Has anyone used veracode for vulnerability testing of CFML - specifically via the VSCode plugin - as opposed to sending a WAR to their cloud-api?

See you there, perhaps.

If I'm extending the application.cfc of the root from an application.cfc in a subfolder, can the onSessionStart function reference the super properties of the onApplicationStart?

Somewhat disappointed but yet not surprised that GitHub CoPilot does not recognize CFML. See: https://code.visualstudio.com/docs/languages/identifiers And maybe subscribe to, comment, and like this discussion: https://github.com/orgs/community/discussions/53224

I have the same issues with other software. I make it a point to inquire on Twitter. For example, "Pieces" keeps hitting my up with their marketing regarding their ML/ChatGPT-powered apps , but they incorrectly identify CFML as R, Matlab and a batchfile and further prevent me from manually classifying the code as CFML. https://twitter.com/gamesover/status/1634617790991839232

Do you all remove CF's write access to all files in your site(s) directory? Of course to do that, you'd have to move all temp file locations somewhere outside there first.

Hello. Looking for general info about cachePut and how timespan and idletime are related. Seems a bit unclear as to whether the cache can be maintained as long as it is accessed within idletime.

It's been a long time since I looked at the log files in ColdFusion. We migrated to 2018, so maybe that's my confusion. Q: Where is the error log? Right now, applicaton.log is saying "The Log file is empty.".

The same with exception.log

Even though the size of the exception log is 2,826,860

Sorry in advance if this has been asked before, I did some quick searching and could not find a successful search recipe. Anyway, I have a jar library that includes a dependency for a jar that CF includes, but a later version. This jar requires slf4f-api version 1.7.36, but CF includes an earlier version 1.7.12. I would prefer my dependency "somehow" be self-contained and not impact CF using .12 version that CF includes and uses. Is this possible?

Is there a definitive source for learning to be a ColdFusion Server Admin?

well this only took forever, sheesh

out of curiosity, would anyone happen to know if cfml run-time is any faster between cfscript vs tagged based code, even by the smallest margins? Is there any extra processing between one or the other?

i am trying to search the key from the array of structs and list me down the other key value my json looks like this https://trycf.com/gist/21d5ffbd822e3a66cfdf53ada8d68542/lucee5?theme=monokai i am trying to get the href of the key: selectedInstructor

Hi gang. I've been struggling with a syntax problem related to verifying a value in a struct that has dynamic naming. Before I give up on this approach, I wanted to get see if anyone has feedback. Here is the code where I'm checking for a variable "hidemenu" within a struct that has a variable in the name (ie RoleID, which can change): <cfif structFind(application.sitesettings.RoleID_#RoleID#,"hidemenu") EQ "on"> This seems like it should be simple, and I don't want to pose frivolous questions here, but it hasn't been for me after quite a bit of trial and error. Any suggestions?

Our security team requires that users who have been inactive on any system for more than 90 days must be deactivated. Does CF Admin have any automation system that deactivates cf admin users who haven’t logged in in a set amount of time?

Any nxLog users out there? Looking for an nxLog config - for multi-line (stack traces) CF/Lucee app/exception logs (not the access logs); something like this type of format - "Severity","ThreadID","Date","Time","Application","Message" I am trying to get output format going in GELF format or JSON to send off to Graylog. I have tried the nxLog multiline extension and csv - but haven't gotten the output great yet.

is there a way i know what timezone it is in 2023-05-15 010000.0 want to show it like this for outlook "dateTime": "2017-04-15T140000", "timeZone": "Pacific Standard Time" trying to figure out anything which converts this time to utc and that actually tells me if this is in PST or EST

I'm back on my Kafka project. I'm slowly advancing. The latest issue encountered deals with CF-2021 and a returned instance of java.util.Iterator. The sample code I am using loops through the iterator but it terminates immediately, as if no records:

for ( record in records.iterator() ) {
      try{
        event = record.value();
        writeOutput("<br>EVENT: #event#");
      }catch( any e ){
        writeDump(var=e,label="exception");
      }
}

If I dump records.count(), it shows 1 record, but the for loop above does not reflect the record. Has anyone experience issues using a java.util.Iterator instance? In the screenshot below, after the records.iterator() dump, but before the Counter = 6... would have been additional text displayed - EVENT: something - with EVENT being hard-coded proving the iterator loop is terminating at zero records (hopefully that makes sense).

anyone knows of any example in datatables which has nested child relations, like i have to check for parent > child > child > child

Is ACF correct here? https://trycf.com/gist/2dd7f3de3692f85bd5b104957fea79aa/acf2021?theme=monokai

Does anyone know how to get ColdFusion to render the symbols ≥ and ≤ in Excel exports? I am talking about generated output, not how to do it within the Excel app. I have searched online for how to do it and so far have come up with nothing, which surprises me. Maybe it's obvious and I'm overlooking it but I get junk output in spreadsheets. HTML renders fine using &ge; and &le; but that's the browser being knowledgeable.

Hi ColdFusion Members 🙂 I have an important urgent question about ColdFusion Registry. Can anyone tell me what is in the registry HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\ColdFusion\Clients ? The Size is over 2GB and i believe thats the reason my Server going crazy. Can anyone help me? ^^"

what cf logs would contain log information about api calls / http calls. I am trying to find out where external and incoming https calls are coming and going through the CF server

The server does not have Fusion Reactor installed btw

Hey - Random lesson learned on my end - figured I'd share just in case it saves someone else - using @foundeo’s excellent WAF but now that in-person conferences are coming back - gotta remember you'll be accessed by 1000s of people often all off of 1 IP address (hotel wifi). That can easily trigger WAF rules you don't see in normal course of business - like dictionary attacks on login pages, or repeat offender - where one user messing with your site shuts the IP down for everyone :)

looking for CF web hosting other than Hostek

pls guide

cheap but good