michaels.me.uk javascript:; javascript:; wrote: Not trying to install it on a 32bit os are you? On Wed, Feb 25, 2015 at 19:32 PM, John M Bliss bliss.j...@gmail.com javascript:; javascript:; wrote: Reinstalling ACF10 64 bit from physical media from Adobe and getting this when I run the installer: Fatal Application Error This Application has Unexpectedly Quit Invocation of this Java Application has caused an InvocationTargetException. This application will now exit. (LAX) Anyone else seen this? Fix? -- John Bliss - http://www.linkedin.com/in/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360162 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: ColdFusion_10_WWEJ_win64.exe error
John, I have had (on occasion) to edit the LAX jvm config file to get an install to work on certain OS platforms. Here's a blog post that might give you some clues - at least with regard to where everything is at :) http://www.coldfusionmuse.com/index.cfm/2010/8/18/win2k3.64bit.install -Mark -Original Message- From: John M Bliss [mailto:bliss.j...@gmail.com] Sent: Wednesday, February 25, 2015 3:15 PM To: cf-talk Subject: Re: ColdFusion_10_WWEJ_win64.exe error Do you know where that's located? On Wed, Feb 25, 2015 at 4:13 PM, Russ Michaels r...@michaels.me.uk wrote: Try running as administrator. Take a look at the installer log for more info. On Wed, Feb 25, 2015 at 19:44 PM, John M Bliss bliss.j...@gmail.com wrote: That's why I: ;-) I'm constantly posting dumb questions here. :-) On Feb 25, 2015 2:42 PM, Russ Michaels r...@michaels.me.uk javascript:; wrote: Hey everyone does something dumb occasionally ðŸËÅ On Wed, Feb 25, 2015 at 19:38 PM, John M Bliss bliss.j...@gmail.com javascript:; wrote: No. Come on, Russ, you've known me for, like, a decade on here! ;-) On Feb 25, 2015 2:36 PM, Russ Michaels r...@michaels.me.uk javascript:; javascript:; wrote: Not trying to install it on a 32bit os are you? On Wed, Feb 25, 2015 at 19:32 PM, John M Bliss bliss.j...@gmail.com javascript:; javascript:; wrote: Reinstalling ACF10 64 bit from physical media from Adobe and getting this when I run the installer: Fatal Application Error This Application has Unexpectedly Quit Invocation of this Java Application has caused an InvocationTargetException. This application will now exit. (LAX) Anyone else seen this? Fix? -- John Bliss - http://www.linkedin.com/in/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360161 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
Miguel, Thanks for the article. It was a little confusing as it seemed to reference onMissingTemplate as the setting in administrator rather than the function in Application.cfc. And that is what I am trying to invoke, the function in Apllication.cfc. Is that no longer possible? I seem to be in a bit of a conundrum here. My local dev machine is windows 8 which requires the higher versions of IIS and CF, while the production site is CF9. To give a better idea of where I am at, I have this in the web.config: httpErrors errorMode=Detailed existingResponse=PassThrough And now I get a blank page from the 404 pages. I assume that either CF is not returning anything or IIS is discarding the response. Here is what I have in the onMissingTemplate function: cffunction name=onMissingTemplate returnType=boolean cfargument type=string name=targetPage required=true/ cfheader statusCode=200 statusText=OKhello !--- cfobject component=cfcs.404 name=handle_404 / cfset variables.temp = handle_404.handle_404(requested_template = arguments.targetPage) --- cfreturn True / /cffunction This is a try based upon the article but I think it is in vain and would only apply to a specified missing template handler page. I'm not sure what to try at this point. I could be off by one little setting, or what I want to do is just not possible, which is just to have the missing pages handled by invoking Application.cfc's onMissingTemplate function like the live server does. I don't want to do back to Apache after putting to much time into this, especially since the live server is IIS. Thanks for any help you can offer. On Wed, Feb 18, 2015 at 6:10 AM, Fernandez, Miguel miguel.fernan...@kyfb.com wrote: I'm not sure if this has already been mentioned but Adobe just posted a blog article about custom error handling with ColdFusion and IIS. Once you get over how it was written they do give you three different scenarios for configuring your error handling. It's nice to finally get confirmation from them on how it works. http://blogs.coldfusion.com/post.cfm/onmissingtemplate -Original Message- From: Mark Spence [mailto:markpence...@gmail.com] Sent: Wednesday, February 18, 2015 12:07 AM To: cf-talk Subject: Re: CF 404 handler non being invoked on IIS I'm trying to make do with using a custom 404 handler in IIS but the requested template variable in CF resolves to to 404 handler rather than the url of the requested page. This is getting complicated as this is only a work around for local development and I don't want to change to much and break the live site. Does anyone have any other pointers on how I can get this working like the live site? I can't believe that it is this problematic to get CF to be passed the 404 error and invoke the onmissingtemplate. What changed so drastically in iis 8 and cf11 that something so basic is so broken? On Fri, Feb 13, 2015 at 4:24 PM, Matt Robertson websitema...@gmail.com wrote: sorry for my lack of attention on this. If you are in fact using IIS Rewrite then that clouds the picture a little. However if I can pull myself together and write something up you should be able to do all of your 404 handling in your ... 404 handler. I don't use IIS rewrites for much and instead rely on CF wherever possible. Will try and find some time this long weekend (holiday here in the USA). On Thu, Feb 12, 2015 at 5:31 AM, Mark Spence markpence...@gmail.com wrote: After playing with it a bit more I added this: httpErrors existingResponse=PassThrough/ Now I just get a blank page. Am I successfully passing it through to cf? Hard to tell. I was hoping to have made a bit of progress. On Mon, Feb 9, 2015 at 6:38 PM, Matt Robertson websitema...@gmail.com wrote: Mark, those two threads aren't exactly a linear set of to do steps. I'll try to put that together tomorrow when I am in front of a desktop. -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360133 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
Sorry for the misunderstanding, but he 404 is for pages the are ses product pages. So I need the content to be returned to the user. An example would be thus: http://www.mysite.com/productpages/category/product-103/index.cfm I am pulling productpages to see that it is a product page and 103 to get the product id. All I need is for CF to catch the 404 error, invoke the onmissingtemplate in Application.cfc, and everything works. This is what is happening on the live site with IIS and CF9. The problem with using IIS's custom error page for 404 is that the requested template variable is the 404 page itself, which doesn't work with my code. I am hoping that there is something I can configure in CF and IIS rather than rewriting everything just for the development server. The code I posted in my last response was just to show that it seems that Application.cfc is not being invoked, the response is being discarded, or something else is going on. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360135 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
GOT IT! It was a setting under IIS: Under Handler Mappings, double-click on the handler for .cfm. Then click the Request Restrictions... button. It should open to the mappings tab. The Invoke handler only if request is mapped to: checkbox should NOT be checked. On Wed, Feb 18, 2015 at 2:12 PM, Mark Spence markpence...@gmail.com wrote: Sorry for the misunderstanding, but he 404 is for pages the are ses product pages. So I need the content to be returned to the user. An example would be thus: http://www.mysite.com/productpages/category/product-103/index.cfm I am pulling productpages to see that it is a product page and 103 to get the product id. All I need is for CF to catch the 404 error, invoke the onmissingtemplate in Application.cfc, and everything works. This is what is happening on the live site with IIS and CF9. The problem with using IIS's custom error page for 404 is that the requested template variable is the 404 page itself, which doesn't work with my code. I am hoping that there is something I can configure in CF and IIS rather than rewriting everything just for the development server. The code I posted in my last response was just to show that it seems that Application.cfc is not being invoked, the response is being discarded, or something else is going on. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360136 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
I'm trying to make do with using a custom 404 handler in IIS but the requested template variable in CF resolves to to 404 handler rather than the url of the requested page. This is getting complicated as this is only a work around for local development and I don't want to change to much and break the live site. Does anyone have any other pointers on how I can get this working like the live site? I can't believe that it is this problematic to get CF to be passed the 404 error and invoke the onmissingtemplate. What changed so drastically in iis 8 and cf11 that something so basic is so broken? On Fri, Feb 13, 2015 at 4:24 PM, Matt Robertson websitema...@gmail.com wrote: sorry for my lack of attention on this. If you are in fact using IIS Rewrite then that clouds the picture a little. However if I can pull myself together and write something up you should be able to do all of your 404 handling in your ... 404 handler. I don't use IIS rewrites for much and instead rely on CF wherever possible. Will try and find some time this long weekend (holiday here in the USA). On Thu, Feb 12, 2015 at 5:31 AM, Mark Spence markpence...@gmail.com wrote: After playing with it a bit more I added this: httpErrors existingResponse=PassThrough/ Now I just get a blank page. Am I successfully passing it through to cf? Hard to tell. I was hoping to have made a bit of progress. On Mon, Feb 9, 2015 at 6:38 PM, Matt Robertson websitema...@gmail.com wrote: Mark, those two threads aren't exactly a linear set of to do steps. I'll try to put that together tomorrow when I am in front of a desktop. -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360130 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
coldfusion 9 developer edition with verity download
Anyone know where I can safely download coldfusion 9? I would like it for development purposes as the live site uses a verity product search that I need to work on. Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360122 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
After playing with it a bit more I added this: httpErrors existingResponse=PassThrough/ Now I just get a blank page. Am I successfully passing it through to cf? Hard to tell. I was hoping to have made a bit of progress. On Mon, Feb 9, 2015 at 6:38 PM, Matt Robertson websitema...@gmail.com wrote: Mark, those two threads aren't exactly a linear set of to do steps. I'll try to put that together tomorrow when I am in front of a desktop. -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360114 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
Thank you, I would appreciate that. On Mon, Feb 9, 2015 at 6:38 PM, Matt Robertson websitema...@gmail.com wrote: Mark, those two threads aren't exactly a linear set of to do steps. I'll try to put that together tomorrow when I am in front of a desktop. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360102 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
Have you tried a very simple rule to test of that is working ok ? The url rewrite is just pointing to serve the site from a subdirectory. It is working ok because the home page is being served correctly. Thanks, On Mon, Feb 9, 2015 at 3:09 PM, Russ Michaels r...@michaels.me.uk wrote: I deal with many sites that have non existent pages which use URL REWRITE to redirect them. The usual reason is that the url rewrite rules are not working, or even that the url rewrite module is not installed. Have you tried a very simple rule to test of that is working ok ? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360103 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
Matt, Thank you for the link. I am working through the first step below: *Step 1:* Configure a Missing Template Handler in CF Administrator. Mine is global to the server and kept in the ColdFusion webroot - which is separate from the IIS web root and whose default location is c:\ColdFusion9\wwwroot. This global template is 404handler.cfm and contains the following simple code, which you can expand upon: h1404/h1pPage Not Found/pcfheader statuscode=404 statustext=Not Found At this point, visit your web site and execute a bad ColdFusion url: *http://[domain]/bogus.cfm*. You will see both the IIS remote error screen/banner followed by your ColdFusion error screen. Check the header and it is a 404. This next step will solve the dual display problem. When I visit the bogus page, I still just get the standard detailed iis 404 page, without the cf page that I created. I have tried it both with and without the Enable HTTP status codes. I can't figure out what I am doing wrong. This is on a windows 8 machine. Any ideas? Thank you for the help. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360096 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
CF 404 handler non being invoked on IIS
This is working on the live hosted site, but on my local install of iis and cf it isn't. I have ses urls like this: http://mysitedotcom/item-section/item-name-1034/index.cfm The directories item-section and item-name-1034 do not exist, so it should invoke the Application.cfc onMissingTemplate function, which is set up to serve the proper dynamic page. However on my local setup, I am getting this iis error: HTTP Error 404.0 - Not Found Detailed Error Information: Module IIS Web Core Notification MapRequestHandler Handler cfmHandler Error Code 0x80070002 Requested URL http://mysitedotcom:80/site_mysubsite_com/items/item-name-1034/index.cfm Physical Path C:\wwwroot\site_mysite_com\item-section\item-name-1034\index.cfm Logon Method Anonymous Logon User Anonymous It's like CF is not even getting to see the missing template error before IIS steps in. I tried setting Application.cfc as the error page for 404 errors but no dice. How can I make CF take priority and handle the 404 error? Thank you. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360088 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: problem getting coldfusion and iis running together
Under the top level of IIS manager, under ISAPI and CGI restrictions, there was what I thought to be the proper entry. I went to the website in question and removed the inherited entry and added an explicit entry for C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dllbut it still does not work. Sorry to be so much trouble. I just would like to get this to work. On Sun, Feb 8, 2015 at 2:27 AM, Russ Michaels r...@michaels.me.uk wrote: You need to make sure that the handler path on your site giving the error is added to cgi restrictions and set to allow. On Sat, Feb 7, 2015 at 23:04 PM, Mark Spence markpence...@gmail.com wrote: Thank you for the reply. I googled the error code and found this thread: http://forums.iis.net/t/1150673.aspx?Am+getting+the+error+0x800704ec+in+webpage+while+calling+the+perl+script I looked in the ISAPI and CGI restrictions and there is an entry under tomcat_Default Web Site with the path pointing to C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll Any ideas? Thank you. Detailed Error Information: Module IsapiModule Notification ExecuteRequestHandler Handler mod_rewrite Error Code 0x800704ec Requested URL http://127.0.0.1:80/jakarta/isapi_redirect.dll Physical Path C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll Logon Method Anonymous Logon User Anonymous ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360085 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: problem getting coldfusion and iis running together
Hello, Russ. I tried the web server configuration tool. After doing so I got an error about a duplicate configuration pointing me to the web config file. I removed the entry and it seems to work now. I want to say I REALLY appreciate all your help. Thank you so much. Cheers. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360087 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CF 404 handler non being invoked on IIS
I have added the following for a custom error page: Execute a url on this site /404.cfm I still get the standard iis 404 error page. I have restarted the server. Is there something else I need to do? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360090 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
problem getting coldfusion and iis running together
Sorry, this is both a IIS and ColdFusion question, so I wasn't sure where to ask. Hopefully someone here can help me. I am just getting started with CF and am helping someone with a site so please bear with me. I am trying to get my local dev environment set up. I had IIS and ColdFusion running ok. I imported some rules from a .htaccess file and it seemed to work ok, the pages from the subdirectory were being served based upon host name. However, once I did so, I started getting this error when trying to access the Coldfusion Administrator located at: http://127.0.0.1/CFIDE/administrator/index.cfm I got this error: HTTP Error 404.2 - Not FoundThe page you are requesting cannot be served because of the ISAPI and CGI Restriction list settings on the Web server. I thought it might be because of the rules imported so I disabled them all but no dice. I also went to the settings for the ISAPI and CGI Restrictions and clicked on Edit Feature Settings and clicked Allow unspecified CGI modules and Allow unspecified ISAPI modules. After doing so, the error changed to: HTTP Error 500.0 - Internal Server ErrorThere is a problem with the resource you are looking for, so it cannot be displayed. I am not sure what else to try. Thank you for any help. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360081 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: problem getting coldfusion and iis running together
Thank you for the reply. I googled the error code and found this thread: http://forums.iis.net/t/1150673.aspx?Am+getting+the+error+0x800704ec+in+webpage+while+calling+the+perl+script I looked in the ISAPI and CGI restrictions and there is an entry under tomcat_Default Web Site with the path pointing to C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll Any ideas? Thank you. Detailed Error Information: Module IsapiModule Notification ExecuteRequestHandler Handler mod_rewrite Error Code 0x800704ec Requested URL http://127.0.0.1:80/jakarta/isapi_redirect.dll Physical Path C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll Logon Method Anonymous Logon User Anonymous ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:360083 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: GC overhead limit exceeded
Dan, I was just reading this post by CF Gurur Mike B. It has some cf10 specific tips that might be applicable to you since your problem is OOM. http://www.cfwhisperer.com/post.cfm/coldfusion-10-enhanced-performance-setti ngs -mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Don [mailto:danfar...@hotmail.com] Sent: Saturday, December 06, 2014 4:12 PM To: cf-talk Subject: Re: GC overhead limit exceeded I guess this application ran fine under previous Coldfusion incarnations. It was only after the upgrade to CF 11 that the problems started. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359769 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: GC overhead limit exceeded
MSSQL express has some limitations as to size (of the DB) and connection limits. If I have time I'll look for a matrix - but such things could definitely result in degraded performance. I'm at a loss to say how they would contribute to a memory leak however. -Original Message- From: Don [mailto:danfar...@hotmail.com] Sent: Monday, December 08, 2014 1:12 PM To: cf-talk Subject: Re: GC overhead limit exceeded Dan, I was just reading this post by CF Gurur Mike B. It has some cf10 specific tips that might be applicable to you since your problem is OOM. http://www.cfwhisperer.com/post.cfm/coldfusion-10-enhanced-performance-sett i ngs -mark Cheers Mark. We are also looking at the database ( MS SQL Express ) which is being used by several sites on that same machine. There is a memory leak somewhere in the technology path. I'm pretty sure MS SQL Express is not meant to be used this way... someone correct me if I am wrong. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359771 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: how to diagnose a potential bottleneck
This does not necessarily mean anything Don. It could simply mean migration from eden to persistent memory where GC recovers in due course. It's the overall pattern of GC recovery that means the most when talking about gross numbers. You should see a saw tooth pattern over time with steep drops as memory is recovered on the heap. Problems arise when the drop does not level off (it recovers less and less memory each time - i.e. a memory leak) or when the top side of the heap is too lean (i.e. the heap is too small for it's overall usage pattern). But keying in on a big dump of objects into perm heap isn't necessarily going to give you information that you can use. Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Don [mailto:danfar...@hotmail.com] Sent: Tuesday, December 02, 2014 9:36 AM To: cf-talk Subject: Re: how to diagnose a potential bottleneck Doesnt seem anyone noticed my reply so I'll post this again... I noticed a sharp drop in JVM memory during this process ( it all happened in about one minute ) Say from the average JVM Freememory of : 255 Megs Dropping to around : 30 Megs Any thoughts or ideas? It did come back up to normal levels, but the rate of the drop has me concerned. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359740 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Java certificate issue
Donnie, That's the wrong log location. You need to look in the standard out log. In a typical install (non multiserver) it would be in /coldfusion9/runtime/logs/ look for cfusion-out.log -Mark -Original Message- From: Donnie Carvajal [mailto:donnie.carva...@transformyx.com] Sent: Wednesday, November 26, 2014 10:16 AM To: cf-talk Subject: Re: Java certificate issue Look at your log files for what the actual error on startup might be. C:\ColdFusion9\logs\ I would care to guess to look in the server.log file John Blayter m: 303.325.1979 http://www.blayter.com/john/ On Wed, Nov 26, 2014 at 8:37 AM, Donnie Carvajal donnie.carva...@transformyx.com wrote: Thanks John, I already checked there and none of the logs were updated. I did find a post that suggested copying msvcr100.dll from the new jre to [ColdFusionHome]\runtime\bin. That seemed to do the trick. Donnie Carvajal ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359716 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Java certificate issue
It certainly could be a failed intermediate certificate. See this post from yesterday Donnie. Lots of certs changes in the wild right now. http://www.coldfusionmuse.com/index.cfm/2014/11/24/coldfusion-tsl-ssl3-JVM-1 -7 Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Donnie Carvajal [mailto:donnie.carva...@transformyx.com] Sent: Tuesday, November 25, 2014 12:00 PM To: cf-talk Subject: Java certificate issue Hi, I just started receiving the following error for a java API that we are using to connect to Netsuite. javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Our server is Windows 2003 SErvice Pack 2 (Version 5.2). ColdFusion is 9.0.0.251028 and Java is 1.6.0_14. This system has been working for years and all of a sudden we are seeing this error. Any ideas of what could be causing the issue? Donnie Carvajal ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359710 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Java certificate issue
There's a -7 at the end of that link as in JVM-1-7 .. sorry about the wrap. (saying that makes me want to beat box for some reason). -Original Message- From: Mark A Kruger [mailto:mkru...@cfwebtools.com] Sent: Tuesday, November 25, 2014 12:04 PM To: cf-talk Subject: RE: Java certificate issue It certainly could be a failed intermediate certificate. See this post from yesterday Donnie. Lots of certs changes in the wild right now. http://www.coldfusionmuse.com/index.cfm/2014/11/24/coldfusion-tsl-ssl3-JVM-1 -7 Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Donnie Carvajal [mailto:donnie.carva...@transformyx.com] Sent: Tuesday, November 25, 2014 12:00 PM To: cf-talk Subject: Java certificate issue Hi, I just started receiving the following error for a java API that we are using to connect to Netsuite. javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Our server is Windows 2003 SErvice Pack 2 (Version 5.2). ColdFusion is 9.0.0.251028 and Java is 1.6.0_14. This system has been working for years and all of a sudden we are seeing this error. Any ideas of what could be causing the issue? Donnie Carvajal ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359711 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: JDBC drivers for old FoxPro DBF files.
Arden, You may be able to bridge to an ODBC DSN. The issue is typically 64bit vs 32 bit but it can usually be overcome - at least on Win2008r2. We've done this with Access and MS text drivers but never with fox pro - still, the process should be about the same I think. -Mark -Original Message- From: Arden Weiss [mailto:ardenwe...@verizon.net] Sent: Friday, November 21, 2014 6:59 PM To: cf-talk Subject: JDBC drivers for old FoxPro DBF files. Need advice on what database drivers work well with CF10 and the old FoxPro for DOS DBF files. Back in the CF Client has app that has been running flawlessy since 2000 or so using CF5 and the ODBC drivers that came with the product to process credit card transactions via authorize.net -- back in the CF6 days, I failed to find a JDBC driver that played nicely with the DBF files -- hope that has changed. Recently flaws in the SSL3 security (POODLE) caused authnet to drop support for SSL3 and hence broke the application -- we now will be using CF10 with Java 1.7 and TSL1.2 to solve that problem, but we need solid support for DBF file update until the whole system gets rewritten/changed. Any/all advice requested. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359704 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
FW: CF9.02 administrator hack
Tom, My one questions is you say that view source is identical from a hacked and non hacked server - that seems odd. There are a number of hacks that could produce results that manipulate your files by adding content. This one uses the missing file handler: http://www.coldfusionmuse.com/index.cfm/2013/12/5/attack.vector.missing.temp late.handler and can alter files. This one that uses the (bad) practice of moving files to a URL accessible folder before checking them - or relying JUST on the file extension. http://www.coldfusionmuse.com/index.cfm/2009/9/18/script.insertion.attack.ve ctor Either one of these is capable of producing an iframe or adding content to files etc. Of course there are others - bad news I know. Sometimes the best solution in these cases (the one that gives you the most reassurance and least amount of time spent) is to reinstall on a pristine server - from a repo if you have it. -Mark P.S. let CFWT know if you need formal help on this. Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Tom McNeer [mailto:tmcn...@gmail.com] Sent: Wednesday, November 12, 2014 10:40 AM To: cf-talk Subject: CF9.02 administrator hack Hi, I've just discovered that one of my servers, running 9.02, has been hacked. I'm not sure of the update level, because the hack is visible in the administrator and prevents its use. It's not the old h.cfm hack. I haven't been able to find any references to what I'm seeing, but I hope someone else knows what's up. I have not seen any obvious problems caused in the sites delivered from the server. It became evident when I tried to log in to the admin today to check on something. The immediate symptoms are that an ad appears in an iframe below the CF Admin login inputs; the username input label has been restyled and appears to have a link behind it. A recurring popup says The page at b1.zcxbtm.com says: WARNING, Your Java version is outdated, have security risks, Please update now. Naturally, none of this is visible in View Source. No reference to other files and scripts. The View Source is identical to one on a non-hacked server. The CF Admin is not publicly accessible - at least not normally. I can see that a site was added and used temporarily which had a virtual directory pointing to the admin, most likely one created by running the config tool. That site is dead now, but it could easily have been a vector at one time. The CF service _is_ running under the System account. I know this is bad practice, but I didn't set up the server. Any suggestions for troubleshooting this would be greatly appreciated. And I'll certainly be happy provide any other details I can. -- Thanks, Tom Tom McNeer MediumCool http://www.mediumcool.com 1735 Johnson Road NE Atlanta, GA 30306 404.589.0560 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359622 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: FW: CF9.02 administrator hack
Claude, The idea that there's no visible indication in the view source makes me consider that as well - but why would it just appear on a login page for the cfadmin? Perhaps it looks for specific form field names and throws up the java out of date message to prey on fears of folks logging in to various things... -Mark -Original Message- From: Claude Schnéegans schneeg...@internetique.com [mailto:=?ISO-8859-1?Q?Claude_Schn=E9egans schneegans@interneti=71?= =?ISO-8859-1?Q?ue.com=3E?=] Sent: Wednesday, November 12, 2014 1:40 PM To: cf-talk Subject: Re: FW: CF9.02 administrator hack There's no reason that content can't be injected at serve time. In this case, there would be a difference in the files delivered to the visitor. IMO the hack is in the browser, not on the server. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359628 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Distributive Mode
Dave - he likes it the way it is let it go! (with my apologies to Elsa) :D Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Friday, October 17, 2014 1:43 PM To: cf-talk Subject: Re: Distributive Mode For better security...piece of mind, I prefer to have my web servers physically separated from my database servers and distributed mode lets me do this. Again, so does using a reverse proxy. There is no additional security provided by distributed mode that isn't provided by a reverse proxy. The goal of both is to separate your application server (CF) from your public-facing web server. This prevents any exploit of the public-facing web server from allowing attackers to inject application server code. A reverse proxy is arguably a more secure approach than distributed mode, since you can use different platforms for your public-facing web server and your internal web+application server. I finally did find a good article https://wikidocs.adobe.com/wiki/display/coldfusionen/WebSocket+Enhancements that describes exactly what I need to do within CF11. I will give this a go and see if I have success. Thanks for the help and advice. That's not what web sockets are for, actually. http://en.wikipedia.org/wiki/WebSocket But you're welcome, and good luck with your CF endeavors! Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business (SDVOSB) on GSA Schedule, and provides the highest caliber vendor- authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359484 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: CFHTTP Raw Request
Donnie, you will need a sniffer on the server to see any HTTP request from CF. If you are doing local development (where cf is installed on your laptop or desktop) then that's where your proxy/sniffer needs to live. CFHTTP is technically not a browser request - just a straight HTTP request using tcp. I use wireshark for this - fiddler is more of a browser plugin - or at least, it proxys it's data to a browser. I suspect it could work for cfhttp request -just not positive as I've never tried it. Steve's suggestion is a good one and fiddler (or Charles) is a great addition to your toolkit but it may not work in this specific instance. Sorry to redirect your efforts :) -Mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Donnie Carvajal [mailto:donnie.carva...@transformyx.com] Sent: Tuesday, October 14, 2014 11:53 AM To: cf-talk Subject: Re: CFHTTP Raw Request I think I may be confused. I need to see the raw headers that CFHTTP is creating. I installed Fiddler on the development and ran it. When I call the CF page that includes the CFHTTP, I am not seeing any new requests in Fiddler. I'm not sure how a browser would show me CFHTTP headers that are created. Am I missing something? Thanks, Donnie Carvajal It's just a program that when run will sit between the browser and the world outside the computer (internet, intranet, etc). It displays what is going in and out. It's an easy install and adds piece to IE/Chrome/Firefox as well as installing the App. You just run it and use your web browser. If you are working with HTTPS/SSL/TLS then there is a way to set it up to track that data as well (Technically a man in the middle, but you are doing it to yourself so it's ok). Steve -Original Message- From: Donnie Carvajal [mailto:donnie.carva...@transformyx.com] Sent: Tuesday, October 14, 2014 11:21 AM To: cf-talk Subject: Re: CFHTTP Raw Request Hi Steve, Thanks for the suggestion. I've never used Fiddler before. Are there any special configurations to watch a cfhttp request? Thanks, Donnie Carvajal ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359466 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: CFHTTP Raw Request
Ah... so you would have to use the proxy/port attributes of the cfhttp tag. I see how that would work. On the plugin install it sets that up for you with the browser. Good to know. -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Tuesday, October 14, 2014 12:11 PM To: cf-talk Subject: Re: CFHTTP Raw Request you will need a sniffer on the server to see any HTTP request from CF. If you are doing local development (where cf is installed on your laptop or desktop) then that's where your proxy/sniffer needs to live. CFHTTP is technically not a browser request - just a straight HTTP request using tcp. I use wireshark for this - fiddler is more of a browser plugin - or at least, it proxys it's data to a browser. I suspect it could work for cfhttp request -just not positive as I've never tried it. Steve's suggestion is a good one and fiddler (or Charles) is a great addition to your toolkit but it may not work in this specific instance. Sorry to redirect your efforts :) Fiddler is more than a browser plugin. It's a proxy server, and can in fact capture all outbound HTTP requests from your machine, regardless of what they come from. I prefer Fiddler to Wireshark for this because it's purely focused on HTTP/HTTPS and a lot easier to read. However, you have to configure clients to use it as a proxy. With CF, you can do this at the JVM level, or you can change your CFHTTP code to use a specific proxy server. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Service-Disabled Veteran-Owned Small Business (SDVOSB) on GSA Schedule, and provides the highest caliber vendor- authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359468 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Avoiding a boat load of queries inserting multiple records - Better Way?
My experience with MS SQL Server is that you have to do multiple inserts using
a series of UNION statements...
Insert into tablename(field1, field2, field3, field4 ...)
select value1, value2, value3, value4 ...
union all select value1, value2, value3, value4 ...
union all select value1, value2, value3, value4 ...
union all select value1, value2, value3, value4 ...
Thanks
Mark
-Original Message-
From: DURETTE, STEVEN J [mailto:sd1...@att.com]
Sent: Friday, October 10, 2014 8:19 AM
To: cf-talk
Subject: RE: Avoiding a boat load of queries inserting multiple records -
Better Way?
Actually I believe the syntax is:
Insert into tablename(field1, field2, field3, field4 ...) Values
(value1, value2, value3, value4 ...),
(value1, value2, value3, value4 ...),
(value1, value2, value3, value4 ...);
Steve
-Original Message-
From: Mike K [mailto:afpwebwo...@gmail.com]
Sent: Friday, October 10, 2014 1:51 AM
To: cf-talk
Subject: Re: Avoiding a boat load of queries inserting multiple records -
Better Way?
You do know that Microsoft changed the insert syntax as from SQLServer 2008
dont you?now you can insert multiple records in one go like this:
INSERT into Tablename (field1, field2, field3, field4 ) Values
( value1, value2, value3, value4 ... ;
value1, value2, value3, value4 ;
value1, value2, value3, value4
)
IF you uave one of those fields as an index field (some databases call them
autonumber fields) you dont have to know what the current index value of
record 1 is when you insert record 2 .Or (i havent tried this buti
reckon it ought to work) if say field1 was your index field, you could
user the value Ident_Current('Tablename ') as the value of field1 in the
subsequent records.
Cheers
Mike Kear
Windsor, NSW, Australia
Adobe Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion 9 Enterprise, PHP, ASP, ASP.NET hosting from AUD$15/month
On Fri, Oct 10, 2014 at 11:51 AM, Les Mizzell lesm...@bellsouth.net wrote:
Not knowing much about your overall process, I'll try to stick to some
generic ideas. Let's assume you don't need this stuff dumped into the
database the very second it gets sent to you.
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359445
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
CF11 changes to Application.cfc - no mappings defined?
Hi Folks Our single CF11 test server just highlighted a freaky difference between CF10 and CF11 that has us all puzzled. (We are running CF11 with the latest service pack.) It appears that the CF mappings defined in CFIDE (such as /cfc - root dir for all of our CFC's) are not defined inside the block of code at the top of Application.cfc (outside of any method in Application.cfc). This means we can't instantiate CFC's under the /cfc directory in that top script block area. We know we can create CFC's in onApplicationStart(), but we currently use a CFC to set the Application's this.name and this.setDomainCookies, etc. variables, and I think those can only be changed right at the top of Application.cfc. Is this a bug or something? Why would globally-defined mappings not be available at the top of Application.cfc? (BTW, the per-Application this.mappings are also ignored in that top script block, so that's not a help either.) Thanks Mark ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359414 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: CF11 changes to Application.cfc - no mappings defined?
Hi Dean
Yes, we defined mappings in the CF Admin. These mappings all work outside of
the top script block, but not in it.
Here's a sketch of what currently works on CF10:
cfcomponent name=MyApplication output=false
cfscript
// All of these settings can be done by the configureAppSettings() call
below...
// this.name = App;
// this.clientManagement = true;
// this.sessionManagement = true;
// this.setClientCookies = false;
// this.applicationTimeout = createTimeSpan(2, 0, 0, 0);
// this.setDomainCookies = true;
createObject(component,
cfc.ApplicationSettings).configureAppSettings(app=this);
public void function onApplicationStart() {
this.applicationManager.onApplicationStart();
}
public void function onRequestStart() {
application.applicationManager.onRequestStart();
}
/cfscript
/cfcomponent
-Original Message-
From: Dean Lawrence [mailto:dean...@gmail.com]
Sent: Wednesday, October 08, 2014 2:13 PM
To: cf-talk
Subject: Re: CF11 changes to Application.cfc - no mappings defined?
Mark,
When you say global mappings, are you saying that you created a mapping in the
ColdFusion admin? Also, can you maybe share some of your Application.cfc code
for us to get a better idea as to what you are trying to accomplish?
On Wed, Oct 8, 2014 at 1:58 PM, Gaulin, Mark mark.gau...@ihs.com wrote:
Hi Folks
Our single CF11 test server just highlighted a freaky difference
between
CF10 and CF11 that has us all puzzled. (We are running CF11 with the
latest service pack.)
It appears that the CF mappings defined in CFIDE (such as /cfc -
root dir for all of our CFC's) are not defined inside the block of
code at the top of Application.cfc (outside of any method in
Application.cfc). This means we can't instantiate CFC's under the
/cfc directory in that top script block area.
We know we can create CFC's in onApplicationStart(), but we currently
use a CFC to set the Application's this.name and
this.setDomainCookies, etc. variables, and I think those can only be
changed right at the top of Application.cfc.
Is this a bug or something? Why would globally-defined mappings not
be available at the top of Application.cfc? (BTW, the per-Application
this.mappings are also ignored in that top script block, so that's
not a help either.)
Thanks
Mark
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359418
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: CF11 changes to Application.cfc - no mappings defined?
Hi Cameron We can successfully use the /cfc mapping outside of the top script block, so I don't think it is reserved in that way. We also observed that expandPath() behaves differently in the top script block vs in a Application.cfc method. (It expands the mappings paths properly in the method, but doesn't know any mappings in the top script block.) Pretty weird... Thanks Mark -Original Message- From: Cameron Childress [mailto:camer...@gmail.com] Sent: Wednesday, October 08, 2014 2:33 PM To: cf-talk Subject: Re: CF11 changes to Application.cfc - no mappings defined? On Wed, Oct 8, 2014 at 1:58 PM, Gaulin, Mark mark.gau...@ihs.com wrote: It appears that the CF mappings defined in CFIDE (such as /cfc - root dir for all of our CFC's) are not defined inside the block of code at the top of Application.cfc I would also test this with a global mapping not called cfc. That word may be reserved in CF11. I have no idea if it is, but it would be super easy for you to test. -Cameron -- Cameron Childress -- p: 678.637.5072 im: cameroncf facebook http://www.facebook.com/cameroncf | twitter http://twitter.com/cameronc | google+ https://profiles.google.com/u/0/117829379451708140985 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359419 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: CF11 changes to Application.cfc - no mappings defined?
Yup, I tried setting this.mappings as you suggest and it didn't change
anything.
We are getting the strong feeling that no mappings are applied, even the ones
configured in CF Admin, until after the top script block has completed. That
explains all of the behavior that we see.
Hmm.. this looks like a relevant bug:
https://bugbase.adobe.com/index.cfm?event=bugid=3783403
It is marked fixed but it sounds like it isn't released yet
Thanks
Mark
-Original Message-
From: Dean Lawrence [mailto:dean...@gmail.com]
Sent: Wednesday, October 08, 2014 3:12 PM
To: cf-talk
Subject: Re: CF11 changes to Application.cfc - no mappings defined?
Hmm, that is odd. It may very well be a bug. I don't know for sure if the
location of where you define the application properties is restricted to the
top of your Application.cfc or not, but here are two things to try.
Placing the calling of your configuration cfc inside your
onApplicationStart() method:
cfcomponent name=MyApplication output=false
cfscript
public void function onApplicationStart() {
tcreateObject(component,
cfc.ApplicationSettings).configureAppSettings(app=this);
this.applicationManager.onApplicationStart();
}
public void function onRequestStart() {
application.applicationManager.onRequestStart();
}
/cfscript
/cfcomponent
Or add an additional mapping above the call to the config cfc.
cfcomponent name=MyApplication output=false
cfscript
THIS.mappings[/cfc]=path-to-cfc-folder;
createObject(component,
cfc.ApplicationSettings).configureAppSettings(app=this);
public void function onApplicationStart() {
this.applicationManager.onApplicationStart();
}
public void function onRequestStart() {
application.applicationManager.onRequestStart();
}
/cfscript
/cfcomponent
On Wed, Oct 8, 2014 at 2:39 PM, Gaulin, Mark mark.gau...@ihs.com wrote:
Hi Dean
Yes, we defined mappings in the CF Admin. These mappings all work
outside of the top script block, but not in it.
Here's a sketch of what currently works on CF10:
cfcomponent name=MyApplication output=false
cfscript
// All of these settings can be done by the
configureAppSettings() call below...
// this.name = App;
// this.clientManagement = true;
// this.sessionManagement = true;
// this.setClientCookies = false;
// this.applicationTimeout = createTimeSpan(2, 0, 0, 0);
// this.setDomainCookies = true;
createObject(component,
cfc.ApplicationSettings).configureAppSettings(app=this);
public void function onApplicationStart() {
this.applicationManager.onApplicationStart();
}
public void function onRequestStart() {
application.applicationManager.onRequestStart();
}
/cfscript
/cfcomponent
-Original Message-
From: Dean Lawrence [mailto:dean...@gmail.com]
Sent: Wednesday, October 08, 2014 2:13 PM
To: cf-talk
Subject: Re: CF11 changes to Application.cfc - no mappings defined?
Mark,
When you say global mappings, are you saying that you created a
mapping in the ColdFusion admin? Also, can you maybe share some of
your Application.cfc code for us to get a better idea as to what you
are trying to accomplish?
On Wed, Oct 8, 2014 at 1:58 PM, Gaulin, Mark mark.gau...@ihs.com wrote:
Hi Folks
Our single CF11 test server just highlighted a freaky difference
between
CF10 and CF11 that has us all puzzled. (We are running CF11 with
the latest service pack.)
It appears that the CF mappings defined in CFIDE (such as /cfc -
root dir for all of our CFC's) are not defined inside the block of
code at the top of Application.cfc (outside of any method in
Application.cfc). This means we can't instantiate CFC's under the
/cfc directory in that top script block area.
We know we can create CFC's in onApplicationStart(), but we
currently use a CFC to set the Application's this.name and
this.setDomainCookies, etc. variables, and I think those can only
be changed right at the top of Application.cfc.
Is this a bug or something? Why would globally-defined mappings not
be available at the top of Application.cfc? (BTW, the
per-Application this.mappings are also ignored in that top script
block, so that's not a help either.)
Thanks
Mark
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359422
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
(ot) Coldfusion leads for cash
Folks, this is a little off topic but I'll try it here anyway and hope that Michael doesn't slap me down. CFWT has a new program for developers offering cash bonuses (10 month residual) for help with locating new customers. It's generous and easy to do. Check out this post on my blog. http://www.coldfusionmuse.com/index.cfm/2014/10/7/coldfusion-referrals-for-c ash Again, I apologize if someone has a huge problem with this self interested post :) I promise to do extra CF community service in penance. -Mark Mark Kruger - CFG CF Webtools http://www.cfwebtools.com www.cfwebtools.com http://www.coldfusionmuse.com www.coldfusionmuse.com O: 402.932.3318 E: mailto:mkru...@cfwebtools.com mkru...@cfwebtools.com Skype: markakruger ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359409 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: OT, but stil...
Claude, There is literally nothing (not a single thing) that is off limits on the client side. You cannot trust or believe the browser is in any way shape or form a secure environment and you must assume that things like cookies can and will be hacked and experimented with. This is why it is important that variables be tied to temporary entities on the client side (like expiring session cookies) as you mention below. Beyond that your conclusions are correct and scary - but the alternative is probably to close up shop and move to a cabin in Montana :) -Mark -Original Message- From: Claude Schnéegans schneeg...@internetique.com [mailto:=?ISO-8859-1?Q?Claude_Schn=E9egans schneegans@interneti=71?= =?ISO-8859-1?Q?ue.com=3E?=] Sent: Wednesday, September 03, 2014 10:29 PM To: cf-talk Subject: Re: OT, but stil... They don't call it Malware for nothing Ok, but if a malware does mal to a moron client side, in a pinch, this is not our problem, but if it can get pass words so easily, it can also do mal to any server any time. I just got one tonite that allows itself to define cookies under MY domain! If it can store cookies, it can also read cookies, including session cookies! With the session Id, it does not even need the password. I'd like to detect all pieces of javascript code defined in a document and check if they are mine. I was thinking of document.getElementsByTagName, but I'm not even sure all parasit code will actually have a SCRIPT tag. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359230 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: OT, but stil...
Yeah... I'd do it myself if I could get good wireless :D -Original Message- From: Claude Schnéegans schneeg...@internetique.com [mailto:=?ISO-8859-1?Q?Claude_Schn=E9egans schneegans@interneti=71?= =?ISO-8859-1?Q?ue.com=3E?=] Sent: Thursday, September 04, 2014 10:46 AM To: cf-talk Subject: Re: OT, but stil... close up shop and move to a cabin in Montana That's the best suggestion I got on that matter ;-) ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359234 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: OT, but stil...
Claude, I think that perfectnavigator is a adware (some would say malware) that runs on browser execution - so it becomes a part of the client side page request against your will as it were. I think your idea is excellent though - a way to trap client side errors and tease them out and correct them. Nicely done. -Mark -Original Message- From: Claude Schnéegans schneeg...@internetique.com [mailto:=?ISO-8859-1?Q?Claude_Schn=E9egans schneegans@interneti=71?= =?ISO-8859-1?Q?ue.com=3E?=] Sent: Tuesday, September 02, 2014 9:27 PM To: cf-talk Subject: OT, but stil... This is not really CF related, but since this list is mainly read by Web developers, I thought it could be interesting anyway. First, let me say that my system logs CF executions error in a database with many details that help a lot to clean my code. However it does not trap Javascript errors on client side, and with so many types of browsers, in many versions and each one with parameters that the user can de-activate without even knowing what the parameter is intended to, the developper can never be sure his code will run correctly in any circumstance. Now, thanks to window.onerror, I just developped a Javascript error tracker able to ajax some information to my server, including the url where the error occured, the line number, stack, etc. and there it is: I even get errors in code which is not mine! It seems that some code which is not in my server runs somewhere in the client browser and cause errors I can trap! Some examples Stack : TypeError: Argument or incorrect procedure at _watcherReady (Unknown script code:5:13) User agent : Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; ASU2JS; rv:11.0) like Gecko ... there is no string like watcherReady anywhere in my code. Template : https://in2.perfectnavigator.com/injectScripts/index.php?id=Pj8sNyM Message : Script error. User agent : Mozilla/5.0 (Windows NT 6.2; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0 How come this code at in2.perfectnavigator.com (which is not on my server) can be executed from one of my pages, or at least the error event reported to one of my pages ? How about this one from Madagascar? Template : http://www.youradexchange.com/script/java.php?option=rotateur Message : Script error. User agent : Mozilla/5.0 (Windows NT 6.0; rv:31.0) Gecko/20100101 Firefox/31.0 IP = 197.149.47.173 pays = Madagascar Template : http://www.myDomain.com/ line : 418 Message : 'JSON' is undefined User agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; chromeframe/32.0.1700.107; GTB7.5; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3) This one is in my code, but there is no Javascript at line 418 and JSON is never used anywhere. Ah! This one is in my code, very handy to know where to look at when there is a problem on a Mac and you don't have a Mac. Template : http://www.myDomain.org/commun/customTags/textEditor/popupresize.js ligne : 72 Message : TypeError: 'undefined' is not a function (evaluating 'Number(frameObject.width)') User agent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4) AppleWebKit/537.78.2 (KHTML, like Gecko) Version/7.0.6 Safari/537.78.2 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359225 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: code suddenly stops working for no apparent reason
I would echo what Bobby said :) (cfbrickwall) -Original Message- From: Bobby [mailto:bo...@acoderslife.com] Sent: Tuesday, September 02, 2014 6:52 AM To: cf-talk Subject: Re: code suddenly stops working for no apparent reason It isn¹t being explicitly passed, it is being explicitly referenced. The template assumes it was passed in as part of the attributes collection/scope (as per argumentcollection=#attributes#²). The error is telling you that it is not in the attributes scope. The error is not wrong so, like Phillip suggested, step back until you find where you think it is being set and figure out why it isn¹t. Nothing you¹ve said or pasted will let anywhere here give you much more info than that. On 8/30/14, 3:44 PM, Phillip Vector vec...@mostdeadlygame.com wrote: Apparently, it isn't. Go back further. On Sat, Aug 30, 2014 at 12:08 PM, Matthew Smith chedders...@gmail.com wrote: But it is being explicitly passed. That's where I'm lost. On Aug 30, 2014, at 12:44, Phillip Vector vec...@mostdeadlygame.com wrote: The reason is apparent. Element USERID is undefined in ATTRIBUTES. Trace the attribute back and figure out where it was set and see why it isn't being set. On Sat, Aug 30, 2014 at 11:31 AM, Matthew Smith chedders...@gmail.com wrote: cfcase value=createUser cfinvoke component=cfcs.qry-todatabase method=qry_peopleCreateNewUser argumentcollection=#attributes# returnvariable=qry_peopleCreateNewUser cfif qry_peopleCreateNewUser.returnKey eq -1 cfset XFA.badLogin = #fusebox.thisCircuit#.go cfmodule fuseaction=#XFA.badLogin# error=badPassword emailaddress = #attributes.emailAddress# cfid=#cfid# cftoken=#session.cftoken# template=#fusebox.rootpath##modself# cfelse cfmodule fuseaction=#fusebox.thisCircuit#.startSession userid=#qry_peopleCreateNewUser.returnKey# template=#fusebox.rootpath##modself# cfid=#cfid# cftoken=#session.cftoken# /cfif /cfcase cfcase value=startSession cflock scope=SESSION timeout=10 type=EXCLUSIVE cfset session.loggedIn = 1 cfset variables.tmp = structdelete(session, billinginfo) /cflock cfset client.userID = attributes.userID cfset XFA.defaultReturnFuseaction = #fusebox.homeCircuit#.home cfif listFirst(evaluate(client.#fusebox.thiscircuit#returnFuseaction), .) eq SECUREOrderApp cfobject component=cfcs.qry-todatabase name=qry / cfset qry_orderInfoBufferCreate = qry.qry_orderInfoBufferEdit( cfuserid=#session.CFID#0#session.CFTOKEN#) / cfset qry_cartAssignPersonKey = qry.qry_cartAssignPersonKey( cfuserid=#session.CFID#0#session.CFTOKEN#, app_user_id = #CLIENT.USERID#) / /cfif cfinclude template=url_thisCircuit_returnFuseAction.cfm /cfcase getting this error even though explicitly passed... Element USERID is undefined in ATTRIBUTES. The error occurred in *D:/Inetpub/redhotkitties/site_theartoflovingcatsanddogs_com/authenticati on/fbx_Switch.cfm: line 91* *Called from* D:/Inetpub/redhotkitties/site_theartoflovingcatsanddogs_com/fbx_fusebox30 _CF50.cfm: line 273 *Called from* D:/Inetpub/redhotkitties/site_theartoflovingcatsanddogs_com/fbx_fusebox30 _CF50.cfm: line 33 *Called from* D:/Inetpub/redhotkitties/site_theartoflovingcatsanddogs_com/fbx_fusebox30 _CF50.cfm: line 1 *Called from* D:/Inetpub/redhotkitties/site_theartoflovingcatsanddogs_com/index.cfm: line 9 *Called from* D:/Inetpub/redhotkitties/site_theartoflovingcatsanddogs_com/Application.c fc: line 62 89 : cfset variables.tmp = structdelete(session, billinginfo) 90 : /cflock*91 : cfset client.userID = attributes.userID* 92 : cfset XFA.defaultReturnFuseaction = #fusebox.homeCircuit#.home 93 : cfif listFirst(evaluate(client.#fusebox.thiscircuit#returnFuseaction), .) eq SECUREOrderApp ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359222 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Insite Help on CF Hanging?
Client purge is removing client vars that are too old. If you have client variables set to default they will be stored in the registery (win) or a big XML file. The purge process removes them. To fix this: A) Verify that you need client vars. If you don't adjust your application settings accordingly. B) if you DO need them I recommend that you 1) store them in a DB 2) do not set global variables unless you are using them (hitcount and last access) because this results in additional DB connection updates. As for you memory - at Idle a well tuned CF Server might indeed use half a gig or more. On a 64 bit installation half a gig is pretty close to the minimum required. Moreover I recommend that you set your min/max heap sizes to the same value so what would see (even at idle) is a large and fairly static memory footbpring - particallary if you are looking at the commit size in task manager. -Mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Les Mizzell [mailto:lesm...@bellsouth.net] Sent: Wednesday, July 23, 2014 8:52 AM To: cf-talk Subject: Insite Help on CF Hanging? Had a site go down in the early morning hours the last two days - Coldfusion hangs - requiring a restart to get it back up again. Running CF 10 on Windows Server 2008 R2 1. No major errors in the log files. 2. Log files are set to relatively small size limits 3. Something seems to be eating a LOT of memory. Even at idle, CFServer is using almost half a gig memory 4. What's is Client Purge and why could this possibly hang CF ( this appears to have run approximately around the time of the outage) - and why now after over a year with zero outages? That's about all I've got so far. Still researching Any other things I should be looking at/for? TIA ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358989 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Insite Help on CF Hanging?
Tia, FYI - storing client vars in the registry and locking up during the purge is a fairly common trouble spot. I would not be surprised if that is your problem. It can show up after a while too - because the client vars persist for 30 days, so you can suddenly see problems 30 days after an increase in traffic as the system tries to remove a boatload of client vars. -Mark -Original Message- From: Les Mizzell [mailto:lesm...@bellsouth.net] Sent: Wednesday, July 23, 2014 8:52 AM To: cf-talk Subject: Insite Help on CF Hanging? Had a site go down in the early morning hours the last two days - Coldfusion hangs - requiring a restart to get it back up again. Running CF 10 on Windows Server 2008 R2 1. No major errors in the log files. 2. Log files are set to relatively small size limits 3. Something seems to be eating a LOT of memory. Even at idle, CFServer is using almost half a gig memory 4. What's is Client Purge and why could this possibly hang CF ( this appears to have run approximately around the time of the outage) - and why now after over a year with zero outages? That's about all I've got so far. Still researching Any other things I should be looking at/for? TIA ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358990 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Having trouble with cfcI have removed all references to site_theartoflovingcatsanddogs_com and deleted the template cache. No luck. Any help?
I hope the art of loving cats and dogs is painting or crafts or something :D -Original Message- From: Claude Schnéegans schneeg...@internetique.com [mailto:=?ISO-8859-1?Q?Claude_Schn=E9egans schneegans@interneti=71?= =?ISO-8859-1?Q?ue.com=3E?=] Sent: Tuesday, July 22, 2014 8:49 AM To: cf-talk Subject: Re: Having trouble with cfcI have removed all references to site_theartoflovingcatsanddogs_com and deleted the template cache. No luck. Any help? maybe he's a bot? If he is, sure he didn't programed it himself. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358958 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: element undefined
Matthew, Where did you add it? It won't work in the general body of the cfc. It will need to be in onRequest() or onRequestStart() -Original Message- From: Matthew Smith [mailto:chedders...@gmail.com] Sent: Sunday, July 20, 2014 1:46 PM To: cf-talk Subject: Re: element undefined here is what I have added: here is Application.cfc. I have added a cfset without success. Please help. cfcomponent output=false hint=I define the application and event handlers. cfset THIS.Name = fatcate-juice / cfset this.applicationTimeout = createTimeSpan( 0, 0, 20, 0 ) / cfset this.sessionManagement = true / cfset this.clientmanagement = true / cfset this.SetClientCookies = true / cfset this.sessionTimeout = createTimeSpan( 0, 0, 30, 0 ) / cfset this.enablerobustexception=yes cfset request.path = replace(cgi.PATH_TRANSLATED, mid(cgi.SCRIPT_NAME, 2, (len(cgi.SCRIPT_NAME)-1)), ) Cfset request.cfcpath = cfcs. cfset request.currentsitename = fatcate-juice.com cfif cgi.REMOTE_ADDR contains 192.168.1 cfset variables.requested_url = cgi.REDIRECT_URL cfelse cfset variables.requested_url = cgi.path_info /cfif cffunction name=onRequestStart access=public returntype=boolean output=false hint=I execute when a request needs to be initialized. !--- Define arguments. --- cfargument name=template type=string required=true hint=I am the template that the user requested./ cfparam name=variables.currentsitename default=fatcate-juice.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358928 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Moving part of my hosting business - thoughts about my plan please ...
We use CentOS extensively here at CFWT and have many customers using it as well. Very solid. -Original Message- From: Gerald Guido [mailto:gerald.gu...@gmail.com] Sent: Tuesday, June 03, 2014 10:29 AM To: cf-talk Subject: Re: Moving part of my hosting business - thoughts about my plan please ... I like RHEL/CentOS because they are pretty stable and they don't do bleeding edge, main bug/security fixes, you have to upgrade to the next major release to upgrade major versions of many packages. Yeah what Pete said, I have been on Centos and RedHat for years. It is very stable but the package manager seems to be a few versions behind the latest release of software packages. This is mostly for security and stability reasons, i.e. they err on the side of caution. Which is fine and dandy with me. There are a multitude of hosting CF's out there what will automate a lot of, if not most, admin chores. But the downside of these are of course security concerns. The most infamous of which is Kloxo: http://en.wikipedia.org/wiki/Kloxo#Security_issues So caveat emptor and do your research first. G! *Gerald Anthony Guido* Nullius in verba http://en.wikipedia.org/wiki/Nullius_in_verba -- Horace Twitter https://twitter.com/CozmoTrouble Facebook https://www.facebook.com/gerald.guido.9 On Tue, Jun 3, 2014 at 10:26 AM, Pete Freitag p...@foundeo.com wrote: On Fri, Mar 28, 2014 at 5:21 AM, Mike K afpwebwo...@gmail.com wrote: Are there any other 'gotchas' moving from windows to linux? I did a presentation on Linux for CF users at cf.Objective() this year, my slides are here: http://slides.com/petefreitag/cf-on-linux#/ Is there any benefit of one flavour of Linux over another? Yes, if you pick an obscure distribution intended for hardcore linux users (for example Gentoo linux) you will have a hard time as a newbie. Pick one that is commonly used such as Redhat Enterprise Linux / CentOS or Ubuntu. I like RHEL/CentOS because they are pretty stable and they don't do bleeding edge, main bug/security fixes, you have to upgrade to the next major release to upgrade major versions of many packages. This has downsides too, for example RHEL/CentOS 6.x will only support Apache 2.2.x if you want Apache 2.4 you have to install it manually or wait for RHEL7. -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting Products http://hackmycf.com - Is your ColdFusion Server Secure? http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10 minutes ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358709 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: max heap
1.8 is possible on a linux 32bit server... on a windows 32 bit is closer to 1.4 - a lot depends on the overall settings you choose. As for 64bit the upper limit is purley theoretical and you will likely never reach it - probably more than a petabyte. In practice we have some 12gig heaps running successfully - and more is possible. It's just that you tend to start running more instances or servers rather than continuing to up the heap size. -mark -Original Message- From: John M Bliss [mailto:bliss.j...@gmail.com] Sent: Thursday, April 03, 2014 5:50 AM To: cf-talk Subject: Re: max heap Thanks. Are others seeing this (On 32 bit, I have never been able to set it much more than 1 GB)? On Thu, Apr 3, 2014 at 6:42 AM, Russ Michaels r...@michaels.me.uk wrote: I have never got close to 1.8 on a 32bit OS, but then you also have to consider the memory usage in addition to the heap size. CF itself uses a bunch of memory as it is a java app, then there are the perm gen sizes and what not, so your max heap size will depend on other settings. I have never been able to set it much more than 1GB. on 64bit you can use all the available memory but 64bit also uses about twice as much to begin with On Thu, Apr 3, 2014 at 11:04 AM, John M Bliss bliss.j...@gmail.com wrote: Sorry. Was referring to maximum POSSIBLE. i.e. 32 bit OS have a cap of 1.8 GB, right...? http://helpx.adobe.com/coldfusion/kb/maximum-jvm-heap-size-greater.html On Wed, Apr 2, 2014 at 11:47 PM, Wil Genovese jugg...@trunkful.com wrote: There is no such reference. Each server/application(s) has it's own needs that must be evaluated on a case by case basis. The only general rule of thumb that can be applied is that 64bit systems tend to need more JVM heap than a 32bit system and that isn't even set in stone. It still depends on the web application(s) needs. Regards, Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com wilg...@trunkful.com www.trunkful.com On Apr 2, 2014, at 9:14 PM, John M Bliss bliss.j...@gmail.com wrote: Hi. Does anyone know of a simple-ish reference showing: ACF version ACF standard v enterprise (if that matters) OS (Windows v Linux) OS version (if that matters) OS 32 bit v 64 bit ...and correlated max heap size? -- John Bliss - http://www.linkedin.com/in/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358295 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: max heap
Dave, I worked with that 3GB switch to try to get up to 2g heap but was never able to do it successfully - get a large heap I mean. Never tried it was jrocket though. -Mark -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Thursday, April 03, 2014 9:08 AM To: cf-talk Subject: Re: max heap 1.8 is possible on a linux 32bit server... on a windows 32 bit is closer to 1.4 - a lot depends on the overall settings you choose. As for 64bit the upper limit is purley theoretical and you will likely never reach it - probably more than a petabyte. In practice we have some 12gig heaps running successfully - and more is possible. It's just that you tend to start running more instances or servers rather than continuing to up the heap size. Actually, it is possible to exceed that on 32-bit Windows Server 2003 with a switch at system startup. https://blogs.oracle.com/jrockit/entry/how_to_get_almost_3_gb_heap_on_window s That said, I've never bothered to do this, and am not sure it would be a great idea anyway. As for max heap size in general, I don't think there's anything CF-specific about it. CF will use whatever is available if it needs to use it, but heap size is completely controlled by the JVM. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358297 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Jrun Restarts Itself Every Few Minutes - CF 8
Look in the runtime/bin directory for any hotspot errors. Hsxx.log usually. If you find any they should give you a clue where to look. -Original Message- From: E Cohen [mailto:eron_co...@yahoo.com] Sent: Thursday, February 06, 2014 9:12 AM To: cf-talk Subject: Jrun Restarts Itself Every Few Minutes - CF 8 Hello All, I am having a problem with one of my ColdFusion 8 production servers. JRUN seems to be the issue--it is restarting itself every few minutes and I don't know why. This is the error I find in the Windows Server 2008 R2 Application error log: Faulting application name: jrun.exe, version: 4.0.7.43137, time stamp: 0x47d937de Faulting module name: MSVCR100.dll, version: 10.0.30319.1, time stamp: 0x4ba220dc Exception code: 0xc417 Fault offset: 0x0007038c Faulting process id: 0x14e8 Faulting application start time: 0x01cf234798a16348 Faulting application path: C:\ColdFusion8\runtime\bin\jrun.exe Faulting module path: C:\Windows\system32\MSVCR100.dll Report Id: 28eeef4c-8f3b-11e3-95a9-80ee73328ead I have tried uninstalling and re-installing ColdFusion but the problem continues. Can anyone give me any other ideas of where to look or how to troubleshoot this? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357597 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Jrun Restarts Itself Every Few Minutes - CF 8
Eron, Ok, next step will be to ask about your JVM arguments and your hardware. Is this a VM? Are there I/o errors? What version of Java are you running? Is it 64bit cf8 ent or 32 bit cf8 ent or 32 bit standard CF 8 is long in the tooth and it's worth remembering it was out well before 08r2. If you are running 32bit on the 08r2 platform it's not a common config. -Mark -Original Message- From: E Cohen [mailto:eron_co...@yahoo.com] Sent: Thursday, February 06, 2014 9:36 AM To: cf-talk Subject: Re: Jrun Restarts Itself Every Few Minutes - CF 8 Thanks Mark. I have checked in the runtime\bin directory and there aren't any log files in there of any sort. I also checked the log files in runtime\logs and there isn't anything very interesting there either aside from the frequent errors in coldfusion-out and coldfusion-event logs that states There is no web application configured to service your request but I think that's an effect of jrun crashing, not the cause. I'd really appreciate any other ideas anyone may have! This is a huge problem for me right now. Look in the runtime/bin directory for any hotspot errors. Hsxx.log usually. If you find any they should give you a clue where to look. Hello All, I am having a problem with one of my ColdFusion 8 production servers. JRUN seems to be the issue--it is restarting itself every few minutes and I don't know why. This is the error I find in the Windows Server 2008 R2 Application error log: Faulting application name: jrun.exe, version: 4.0.7.43137, time stamp: 0x47d937de Faulting module name: MSVCR100.dll, version: 10.0.30319.1, time stamp: 0x4ba220dc Exception code: 0xc417 Fault offset: 0x0007038c Faulting process id: 0x14e8 Faulting application start time: 0x01cf234798a16348 Faulting application path: C:\ColdFusion8\runtime\bin\jrun.exe Faulting module path: C:\Windows\system32\MSVCR100.dll Report Id: 28eeef4c-8f3b-11e3-95a9-80ee73328ead I have tried uninstalling and re-installing ColdFusion but the problem continues. Can anyone give me any other ideas of where to look or how to troubleshoot this? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357600 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Jrun Restarts Itself Every Few Minutes - CF 8
Awesome! Usually when you have an abend on a jar file you get an
hs_err_ file generated somewhere.
-Original Message-
From: E Cohen [mailto:eron_co...@yahoo.com]
Sent: Thursday, February 06, 2014 12:24 PM
To: cf-talk
Subject: Re: Jrun Restarts Itself Every Few Minutes - CF 8
PROBLEM SOLVED
It turns out that CFX_OPENIMAGE had been chocking on a corrupted file--and
every time it was asked to process that file the server would
crashnice...
THANKS AGAIN
Mark-
Thanks again for trying to help. The server has been running for
quite a while without problems. It is just a regular standalone
server with the default JVM. Interestingly, I just uninstalled and
reinstalled as a multiserver and the same crash still happens. The
Coldfusion version is CF 8 Enterprise. I am starting to wonder if it
isn't some windows update that could have caused this.
As I just reinstalled Coldfusion (a couple of times) this morning, I
don't think there is anything special about my jvm.config file or java
installation - the startup arguments look like this at the moment:
java.args=-server -Xmx512m -Dsun.io.useCanonCaches=false
-XX:MaxPermSize=192m -XX:+UseParallelGC -Xbatch -Dcoldfusion.
rootDir={application.home}/../ -Djava.security.policy={application.
home}/../lib/coldfusion.policy -Djava.security.auth.
policy={application.home}/../lib/neo_jaas.policy -Dcoldfusion.
classPath={application.home}/../lib/updates,{application.home}/../lib,
{application.home}/../gateway/lib/,{application.home}/..
/wwwroot/WEB-INF/cfform/jars -Dcoldfusion.libPath={application.home}/..
/lib
I have 3 versions of MSVCR100.dll on my computer, but none of them are
inside the ColdFusion directory (one is in the clam antivirus folder,
on in the windows/system32 folder and the other in the
windows/SYSWOW64 -- file sizes and dates are a little different on all
three )
What sort of I/O errors would I look for?
Thanks again!
Eron,
Ok, next step will be to ask about your JVM arguments and your
hardware. Is
this a VM? Are there I/o errors? What version of Java are you
running? Is
it 64bit cf8 ent or 32 bit cf8 ent or 32 bit standard CF 8 is
long in
the tooth and it's worth remembering it was out well before 08r2. If
you are
running 32bit on the 08r2 platform it's not a common config.
-Mark
Thanks Mark. I have checked in the runtime\bin directory and there
aren't
any log files in there of any sort. I also checked the log files in
runtime\logs and there isn't anything very interesting there either
aside
from the frequent errors in coldfusion-out and coldfusion-event logs
that
states There is no web application configured to service your
request
but I think that's an effect of jrun crashing, not the cause.
I'd really appreciate any other ideas anyone may have! This is a
huge
problem for me right now.
Look in the runtime/bin directory for any hotspot errors. Hsxx.
log
usually. If you find any they should give you a clue where to look.
Hello All,
I am having a problem with one of my ColdFusion 8 production servers.
JRUN
seems to be the issue--it is restarting itself every few minutes and
I
don't
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357606
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Hosting... Again
Edge Web hosting should be on your list. They are exceptionally good as well. -Original Message- From: Robert Harrison [mailto:rob...@austin-williams.com] Sent: Friday, January 10, 2014 7:22 AM To: cf-talk Subject: Hosting... Again Hi All, I've got a lot of large CF sites I have to move because my host is not up to what we've grown to be. Love the guy and been with him for years, but now I have to go. I've asked this before (in October), but now that I'm no longer in denial I'm looking for CF hosting recommendations again. I have the previous recommendations which I'm listing below. If anyone has comments about any of the hosts below, or better recommendations, please provide your feedback. I'm about to move a boatload of serous sites. So far, I've gotten recommendations for: Hostek Viviotech CrystalTech http://www.kickassvps.com/ Please let me know if you have additional recommendations or feedback on these hosts. Thanks, Robert ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357403 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Simple SQL Query sometimes really Slow?
Brooke, Couple of points of inquiry. 1) 50k records can be a little OR a lot. How much actual data is returned. Is a lot of textual? Management studio might look really fast but the problem could be a lot of character data buffering to the web server. 2) have you looked at the activity monitor? Filter by your connection and watch for blocks or waits - taking note of the process blocking. 3) Indexing might be ok but maybe not. Take a look at the execution plan in Management Studio - it can tell you what the most expensive operations of the query are. 4) Double check parallelism on the server. This can bite you under certain conditions and will result in what look like randomly slow queries with no seeming blocks. See my blog post about it: http://www.coldfusionmuse.com/index.cfm/2011/11/18/cf.mssql.parallelism Hope this helps a little. Good luck! -mark -Original Message- From: Brook Davies [mailto:cft...@logiforms.com] Sent: Thursday, December 05, 2013 11:26 AM To: cf-talk Subject: Simple SQL Query sometimes really Slow? This may not be the right place to post this (man, CF-TALK has changed a lot in the last 5 or so years ;)). I have a simple SQL query that is showing up as running slow. When I run it via the Management Studio it is sometimes fast 0.1 seconds and sometimes, seemingly randomly slow 1.5 minutes!). Other queries on other tables are executing normally. This table only has 50k records and even a simple query is sometimes really slow. The query that runs slow is as simple as select commitDate,id from databaseChangeLog where usr_id = 62622 and form_id = 312468 and commitDate '2013-12-04 11:00:05.0' But is just as slow without the date part. The table has a clustered index on the primary key (id) and a non-clustered index on usr_id,form_id and commitDate. The index doesn't seem to make any difference. My guess is the table is locked. My question is: How can I determine if it is locked? What would be locking it. I checked all my code and there are no CFTRANSACTIONS or ISOLATED READS or anything like that. There are some inserts and the table has 2 TEXT columns which are being updated at times with fairly large values. But the only queries reported as slow are these simple SELECTS. The query execution plan uses the non-clustered index on (usr_id,form_id and commitDate). I'm just at a loss as to why this specific query is sometimes so slow.. where to look? Brook ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357290 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: isValid - numeric vs. float
Scott,
Ok.. this is simple but remember that val( ) actually returns a number if
the first part of the string IS a number, and a zero if it is not:
Val(343,200) returns 343
Val(ABC123) returns 0.00
So if you know you are dealing numbers above zero you can use this as a
quick and easy Boolean function. As in
If(val(23,320,2300.00))
{
..then whatever code you need to strip commas and further manage the
variable.
)
Just a thought :)
Mark Kruger - CFG
CF Webtools
www.cfwebtools.com
www.coldfusionmuse.com
O: 402.932.3318
E: mkru...@cfwebtools.com
Skype: markakruger
-Original Message-
From: Scott Brady [mailto:dsbr...@gmail.com]
Sent: Wednesday, December 04, 2013 8:34 AM
To: cf-talk
Subject: Re: isValid - numeric vs. float
Well, in our case, this started out as a way for us to determine if the
variable we're dealing with is a number that we'd need to strip the commas
from. Due to the nature of our code, we only want to strip out the commas
if it's a number. For us, the bug actually works in our favor, because
that's really the only way to determine if it was a number. (Our other
alternative was to do an lsPareNumber() inside a try/catch block, which may
be the way we have to go if Adobe fixes the bug.
Scott
On Wed, Dec 4, 2013 at 8:27 AM, Jon Clausen
jon_clau...@silowebworks.comwrote:
Agreed. I would recommend stripping the commas out before you validate
the number. They do strange things with calculations. For instance,
numberFormat() converts 1,000 to 41274, as does JavaCast(int,1,000)
or JavaCast(float,1,000). I actually think its kind of incorrect
that
the default behavior for numberFormat(1000) returns 1,000 as it can mess
up
your calculations, but its been the default for so long, it would
probably
break backward compatibility for a bunch of apps.
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357272
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Problem with data formatting in CFINSERT
Ben, Moving from MS Access to MS SQL is one of the easiest options for migration I'm afraid. FYI you CAN get Access running on 08r2 with CF 64bit. It just takes some work. -Mark -Original Message- From: Ben [mailto:b...@webworldinc.com] Sent: Tuesday, November 05, 2013 9:07 AM To: cf-talk Subject: Re: Problem with data formatting in CFINSERT Hi Russ For those of us who have been out of the loop for a while, can you suggest easy to implement alternatives to 32 bit MS access? I did a conversion of a DB to SQL server some years back and that was painful. Ben On Nov 5, 2013, at 7:52 AM, Russ Michaels r...@michaels.me.uk wrote: well someone has to say it... but why the frack are you still using MSACCESS when there are so many better/free alternatives? you know the Jet driver (which is what you use to connect to MSACCESS) is no longer supported by Microsoft and ha snot been for years and only runs in 32 bit, and as such does not work on modern 64bit OS (without lots of hacking to get it to run in 32bit mode), which is Windows Server 2008 onwards, there is no 32 bit windows any more. On Tue, Nov 5, 2013 at 2:44 PM, wrote: I have robot updaters and inserters too (made all the more robotic with the help of cfdbinfo figuring out the field types), This is what I do, but using my own CFX_ODBCinfo I developped years before cfdbinfo was available, and I'm still using it because cfdbinfo doesn't work for Access databases. Debugging is miserable with a layer of code in the middle and straightforward without. Right, I think I'm going to improve my CF_INSERT tag by generating the SQL code in the tag. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357039 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Hosting
Robert, Enterprise level meaning? If you are going to host multiple dedicated servers I suggest you speak with EdgeWeb Hosting. They do a fabulous job and provide superlative management services. -Mark -Original Message- From: Robert Harrison [mailto:rob...@austin-williams.com] Sent: Monday, October 21, 2013 8:04 AM To: cf-talk Subject: Hosting I know this has been asked 100 times before, but it looks like I need a new cf hosts that can host enterprise level sites. Any recommendations? I've have gone to the archives but the HOF site is down. Robert Harrison Director of Interactive Services Austin Williams Advertising I Branding I Digital I Direct 125 Kennedy Drive, Suite 100 I Hauppauge, NY 11788 T 631.231.6600 X 119 F 631.434.7022 http://www.austin-williams.com Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter.com/austin_ ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356953 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: HttpOnly session cookie setting ignored in CF10
Tom, Can you pass the cookie into your SWF from the calling page using flash vars and JS? -mark -Original Message- From: Tom McNeer [mailto:tmcn...@gmail.com] Sent: Thursday, October 03, 2013 10:05 AM To: cf-talk Subject: HttpOnly session cookie setting ignored in CF10 Hi, I have a client application which uses a Flex front end. It runs on CF9, but I have recently updated my dev server to CF10. Part of the application allows files to be uploaded to the server. A problem has existed for a long time that would cause an error when posting a file upload to a CF routine because the session information, which is normally passed correctly on data requests, is not passed on an upload. The traditional workaround has been to include the jsessionid as a URL param when calling the CF page. And this works fine for me on the live CF9 site. But the same routine is failing on my dev server. The problem appears to be that the session cookies are being set as HttpOnly, and can't be accessed by the Flex call (just as they would fail on an ajax call). However, I am not able to get CF to send the cookies as HttpOnly=false. I have unchecked both the Secure and HttpOnly options in the CF Admin. And my Application.cfc contains this.sessioncookie.httponly=false. Yet despite this, and restarting the CF service just from fun, when I access the dev site and examine the cookie content (in multiple browsers), the cookies (jsession, CFID and CFTOKEN) are all set as httpOnly=true. Does anyone have any thoughts on this? -- Thanks, Tom Tom McNeer MediumCool http://www.mediumcool.com 1735 Johnson Road NE Atlanta, GA 30306 404.589.0560 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356869 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: HttpOnly session cookie setting ignored in CF10
Tom, Ah.. got it. Because there's it's not accepting it as a URL var it craps out. -Mark -Original Message- From: Tom McNeer [mailto:tmcn...@gmail.com] Sent: Thursday, October 03, 2013 11:24 AM To: cf-talk Subject: Re: HttpOnly session cookie setting ignored in CF10 Mark, Thanks for the reply. Yes, that's the technique I've been using. The jsessionid is passed via FlashVars to the SWF. And the jsessionid is then passed from the SWF as a URL variable in the upload call. This is what's working on the live CF9 site. But on my CF10 dev server, I'm getting a 302 redirect, which is what occurred in CF9 before I learned to pass the jsessionid with the request. It's not the lack of the session information that's the problem (I don't think). It's that regardless of my server and application settings, the session cookies are set as HttpOnly, and thus the variable in the request from the SWF is not recognized. At least, that's my current theory. On Thu, Oct 3, 2013 at 11:46 AM, Mark A Kruger mkru...@cfwebtools.comwrote: Tom, Can you pass the cookie into your SWF from the calling page using flash vars and JS? -mark -Original Message- From: Tom McNeer [mailto:tmcn...@gmail.com] Sent: Thursday, October 03, 2013 10:05 AM To: cf-talk Subject: HttpOnly session cookie setting ignored in CF10 Hi, I have a client application which uses a Flex front end. It runs on CF9, but I have recently updated my dev server to CF10. Part of the application allows files to be uploaded to the server. A problem has existed for a long time that would cause an error when posting a file upload to a CF routine because the session information, which is normally passed correctly on data requests, is not passed on an upload. The traditional workaround has been to include the jsessionid as a URL param when calling the CF page. And this works fine for me on the live CF9 site. But the same routine is failing on my dev server. The problem appears to be that the session cookies are being set as HttpOnly, and can't be accessed by the Flex call (just as they would fail on an ajax call). However, I am not able to get CF to send the cookies as HttpOnly=false. I have unchecked both the Secure and HttpOnly options in the CF Admin. And my Application.cfc contains this.sessioncookie.httponly=false. Yet despite this, and restarting the CF service just from fun, when I access the dev site and examine the cookie content (in multiple browsers), the cookies (jsession, CFID and CFTOKEN) are all set as httpOnly=true. Does anyone have any thoughts on this? -- Thanks, Tom Tom McNeer MediumCool http://www.mediumcool.com 1735 Johnson Road NE Atlanta, GA 30306 404.589.0560 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356871 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Application.cfm/c
Your admins might be referring to the idea that some OTHER application.cfm/c is being called when none is in the root of the site. These are issues that can generally be resolved but they have to be understood. I'd get more info. -Original Message- From: Byron Mann [mailto:byronos...@gmail.com] Sent: Tuesday, September 24, 2013 10:39 PM To: cf-talk Subject: Application.cfm/c Trying to wrap my head around any implications around not using an application file. Our admins are telling me that we run into issues with customers on our shared platform not having one. (they didn't specify the issues in the email). I can see how non-unique application names might be an issue, but I'm failing to see any pitfalls to not having one. If anything I would say it would improve performance, since you could not use application, session and client scope, thus using less memory utilization. Looking for any experience where this may have been an issue before I talk to them tomorrow. Byron Mann Lead Engineer Architect HostMySite.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356835 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: move database with Java
Hmm... I think I would download a manager for mysql written in java (I seem to recall one on sourceforge) and just tell your boss - look, I'm using Java! -Mark -Original Message- From: morchella [mailto:morchella.delici...@gmail.com] Sent: Tuesday, September 17, 2013 8:14 AM To: cf-talk Subject: move database with Java Hey Guys, i know this is not necessarily a cf question. i know next to nothing about java, other then creating a scheduled job to copy a table. now my employer has tasked me with moving or backing up a MySQL DB from one server to another. to me this sounds crazy. but i am not supposed to use cf, or built in MySqlEnterprise tools. Have any of you guys done this with java before? are there any links/examples you could suggest. i don't think it can be done quickly, as in from midnight to 5am kinda thing. any help would be Massively appreciated! Thank you! ~m ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356806 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Good jvm ram settings for 64 bit ColdFusion
Michael, This is out of my head so forgive me if I am off on a factual point or two - but you will get the gist of it. In 32 bit addressing each memory address takes up 4 bytes (4 x 8 bits) but a 64 bit address space is wider (as in 8 x 8 bits). So for example, if you store an integer - say 14 - on a 32 bit system, it will take 4 bytes to do it ( 1110). Of course you might think h... it could actually store that in a single byte - but being that draconian with storage would only slow the computer down. It needs lots of address spaces of uniform size. Think of a post office with dozens of P.O. Boxes - little cubbies where mail is placed. It would not make sense for them to resize each box for the volume of mail. They just accept the fact that some boxes have 1 letter and others may have 12 or 13. In a 64bit address space however the address spaces are wider (by another 32 bits). So that 14 is going to look like 1110 internally. The advantage of 64bit is NOT in speed of addressability. They are generally faster because they are new gen systems with faster FSB, shorter electron paths, better L2/3 caches etc. The advantage is in total addressability. The 32 bit system is limited to 2 to the 32nd power (4.2 billion add addresses) whereas 64 bit systems have 2 to the 64th power addresses. The width means exponentially more addresses available as PO boxes for bits of things that need storing. When I say exponential I mean something like 16 exabytes of possible addressable space. So the good news is that a 64 bit system can utilize an unlimited amount of memory (unlimited in any practical sense at this point in our computer evolution). The bad news is, it takes more room to store equivalent data. -Mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Michael Dinowitz [mailto:mdino...@houseoffusion.com] Sent: Tuesday, September 03, 2013 7:19 AM To: cf-talk Subject: Re: Good jvm ram settings for 64 bit ColdFusion Mark, To start, the assignment of 6 gig to maxheap and 2 gig to maxperm is working perfectly. I'll expose my ignorance here and ask about that 80%. Is there some inefficiency in jvm ram assignment in 64 bit in comparison to 32 bit? Is there more overhead in ram assignment? Just wondering what's up with the difference. Thanks On Mon, Sep 2, 2013 at 2:13 PM, Mark A Kruger mkru...@cfwebtools.comwrote: Michael, Rule of thumb is 80% for equivelancy. In other words, a 1.8 gig 64bit is equal to a 1gig 32 bit. Heap. Or you can just multiply times 2 (which is usually what I do). So a 6 gig heap is roughly 3 or more times the size of your 32bit 1 gig heap. If your server is dedicated to CF I think your 6 gig heap is great. Takes most of the physical memory for CF and leaves 2gs for the OS, monitoring etc. -Mark -Original Message- From: Michael Dinowitz [mailto:mdino...@houseoffusion.com] Sent: Monday, September 02, 2013 12:18 PM To: cf-talk Subject: Good jvm ram settings for 64 bit ColdFusion Does anyone have any suggestions for good workable ram settings on a 64 bit CF10 install on a box with 8 gig of ram? I understand I can use more than the standard 1 gig but has there been any work on the best settings? Otherwise I'm thinking to start with 6 gig maxheap and 4 gig maxperm. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356696 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Good jvm ram settings for 64 bit ColdFusion
Thanks Pete - good info. I'll file that away :) so each address is 64bits even if the storage is only 32bits. Weird but I think I got it. I think 2 gigs for the OS is fine - at least on a windows box dedicated to CF the OS doesn't need much more than that typically even with some backup agents etc. I agree with you on the permsize though -mark -Original Message- From: Pete Freitag [mailto:p...@foundeo.com] Sent: Tuesday, September 03, 2013 11:41 AM To: cf-talk Subject: Re: Good jvm ram settings for 64 bit ColdFusion On Tue, Sep 3, 2013 at 9:08 AM, Mark A Kruger mkru...@cfwebtools.comwrote: In 32 bit addressing each memory address takes up 4 bytes (4 x 8 bits) but a 64 bit address space is wider (as in 8 x 8 bits). So for example, if you store an integer - say 14 - on a 32 bit system, it will take 4 bytes to do it ( 1110). That is correct about the addressing being larger on 64 bit, but it still uses 32 bits to store an int (in Java at least, this may differ if you are doing c/c++, etc), but it's address is twice as big. So what accounts for the extra heap usage is that when you have an object reference (or a pointer) to another object or primitive within an object instead of taking 32 bits per reference it takes 64 bits. Also Michael - 2gb perm size seams rather large generally speaking (unless you have tons of cfm/cfc files). Further if your server has 8GB of ram, and you are setting 6GB max heap and 2GB max perm size then you are not leaving any room for the OS to operate when things get full. The perm size does not usually change much once the application is fully loaded and all possible logic routes have executed at least once (unless you have some sort of dynamic cfml generating going on) so you should be able to see how much you are actually using at runtime by running this code: http://www.petefreitag.com/item/821.cfm -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting Products http://hackmycf.com - Is your ColdFusion Server Secure? http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10 minutes ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356700 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: database driven mail server
Claude, I was thinking that @mail (or atmail?) has MySQL based logs - but I could be mistaken. The data is definitely stored in mysql however. There may be a plugin for Zimbra that handles logs via ODBC. 2 cents - make sure you tell your users that the information they are looking for is heavily dependent on the downstream servers and largely out of your control :) I'm sure you have. -Mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Claude Schnéegans schneeg...@internetique.com [mailto:=?ISO-8859-1?Q?Claude_Schn=E9egans schneegans@interneti=71?= =?ISO-8859-1?Q?ue.com=3E?=] Sent: Monday, September 02, 2013 8:34 AM To: cf-talk Subject: database driven mail server Hi, I'm presently using MailEnable on my server. It's a good program, but I need to build a system to follow up messages. My customers (associations) send messages to their members and some messages do not go through for many reasons. They need to have confirmations and reasons of failures. The problem with Mail Enable is that the logs are a real mess and very complicated to parse. I would need a program that generates more comprehensive logs in a database I could read more easily. Any suggestion? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356684 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Good jvm ram settings for 64 bit ColdFusion
Michael, Rule of thumb is 80% for equivelancy. In other words, a 1.8 gig 64bit is equal to a 1gig 32 bit. Heap. Or you can just multiply times 2 (which is usually what I do). So a 6 gig heap is roughly 3 or more times the size of your 32bit 1 gig heap. If your server is dedicated to CF I think your 6 gig heap is great. Takes most of the physical memory for CF and leaves 2gs for the OS, monitoring etc. -Mark -Original Message- From: Michael Dinowitz [mailto:mdino...@houseoffusion.com] Sent: Monday, September 02, 2013 12:18 PM To: cf-talk Subject: Good jvm ram settings for 64 bit ColdFusion Does anyone have any suggestions for good workable ram settings on a 64 bit CF10 install on a box with 8 gig of ram? I understand I can use more than the standard 1 gig but has there been any work on the best settings? Otherwise I'm thinking to start with 6 gig maxheap and 4 gig maxperm. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356691 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: database driven mail server
Matt, That's pretty nifty. I use a number of the API features of smarter mail integrated into my company management/hours/tasks system. It's definitely a great platform and worth a look. -mark -Original Message- From: Money Pit [mailto:websitema...@gmail.com] Sent: Monday, September 02, 2013 5:53 PM To: cf-talk Subject: Re: database driven mail server I rolled my own solution with CF coupled to Smartermail's support of Plus-addressing. If you aren't familar with it, its pretty powerful. Lets say my email is u...@domain.com. I send mail with CF as usual and set CFMAIL's FailTo parameter to 'failedmail+1...@domain.com', where 1234 is the primary key ID number for the user record. So bounces come back and plus addressing puts every failure into failedm...@domain.com. I use CFPOP with GETHEADERSONLY (!) to read that mailbox periodically and parse thru returned emails, figuring out what happened from the headers and doing stuff accordingly. Sound like what you're after? A quick snippet to illustrate the maintenance process (which I cfschedule): cfpop server=#servername# username=#failUser# password=#failPwd# action=GETHEADERONLY name=GetHeaders cfloop query=getHeaders !--- this header identifies the email --- cfset variables.emailID=getHeaders.UID !--- this pulls out the user ID from the return address. Note if the email itself is stored in a db then this next step is unnecessary and so is plus addressing as you could just log the user id with the email record --- cfset variables.usrID=listLast(listFirst(getHeaders.to,@),+) !--- run tests here, as detailed as you like. For example I keep track of failure counts and scrub emails from my list if they reach three strikes. --- cfif findNoCase(fail,getHeaders.subject,1) blah /cfif cfif findNoCase(error,getHeaders.subject,1) woof /cfif !--- do more clever stuff here as needed. Then delete the failed email from the inbox and continue. --- cfpop server=#servername# username=#failUser# password=#failPwd# action=DELETE uid=#variables.emailID# /cfloop -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356693 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: cflocation and long urls
Ray, I agree but that restriction is pretty common for very very old browsers (like IE 5 or maybe 6) but I haven't seen it be a problem recently. .NET pages in particular can generate famously long URLs. My guess is that it get's mangled by the redirect somehow - or that some intermediate engine (like dotdefender) changes it or precludes it in some fashion. On one of the other lists I read about dotdefender stopping a request that had redirected more than 1 time for example. -Mark -Original Message- From: Raymond Camden [mailto:raymondcam...@gmail.com] Sent: Tuesday, August 27, 2013 5:00 PM To: cf-talk Subject: Re: cflocation and long urls There is a max size for URLs. Some browsers may be more strict about it. On Tue, Aug 27, 2013 at 4:23 PM, Rob Voyle robvo...@voyle.com wrote: Hi folks I have a long encrypted url stored in a database: the cgi.query_string is something like YJShGG8kxBWgJKOlo2z4oTM8jEanxnGNBzw+QBQw8JBtuiQ8Oyn6tc6qmbd+E7W vcbfncSF/pq2ttDOdegKnxA== It works fine if i manually copy the total url from the database to the browser, however if I use cflocation url=#database.weblink# I get a not found error in firefox IE Chrome whereas Safari it works fine Any ideas or work arounds? Thanks Rob Robert J. Voyle, Psy.D. Director, Clergy Leadership Institute For Coaching and Training in Appreciative Inquiry Author: Restoring Hope: Appreciative Strategies to Resolve Grief and Resentment http://www.appreciativeway.com/ 503-647-2378 or 503-647-2382 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356569 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Do you use Hostek and Gmail for your mail?
Here's the bug. https://bugbase.adobe.com/index.cfm?event=bugid=3369472 I'm going to blog this as well. -Mark -Original Message- From: Eric Roberts [mailto:ow...@threeravensconsulting.com] Sent: Wednesday, August 21, 2013 9:10 AM To: cf-talk Subject: RE: Do you use Hostek and Gmail for your mail? I haven't tried to send email from my site...But I am using hostek as my host and google apps mail for my email. Eric -Original Message- From: Andrew Scott [mailto:andr...@andyscott.id.au] Sent: Wednesday, August 21, 2013 5:50 AM To: cf-talk Subject: Do you use Hostek and Gmail for your mail? I am reaching out to everyone who is using hostek for their hosting, and using gmail for your mail, your mail may not be being sent. There appears to be an issue on their servers at the moment, where mail being sent just stops, well for me at least. Also it is possible that some people are seeing your mail without you knowing about it. For example, I have 3 other customers of Hostek who have sent email from their hosted website on hostek, sitting in my sent folders. I wont go into the implications this has from a security point of view, with details sitting in my gmail account about someone else's intended email. But it is a known bug in ColdFusion that seems to not be that well known, at least nothing can be found via a google search any way. Regards, Andrew Scott WebSite: http://www.andyscott.id.au/ Google+: http://plus.google.com/113032480415921517411 ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356528 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Do you use Hostek and Gmail for your mail?
Ok.. I blogged this issue for posterity. Now let's vote this bug up :) http://bit.ly/16x4ilg -Mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356534 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Using IN() within a cfquery statement
Dave is allowed one weak answer per year... he's waited til August so I say we give him a break :) -Mark -Original Message- From: DURETTE, STEVEN J [mailto:sd1...@att.com] Sent: Monday, August 19, 2013 8:46 AM To: cf-talk Subject: RE: Using IN() within a cfquery statement Dave... I'm surprised. Wouldn't you think that CFQueryParam would be the better way? Where stuff in (cfqueryparam value=#form.stuff# cfsqltype=appropriate type list=yes separator=, /) Steve -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Monday, August 19, 2013 9:42 AM To: cf-talk Subject: Re: Using IN() within a cfquery statement I have a select name=stuff multiple in a form filled with results from a query. I get the form field value: stuff=selection1,selection5,selection12. How do I then build a cfquery using the stuff variable in the IN() statement? Use the quotedValueList function to wrap single quotes around them. SELECT ... FROM ... WHERE STUFF IN (#quotedValueList(form.stuff)#) Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356486 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: 1900/01/01
I think it is the first date possible for the smalldatetime data type. I'm guessing you are populating with a default value - as in Dave's suggestion (putting in a time with no date would default to the earliest date maybe). -Original Message- From: Torrent Girl [mailto:moniqueb...@gmail.com] Sent: Thursday, August 08, 2013 10:13 PM To: cf-talk Subject: 1900/01/01 Anyone know why 1900/01/01 would show up in a column when a record is updated? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356425 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Timeouts connecting to database from my local installation
Brook, Here's a blog post that should help. http://www.coldfusionmuse.com/index.cfm/2011/11/3/host.files.are.fun -Original Message- From: Torrent Girl [mailto:moniqueb...@gmail.com] Sent: Tuesday, August 06, 2013 9:22 PM To: cf-talk Subject: Re: Timeouts connecting to database from my local installation Make sure it's not resolution issues... sometimes inconsistent DNS or the use of VPN's can cause issues with connecting. Use a hosts entry or an IP address to eliminate DNS as an issue. I have constant timeouts when trying to connect my local CF installation and the DEV database. Is there anything I can do in the code and/or admin to maximize my connection? I am sorry Mark. How do I do this? Use a hosts entry or an IP address to eliminate DNS as an issue. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356419 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: JSON Encoding bug (again...)
Dave,
The code testval = '.0006' makes me think a string instead of a number.
Javacast might force a type on the string eh?
Brooke - are you looking for a number or a string?
-Mark
-Original Message-
From: Dave Watts [mailto:dwa...@figleaf.com]
Sent: Monday, August 05, 2013 7:52 PM
To: cf-talk
Subject: Re: JSON Encoding bug (again...)
I have had to do so many hacks to get serializeJSON() to play nice. I add
a
~ to all yes/no strings so I don't get back true/false values, I have a
series of regular expressions that quote values in the resulting JSON that
don't get quoted and break on the client side. And now I have this issue:
cfset x = {testval='.0006'}
cfdump var=#serializeJSON(x)#
Which outputs:
{TESTVAL:6.0E-4}
WTF?
I am using CF 9,0,1,274733
Update Level /C:/ColdFusion9/lib/updates/hf901-4.jar
Anybody know of a workaround for this? The source data is in a query which
gets serialized after being converted to an array of structs. It would be
too slow to check each field for values like this and modify them to
return
to the client. I need another Idea. Anyone?
This isn't really a problem with JSON serialization, but with CF being
typeless, and CF's tendency to autoconvert numbers into scientific
notation. You can work around this by using precisionEvaluate(), the
BigDecimal version of the Evaluate function:
cfset x = {testval=precisionEvaluate(.0006)}
cfdump var=#serializeJSON(x)#
Note that this will add a leading zero.
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
http://training.figleaf.com/
Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356393
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Coldfusion in distributed mode with multiple subnets on host
Brad, Awesome! -Original Message- From: brad f [mailto:b...@ciswired.com] Sent: Monday, August 05, 2013 9:59 PM To: cf-talk Subject: Re: Coldfusion in distributed mode with multiple subnets on host Thanks for all the replies.. Changing the order of the nics was all I had to do. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356394 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: JSON Encoding bug (again...)
Yeah... got it. -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Tuesday, August 06, 2013 10:28 AM To: cf-talk Subject: Re: JSON Encoding bug (again...) The code testval = '.0006' makes me think a string instead of a number. Javacast might force a type on the string eh? That might work, but the problem is that CF will continually reevaluate values every time they're used - as you'd expect in a typeless language. All you can do is force CF to treat a variable as a specific type for the current operation. Here we have two operations: in the first, we can tell CF to treat the struct value as a string, but in the second that's kind of hard to do. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356401 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Timeouts connecting to database from my local installation
Make sure it's not resolution issues... sometimes inconsistent DNS or the use of VPN's can cause issues with connecting. Use a hosts entry or an IP address to eliminate DNS as an issue. -Original Message- From: Torrent Girl [mailto:moniqueb...@gmail.com] Sent: Tuesday, August 06, 2013 12:28 PM To: cf-talk Subject: Timeouts connecting to database from my local installation I have constant timeouts when trying to connect my local CF installation and the DEV database. Is there anything I can do in the code and/or admin to maximize my connection? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356404 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Element undefined in SESSION scope
Make sure that cgi.http_referer exists before you try to set it. This is a var created by the web server NOT cf ... so it may or may not reliably exist. Also make sure this code is AFTER your cfapplication tag. On your own system try hitting the page after a cf restart. You may be trying to access the session before you have established a session. The reason it works on local is because during coding you established a session at some previous point. That's all I got :) -Mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: funand learning [mailto:funandlrnn...@gmail.com] Sent: Tuesday, August 06, 2013 3:08 PM To: cf-talk Subject: Re: Element undefined in SESSION scope I am just setting up a variable to capture cgi.http_referer. cfset session.referer = cgi.http_referer. Initially, the variable was set up as input type=hidden name=referer value=#CGI.http_referer# This variable is defined on a form, which submits to itself. I want to capture the initial cgi.http_referer value when the user first lands on the form and save it to database upon successful submission, hence was using hidden value. Recent security scanning has identified the input form variable for XSS, and hence I am changing it to a session value. On Tue, Aug 6, 2013 at 3:01 PM, Alan Rother alan.rot...@gmail.com wrote: Can we see some sample code? On Tue, Aug 6, 2013 at 12:43 PM, fun and learning funandlrnn...@gmail.comwrote: All - I am converting a form variable to a session variable.I enabled session management in application.cfm in cfapplication tag. The change works fine only on my system, but when others try it, they get 'Element undefined in SESSION'. What could be the possible reason? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356408 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
FW: Element undefined in SESSION scope
Trying a resend. Make sure that cgi.http_referer exists before you try to set it. This is a var created by the web server NOT cf ... so it may or may not reliably exist. Also make sure this code is AFTER your cfapplication tag. On your own system try hitting the page after a cf restart. You may be trying to access the session before you have established a session. The reason it works on local is because during coding you established a session at some previous point. That's all I got :) -Mark ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356410 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Coldfusion in distributed mode with multiple subnets on host
This was my suggestion too - although I sometimes add static routes to the route table as well to dictate where traffic goes. It sounds like you are multi-homing which might NOT be strictly necessary. Consider teaming so you don't have to fiddle with precedence order etc. -mark -Original Message- From: Russ Michaels [mailto:r...@michaels.me.uk] Sent: Monday, August 05, 2013 8:23 AM To: cf-talk Subject: Re: Coldfusion in distributed mode with multiple subnets on host on your network interfaces page you can change the order in which the interfaces are used, which may solve your issue. open network and sharing centre press ALT choose advanced - advanced settings move the connection to the top that you wish to take precedence Also how are you referencing the database servers from CF using IP or machine name ? On Mon, Aug 5, 2013 at 1:45 PM, brad f b...@ciswired.com wrote: I am running coldfusion 9 in distributed mode(web server and CF on different servers). I have three web servers and three coldfusion servers running in a clustered environment. The problem is that I can never get the cluster setup or the web servers to see the cluster unless I disable the database NIC on the coldfusion boxes. Our environment is divided into three tiers. Web tier, Application tier and Database tier with the web servers not being able to see the database tier... so the web servers do not have a database NIC and it seems coldfusion is always listening on the .111 subnet (database). This also causes a problem when coldfusion is restarted on one of the app servers because it always rejoins the cluster using it's .111 address and then the web servers do not pass traffic to those coldfusion servers until I shut down the database NIC and then restart the coldfusion services.. It then registers on the App tier subnet which the web servers can see. Any ideas on how to make coldfusion only listen on the App tier ip address and not the database tier ip address? Thanks. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356374 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Efflare and ImageCR
Eric, Yes it can run on 64bit - at least we are definitely using it on a 64bit CF8 instance... Did you guys see my comment below? -Mark Chad, I have it running as 64bit on Windows 08r2, CF 8 64bit, Java 1.6.0_32 using the cfx jar file (as apposed to the dll). I know I have archived the installer somewhere. Let me know if you can't get it going and I'll see if I can help you out. -Mark -Original Message- From: Eric Roberts [mailto:ow...@threeravensconsulting.com] Sent: Wednesday, July 31, 2013 5:20 PM To: cf-talk Subject: RE: Efflare and ImageCR It doesn't work on the 64 bit platform. If you look through the archives(look between July and November 2010...probably closer to November, but I don't recall exactly when hehehe, I posted a custom tag I developed to replace CFXImage, with the help of some of the folks on this list, based off of some work Ben Nadel did with the font and image classes in Java... Eric -Original Message- From: Matt Quackenbush [mailto:quackfu...@gmail.com] Sent: Wednesday, July 31, 2013 9:50 AM To: cf-talk Subject: Re: Efflare and ImageCR It's been many years since I've gotten any kind of response out of them. It was a great tag at the time, but long since dead in my experience. On Wed, Jul 31, 2013 at 10:47 AM, Chad Gray cg...@careyweb.com wrote: Anyone know how to get a hold of the developers of ImageCR? It is an image processing CFX extension writing for CF. Their website is a parked and expired. Thanks, Chad ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356363 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Efflare and ImageCR
We do have it running on a 64bit box here. Let me check with that team (if that is your issue and Matt has not been able to resolve it for you). -Mark -Original Message- From: Chad Gray [mailto:cg...@careyweb.com] Sent: Wednesday, July 31, 2013 10:04 AM To: cf-talk Subject: RE: Efflare and ImageCR I tried that, but it's installer must have installed supporting DLL's or something. Of course this is on a 64 bit box, maybe I need to put it in the Program Files (x86). I will keep poking at it. Thanks, Chad -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Wednesday, July 31, 2013 10:58 AM To: cf-talk Subject: Re: Efflare and ImageCR I need to upgrade a server and I cannot find an installer for imageCR3. I don't think I've ever used ImageCR, but if you have it installed on your existing server, and it's just a CFX DLL, you shouldn't really need an installer. Copy the DLL to the new server, then register it within the CF Administrator. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356356 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Efflare and ImageCR
Chad, I have it running as 64bit on Windows 08r2, CF 8 64bit, Java 1.6.0_32 using the cfx jar file (as apposed to the dll). I know I have archived the installer somewhere. Let me know if you can't get it going and I'll see if I can help you out. -Mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: Mark A Kruger [mailto:mkru...@cfwebtools.com] Sent: Wednesday, July 31, 2013 11:37 AM To: cf-talk Subject: RE: Efflare and ImageCR We do have it running on a 64bit box here. Let me check with that team (if that is your issue and Matt has not been able to resolve it for you). -Mark -Original Message- From: Chad Gray [mailto:cg...@careyweb.com] Sent: Wednesday, July 31, 2013 10:04 AM To: cf-talk Subject: RE: Efflare and ImageCR I tried that, but it's installer must have installed supporting DLL's or something. Of course this is on a 64 bit box, maybe I need to put it in the Program Files (x86). I will keep poking at it. Thanks, Chad -Original Message- From: Dave Watts [mailto:dwa...@figleaf.com] Sent: Wednesday, July 31, 2013 10:58 AM To: cf-talk Subject: Re: Efflare and ImageCR I need to upgrade a server and I cannot find an installer for imageCR3. I don't think I've ever used ImageCR, but if you have it installed on your existing server, and it's just a CFX DLL, you shouldn't really need an installer. Copy the DLL to the new server, then register it within the CF Administrator. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356357 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: issue with cfhttp and client certificates
Russ,
Would changing the sys property for unsafe renegotiation allow the JVM to
proceed if this was this issue?
-Mark
(I'm thinking of this arg -Dsun.security.ssl.allowUnsafeRenegotiation=true )
-Original Message-
From: Russ Michaels [mailto:r...@michaels.me.uk]
Sent: Thursday, July 25, 2013 6:25 PM
To: cf-talk
Subject: Re: issue with cfhttp and client certificates
it should be noted that the minimum requirement for certs now is 2048bit,
it is not even possible to generate a cert with less than this with most
CSA's, so perhaps this is the issue, maybe 1024 is not even supported by
java now.
On Thu, Jul 25, 2013 at 11:52 PM, Jeff Garza j...@garzasixpack.com wrote:
The .pfx is a RSA 1024 bit key. Nothing out of the usual. And this exact
key worked just fine in a default install of CF9.
--
Jeff
Original Message
From: Jon Clausen jon_clau...@silowebworks.com
Sent: Thursday, July 25, 2013 3:29 PM
To: cf-talk cf-talk@houseoffusion.com
Subject: Re: issue with cfhttp and client certificates
Long shot, but what is the key length on the encryption? Could it be an
issue with the encryption capabilities currently set on the new JVM for
CF10?
Explanation: http://www.petefreitag.com/item/803.cfm
On Jul 25, 2013, at 4:44 PM, Jeff Garza j...@garzasixpack.com wrote:
Mark,
On the CF9 Server we're at Java version 1.6.0_17 and the arguments
from
the CFAdmin look like the following: -server
-Dsun.io.useCanonCaches=false
-XX:MaxPermSize=192m -XX:+UseParallelGC -Xbatch
-Dcoldfusion.rootDir={application.home}/../
-Dcoldfusion.libPath={application.home}/../lib
-Dcoldfusion.spooltimeout=120.
On the CF10 server it's at Java version 1.7.0_15 and the args are:
-server -XX:MaxPermSize=192m -XX:+UseParallelGC -Xbatch
-Dcoldfusion.home={application.home}
-Dcoldfusion.rootDir={application.home}
-Dcoldfusion.libPath={application.home}/lib
-Dorg.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER=true
-Dcoldfusion.jsafe.defaultalgo=FIPS186Random
-Dcoldfusion.spooltimeout=120
Though, based on the error, I don't think this is a handshake issue.
It
looks like an issue where the JVM can't even open the certificate file
to
pass the public key on to the server. Which is why this is so strange
that
CF9 with the older JVM would be able to do it, but the new one can't.
--Jeff
Original Message
From: Mark A Kruger mkru...@cfwebtools.com
Sent: Thursday, July 25, 2013 1:25 PM
To: cf-talk cf-talk@houseoffusion.com
Subject: RE: issue with cfhttp and client certificates
Jeff,
What JVM version are you using on CF9 and what do the args look like?
Sometimes it's a matter of the handshake and levels of TLS/SSL - the
error
may be not specific enough to tell. You can enable logging to get a
grip
on
it though. That would tell you more.
-Mark
-Original Message-
From: Jeff Garza [mailto:j...@garzasixpack.com]
Sent: Thursday, July 25, 2013 12:25 PM
To: cf-talk
Subject: issue with cfhttp and client certificates
Ok, so here's the issue. A process that was working just fine on CF9
is
now broken on CF10. We have a service that we call that requires us
to
submit a client certificate to the server. In CF9, this worked just
fine.
Use the clientcert and clientcertpass attributes of CFHTTP and you're
good
to go. It reads the .pfx file fine and everything runs... This is
not a
cacerts issue as you do not have to have the key in the keystore to
use
it.
Forward to CF10, the exact same code and certificates now gives the
error:
Error while trying to get the SSL client certificate:
java.security.UnrecoverableKeyException: Could not decrypt key: Could
not
decode key from BER. (Invalid encoding: expected tag not there. ).
It's like it's unable to open the .pfx certificate file.
I know this is a long shot since there are not many folks out there
using
client certs, but has anyone else run across this issue?
Thanks,
Jeff Garza
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356326
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: issue with cfhttp and client certificates
Well, I've hinted at it as a possible solution a couple times but I lack
confidence (ha). Jeff - give it a shot. It's easy and you never know.
-Mark
-Original Message-
From: Russ Michaels [mailto:r...@michaels.me.uk]
Sent: Friday, July 26, 2013 9:18 AM
To: cf-talk
Subject: Re: issue with cfhttp and client certificates
sorry no idea never tried, you would have to try it and see :-)
On Fri, Jul 26, 2013 at 3:16 PM, Mark A Kruger
mkru...@cfwebtools.comwrote:
Russ,
Would changing the sys property for unsafe renegotiation allow the JVM to
proceed if this was this issue?
-Mark
(I'm thinking of this arg -Dsun.security.ssl.allowUnsafeRenegotiation=true
)
-Original Message-
From: Russ Michaels [mailto:r...@michaels.me.uk]
Sent: Thursday, July 25, 2013 6:25 PM
To: cf-talk
Subject: Re: issue with cfhttp and client certificates
it should be noted that the minimum requirement for certs now is 2048bit,
it is not even possible to generate a cert with less than this with most
CSA's, so perhaps this is the issue, maybe 1024 is not even supported by
java now.
On Thu, Jul 25, 2013 at 11:52 PM, Jeff Garza j...@garzasixpack.com
wrote:
The .pfx is a RSA 1024 bit key. Nothing out of the usual. And this
exact
key worked just fine in a default install of CF9.
--
Jeff
Original Message
From: Jon Clausen jon_clau...@silowebworks.com
Sent: Thursday, July 25, 2013 3:29 PM
To: cf-talk cf-talk@houseoffusion.com
Subject: Re: issue with cfhttp and client certificates
Long shot, but what is the key length on the encryption? Could it be
an
issue with the encryption capabilities currently set on the new JVM for
CF10?
Explanation: http://www.petefreitag.com/item/803.cfm
On Jul 25, 2013, at 4:44 PM, Jeff Garza j...@garzasixpack.com
wrote:
Mark,
On the CF9 Server we're at Java version 1.6.0_17 and the arguments
from
the CFAdmin look like the following: -server
-Dsun.io.useCanonCaches=false
-XX:MaxPermSize=192m -XX:+UseParallelGC -Xbatch
-Dcoldfusion.rootDir={application.home}/../
-Dcoldfusion.libPath={application.home}/../lib
-Dcoldfusion.spooltimeout=120.
On the CF10 server it's at Java version 1.7.0_15 and the args are:
-server -XX:MaxPermSize=192m -XX:+UseParallelGC -Xbatch
-Dcoldfusion.home={application.home}
-Dcoldfusion.rootDir={application.home}
-Dcoldfusion.libPath={application.home}/lib
-Dorg.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER=true
-Dcoldfusion.jsafe.defaultalgo=FIPS186Random
-Dcoldfusion.spooltimeout=120
Though, based on the error, I don't think this is a handshake issue.
It
looks like an issue where the JVM can't even open the certificate
file
to
pass the public key on to the server. Which is why this is so
strange
that
CF9 with the older JVM would be able to do it, but the new one
can't.
--Jeff
Original Message
From: Mark A Kruger mkru...@cfwebtools.com
Sent: Thursday, July 25, 2013 1:25 PM
To: cf-talk cf-talk@houseoffusion.com
Subject: RE: issue with cfhttp and client certificates
Jeff,
What JVM version are you using on CF9 and what do the args look
like?
Sometimes it's a matter of the handshake and levels of TLS/SSL -
the
error
may be not specific enough to tell. You can enable logging to get a
grip
on
it though. That would tell you more.
-Mark
-Original Message-
From: Jeff Garza [mailto:j...@garzasixpack.com]
Sent: Thursday, July 25, 2013 12:25 PM
To: cf-talk
Subject: issue with cfhttp and client certificates
Ok, so here's the issue. A process that was working just fine on
CF9
is
now broken on CF10. We have a service that we call that requires
us
to
submit a client certificate to the server. In CF9, this worked
just
fine.
Use the clientcert and clientcertpass attributes of CFHTTP and
you're
good
to go. It reads the .pfx file fine and everything runs... This is
not a
cacerts issue as you do not have to have the key in the keystore to
use
it.
Forward to CF10, the exact same code and certificates now gives the
error:
Error while trying to get the SSL client certificate:
java.security.UnrecoverableKeyException: Could not decrypt key:
Could
not
decode key from BER. (Invalid encoding: expected tag not there. ).
It's like it's unable to open the .pfx certificate file.
I know this is a long shot since there are not many folks out there
using
client certs, but has anyone else run across this issue?
Thanks,
Jeff Garza
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive
RE: cfthread execution slowdown
Is this apache or IIS? -Original Message- From: Money Pit [mailto:websitema...@gmail.com] Sent: Friday, July 26, 2013 11:41 AM To: cf-talk Subject: cfthread execution slowdown I need another set of eyeballs on this. I can't see what I'm doing wrong. I'm building many thousands of static pages. I turned to cfthread to speed things up. Each thread can output one page or more than one depending on info retrieved. I use an array to manage the number of threads in use at any one time. It works great, but I am seeing CF slow down - in fixed stages - throughout the life of the process. Take a look at this image taken from FusionReactor to see what I mean: http://205.210.189.205/images/screenshot081.jpg Its not a curve but rather three distinct stages of output. Stage 1 is about 2900 pages per minute, Stage 2 is around 2400 and Stage 3 - where the routine stabilizes - is about 1200. On a second server building differently-composed pages, I see exactly the same thing. CF isn't bogging down from load... its flat out not working as hard. Its as if it decided it didn't want to work as hard, so it eases off. Never seen anything like it. Here's the code in a nutshell. Can anyone see something I am doing that is causing this work slowdown? cfset variables.threadArray=arrayNew(1) cfset variables.threadCount=4 cfquery name=getData datasource=#variables.dsn# [sql goes here] /cfquery cfset variables.loopCounter=0 cfloop condition=variables.loopCounter LT getData.recordCount cfset variables.threadsLive=arrayLen(variables.threadArray) cfif variables.threadsLive lt variables.threadCount cfset variables.loopCounter=variables.loopCounter+1 cfset variables.thisThreadID=createUUID() cfset temp=arrayAppend(variables.threadArray,variables.thisThreadID) cfthread name=#variables.thisThreadID# action=run !--- cfhttp pulls local CF pages and stores as html, queries determine if child pages need building etc. --- cfset temp=arrayDeleteAt(variables.threadArray,arrayFindNoCase(variables.threadArr ay,variables.thisThreadID)) /cfthread !--- may or may not do a cfthread join if I want to retrieve variables from inside of the thread --- /cfif /cfloop -- --m@Robertson-- Janitor, The Robertson Team mysecretbase.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356334 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: issue with cfhttp and client certificates
Jeff, What JVM version are you using on CF9 and what do the args look like? Sometimes it's a matter of the handshake and levels of TLS/SSL - the error may be not specific enough to tell. You can enable logging to get a grip on it though. That would tell you more. -Mark -Original Message- From: Jeff Garza [mailto:j...@garzasixpack.com] Sent: Thursday, July 25, 2013 12:25 PM To: cf-talk Subject: issue with cfhttp and client certificates Ok, so here's the issue. A process that was working just fine on CF9 is now broken on CF10. We have a service that we call that requires us to submit a client certificate to the server. In CF9, this worked just fine. Use the clientcert and clientcertpass attributes of CFHTTP and you're good to go. It reads the .pfx file fine and everything runs... This is not a cacerts issue as you do not have to have the key in the keystore to use it. Forward to CF10, the exact same code and certificates now gives the error: Error while trying to get the SSL client certificate: java.security.UnrecoverableKeyException: Could not decrypt key: Could not decode key from BER. (Invalid encoding: expected tag not there. ). It's like it's unable to open the .pfx certificate file. I know this is a long shot since there are not many folks out there using client certs, but has anyone else run across this issue? Thanks, Jeff Garza ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356317 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: issue with cfhttp and client certificates
Weird. I would trial and error a few things. Check the keystore on CF9 with
the list function and compare with CF10 ... see if anythings missing that
missed your docs :) Try removing the jsafe setting below. Make sure your
CF install has access to the folder containing the certs and can read them.
Not sure I have anything to add.
-Mark
-Original Message-
From: Jeff Garza [mailto:j...@garzasixpack.com]
Sent: Thursday, July 25, 2013 3:45 PM
To: cf-talk
Subject: RE: issue with cfhttp and client certificates
Mark,
On the CF9 Server we're at Java version 1.6.0_17 and the arguments from
the CFAdmin look like the following: -server -Dsun.io.useCanonCaches=false
-XX:MaxPermSize=192m -XX:+UseParallelGC -Xbatch
-Dcoldfusion.rootDir={application.home}/../
-Dcoldfusion.libPath={application.home}/../lib
-Dcoldfusion.spooltimeout=120.
On the CF10 server it's at Java version 1.7.0_15 and the args are:
-server -XX:MaxPermSize=192m -XX:+UseParallelGC -Xbatch
-Dcoldfusion.home={application.home}
-Dcoldfusion.rootDir={application.home}
-Dcoldfusion.libPath={application.home}/lib
-Dorg.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER=true
-Dcoldfusion.jsafe.defaultalgo=FIPS186Random
-Dcoldfusion.spooltimeout=120
Though, based on the error, I don't think this is a handshake issue. It
looks like an issue where the JVM can't even open the certificate file to
pass the public key on to the server. Which is why this is so strange that
CF9 with the older JVM would be able to do it, but the new one can't.
--Jeff
Original Message
From: Mark A Kruger mkru...@cfwebtools.com
Sent: Thursday, July 25, 2013 1:25 PM
To: cf-talk cf-talk@houseoffusion.com
Subject: RE: issue with cfhttp and client certificates
Jeff,
What JVM version are you using on CF9 and what do the args look like?
Sometimes it's a matter of the handshake and levels of TLS/SSL - the
error
may be not specific enough to tell. You can enable logging to get a grip
on
it though. That would tell you more.
-Mark
-Original Message-
From: Jeff Garza [mailto:j...@garzasixpack.com]
Sent: Thursday, July 25, 2013 12:25 PM
To: cf-talk
Subject: issue with cfhttp and client certificates
Ok, so here's the issue. A process that was working just fine on CF9 is
now broken on CF10. We have a service that we call that requires us to
submit a client certificate to the server. In CF9, this worked just
fine.
Use the clientcert and clientcertpass attributes of CFHTTP and you're
good
to go. It reads the .pfx file fine and everything runs... This is not a
cacerts issue as you do not have to have the key in the keystore to use
it.
Forward to CF10, the exact same code and certificates now gives the
error:
Error while trying to get the SSL client certificate:
java.security.UnrecoverableKeyException: Could not decrypt key: Could not
decode key from BER. (Invalid encoding: expected tag not there. ).
It's like it's unable to open the .pfx certificate file.
I know this is a long shot since there are not many folks out there using
client certs, but has anyone else run across this issue?
Thanks,
Jeff Garza
~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive:
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356319
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Client wants CMS that functions similar to Joomla, for example
Rick, Allow me to second this excellent comment. CMS is just the next level for an active content based or content critical website. Both expense and development tend to go up rather than down or level off. -Mark Mark Kruger - CFG CF Webtools www.cfwebtools.com www.coldfusionmuse.com O: 402.932.3318 E: mkru...@cfwebtools.com Skype: markakruger -Original Message- From: David Phelan [mailto:dphe...@emerginghealthit.com] Sent: Wednesday, July 24, 2013 9:36 AM To: cf-talk Subject: RE: Client wants CMS that functions similar to Joomla, for example Rick, As a developer who has recently become involved with CMS environments, let me assure you that the introduction of a CMS by no means indicates that a developer is no longer required. I actually work full time supporting a number of web sites that all run from a CF based CMS and recently started supporting one that runs in WordPress. Even with our licensed CF CMS specifically developed for the healthcare industry, the functionality OOTB does not always meet the requirements of the end users and I find myself quite busy reworking, rewriting or introducing functionality so as to meet the requirements of the users and content managers. The point of a CMS is to get the tedious job of content updates out of the hands of developers and into the hands of those who know what they want to change. I am quite happy developing or enhancing functionality for the site rather than making the endless, often minor, content changes that the client wants. David Phelan Web Developer IT Security Web Technologies Emerging Health Montefiore Information Technology 3 Odell Plaza, Yonkers, NY 10701 914-457-6465 Office 862-234-9109 Cell dphe...@emerginghealthit.com www.emerginghealthit.com www.montefiore.org -Original Message- From: Rick Faircloth [mailto:r...@whitestonemedia.com] Sent: Tuesday, July 23, 2013 4:26 PM To: cf-talk Subject: SOT: Client wants CMS that functions similar to Joomla, for example Hi, guys... Just need some recommendations from some of you who have been down this road before. I have a client that is asking for what amounts to absolute control over their site through a CMS. Among a few others they metioned, Joomla was brought up. I'm checking them out myself, but wanted to cut to the chase based on experience from those who have used CMS's that provide control such as Joomla. What have you tried? What turned out to work well? What bombed? I've always rolled my own, and never used a ready-made CMS, so I have zero experience with them. (Joomla seems like it replaces me as a designer/developer, at first glance. If a client has a CMS that allows them to do everything that I do for them now, including selecting themes for pages they add to the site themselves (designer), manage data through Joomla functionality (developer), I wonder if I would end up as a Joomla Installer Maintenance person for the client. ???) Thoughts? Suggestions? Thanks for any feedback! Rick ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356301 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Hack Attempt on our database last night
I'll vote for that as well. Because it has several levels of detection it's very reliable. -mark -Original Message- From: Justin Scott [mailto:leviat...@darktech.org] Sent: Tuesday, July 23, 2013 8:15 AM To: cf-talk Subject: Re: Hack Attempt on our database last night cfformprotect will help you with stuff like this I'll second that... it's become a standard for me to implement on public-facing forms to prevent automated submissions. -Justin ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356285 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Hack Attempt on our database last night
According to the stack overflow comments 0x313032 ...etc is the calling card of Havij, an automated injection tool. The commentor said somewhat of a necro - which I have no idea what that means... he's either disparaging a race of intergalactic conquerors or misspelling macro. -Original Message- From: Byron Mann [mailto:byronos...@gmail.com] Sent: Monday, July 22, 2013 11:49 AM To: cf-talk Subject: RE: Hack Attempt on our database last night That makes sense to me, looks more like an attempt to see if an injection would work. Byron Mann Lead Engineer Architect HostMySite.com On Jul 22, 2013 12:46 PM, Mark A Kruger mkru...@cfwebtools.com wrote: Justin (et al) When I unpack this I get 99.99 /*!3000 union all select 0x313032... etc */ -- Doesn't the /* */ force the whole string into a comment? Hard to see how that would succeed. -Mark -Original Message- From: Justin Scott [mailto:leviat...@darktech.org] Sent: Monday, July 22, 2013 11:19 AM To: cf-talk Subject: Re: Hack Attempt on our database last night In this particular case it's not generating SQL but just filling in space to match the number of columns with the original query. Basically once it executes without an error it allows the attacker to see how many columns the original query is selecting. It's part of an automated attack tool. -Justin On Mon, Jul 22, 2013 at 5:08 AM, Russ Michaels r...@michaels.me.uk wrote: You can run cast function on the hex string to see the actual sql it generates, which I thought was required anyway so not sure that query would even execute otherwise. Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 22 Jul 2013 04:45, Justin Scott leviat...@darktech.org wrote: There was some discussion about a very similar injection on Stack Overflow which may be useful: http://stackoverflow.com/questions/4600954/site-has-been-hacked-via-sql-inje ction -Justin On Sun, Jul 21, 2013 at 1:33 PM, Dave Hatz daveh...@hatzventures.org wrote: We had someone trying to hack our system last night and I would like to know what he was trying to get. Seems one of our new Junior programmers didn't use CFQUERYPARAM and allowed this param into the query string. Needless to say, I will be having a nice long chat with him when he gets into the office tomorrow. How do I decode what this is? Is there a tool or site that will convert this for me? 99.9 /*!3union all select 0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303 235343830303536,0x31303235343830303536,0x31303235343830303536,0x313032353438 30303536,0x31303235343830303536,0x31303235343830303536,0x3130323534383030353 6,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x313 03235343830303536,0x31303235343830303536,0x31303235343830303536,0x3130323534 3830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303 536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x3 1303235343830303536,0x31303235343830303536,0x31303235343830303536*/-- ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356270 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Hack Attempt on our database last night
Justin (et al) When I unpack this I get 99.99 /*!3000 union all select 0x313032... etc */ -- Doesn't the /* */ force the whole string into a comment? Hard to see how that would succeed. -Mark -Original Message- From: Justin Scott [mailto:leviat...@darktech.org] Sent: Monday, July 22, 2013 11:19 AM To: cf-talk Subject: Re: Hack Attempt on our database last night In this particular case it's not generating SQL but just filling in space to match the number of columns with the original query. Basically once it executes without an error it allows the attacker to see how many columns the original query is selecting. It's part of an automated attack tool. -Justin On Mon, Jul 22, 2013 at 5:08 AM, Russ Michaels r...@michaels.me.uk wrote: You can run cast function on the hex string to see the actual sql it generates, which I thought was required anyway so not sure that query would even execute otherwise. Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 22 Jul 2013 04:45, Justin Scott leviat...@darktech.org wrote: There was some discussion about a very similar injection on Stack Overflow which may be useful: http://stackoverflow.com/questions/4600954/site-has-been-hacked-via-sql-inje ction -Justin On Sun, Jul 21, 2013 at 1:33 PM, Dave Hatz daveh...@hatzventures.org wrote: We had someone trying to hack our system last night and I would like to know what he was trying to get. Seems one of our new Junior programmers didn't use CFQUERYPARAM and allowed this param into the query string. Needless to say, I will be having a nice long chat with him when he gets into the office tomorrow. How do I decode what this is? Is there a tool or site that will convert this for me? 99.9 /*!3union all select 0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303 235343830303536,0x31303235343830303536,0x31303235343830303536,0x313032353438 30303536,0x31303235343830303536,0x31303235343830303536,0x3130323534383030353 6,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x313 03235343830303536,0x31303235343830303536,0x31303235343830303536,0x3130323534 3830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303 536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x3 1303235343830303536,0x31303235343830303536,0x31303235343830303536*/-- ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356268 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: Hack Attempt on our database last night
Ah that is devilishly clever. -Original Message- From: Pete Freitag [mailto:p...@foundeo.com] Sent: Monday, July 22, 2013 2:23 PM To: cf-talk Subject: Re: Hack Attempt on our database last night On Mon, Jul 22, 2013 at 12:45 PM, Mark A Kruger mkru...@cfwebtools.comwrote: Doesn't the /* */ force the whole string into a comment? Hard to see how that would succeed. It is a MySQL version specific comment so if MySQL version is greater than version 3.0 in this case it would execute, all other DB engines would treat as a comment. -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting Products http://hackmycf.com - Is your ColdFusion Server Secure? http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10 minutes ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:356275 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
