for this new setting is 100, but you can increase it if
you need to. Instructions to do this can be found here
<http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html>.
HTH,
-Carl V.
On 1/16/2013 7:36 AM, Terry Ford wrote:
> Hello --
>
> I installed the security patch
Hello --
I installed the security patch last night on cf 9.1 linux, and woke up this
morning to find that some of our templates no longer work:
[Wed Jan 16 09:28:27 2013] [notice] jrApache[1978: 53193] returning error page
for JRun too busy or out of memory
They return a 500 error to the
s get Jrun errors until reboot.The
"timeout" param was deprecated in CF7, but we still had some floating around in
our code since CF8 played nice with it. It took me hours to trace down the
problem to CFCACHE.
> On Fri, May 13, 2011 at 10:54 PM, Terry Ford
> wrote:
> &
Hey...
I am trying to get a CF8 app working on CF9, and it was all seamless until I
ran into CFCACHE.
I'm having problems getting CFCACHE to save anything to disk. I understand the
"default" behavior is now in-memory caching, but for now I'm just trying to get
this thing to work as it did in
Hi, I'm having an issue in a port from CF8 to CF9.
We created our own simple lucene indexing stuff on CF8, and are simply trying
to get it to work on CF9.
Right now I'm having problems with this line, which works fine under CF8:
luceneQuery = queryParser.parse(keyword, "body", analyzer);
It i
>I usually use the following JVM arg (I'm in the central time zone):
>-Duser.timezone=America/Chicago
Hmm, thanks... but am still a little confused.
What determines whether coldfusion/CFScheduler switches to daylight savings
time?
(A) the timezone settings in the OS or (B) settings in the JV
>I personally would not have DST switched on for a server, and have it
>disabled
Thanks for the response. I just switched DST off on the server (RHEL linux:
ln -s /usr/share/zoneinfo/Etc/GMT+6 localtime).
However, the scheduler.log is still picking up CST somehow after a CF reboot:
"task --
I have had the following problem the last couple of time changes, and would
like to know if there is a simple solution to fix it:
I have a number of tasks that I need to run just after midnight, local time
(CT), whether it's standard CST or daylight CDT. 12:01 AM.
I use CF scheduler with s
Hi devs!
I have run into a strange problem that probably has a simple fix but I can't
work it out.
I have tag cf_commentform that displays a feedback cfform within a cfdiv. The
user enters comments, and the form submits inline. Works great.
Some pages call cf_commentform more than once.
>Can you show a bit more code, specifically how you pass the XML to cfchart?
Hi Ray,
Query Q is (score,cnt), int columns.
and silver.xml (in charting/styles) :
>Can you show a bit more code, specifically how you pass the XML to cfchart?
Hi Ray,
Query Q is (score,cnt), int columns.
and silver.xml (in charting/styles) :
Hey folks,
CF8. I am plotting on X-axis "scores" (values 1 to 10), and on the Y-axis the
number of people scoring that score.
However, CFCHART is formatting the "scores" as decimals: 1.0, 2.0,...,10.0.
I have tried all sorts of things in the associated xml stylesheet:
on House of Fusion
> To: "CF-Talk"
> Date: Saturday, August 9, 2008, 6:24 AM
> Terry Ford wrote:
> > Pretty ingenious really, infecting websites via
> injection attack in order to infect clients with browser
> vulnerabilities.
>
> In 2001 it was:
> http://w
Hi Ray,
I used this rewrite in the root directory's .htaccess file (linux/apache)...
try Windows equiv? I've run into the same problem that you describe using
global rewrites in years past, but this directory-based method seems to work
reliably.
order allow,deny
allow from all
RewriteEngine
<< Also, I'd like to explore the possibility of reporting compromised people to
their ISPs. >>
Well good luck ;)
As I posted earlier, we have been hit by over 200,000 attack attempts over the
past 2 days.
Here's the analysis from our last 195,264 attack attempts:
Our attacks over the past *24
Our site has now seen just over 200,000 attack attempts over the past 48 hours,
73,000 attack attempts over the past 5 hours.
Not nearly a DOS concern yet, as the acceleration of attacks has started to at
least flatten a bit over the last 2-3 hours, but we're watching it carefully.
The attacks
subscribe
~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j
Archive:
http://www.houseoffusion.com/groups/CF-Talk/message.
We run a very large linux website and have seen such SQL attacks for months
now.
However, this recent wave has *really* picked up over the last 48 hours.It
began August 6, and we have logged close to 40,000 attack attempts and counting.
Our code is well protected, and this attack appears
Our site allows international / non-ASCII characters (accents, curly quotes,
etc) in database data. We are using MySQL 4.1.
In CF 6.1, it all works great with the following:
AND, using the MySQL 3
driver, useUnicode=true&characterEncoding=ISO-8859-1 in the connection string.
It works.
N
Hey... quick question:
We are running CF6.1 and want to upgrade to CF8 (linux).
If we purchase the CF8 upgrade version, does CF6.1 have to be present on the
machine? i.e. if we want to install fresh on a new machine in the future, do
we have to install 6.1 first and then 8, or can we install j
No, this has nothing to do with CFFORM.
CFMX is performing validation on ANY form variables whose names end in "_date".
The data is being POSTed from a 3rd party application.
<< You mean if you use cfform? >>
~|
CF 8 â Scor
Hey...
It seems that Facebook's new application API requires FORM callbacks that use
FORM.variable names ending in either _date or _time.
This is triggering CFMX (6.1 at least) to automatically try to validate the
calls. This is a bad thing, as the CF developer has no control over the name
of
Try turning "J2EE session variables" off, if you're currently using them, and
restart the server.
We've had problems with J2EE session variables on CFMX6.1 linux in the past and
currently run with them turned off.
On our server, we get weird stuff like cflock scope=session throwing null
except
sands of bot hits a day, and by using this
>technique, we show no loss of memory or performance.
>
>Judith Dinowitz
>Editor-in-Chief: Fusion Authority
>http://www.fusionauthority.com
>
>- Original Message -
>From: "Terry Ford" <[EMAIL PROTECTED]>
It seems that Michael and Ben used a similar solution.
The dynamic setting of sessionmanagement=YES|NO depending on user agent looks
good in theory.
However, when I switch to that, I get this error all over the place when those
bot user agents start hitting templates:
"The requested scope sess
Phantom Sessions: These are sessions generally created by bots from Google,
msn, yahoo, etc. For every page that they access, a session is created. Since
these clients have no cookies, CF creates a new session for every page they
touch. Even more annoying are sessions created by CFHTTP calls
gures show.
>
>On 6/6/07, Terry Ford <[EMAIL PROTECTED]> wrote:
>
>
>--
>mxAjax / CFAjax docs and other useful articles:
>http://www.bifrost.com.au/blog/
~|
Create robust enterprise, web RIAs.
Upgrad
I've never actually paid much attention to CFMX's memory usage before, but I
just started monitoring our memory, and I'm a little unsure whether what we're
seeing is normal or not.
Setup: CFMX6.1, linux ES4, 800MB Xmx. Server averages 30 templates/second.
Cached queries set to 0 (same thing hap
Depending on where you installed CFMX, the path may be different, but it'll be
something like this:
/opt/coldfusionmx/bin/coldfusion stop
/opt/coldfusionmx/bin/coldfusion start
/etc/rc.d/init.d/httpd restart
You can then do /opt/coldfusionmx/bin/cfstat 1 to watch it process requests.
>I've ent
I've got a couple of mysteries for you CFCHART sleuths...
1. I can't for the life of me work out how to get the X-axis to display
integers. It insists on displaying decimals, even though the query column is
an integer.
2. A black line appears on the very left margin of all of my charts. I'm
Thought I might as well answer my own question, for future searchers on this
topic.
You can actually access the binary object directly by name:
~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hittin
Hi folks...
We're experiencing about 20 second pauses once every few hours. The problem is
not db, network, virt memory, or disk related, and the regularity of the
durations seems to suggest a garbage collection problem.
We are running on a dualcore Opteron 270. 4GB of memory, machine is ded
<< Should I just move over the DB or would I be better off Load balancing
across the two boxes? Or is the something else you'd recommend? >>
Make sure that you also take into consideration how much you care about
maintenance / administration time. IMO it's often worth paying a little more
for
Does anyone know if there is a way to use CFCHART on CFMX to generate a set of
chart JPEGs and save them to disk? The idea would be to generate 1000 charts
in this manner once a week.
This way, simple IMG tags can then be used to link to the charts, and the data
gathering / CFCHART engine can
Funny... because our server has just started doing this too (CF6.1 on linux).
Having run for over a year and a half without a single incident, it has taken
to restarting itself once every 12 hours or so.
We have made a few changes recently, but it's very difficult to work out what's
causing thi
Hey folks...
Haven't been here in a while, but thought I'd pop in and see if anyone has
developed a more efficient partial-page caching tag in the last couple of years.
We have used CF_Accelerate (by Brandon Purcell) for 3 years now, and it has
help us wonderuflly. For those who don't know wh
> uh, cf uses's something like "Excel_Time" or "DB2_Time", it's numeric
> time unit
> is *days* since 31-dec-1899 (it's epoch).
> uh, cf uses's something like "Excel_Time" or "DB2_Time", it's numeric
> time unit
> is *days* since 31-dec-1899 (it's epoch).
Right. I was talking about Unix's epoc
Hey all,
I've tended to store dates as a simple epoch integer (seconds from Jan, 1970),
a throwback to perl/tcl/php development days. While this method is a little
antiquated, it makes the dates database and software independent. CF, perl,
php, database upgrade, whatever... can and will handl
Ok, that makes sense (Dan/Kerry/Joe). In that case, there's no problem Thanks
for the clarification! The lack of a querycopy() function makes the
interpretation of the assignment operation somewhat ambiguous at first glance.
Terry
>
>All that shows is session.qncache_qn is just a reference t
keep sessions, your check to see if
>session.cache_query would always show it's nonexistant, so it would
>always be rerun.
>
>--Ben
>
>Terry Ford wrote:
>>
~|
Message: http://www.houseoffusion.com/lists.cf
iable name (probably
>not best), or you could try an iif() in the query="" and based on
>isdefined("session.cache_query") use the appropriate query variable.
>
>~Brad
>
>-Original Message-
>From: Terry Ford [mailto:[EMAIL PROTECTED]
>Sent: Thursday
;
>
>
>
>
>
>
>-Joe
>
>
>On 1/5/06, Terry Ford <[EMAIL PROTECTED]> wrote:
>>
~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:228472
Archives: http://www.houseoffusion.com/cf_lis
>You can use duplicate, but why not reference session.cache_query?
>
>bob
To repeat:
"I know that I could do , but then the
Google "q" query wouldn't work. I really want to be able to reference either
the cached query or the runtime query by the same variable name, "q". "
Here's the scenario:
A small query (session.cache_query) is cached in each user session at login.
It is referenced in the following manner in a number of templates:
select...
...
-
Now to my que
the performance you need. In the applications I've looked at,
>simply increasing the New Generation size helps tremendously.
>
>-Original Message-
>From: Terry Ford [mailto:[EMAIL PROTECTED]
>Sent: Wednesday, January 04, 2006 4:39 PM
>To: CF-Talk
>Subject: Garbage Col
Hey CFers,
As traffic increases and the server has been up for a while I'm starting to
notice periods where the JVM seems to be taking vacations when it ought to be
processing templates. I suspect that this is garbage collection.
The symptom is a cfstat period for 1 or 2 seconds where no templ
isk and do logic when displaying them.
>
>Ade
>
>-Original Message-----
>From: Terry Ford [mailto:[EMAIL PROTECTED]
>Sent: 13 December 2005 14:49
>To: CF-Talk
>Subject: CFCHART and caching
>
>
>Hey folks, quick question -
>
>Haven't used CFCHART much
Hey folks, quick question -
Haven't used CFCHART much in the past. I've got a small number of charts that
I'd like to cache for a long period of time (hours or days). During that time
I do NOT want those charts to be regenerated (because they are generated based
on data that may have since ch
hrow an
>error.
>
>On 12/10/05, Terry Ford <[EMAIL PROTECTED]> wrote:
>> >Any possibility you use a UDF that could rewrite the value of myquery?
>> >If you wrap the check in try/catch and cfdump myquery, what do you
>> >see?
>Any possibility you use a UDF that could rewrite the value of myquery?
>If you wrap the check in try/catch and cfdump myquery, what do you
>see?
>
>On 12/10/05, Terry Ford <[EMAIL PROTECTED]> wrote:
>>
Hey Ray,
myquery is not modified in any way whatsoever by any c
select * from blah where yadda yadda yadda...
No records found.
...
This bit of code is executed thousands of times a day (CFMX 6.1 linux). Most
of the time it works just fine. However, occasionally after the server has
been running for a number of days under load this template
often have over 4000 active sessions under load at once too, so the
opportunity for freak race conditions to show up is more likely.
> The request that runs this code must have also run a cfapplication
> tag
> and therefore kept the session alive, no?
>
> On 12/10/05, Terry F
This is what appears to be happening:
The thread with this code switches out precisely after the structkeyexists()
evaluates true. The thread that clears inactive sessions becomes active right
after it has previously evaluated this session as expiring, so it deletes the
session. The original
Just curious... does anyone know if it is it possible for a session to
automatically expire while the user of that session is concurrently processing
a template? Does a race condition exist here?
I have a line that is executed frequently:
99.9% of the time this works as it should. Now
s reasonable, and be confident that the app is more than good
>enough until it's objectively demonstrated not to be. So use the
>query cache until it's been proven insufficient, and then find a more
>efficient way to do it. But only worry about it if it's been
>DEMONS
t; a safe wager that the cache does something like this:
>
> function runCachedQuery(sql) {
> var key = hash(sql);
> if (! queryCache.has(key)) {
> queryCache.put(key, runQuery(sql));
> }
> return queryCache.get(key);
> }
>
> cheers,
> barneyb
>
Has anyone found a way to get access to the underlying java object(s) that CFMX
uses for query caching?
It would be nice to be able to see precisely (a) how many queries have been
cached and (b) how much memory each one is using at any point in time.
Additionally, it would be nice to know prec
Well if you're going to go to all the trouble (and performance hit) of building
your own session scope and copying structs and stuff, you might as well just
wave the white flag and let the bots use session management ;)
Terry
>More info
>
>You can't do this - at least not this way You
>
>
>
>
>
>
>
>this code will in effect create 2 applications - botApplication and
>regularuserapplication - one with mangement "ON" and one with mangement
>"OFF".
>
>-Mark
>
>
>-Original Message-
>From: Terry Ford
on-bots.
>ugh, you have sessionmanagement="no"
>
>DK
>
>On 12/7/05, Terry Ford <[EMAIL PROTECTED]> wrote:
>>
~|
Logware (www.logware.us): a new and convenient web-based time tracking
application. Start track
Nope, still doesn't work. Even though the "session.pid" test is never reached,
the error is still thrown. Try the following code:
An error is thrown by the above statement each time
>Add in checker code to see if a session exists before using the sessio
Just tried your approach (sessionmanagement=no for bots) but every bot that
hits a page that references a session variable (even in a check) then throws an
error:
"Before session variables can be used, the session state management system must
be enabled using the CFAPPLICATION tag."
Any
Interesting topic.
We gave up using client variables a while back when they started severely
impacting performance under load. It's incredibly important to avoid client
variables on systems under load. When we switched from client vars to a cookie
(hashed user ID & password combo) and used s
I did try installing the newest sun JDK (1.5_06) but get these errors on
startup:
Does anyone have any tips on getting the 1.5 JDK to work with CFMX?
Thanks
--
12/06 18:54:41 user CFCServlet: destroy
12/06 18:54:41 user GraphServlet: destroy
12/06 18:54:41 user FlashGateway: destroy
Exception
Hey folks,
Revisiting a thread from a couple of years ago that I never did get an answer
to back then, but which was able to be worked around. Just wondering if anyone
now has an answer :)
The problem: On linux, CFMX 6.1, sun JVM 1.4.2, cfserver under heavy load
crashes randomly every couple
Hey Matt,
Hmm, setdomaincookies=YES doesn't seem to help either. Server still creating
different instances for www.domain.com and .domain.com.
My use of client variables is actually pretty minor -- I just use a couple to
store an integer key to a user table, and an encrypted password. When
To clarify --
I'm simply trying to set a client variable (storage type "cookie"), so that it
gets set and can be read from any template under *.domain.com. So I'd like
www.domain.com, hello.domain.com, and domain.com all to be able to read/set the
same client variables for a user. If the user
Thanks for the responses. Lots of good food for thought.
The reason that I initially went with database-bound client vars was due to an
early CFMX bug whereby cookies weren't getting set correctly in all browsers.
I believe it was fixed in CFMX 6.1, but since everything was smoothly running
o
Hi all,
I run a large entertainment website, using ColdFusion MX. It has evolved over
the past 9 yrs or so from tcl to php to CF4 to MX.
We serve over 12,000,000 .cfm pages a month right now with over 700,000 uniques
per month.
Our single server is a dual xeon 2.0 with 4 gigs of RAM. We use
Hey all,
In the process of performing a yearly upgrade I was quite surprised to find
that my CGLOBAL and CDATA tables contained over 20 million (yes, million)
entries each, and the CGLOBAL.MYD file alone had a size of 3.1 gigs.
Needless to say, I had been operating under the assumption that the
Hi Dave,
Indeed, changing the permissions seem to have fixed half of the problem.
Now my error log is getting filled with:
[Sat Jan 29 13:27:33 2005] [notice] jrApache[2460: 17675] initialized proxy for
127.0.0.1:51010
[Sat Jan 29 13:27:34 2005] [notice] jrApache[2462: 42244] initialized prox
Hi all,
Running CFMX 6.1. Have noticed that I'm getting a ton of these errors in my
apache error_log:
[Fri Jan 28 21:51:16 2005] [notice] jrApache[11155: 64495] initialized proxy
for 127.0.0.1:51010
[Fri Jan 28 21:51:16 2005] [notice] jrApache[11155: 64495] could not open
"/opt/coldfusionmx/r
Has anyone here got Verity running on RH 9?
I'm using the most recent compat libraries, so I'm not
entirely sure what the next step is for trying to get Verity to
work.
Terry
- Original Message -
From: Thomas Chiverton
To: CF-Talk
Sent: Monday, December 01, 2003 11:55 AM
S
Hey folks,
Just wondering if anyone has experience with Red Hat 9 Verity problems with
CF6.1. Right now CFMX crashes within hours with a log file (hs_err_*) after
CFSEARCHes are executed. Some of the searches work. Some of them
cause a crash. Haven't noticed any patterns yet.
Unexpected Signa
> terry, can you elaborate on this? i never use any of the LS functions (as
i
usually work w/locales that aren't supported) & have never seen this sort of
behavior.
Ok, here's the scenario:
I've got 2 templates. Both query a db and return some accented French text
and a date. CFOUTPUT displays
Hey Richard,
I had the identical problem a couple of days ago. It turned out that some
of my templates were showing accents, and others weren't, even with the
content declaration.
After digging further, I found that it was the presence of a time function on
the pages that didn't work that was p
Hi Sarah,
I've got the identical setup: CF5, Apache 1.3.22-6, RH7.2, and the same
problem as you.
Approx twice a day I'm getting those messages in server.log:
server.log:"Fatal","TID=9225","07/15/02","16:15:19","Caught a fatal signal
(11) - Aborting"
No clue at all why this is happening, except
Thanks ray :) It's Terry Ford here btw. Sort of lurking. Taking some time
to build up my website since I left MM.
You wouldnt happen to know much about CFMX on linux would you? I'm
encountering a weird problem..
Terry
- Original Message -
From: "Raymond Camden&quo
Hey folks,
I'm encountering a strange problem that maybe some of you have run into before.
Config: CF5, linux 7.2, Apache/CF5 EAPI module, mysql
I have one template that runs many times a minute. However, under cfstat, a thread
running this
template seems to hang somewhat randomly -- every f
Actually, the criteria for beta 1 inclusion were fairly
basic. We had a large number of applicants, and decided
to only invite a small number so that we could ensure that
we could better work through any initial problems with testers.
We took a look at all of the system configuration information
://www.macromedia.com/go/neobetaapply
Please apply only once.
The best way to ensure you are notified for future ColdFusion betas is to register
your copy of ColdFusion Server or ColdFusion Studio at
http://www.macromedia.com/software/register.
Regards,
Macromedia ColdFusion Beta Team
Terry Ford
ColdFusion
Hi cf-talk,
We're deep in the middle of the design and development for the
next major release of ColdFusion and are looking for some good
input on ColdFusion enhancements. Below is a link to an
enhancement-tracking application that we've put online temporarily.
Inside you will find over 200 CF
82 matches
Mail list logo
