Does anyone explicitly block requests with CFID or CFTOKEN in the url params?

Does anyone here use redis as session management, and care to share their conf, as I have no idea what reasonable values are.. minIdle, maxIdle, maxTotal etc..

trying to use the oracleHCM timezone thing, but the example does not give clear idea how to

"/hcmRestApi/resources/11.13.18.05/userAccountsLOV?finder=timezoneCode;TimezoneCode='UTC'

anyone used it before

Anyone familiar with the way New Relic traces transactions? I have some crazy looking stats in my New Relic account, with Java threads running for minutes in some cases. Yet response rates are normal. The system seems responsive so I'm unsure why there's this huge discrepancy. Are these isolated requests? Are they long running cfthreads? See the two screenshots here - all I'm doing here is switching between "java" and "response time".

anyone encountered such error before

C:\ColdFusion2021\cfusion\stubs\WS_-1374943156_2\src\org\w3\www\_2001\xmlschema\AnySimpleType.java:81: error: cannot find symbol if (local==null){ ^ symbol: variable local location: class AnySimpleType C:\ColdFusion2021\cfusion\stubs\WS_-1374943156_2\src\org\w3\www\_2001\xmlschema\AnySimpleType.java:87: error: cannot find symbol xmlWriter.writeCharacters(org.apache.axis2.databinding.utils.ConverterUtil.convertToString(local)); ^ symbol: variable local location: class AnySimpleType C:\ColdFusion2021\cfusion\stubs\WS_-1374943156_2\src\org\w3\www\_2001\xmlschema\AnySimpleType.java:277: error: cannot find symbol org.apache.axis2.databinding.utils.ConverterUtil.convertToString(local) ^ symbol: variable local location: class AnySimpleType Note: Some input files use or override a deprecated API. Note: Recompile with -Xlint:deprecation for details. Note: C:\ColdFusion2021\cfusion\stubs\WS_-1374943156_2\src\com\oracle\xmlns\apps\cdm\foundation\parties\personservice\applicationmodule\PersonServiceStub.java uses unchecked or unsafe operations. Note: Recompile with -Xlint:unchecked for details. 3 errors

How can I create a manifest.json file in content box coldfusion as I am getting errors in Lighthouse to manifest. Anyone knows. Contentbox version 5.0.3 "Does not set a theme color for the address bar.Failures: No manifest was fetched, No

<meta name="theme-color">

tag found."

Quick question for the folks in the room -- I've got a requirement from one of my vendors where I need to compress images for to no more than 900kb (this is going out a serial device in the back-end). I know I can just take a stab at width x height and just assume it's fine, but do you know of any image manipulation libraries that will let you specify the max size like you can in a photoshop or other image app?

Any Windows/IIS people here? Is there any way to set the ApplicationPool .NET CLR version in a site's

web.config

file?

The CF Deprecated Features page includes this:

cfscript support for script-based CFCs, such as query and storedproc

What does that mean exactly?

what i am doing wrong here, my code seems right Error i am getting is: The value 4,5 cannot be converted to a number. https://trycf.com/gist/b276cb670c2928629f4f3580bb0a3f04/lucee5?theme=monokai

sorry I know this is a Cfwheels questioned but i cant seem to get onto the channel. I want to use a font awesome icon in a linkto - can anyone advise how to do this please? This is my link #linkTo(text='#imageTag(source="ico_info.png", style="width:16px; height:16px;")#',title="Invited on #DateFormat(invitedAt,'dd mmm yy')#")# And this is the font awesome icon I want to replace the image in the linkto tag with: <i class="fa-sharp fa-regular fa-trash"></i>

I have tried adding it as a class but it seems to need the <i> part of the tag without this though it doesn't render

G'day, I'd like to use Mailtrap on ACF 2021 Dev Edition. I cannot get the Mail Server settings to verify: I get "Connection Verification Failed!" I populate the Mail server with their suggested values ( sandbox.smtp.mailtrap.io, and the supplied user name and password ). Following their troubleshooting guide, I can telnet to the server, so I don't think the connection is blocked. I have tried the 4 different port numbers they suggest ( 25 or 465 or 587 or 2525 ). I have tried "*Enable TLS connection to mail server"* both on and off. Do you have any advice? Things to try? ( Alternatives even? ) Where I work, the mail server is becoming more locked down, which makes it tough to use our mail server to test cfmail output locally. Thanks,

If you're not STUCK on using mailtrap - you can use "Papercut" instead. It is a local only email server and viewer, I was using Mailtrap - but kept hitting the free tier's limit

Hey all, don’t forget cfcamp.org will happen in 3 weeks! We’re excited to meet folks at a conference in Europe again. If you need a discount, just use Lucee6-10 and we’ll see you there! Many interesting folks will be there and you’ll learn lots of new things for sure!

Is the fix for cfreport in CF2021 only available by the separate hotfix jar that you have to email Adobe to get? We’re up to date with CF2021v6 but it still has the bug.

How many of you use FusionReactor with Lucee? It's tempting to get it for the TestBox code coverage but I'm curious what other practical value it brings. Honestly we don't find ourselves needing to monitor performance too often, which is what it mostly seems good for. Anything else I'm missing that could make FusionReactor licensing fees worth it?

Anyone know much about using the java.util.Date from the java object? I'm trying to convert a date to epoch time. This dump below will show me today's date in epoch time.

writeDump( createObject("java", "java.util.Date").init().getTime()  );

However, I want to be able to pass it a date to get the epoch time and my efforts are failing. I'm not sure where and in what format to pass it a date. Thanks.

wondering if there is a way to dynamically provide arguments to cfhttp - (thinking primarily of the proxy arguments). I've got a basic cfhttp request set up - is there a way that I can optionally call it with the proxy arguments?

I am trying to add MySQL to ColdFusion 2023, I added the jar file (mysql-connector-j-8.0.33.jar) to ColdFusion2023/cfusion/lib, but I am still getting a error saying, "The standalone MySQL JDBC driver is no longer shipped with ColdFusion. Please download it, put it in cf_root/lib folder and restart ColdFusion." How can proceed with adding MySQL to ColdFusion2023?

Is the cost of a ColdFusion licence £2600 per annum ?

for Standard Edition (2 cores)

Has anyone ran into this serialization bug with CF2023? > https://tracker.adobe.com/#/view/CF-4218021 All our json responses are now uppercase, regardless of this being set in code 'this.serialization.preserveCaseForStructKey=true', or via the administrator settings. This works fine in CF2018/2021. The comment on this tracker is rather confusing.

please read n vote https://dev.lucee.org/t/lucee-5-4-0-65-release-candidate/12657/6

In regards to this security announcement: ColdFusion March 2023 emergency update, and what to do about it - Charlie Arehart - Server Troubleshooting

Would the following log files indicate the source of a breach?

Line 823: 2023-04-11 135826 xxx POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/filemanager.cfc method=foo&_cfclient=true 443 - 23.224.55.116 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_6_8)+AppleWebKit/535.7+(KHTML,+like+Gecko)+Chrome/16.0.912.36+Safari/535.7 - xxxhiddenxxxx 404 0 0 1509 1771 109 Line 824: 2023-04-11 135827 xxx POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/filemanager.cfc method=foo&_cfclient=true 443 - 23.224.55.116 FeedFetcher-Google;+(+http://www.google.com/feedfetcher.html) - xxx 404 0 0 1509 806 78 Line 826: 2023-04-11 135829 xxx POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/iedit.cfc/WEB-INF/cftags/component.cfc method=foo&_cfclient=true 443 - 23.224.55.116 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_6_8)+AppleWebKit/535.7+(KHTML,+like+Gecko)+Chrome/16.0.912.36+Safari/535.7 - xxxhiddenxxxx 404 0 0 1509 1794 78

An attacker was able to upload a file to my site that allowed complete access

From the article: "More specifically, if you look in your access logs for any requests having been made with a querystring including the phrase: _cfclient (an underscore before cfclient), that will either be there for legitimate use of the cfclient feature (which I've still not seen in the wild, in all the servers have helped people in mitigating this, so far), or it would/could be an illegitimate/illicit/hacky use.

Does anyone know who's keeping CFRepo up to date these days? It's missing 2023 from what I can tell.