long day, anyone know if ACF throws an error when a named parameter in a query doesn't exist? Lucee seems to be casting it to null, which feels super wrong, at least here with QoQ with the first added test here the second one throws in the native Lucee QoQ and then tries just to fall back to hsqldb, which throws an error https://github.com/lucee/Lucee/pull/1677/files

i thought adam cameron was responsible for finding all the stupid/unexpected stuff in cf, which is why i was surprised at finding this myself (affects all acf versions apparently, lucee immune): https://trycf.com/gist/34090a3ec692a4471a856f0062c54837/acf2021?theme=monokai

to be specific, the valuelist() of the bit column

when all other references result in numeric values

Hi All. We have a client asking for an esignature solution. Has anyone had to do this in CF? or integrate with a 3rd party like Docusign?

I am proud to announce that Galaxie Blog 3 is finally released. It was our goal to build one of the most comprehensive HTML5-based blogging platforms that meets or exceeds the out-of-the-box core blogging functionality of major platforms like WordPress. Take a look and see- with Galaxie Blog 3, I think that you will also agree that we delivered on that goal. Please check the link out- this is one of the largest open-source ColdFusion and is by far the most powerful ColdFusion blog in the world. If you want to know more, please feel free to contact me. https://www.gregoryalexander.com/blog/2022/6/9/Galaxie-Blog-3-is-Now-Released

Is there any credence to this comment? "...cloud customers must pay for RAM, Processors, and Bandwidth due to CF using 8X more RAM than PHP."

This came up in a different thread that I started polluting with tangential questions... Why do CFML servers "need" to have different special handling for REST requests?

They don’t, they need a framework that implements rest like (coldbox or taffy) that way the functionality can change as the technology does, if such a solution is actually needed for their product.

Good morning, I was wondering what is considered best practice for securing a user session? I am developing in Coldbox currently and looking at their documentation but there appear to be multiple takes on how to secure the session.

Apologies for the lame question, IIS isn't my long suit. I'm having trouble getting a new IIS 10 install on a new Windows Server 2019 box to serve even basic html pages. Everything I've tried gives the same error, "401 - Unauthorized: Access is denied due to invalid credentials". I've created the site in Application pools. The site itself has its identity set to ApplicationPoolIdentity, and its security tab shows the site itself in the list of users and groups, with all permissions checked except "special permissions". I see the same on the security tab of that directory in Windows Explorer. What am I missing?

What is the best way to test whether or not a function argument is a callback function, as opposed to struct/array/simple? isCustomFunction doesn't work. I could use !isStruct() and !isSimpleValue() but I'm hoping there is something more elegant.

And isStruct() returns true for a lambda callback...

Quick question about ACF 2016 and web sockets over SSL. I have two instances of Cf on the same server, configured to host websockets over SSL on different ports. Both instances can be reached through their own hostnames. And they both have https enabled through nginx using the same certificate (additional subject alternative names). I have created a jks key store with the full certificate path ( server, intermediate and root CA) for both instances (they use the same one). Secure websockets work on instance one, doesn't on instance two. No errors in error.log, exception.log, server.log or out.log. f12 network tab just keeps idle and says "Finished" after certain amount of time instead of giving 101 Switching protocols. Any ideas? Also, same modus operandi on our dev / staging server works like a charm. Production environment failes to cooperate. Edit: fixed it by adding -Djdk.tls.client.protocols="TLSv1.2" -Djdk.tls.server.protocols="TLSv1.2" to the JVM arguments of the server...

Java/JVM tuning question: it’s been years since I’ve played around with java settings for CF. That being said I know there are some teams out there that have made some great improvement to their JVM config to supercharge their setup. Would anyone be willing to share what JVM Args you/your team is using in production to squeeze more performance out of your servers?

Hi All. We're being asked to integrate our CF based platform with Quickbooks online and we're going through the documentation. If anyone has experience with this, and could provide feedback (including as consulting work), let me know. Feel free to DM me as well.

@nickg I have done some work with CF and quickbooks. This is a someone complicated process and found a company that was able to make the whole process really easy. The company name is AAATex Corp (https://aaatex.com/). They make the process easy as you can create the necessary information to be imported via CF and then run a process on your server to upload the data. You can ask Jack Charrette and tell him that you got the information from Drew Nathanson. He may remember me. I did work with a separate QB tool to do import which you have to create an XML file and then run. It was NOT very graceful but it did work. Let me know how you make out.

Open discussion question, not necessarily CFML related, just throwing it in here. How do you guys implement security in API's that handle confidential information? At this point we haven OAuth-based authentication (JWT tokens), but we were looking into HMAC payload security, but when using an Angular front-end, this is quite useless imho, b/c the fact that the private / public keys can be retrieved by reading the js-code... I'm open for any suggestions / other views about this subject.

Odd question. I have a hosts file in place, but it doesn't seem to be having any effect. Entries (lines in the file) look like this, verified by closing the file and reopening it:

10.10.8.37 <http://testdev.something.org|testdev.something.org>

(That's not real info.) In an admin cmd prompt I did this:

ipconfig /flushdns
nslookup <http://testdev.something.org|testdev.something.org>

That gave me:

can't find <http://testdev.something.org|testdev.something.org>: Non-existent domain

What am I missing here?

any pointers on how I would go about receiving/uploading a multipart/formdata file (from axios) to a coldbox api?

Two new CF2021 servers, initial install done by a guy who's out of the country on vacation. On the one intended as a dev box, verifying datasources in cf admin works fine. On the one intended as next-gen production, it shows no result at all, not OK or an error. Has anyone seen this? Any idea what the cause or fix might be? I suspect he locked something down too tight, but I haven't had a chance to research what the options are in that area.

For those users note in the Adobe channel: https://cfml.slack.com/archives/C06TABBT8/p1656608120329819

Question: I have a old project where lot of cfinvoke is used with request scope, i am planning to move it to application scope and replace cfinvoke with application scopes, any suggestions what could be a better if i keep it in request or applicatoin, application might require reinitialization if something changes

depends on what these methods do, whether they are truly for each request or whether they can survive as singletons in the application scope

How do you package a ColdFusion app for deployment?

Just want to bitch a second. I just set up two new CF2021 servers, our first, will be the next gen of the public and dev servers for one of our major apps. Basic install and IIS setup done, I went to update CF to the latest. For some unknown reason, in spite of my horrible history doing it this way, I tried to do the update through the cf admin UI. It failed to be able to stop the service, but somehow still left it throwing a null pointer exception when I restarted in manually and hit cfadmin. I had our devops guys restore the ColdFusion2021 directory from last night's backup, and now cfadmin gives a blank white page. I'll dig around the logs, see if I see anything actionable, maybe restore that whole VM if I don't figure anything else out. Argh. I do not appreciate this, have other stuff to do.

trying to convert cfmap to jquery based map but has a question on the tip attribute of the cfmap, is it the same as you hover on the icon and it shows address

trying to use cfajaxproxy blog post by @Adam Cameron i have a question re reading back to back and i understood it needs ajax call but what about this type of call

<cfajaxproxy cfc="cfc.alert" jsclassname="proxy">

  <script>
  function Ack(argumentAlertID) {
  var  x = new proxy();
  x.Update(argumentAlertID);
  }
  </script>

i did like this

function Ack(argumentAlertID) {
    $.ajax("cfc/alert.cfc?method=Update?id="+argumentAlertID,{
      success : function(json){}
    });
  };

not sure if its right