I am attempting to upload a file using the Dropbox API.  Dropbox requires Contact-Type = "application/octet-stream", which I am tried to set in the cfhttpparam type = "header".  However when I post the data to the API.  I get an error stating: Bad HTTP "Content-Type" header: "application/octet-stream,multipart/form-data; boundary=-----------------------------7d0d117230764".  I am guessing that when a cfhttpparam type = "file" is included, the content-type is modified to also include multipart/form-data.  The api will not accept this content-type.  Is there a way to avoid this behavior?  This is the code I am using to attempt the upload.  Thank you.

<cfhttp method="post" url="https://content.dropboxapi.com/2/files/upload" result="uploadFile">

  <cfhttpparam type="header" name="Authorization" value="Bearer #DropboxAccessToken#">

  <cfhttpparam type="header" name="Dropbox-API-Arg" value="#serializeJSON(stFields)#">

  <cfhttpparam type="header" name="Dropbox-API-Select-User" value="#DropboxMemberID#">

  <cfhttpparam type="header" name="Content-Type" value="application/octet-stream">

  <cfhttpparam type="file" name="1_1036.gif" file="C:\1_1036.gif">

</cfhttp>

Hi,

We have a ColdFusion 10 SaaS product that we're working on to bring it up to ColdFusion 2016 compliance. However, we have recently learned that the upgrade path will not be available to us after May 2017 (http://blogs.coldfusion.com/post.cfm/non-availability-of-upgrade-pricing-from-coldfusion-1 0-to-coldfusion-2016-release?utm_source=FusionReactor+Customer+15%2F05%2F2017).

As we are not in a position to upgrade just yet, we still don't want to loose the ability to upgrade at a lower price point instead of purchasing new licences outright.

My question is, would we be able to pay for the upgraded licences now (ColdFusion 10 to ColdFusion 2016) but continue to use the existing ColdFusion 10 keys until we are in a position to upgrade our servers to ColdFusion 2016, when we would simply swap them out and use the new keys?

I've reached out to Adobe directly regarded this and haven't had a response, I figured the forums would be the next suitable step!

Many thanks.

We are using CF 11 on Windows server 2012 R2. Having the structure of our data we need to use either one really large or about 500 small Solr collections. What are the pros and cons for doing it either way? Is there any guide/reference for the best practices about the number of collections? Any advice is greatly appreciated!

When installing ColdFusion 11 silently using 'installer.profile' and setting the password value with the 'SILENT_ADMIN_PASSWORD=' property, the password does not work ColdFusion administrator.

Is there a way to fix this to work with the silent install?

Thanks!

I'm running two servers with MS-SQL Server 2008 and ColdFusion 11.  When I disable TLS 1.0/1.1, ColdFusion can no longer connect to the SQL server...  This happens whether I'm running MS-SQL Server on the same machine with ColdFusion or not.  In other words, it breaks local connections and remote connections...

I need to disable TLS 1.0/1.1 in order to remain PCI-compliant.  How do I do this without breaking all my SQL connections in ColdFusion 11?

Thanks,

Laurence MacNeill

Ball Ground, Georgia, USA

Hello,

We have ColdFusion 11 installed and working on production Windows Server 2012 R2 server. Search Services and Solr were not initially installed. What would be the steps to add them now?  Is there a simple way to do it on a running system?

Your input and advice are appreciated!

Hello,

we have an application running for several months without any problems. During the last days I often get a 500 Server error and find this in the log files. All other applications on the server work without any problems. The error is not always, but very often. I reinstalled the database connections but the error still remains.

System is:

System Information

Server Details

Server Product ColdFusion 2016

Version 2016.0.04.302561

Tomcat Version 8.5.11.0

Edition Standard 

Operating System Windows Server 2012 R2 

OS Version 6.3 

Update Level C:/ColdFusion2016/cfusion/lib/updates/chf20160004.jar 

Adobe Driver Version 5.1.4 (Build 0001) 

Java Version 1.8.0_72  

Thank you for your help

How do I begin to troubleshoot a 502 error?

CF11/Windows 2012r2/IIS8

FusionReactor installed

I connect to twilio to send sms messages, and have a page setup to collect their callbacks when messages are sent.  They are sending me notifications that at random, they are receiving 502 errors when posting to the callback page.

<html>

   <head>

   <title>502 Bad Gateway</title>

   </head>

   <body>

   <h1>Bad Gateway</h1>An upstream server returned an invalid response.

   </body>

</html>

The callback page receives the info and writes to a db.  A call that usually takes 15ms to process on average.

Sometimes they may hit my server with 200 call back requests pretty rapidly.  At random, 1, multiple or none of those requests may result in a 502 error.

I have never physically seen a 502 error appear in the application.log, coldfusion-error.log, etc....

I also have isapi_redirect.log turned on and see nothing there that would indicate an error, just a bunch of lines that look like this:

[Thu May 25 07:16:12.393 2017] [14632:20188] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 23 of max reuse connection 250 and total endpoint count 250

[Thu May 25 07:16:12.393 2017] [14632:11256] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 24 of max reuse connection 250 and total endpoint count 250

[Thu May 25 07:16:12.394 2017] [14632:13928] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 25 of max reuse connection 250 and total endpoint count 250

[Thu May 25 07:16:12.394 2017] [14632:3120] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 26 of max reuse connection 250 and total endpoint count 250

[Thu May 25 09:42:43.780 2017] [14632:19260] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 27 of max reuse connection 250 and total endpoint count 250

[Thu May 25 09:42:44.581 2017] [14632:10920] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 28 of max reuse connection 250 and total endpoint count 250

[Thu May 25 10:00:14.724 2017] [14632:17416] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 29 of max reuse connection 250 and total endpoint count 250

[Thu May 25 10:00:14.736 2017] [14632:12616] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 30 of max reuse connection 250 and total endpoint count 250

[Thu May 25 10:26:00.375 2017] [14632:17416] [info] ajp_process_callback::jk_ajp_common.c (2244): (cfusion) current reuse count is 31 of max reuse connection 250 and total endpoint count 250

I've checked fusion reactor and I don't see any increases in traffic or any red flags that indicate anything unusual going on with the server.  Heap and connections are well below their limits.  DB usage is minimal.

None of my users on the server have ever reported seeing a 502 error when browsing the apps.

The only thing I can see that may be somewhat related is that the frequency increased once I applied HF11-00011.

Thanks

I have been working for weeks trying to interpret and follow the instructions on Using OAuth 2.0 for Server to Server Applications for connecting our work SQL based calendar to our Google calendar. I first tried directly interacting using HTTP but was not successful in creating the correct signature, even tho I used Ben Nadel's 2015 JSONWebTokens.cfc as a resource. Then I came across Java Integration Guide CFML Documentation and realized that it might be possible to use Google's provided JAVA client library, which would be ideal for security reasons.  Has anyone successfully connected server to server with Google APIs using either method? If so, I could really use help.

Here is where I am stuck in the JAVA route:

1. I have downloaded the Google APIs Client Library onto my server test folder, lets call it /usingJAVA/calendar/
2. I have an application file in /usingJAVA with the following lines indicating JAVA class file paths:

<CFSET this.javaSettings = {loadPaths = ["/usingJAVA/calendar/","/usingJAVA/calendar/libs/","/usingJAVA/calendar/libs-sources/"], reloadOnChange=true,watchInterval=100 }>

3. I have taken the JAVA code provided on the instructions for "Other", since I am not running on Google Compute Engine, and 'translated' it to CF

<CFSCRIPT>

  SQLAdminScopes = createObject("java", "com.google.api.services.sqladmin.SQLAdminScopes");

writeOutput(SQLAdminScopes);

</CFSCRIPT>

4. When I run this code (and many variations of it!) I get an error:

Message: Object instantiation exception.

Detail: Class not found: com.google.api.services.sqladmin.SQLAdminScopes

The calendar library contains only jars, so I can not check the location of the classes and am just depending on the path shown in the JAVA import code provided.

Here is where I am stuck in the HTML route:

1. Here is my function to create the JWT

<CFFUNCTION name="createToken" access="public" output="true" hint="Create a JSON Web Token">

<CFSET local.expireTime = dateadd('h',1,now())>

<!---create JWT header--->

<CFSET local.header = '{"alg":"RS256","typ":"JWT"}'>

<CFSET local.Base64header = toBase64(local.header)>

<!---create JWT claim set--->

<CFSET local.claimSet = structNew()>

<CFSET local.claimSet["iss"] = "myprojectserviceaccount.com">

<CFSET local.claimSet["scope"] = "https://www.googleapis.com/auth/calendar">

<CFSET local.claimSet["aud"] = "https://www.googleapis.com/oauth2/v4/token">

<CFSET local.claimSet["exp"] = GetEpochTime(local.expireTime)><!---an inline function--->

<CFSET local.claimSet["iat"] = GetEpochTime(now())>

<CFSET local.JSONclaimSet = SerializeJSON(local.claimSet)>

<CFSET local.Base64claimSet = ToBase64(local.JSONclaimSet)>

<!---create JWT signature--->

<CFSET local.signatureInput = '{#Base64header#}.{#local.Base64ClaimSet#}'>

<CFSET var signer = createObject( "java", "java.security.Signature" )

.getInstance( javaCast( "string", "SHA256withRSA" ) )>

<CFSET signer.initSign( variables.privatekey )>

<CFSET signer.update( charsetDecode(local.signatureInput, "utf-8" ) )>

<CFSET local.signatureSigned = signer.sign()>

<CFSET local.Base64Signature = ToBase64(local.signatureSigned)>

<CFSET local.tokenstring = '{#local.Base64header#}.{#local.Base64claimSet#}.{#local.Base64signature#}'>

<CFRETURN local.tokenstring>

</CFFUNCTION>

2.   When I call this function I get an error on the call for the initSign class of Security:

Message: The initSign method was not found.

I have a ColdFusion 11 server set up and I've set one up and it works fine with no problems. However on another server that is built I can't get the following working at the same time together.

I have my DefaultScriptSrc pointing to a newly named virtual directory in IIS as per the lockdown guide. For instance I have a virtual directory called "cfscripts".  This virtual directory points to the CFIDE\scripts directory in IIS.  Therefore in CFadmin I have the parameter set to "\cfscripts\"

1. Cfform works just fine.  You can clearly see that it's looking for cfform.js in src="/cfscripts/cfform.js"

2. However we set the parameter "strictnumbervalidation=false" at the top of our code in the apps as we want it to behave like in prior ColdFusion releases.  This does not work.

If I change the virtual directory cfscripts to point to CFIDE instead of CFIDE\scripts then the strictnumbervalidation works but the cfform doesn't. I'm not sure why on this server it works this way.

Hello, all,

I'm not really sure if this can be accomplished.  But I'm going to give it a try, and I could really use some help with a complex query involving two tables (many-to-one, relational).

First, a little background.  Oracle 12 database.  Chained commands are disabled.  Stored Procedures are not allowed.  (Not my choice; these are upper level decisions, above my paygrade.)  This is a very weak metrics-ish project.  Basically do a very, VERY lame job of "fingerprinting" a client browser for tracking purposes (but not the nefarious tracking you might be thinking of - it's to see in what order which links of one of our sites is being utilized, believe it or not to improve UI/UX.)

The reason I am bringing this question here?  Because I am OCD when it comes to keeping databases as small as can be, and I want to run a scheduled task once a month that will prune the data - under specific conditions, just about anything older than 6 months.

TABLES:

web-user-info (table one)     web-user-activity (table two)
USER_UUID (pk)                ACTIVITY_UUID (pk)
USER_ID                       USER_UUID (fk)
DT_CREATED                    DT_ACTIVITY
FQDN                          URL
IP_MACH_NAME                  QUERY_STRING

So, what I'm aiming to do for this scheduled task is to delete rows from second table where DT_ACTIVITY is greater than 6 months from now.  If there are any rows still existing that are tied to a user in the first table, fine, as far as that user is concerned, move on to the next user.

HOWEVER, if all records in table two for a user in table one are deleted, then delete the user from table one, as that user record is no longer needed.

Now the delete portion of the SQL I can do with no problem (haven't written it, yet.. working on that).  What I'm at a loss for is checking the number of related records left, and deleting from table one.

Any related thoughts appreciated.

V/r,

^_^

I recently installed CF2016 on my PC and it started up fine. However, I stopped the application service and now I cannot seem to start it back up again.

It would give me the following error:

"Windows could not start the ColdFusion 2016 Application Server on Local Computer. For more information, review the System Event log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 2."

I checked the CF logs and found nothing pertaining to the startup failure.

Here is the Windows WER from one of the failed attempts:

Version=1

EventType=APPCRASH

EventTime=131402179068123256

ReportType=2

Consent=1

ReportIdentifier=2bb1fc78-4189-11e7-9e2a-acfdceda6aa0

IntegratorReportIdentifier=2bb1fc77-4189-11e7-9e2a-acfdceda6aa0

Response.type=4

Sig[0].Name=Application Name

Sig[0].Value=coldfusion.exe

Sig[1].Name=Application Version

Sig[1].Value=2016.0.0.0

Sig[2].Name=Application Timestamp

Sig[2].Value=56c57b78

Sig[3].Name=Fault Module Name

Sig[3].Value=coldfusion.exe

Sig[4].Name=Fault Module Version

Sig[4].Value=2016.0.0.0

Sig[5].Name=Fault Module Timestamp

Sig[5].Value=56c57b78

Sig[6].Name=Exception Code

Sig[6].Value=c0000005

Sig[7].Name=Exception Offset

Sig[7].Value=0000000000003770

DynamicSig[1].Name=OS Version

DynamicSig[1].Value=6.1.7601.2.1.0.256.4

DynamicSig[2].Name=Locale ID

DynamicSig[2].Value=1033

DynamicSig[22].Name=Additional Information 1

DynamicSig[22].Value=5313

DynamicSig[23].Name=Additional Information 2

DynamicSig[23].Value=531333befbd69e20c7cce1424cc9e75b

DynamicSig[24].Name=Additional Information 3

DynamicSig[24].Value=04fd

DynamicSig[25].Name=Additional Information 4

DynamicSig[25].Value=04fdb7a589119fc0d7781d61ceb75a38

UI[2]=C:\ColdFusion2016\cfusion\bin\coldfusion.exe

UI[5]=Check online for a solution (recommended)

UI[6]=Check for a solution later (recommended)

UI[7]=Close

UI[8]=Adobe ColdFusion Launcher Application stopped working and was closed

UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.

UI[10]=&Close

LoadedModule[0]=C:\ColdFusion2016\cfusion\bin\coldfusion.exe

LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll

LoadedModule[2]=C:\WINDOWS\system32\kernel32.dll

LoadedModule[3]=C:\WINDOWS\system32\KERNELBASE.dll

LoadedModule[4]=C:\WINDOWS\system32\SHLWAPI.dll

LoadedModule[5]=C:\WINDOWS\system32\GDI32.dll

LoadedModule[6]=C:\WINDOWS\system32\USER32.dll

LoadedModule[7]=C:\WINDOWS\system32\LPK.dll

LoadedModule[8]=C:\WINDOWS\system32\USP10.dll

LoadedModule[9]=C:\WINDOWS\system32\msvcrt.dll

LoadedModule[10]=C:\WINDOWS\system32\WS2_32.dll

LoadedModule[11]=C:\WINDOWS\system32\RPCRT4.dll

LoadedModule[12]=C:\WINDOWS\system32\NSI.dll

LoadedModule[13]=C:\WINDOWS\system32\ADVAPI32.dll

LoadedModule[14]=C:\WINDOWS\SYSTEM32\sechost.dll

LoadedModule[15]=C:\WINDOWS\system32\SHELL32.dll

LoadedModule[16]=C:\WINDOWS\system32\IMM32.DLL

LoadedModule[17]=C:\WINDOWS\system32\MSCTF.dll

LoadedModule[18]=C:\WINDOWS\system32\nvinitx.dll

LoadedModule[19]=C:\WINDOWS\system32\VERSION.dll

LoadedModule[20]=C:\WINDOWS\system32\mswsock.dll

FriendlyEventName=Stopped working

ConsentKey=APPCRASH

AppName=Adobe ColdFusion Launcher Application

AppPath=C:\ColdFusion2016\cfusion\bin\coldfusion.exe

I believe CF8.0.1 is not officially supported on Windows Server 2012 but I'm wondering if anybody has successfully managed to get these two running together?

I'm just presuming going from Server 2008 to 2012 is worth while with a newer version of IIS and performance increases

If it's a no go, what's the lowest version that would work on Win Server 2012? (maybe not officially but what's actually running out there in the real world?)

Hello,

I was trying to instantiate a CFC object but received an error:

At first I tried all the obvious things, i.e. make sure the path is correct, that the cold fusion user has access to the file etc.

Literally wasted probably a week trying to get this to work only to find out it has nothing to do with not finding the component at all.  It appears that depending on the name of my embedded functions it will or will not instantiate.  I receive the preceding error when I have a function defined as such:

<cffunction name="getOrderOptions" access="public" output="true" returntype="void">

If I literally change the cffunction name value to:

<cffunction name="getOptions" access="public" output="true" returntype="void">

It loads fine.  This is occurring over multiple different functions names with no obvious consistency.  I have run into problems in the past with special 'reserved' words in cold fusion but some how I highly doubt that "getOrderOptions" would be reserved and "getOptions" not.

I also checked all other CFC's for duplicate function names (though that should not matter) and these are unique across the entire application.

Anyone have any ideas why this might occur?

Thanks,

-Curtis

I have written an application which runs a long process.

On different PCs, this process last around 30mn.

On local PC, with Windows 7 and CF9, no problem, everything is OK.

I have put these lines :

<cfflush interval="10">

<cfsetting requesttimeout = "6000">

Then , I have to put it on the Internet, to let access to different users from external after the long process.

And , on Internet, on a shared serveur Windows 2008, CF9, same conditions,

that long process makes 3/4 of the job, then  the screen never change, nothing happens, no error message.

wait wait, but nothing.

Any help is welcome, to understand this different behaviour from these 2 different environment.

Thanks, Pierre.

Hey -

I recently upgraded our ColdFusion10 to ColdFusion 2016 Upgrade 3. After the initial upgrade, I opened CF Admin as local host in my browser and completed the migration settings as their instructions stated in the coldfusion-2016-lockdown-guide. After that was complete, I logged in and Server Upgrade stated I needed to upgrade to version 4. Followed the instructions, and rebooted the server to be certain the services would start, but 1 of the three services do not start.

- ColdFusion 2016 Application Server service. The error is below:

I typically have the service running as a service account (which has full permissions to my ColdFusion 2016 server on my E:\) I thought that my be my original issue, but when I switched it back to running as the Local System, it still will not start.

Event Viewer isn't much help stating "The ColdFusion 2016 Application Server service could not be started.  Check the server "cfusion" log files for more information." Not really sure what log files I should be opening, and the ones I'm picking do not seem very helpful.

Does anyone have any ideas?

ISDigINF

Hi,

I have access to CF admin, but my co-worker doesn't.  I want to give her an access, but don't know how?

Thanks

Hello,

I attempted to login to the CF 10 administrator and got an error message:  "An error occurred while executing the application. Please try again or contact the administrator."

• Attempted to login with an incorrect password and got an error message: "Invalid User name or Password. Please try again."
• The username and password were not changed.
• I have two instances of CF Admin (Test and production) and both are inaccessible and throw the same error message (An error occurred...).
• The applications are running.
• I restarted the service successfully.
• Update 20 was manually completed in July 2016. I was under the impression all further updates were set to "automatically" update, but I could be wrong. My first thought is that an update automatically occurred on April 25, 2017 (Update 23) which may have caused this problem.

Any Idea why I can't login to the administrator?

Thanks,

Lucy Zoe

An old server we revived to get information from has a corrupted CFIDE directory.

Is there any way to get a "default" or "original" copy of these files?

Is there a place to download the original (or latest updated version of) ColdFusion 7 installer?

Thanks!

Dan