RE: [ACFUG Discuss] ScriptProtect=none
Thanks Shawn and Cameron! You guys got me to start looking into this issue. I didn’t realize some of the possibilities that might have been unprotected. Fusionlink is my server ISP, so I will probably use Portcullis. But, here’s my follow-up question. It makes sense to me to have the XSS checks happen automatically, for every request. Right? So, I could put the function calls in OnRequest in application.cfc. But, then, for my admin pages, where I want to allow logged in users to submit forms with meta tags and javascript, how do I disable the XSS check. If the XSS check is in OnRequest, it already happened before I got to the admin cfm page. Do I have to remember to handle this separately for all my pages, and then just turn it off when I need to. This seems messy, so I’m hoping there’s a better way! Thanks for your ideas. Clarke From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of shawn gorrell Sent: Tuesday, January 19, 2010 6:26 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] ScriptProtect=none Clark, IMO scriptprotect is a total and utter waste of time. Abandon it. If you're interested in something better, and more comprehensive, take a look at John's Portcullis component, or my cf_xssblock tag. Typically I use my tag in application (cfm or cfc), rather than on a per-page basis, but it will also work easily on a per-page basis. _ From: Clarke Bishop cbis...@resultantsys.com To: discussion@acfug.org Sent: Tue, January 19, 2010 5:41:26 PM Subject: [ACFUG Discuss] ScriptProtect=none I know it’s a good practice to use CF’s ScriptProtect feature. But, I have an admin page in a CMS, and I need to be able to turn off ScriptProtect for that page. Otherwise, CF inserts InvalidTag messages! Is there a way to turn off ScriptProtect for one page only? Thanks for any ideas! Clarke - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] ScriptProtect=none
Clarke, I can't speak to how Portcullis does it, but cf_xssblock allows for you to exclude fields from each of the different sets of rules. It isn't exactly a scalpel, but it isn't exactly the club that earlier versions used to be. You're right about using it in onRequest, which was my intent of the tag. You could always have conditionally based tag invocations using the path. S From: Clarke Bishop cbis...@resultantsys.com To: discussion@acfug.org Sent: Wed, January 20, 2010 9:39:06 AM Subject: RE: [ACFUG Discuss] ScriptProtect=none Thanks Shawn and Cameron! You guys got me to start looking into this issue. I didn’t realize some of the possibilities that might have been unprotected. Fusionlink is my server ISP, so I will probably use Portcullis. But, here’s my follow-up question. It makes sense to me to have the XSS checks happen automatically, for every request. Right? So, I could put the function calls in OnRequest in application.cfc. But, then, for my admin pages, where I want to allow logged in users to submit forms with meta tags and javascript, how do I disable the XSS check. If the XSS check is in OnRequest, it already happened before I got to the admin cfm page. Do I have to remember to handle this separately for all my pages, and then just turn it off when I need to. This seems messy, so I’m hoping there’s a better way! Thanks for your ideas. Clarke From:ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of shawn gorrell Sent: Tuesday, January 19, 2010 6:26 PM To: discussion@acfug.org Subject: Re: [ACFUG Discuss] ScriptProtect=none Clark, IMO scriptprotect is a total and utter waste of time. Abandon it. If you're interested in something better, and more comprehensive, take a look at John's Portcullis component, or my cf_xssblock tag. Typically I use my tag in application (cfm or cfc), rather than on a per-page basis, but it will also work easily on a per-page basis. From:Clarke Bishop cbis...@resultantsys.com To: discussion@acfug.org Sent: Tue, January 19, 2010 5:41:26 PM Subject: [ACFUG Discuss] ScriptProtect=none I know it’s a good practice to use CF’s ScriptProtect feature. But, I have an admin page in a CMS, and I need to be able to turn off ScriptProtect for that page. Otherwise, CF inserts InvalidTag messages! Is there a way to turn off ScriptProtect for one page only? Thanks for any ideas! Clarke - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] ScriptProtect=none
On Wed, Jan 20, 2010 at 9:39 AM, Clarke Bishop cbis...@resultantsys.com wrote: But, then, for my admin pages, where I want to allow logged in users to submit forms with meta tags and javascript, how do I disable the XSS check. If the XSS check is in OnRequest, it already happened before I got to the admin cfm page. You can certainly do conditional logic inside the onRequest if you want. A combination of the user's authentication token and page/event/fuseaction name should be enough to conditionally allow certain content. Just be very very careful here, you may assume that authenticated users can be trusted more then the outside world. That is usually true, but it doesn't mean that someone you trust won't get hit by a XSS attack after they are already authenticated. You're likely not going to be a large enough target to worry too much about this, but it's something to be aware of. -Cameron -- Cameron Childress Sumo Consulting Inc http://www.sumoc.com --- cell: 678.637.5072 aim: cameroncf email: camer...@gmail.com - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
[ACFUG Discuss] Error with Java Object
Hey folks! I'm trying to use a java object to get some page load data to use in a reporting tool. On my local dev box it all works. In production it dies. I am running CF8 in both spots. cfset codeFactory = CreateObject(java,coldfusion.server.ServiceFactory) / cfset getDebugDataSet = codeFactory.getDebuggingService() cfset getDebugData = getDebugDataSet.getDebugger().getData() Again, this work on my local dev machine. (I hope John won't use this as the next example in how not to code ;) ) Below is the error I get Thanks in advance! - Rudi Error - struct Detail Its possible that a method called on a Java object created by CreateObject returned null. ErrNumber 0 Message Value must be initialized before use. StackTrace coldfusion.runtime.UninitializedValueException: Value must be initialized before use. at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2249) at cfrudi2ecfm824653131.runPage(D:\ariba_2.0\rudi.cfm:7) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:192) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:366) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:273) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)
Re: [ACFUG Discuss] Error with Java Object
Question. Is debugging enabled on your production server? From: Rudi Shumpert shump...@gmail.com To: discussion@acfug.org Sent: Wed, January 20, 2010 4:34:46 PM Subject: [ACFUG Discuss] Error with Java Object Hey folks! I'm trying to use a java object to get some page load data to use in a reporting tool. On my local dev box it all works. In production it dies. I am running CF8 in both spots. cfset codeFactory = CreateObject(java,coldfusion.server.ServiceFactory) / cfset getDebugDataSet = codeFactory.getDebuggingService() cfset getDebugData = getDebugDataSet.getDebugger().getData() Again, this work on my local dev machine. (I hope John won't use this as the next example in how not to code ;) ) Below is the error I get Thanks in advance! - Rudi Error - struct Detail Its possible that a method called on a Java object created by CreateObject returned null. ErrNumber 0 Message Value must be initialized before use. StackTrace coldfusion.runtime.UninitializedValueException: Value must be initialized before use. at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2249) at cfrudi2ecfm824653131.runPage(D:\ariba_2.0\rudi.cfm:7) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:192) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:366) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:273) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] Error with Java Object
No. Sent from my iPhone On Jan 20, 2010, at 4:38 PM, shawn gorrell chees...@yahoo.com wrote: Question. Is debugging enabled on your production server? From: Rudi Shumpert shump...@gmail.com To: discussion@acfug.org Sent: Wed, January 20, 2010 4:34:46 PM Subject: [ACFUG Discuss] Error with Java Object Hey folks! I'm trying to use a java object to get some page load data to use in a reporting tool. On my local dev box it all works. In production it dies. I am running CF8 in both spots. cfset codeFactory = CreateObject (java,coldfusion.server.ServiceFactory) / cfset getDebugDataSet = codeFactory.getDebuggingService() cfset getDebugData = getDebugDataSet.getDebugger().getData() Again, this work on my local dev machine. (I hope John won't use this as the next example in how not to code ;) ) Below is the error I get Thanks in advance! - Rudi Error - struct Detail Its possible that a method called on a Java object created by CreateObject returned null. ErrNumber 0 Message Value must be initialized before use. StackTrace coldfusion.runtime.UninitializedValueException: Value must be initialized before use. at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2249) at cfrudi2ecfm824653131.runPage(D:\ariba_2.0\rudi.cfm:7) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:192) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:366) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java: 273) at coldfusion.filter.RequestMonitorFilter.invoke (RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke (ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java: 89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter (MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java: 46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke (JRunRequestDispatcher.java:284) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java: 543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable (JRunProxyService.java:203) at jrunx.scheduler.ThreadPool $DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable (ThreadPool.java:428) at jrunx.scheduler.ThreadPool $UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink -
Re: [ACFUG Discuss] Error with Java Object
Don't worry. I use either open source code or get permission before hand. Your isp may have access to internal java objects turned off. John ma...@fusionlink.com Rudi Shumpert wrote: Hey folks! I'm trying to use a java object to get some page load data to use in a reporting tool. On my local dev box it all works. In production it dies. I am running CF8 in both spots. cfset codeFactory = CreateObject(java,coldfusion.server.ServiceFactory) / cfset getDebugDataSet = codeFactory.getDebuggingService() cfset getDebugData = getDebugDataSet.getDebugger().getData() Again, this work on my local dev machine. (I hope John won't use this as the next example in how not to code ;) ) Below is the error I get Thanks in advance! - Rudi Error - struct Detail Its possible that a method called on a Java object created by CreateObject returned null. ErrNumber 0 Message Value must be initialized before use. StackTrace coldfusion.runtime.UninitializedValueException: Value must be initialized before use. at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2249) at cfrudi2ecfm824653131.runPage(D:\ariba_2.0\rudi.cfm:7) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:192) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:366) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:273) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] Error with Java Object
Sounds like you have a winner for what the problem is. Another option is that access to the servicefactory classes is restricted. I seem to recall there being a setting to do so on CF8... From: Rudi Shumpert shump...@gmail.com To: discussion@acfug.org discussion@acfug.org Sent: Wed, January 20, 2010 4:42:16 PM Subject: Re: [ACFUG Discuss] Error with Java Object No. Sent from my iPhone On Jan 20, 2010, at 4:38 PM, shawn gorrell chees...@yahoo.com wrote: Question. Is debugging enabled on your production server? From: Rudi Shumpert shump...@gmail.com To: discussion@acfug.org Sent: Wed, January 20, 2010 4:34:46 PM Subject: [ACFUG Discuss] Error with Java Object Hey folks! I'm trying to use a java object to get some page load data to use in a reporting tool. On my local dev box it all works. In production it dies. I am running CF8 in both spots. cfset codeFactory = CreateObject(java,coldfusion.server.ServiceFactory) / cfset getDebugDataSet = codeFactory.getDebuggingService() cfset getDebugData = getDebugDataSet.getDebugger().getData() Again, this work on my local dev machine. (I hope John won't use this as the next example in how not to code ;) ) Below is the error I get Thanks in advance! - Rudi Error - struct Detail Its possible that a method called on a Java object created by CreateObject returned null. ErrNumber 0 Message Value must be initialized before use. StackTrace coldfusion.runtime.UninitializedValueException: Value must be initialized before use. at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2249) at cfrudi2ecfm824653131.runPage(D:\ariba_2.0\rudi.cfm:7) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:192) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:366) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:273) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] Error with Java Object
It is because of the debugging. Is there a way to access the execution times without having debugging turned on? -Rudi On Wed, Jan 20, 2010 at 4:46 PM, shawn gorrell chees...@yahoo.com wrote: Sounds like you have a winner for what the problem is. Another option is that access to the servicefactory classes is restricted. I seem to recall there being a setting to do so on CF8... -- *From:* Rudi Shumpert shump...@gmail.com *To:* discussion@acfug.org discussion@acfug.org *Sent:* Wed, January 20, 2010 4:42:16 PM *Subject:* Re: [ACFUG Discuss] Error with Java Object No. Sent from my iPhone On Jan 20, 2010, at 4:38 PM, shawn gorrell chees...@yahoo.com wrote: Question. Is debugging enabled on your production server? -- *From:* Rudi Shumpert shump...@gmail.com *To:* discussion@acfug.orgdiscussion@acfug.org *Sent:* Wed, January 20, 2010 4:34:46 PM *Subject:* [ACFUG Discuss] Error with Java Object Hey folks! I'm trying to use a java object to get some page load data to use in a reporting tool. On my local dev box it all works. In production it dies. I am running CF8 in both spots. cfset codeFactory = CreateObject(java,coldfusion.server.ServiceFactory) / cfset getDebugDataSet = codeFactory.getDebuggingService() cfset getDebugData = getDebugDataSet.getDebugger().getData() Again, this work on my local dev machine. (I hope John won't use this as the next example in how not to code ;) ) Below is the error I get Thanks in advance! - Rudi Error - struct Detail Its possible that a method called on a Java object created by CreateObject returned null. ErrNumber 0 Message Value must be initialized before use. StackTrace coldfusion.runtime.UninitializedValueException: Value must be initialized before use. at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2249) at cfrudi2ecfm824653131.runPage(D:\ariba_2.0\rudi.cfm:7) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:192) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:366) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:273) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink http://www.fusionlink.com -
Re: [ACFUG Discuss] Error with Java Object
So let me ask this. If I have to have debugging on for all IP's to have this work, how bad is it to create a blank rudidebug.cfm page and select that as the debug template in the CF Admin. Is this a major no-no or a major performance hit? -Rudi On Wed, Jan 20, 2010 at 4:43 PM, John Mason ma...@fusionlink.com wrote: Don't worry. I use either open source code or get permission before hand. Your isp may have access to internal java objects turned off. John ma...@fusionlink.com Rudi Shumpert wrote: Hey folks! I'm trying to use a java object to get some page load data to use in a reporting tool. On my local dev box it all works. In production it dies. I am running CF8 in both spots. cfset codeFactory = CreateObject(java,coldfusion.server.ServiceFactory) / cfset getDebugDataSet = codeFactory.getDebuggingService() cfset getDebugData = getDebugDataSet.getDebugger().getData() Again, this work on my local dev machine. (I hope John won't use this as the next example in how not to code ;) ) Below is the error I get Thanks in advance! - Rudi Error - struct Detail Its possible that a method called on a Java object created by CreateObject returned null. ErrNumber 0 Message Value must be initialized before use. StackTrace coldfusion.runtime.UninitializedValueException: Value must be initialized before use. at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2249) at cfrudi2ecfm824653131.runPage(D:\ariba_2.0\rudi.cfm:7) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:192) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:366) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:273) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] Error with Java Object
I really don't remember. I'm sure Charlie or John would know off the top of their heads. From: Rudi Shumpert shump...@gmail.com To: discussion@acfug.org Sent: Wed, January 20, 2010 7:05:34 PM Subject: Re: [ACFUG Discuss] Error with Java Object It is because of the debugging. Is there a way to access the execution times without having debugging turned on? -Rudi On Wed, Jan 20, 2010 at 4:46 PM, shawn gorrell chees...@yahoo.com wrote: Sounds like you have a winner for what the problem is. Another option is that access to the servicefactory classes is restricted. I seem to recall there being a setting to do so on CF8... From: Rudi Shumpert shump...@gmail.com To: discussion@acfug.org discussion@acfug.org Sent: Wed, January 20, 2010 4:42:16 PM Subject: Re: [ACFUG Discuss] Error with Java Object No. Sent from my iPhone On Jan 20, 2010, at 4:38 PM, shawn gorrell chees...@yahoo.com wrote: Question. Is debugging enabled on your production server? From: Rudi Shumpert shump...@gmail.com To: discussion@acfug.org Sent: Wed, January 20, 2010 4:34:46 PM Subject: [ACFUG Discuss] Error with Java Object Hey folks! I'm trying to use a java object to get some page load data to use in a reporting tool. On my local dev box it all works. In production it dies. I am running CF8 in both spots. cfset codeFactory = CreateObject(java,coldfusion.server.ServiceFactory) / cfset getDebugDataSet = codeFactory.getDebuggingService() cfset getDebugData = getDebugDataSet.getDebugger().getData() Again, this work on my local dev machine. (I hope John won't use this as the next example in how not to code ;) ) Below is the error I get Thanks in advance! - Rudi Error - struct Detail Its possible that a method called on a Java object created by CreateObject returned null. ErrNumber 0 Message Value must be initialized before use. StackTrace coldfusion.runtime.UninitializedValueException: Value must be initialized before use. at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2249) at cfrudi2ecfm824653131.runPage(D:\ariba_2.0\rudi.cfm:7) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:192) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:366) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:273) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:175) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66) - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/
Re: [ACFUG Discuss] Error with Java Object
On Wed, Jan 20, 2010 at 7:25 PM, Rudi Shumpert shump...@gmail.com wrote: If I have to have debugging on for all IP's to have this work, how bad is it to create a blank rudidebug.cfm page and select that as the debug template in the CF Admin. Is this a major no-no or a major performance hit? It doesn't matter if you have debugging turned on for one IP or all IPs. Debug info is collected for all user, then only show to certian IP addresses. Additionally, one of the most heinously poor performing settings in debugging is report execution times. If you have any number of CFC/objects, having that turned on is really can mess up performance for you because execution times are collected for each and every object. In a heavily OOP app you usually have a ***TON*** of CFCs, so it's really painful to turn it on. You can measure performance for any *specific* thing you need to by using getTickCount(): cfset startTime = getTickCount() / !--- something that you want to measure --- cfoutputThat took #(getTickCount()-startTime)#ms!/cfoutput -Cameron -- Cameron Childress Sumo Consulting Inc http://www.sumoc.com --- cell: 678.637.5072 aim: cameroncf email: camer...@gmail.com - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] Error with Java Object
On Wed, Jan 20, 2010 at 9:05 PM, Cameron Childress camer...@gmail.com wrote: It doesn't matter if you have debugging turned on for one IP or all IPs. Debug info is collected for all user, then only show to certian IP addresses. To be a bit clearer, it's the collection of the debugging data that generally causes the performance hit, not the display (though that certainly has some impact too). Using your own debug template isn't going to save you from the performance hit. -Cameron -- Cameron Childress Sumo Consulting Inc http://www.sumoc.com --- cell: 678.637.5072 aim: cameroncf email: camer...@gmail.com - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] Error with Java Object
Cameron, Thanks for the clarification. -Rudi On Wed, Jan 20, 2010 at 9:11 PM, Cameron Childress camer...@gmail.comwrote: On Wed, Jan 20, 2010 at 9:05 PM, Cameron Childress camer...@gmail.com wrote: It doesn't matter if you have debugging turned on for one IP or all IPs. Debug info is collected for all user, then only show to certian IP addresses. To be a bit clearer, it's the collection of the debugging data that generally causes the performance hit, not the display (though that certainly has some impact too). Using your own debug template isn't going to save you from the performance hit. -Cameron -- Cameron Childress Sumo Consulting Inc http://www.sumoc.com --- cell: 678.637.5072 aim: cameroncf email: camer...@gmail.com - To unsubscribe from this list, manage your profile @ http://www.acfug.org?falogin.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
Re: [ACFUG Discuss] Error with Java Object
I guess at this point we have to ask exactly what you want to do. Knowing the specific goals may yield some other options. John ma...@fusionlink.com Rudi Shumpert wrote: Cameron, Thanks for the clarification. -Rudi On Wed, Jan 20, 2010 at 9:11 PM, Cameron Childress camer...@gmail.comwrote: On Wed, Jan 20, 2010 at 9:05 PM, Cameron Childress camer...@gmail.com wrote: It doesn't matter if you have debugging turned on for one IP or all IPs. Debug info is collected for all user, then only show to certian IP addresses. To be a bit clearer, it's the collection of the debugging data that generally causes the performance hit, not the display (though that certainly has some impact too). Using your own debug template isn't going to save you from the performance hit. -Cameron -- Cameron Childress Sumo Consulting Inc http://www.sumoc.com --- cell: 678.637.5072 aim: cameroncf email: camer...@gmail.com - To unsubscribe from this list, manage your profile @ http://www.acfug.org?falogin.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com - - To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -
