http://coldfusion.com logo
Join Slack
Powered by
Been using cfwheels since v1 reload in the browser...
# wheels-dev
r
Been using cfwheels since v1 reload in the browser and never not worked. Using v4 latest and just have set(reloadPassword=""); in settings but does not reload with ?reload=true. I always have to restart. Any ideas I can try?
z
Which version of Lucee are you running?
Wheels may swallow the reload request if an exception occurs during initialization. Check your Lucee logs for anything during the reload request and paste here. So I can come to a solution
p
@risto This is not a bug and is as intended with some of the security hardening we have been doing with the various 4.0.x releases. The set(reloadPassword="") now disables URL reload entirely (empty password used to mean "no password needed", but that left ?reload=true open to anonymous restarts, so it now fails closed). Set a real password: set(reloadPassword="something") in config/settings.cfm, then hit ?reload=true&password=something. That should work for you. The state of the reload setting is logged into the wheels_security.log file. The rationale: an empty password previously left ?reload=true open to anonymous restart-DoS on any internet-reachable app. I've opened an issue to present more messaging on this change in development but all these measures where made to get rid of potential holes in the framework and make the framework secure by default. I know there is some muscle memory that will have to be relearned when we come from v1-v3 to the v4 framework.
r
@Zain Ul Abideen Hi 7.0.4+34
@Peter Amiri Sorry, I should add detail. This was from a starter doing box install wheels-base-template. It had the .env variable set. I'm just trying it out with commandbox so I first blanked it out. Then I tried it adding my firstname as password and resarting the server. Still nothing doing ?reload=true&password=risto. MAybe I locked myself out somehow but I always have to do server restarts now.
z
Hi, Thanks for the info, Could you plz check that the URL parameter actually make it into 
url.reload
? (e.g. 
writeDump(url)
to confirm CommandBox isn’t stripping it.)?
r
@Zain Ul Abideen here are logs it says rejected then accepted? going to dump url too
Copy code
wheels_security.logINFO 13:28:30, 14 Jul, 2026XNIO-1 task-3
"personalvault","Reload accepted from 127.0.0.1"
wheels_security.logWARN 13:28:29, 14 Jul, 2026XNIO-1 task-3
"personalvault","Reload password rejected from 127.0.0.1"
wheels_security.logINFO 13:25:38, 14 Jul, 2026XNIO-1 task-2
"personalvault","Reload accepted from 127.0.0.1"
wheels_security.logWARN 13:25:37, 14 Jul, 2026XNIO-1 task-2
"personalvault","Reload password rejected from 127.0.0.1"
Si this is my site homepage and dumping url scope is empty when I did ?reload=true&password=risto
Copy code
reload=true&password=risto
If I do just ?reload=true that shows up in url dump. is I add the password=risto url dump is blank
z
The logs are clearly telling that Wheels is definitely seeing the reload request. So the problem is not CommandBox stripping the query string or 
?reload=true
not reaching Wheels.
you are using stock 
Application.cfc
from 
wheels-base-template
, or have you customized it?
r
stock 
Application.cfc
from 
wheels-base-template Thinking
of just spinning up a new site to see if it makes a difference or lowering the lucee version
z
My instinct are similar likely a Lucee 7 compatibility issue than a Wheels configuration issue.
but before going over there, can you Confirm 
onApplicationStart()
 is actually executing? Place
Copy code
writeLog(file="reload-test", text="onApplicationStart: #now()#");
If the timestamp doesn’t change after 
?reload=true
, then the reload isn’t rebuilding the application.
r
@Zain Ul Abideen okay, well the good news is I spun up a fresh wheels-base-template and lucee latest. Before I started the server I removed the env(var) and just put risto. Started up the server tested adding a couple routes and the reload works! checked the log and only reload accepted. I tried your test and nothing is being logged. It has to be something I did. I hope I never run into this again. Appreciate everyone's time!
🙌 1
2 Views
Open in Slack
PreviousNext
Powered by