Thread management with JDK21 – what’s changing and features to look forward to

JDK21 introduces a bunch of useful functionalities around thread management such as virtual thread but it also changes things with regards to thread.stop functionality which affects ColdFusion’s implementation for thread’s functionality around termination. First up, let’s understand what’s changing in thread terminate. Why is cfthread.stop handling required? The next release of ColdFusion upgrades Java to JDK21. JDK21 has removed the thread stop method so to certify it we will have to make changes in cfthread terminate and threadterminate which internally […]

UPS API ISSUE

Hello, I am working on integrating UPS REST API and getting error message: {“response”:{“errors”:[{“code”:”110609″,”message”:”All package dimensions are required and each must be greater than 0 for package 1.”}]}} This is my code: <!— Get UPS Access Token Information —> <cfhttp url=”https://wwwcie.ups.com/security/v1/oauth/token” method=”post” result=”ups_authorization”> <cfhttpparam type=”header” name=”Content-Type” value=”application/x-www-form-urlencoded” /> <cfhttpparam type=”header” name=”x-merchant-id” value=”#UPSAccountNumber#” /> <cfhttpparam type=”header” name=”Authorization” value=”Basic #ToBase64(clientID & ‘:’ & secretKey)#” /> <cfhttpparam name=”grant_type” value=”client_credentials” type=”formfield”> </cfhttp> <cfset ups_access_token_json = DeserializeJSON(ToString(ups_authorization.filecontent)) /> <cfset ups_access_token = ups_access_token_json.access_token /> <!— Get […]

Changing the Default Webroot in ColdFusion

The ColdFusion comes with the default Webroot(\<cf_home>\cfusion\wwwroot); however, there are situations where you may need to customize this Webroot directory and point it to a different folder. This blog will walk you through configuring a custom Webroot directory in ColdFusion. Step 1: Take a backup of the existing server.xml file in the (\<cf_home>\cfusion\runtime\conf) directory. This ensures that you can revert to the original configuration if needed. Step 2: Open the server.xml file in a text editor and navigate to the […]

ColdFusion has Jumped the Shark

I’ve been programming in ColdFusion for the past 20+ years or so and its time to move on. The Pricing model is ridiculous the support site is terrible. (It was better 20 years ago when you could click on Support and then click on Documentation) What are minor enhancements are now considered major Revisions forcing you to upgrade often even when you pay for support which I think should include free upgrades. If adobe want to keep ColdFusion around they […]

Using Sub Domains with IIS and ColdFusion 2023

I am struggling to get my websites up and running using sub domains.  For example, customer1.domain.com, customer2.domain.com etc. These sites are working in IIS using html… https://customer1.domain.com/index.html opens c:/sites/customer1/index.html https://customer2.domain.com/index.html opens c:/sites/customer2/index.html However… https://customer1.domain.com/index.cfm opens C:/ColdFusion2023/cfusion/wwwroot/index.cfm https://customer2.domain.com/index.cfm opens C:/ColdFusion2023/cfusion/wwwroot/index.cfm This setup is working perfectly on my Hostek CF2018 server but I am trying to migrate to CF2023 on Azure (Media3) and I am just getting lost down a rabbit hole with this issue. I have run the ‘Web Server Configuration […]

ColdFusion 2018 Lockdown Tool

ColdFusion 2018 Lockdown Tool Issues

Very old ColdFusion version suddenly adding spaces to CFIMAGE URL’s

We have a site using coldfusion that is supposed to display images that are pulled from a shared drive. Recently these images are no longer displayed properly. When clicked on to open the image URL an error is received- The requested URL /images/building/ 7780A.jpg was not found on this server. We realized the url being passed suddenly has a space before the image name example above is space7780a. We have added new photos making sure there is no space in […]

Quick Fix for PDFg Service Authentication error after ColdFusion Migration

You may have encountered a scenario where the PDFg service fails after running the migration wizard in ColdFusion and may have noticed the below error message in the logs. Getting Started: [Thread-12] – Error in setting up authentication for PDFg services. at coldfusion.document.PDFgCryptoUtils.processCipherWork(PDFgCryptoUtils.java:482) at coldfusion.document.PDFgCryptoUtils.decrypt(PDFgCryptoUtils.java:376) at coldfusion.document.PDFgCryptoUtils.decrypt(PDFgCryptoUtils.java:195)   An easy way to fix this is by copying the “seed.properties” and .prikey from the “lib” folder( \ColdFusionxxx\cfusion\lib ) of the old install and replacing them on the new install. Please ensure you […]

How to Change the Default Solr Home Path in ColdFusion

Sometimes, there are instances where you might need to customize the default Solr configuration, such as changing the default Solr home path. This blog will guide you through the process of changing the Solr home path in ColdFusion to a custom location. 1.  Copy the entire “multicore” folder from the default install(\ColdFusion2023\cfusion\jetty\multicore) to the custom folder, say for example C:\collections\multicore. 2. Go to the ColdFusion admin page, find the Solr server settings, and update the path to point to your […]

ColdFusion (2021 release) Update 12

ColdFusion (2021 release) Update 12 breaks our applications

RELEASED- ColdFusion 2023 and 2021 March 12th, 2024 Security Updates

ColdFusion (2023 release) Update 7  and ColdFusion (2021 release) Update 13  (release date, March 12, 2024) addresses vulnerabilities mentioned in the security bulletin [APSB24-14] and fixes other security issues. This update also contains a Tomcat upgrade (v9.0.85). This update also contains a major change related to scope look-up behavior that could impact your applications.   Where do I download the updates from ColdFusion (2023 updates) ColdFusion (2021 updates) In these updates, we’ve fixed a few security bugs mentioned in the […]

Common Security Error in ColdFusion

Ensuring the security of your ColdFusion environment is crucial, and by adhering to simple rules, you can significantly enhance its robustness. Here are some key practices to follow: Use Supported Versions: Always make sure to use a ColdFusion version supported by Adobe. Regularly update both ColdFusion and Java to benefit from the latest security patches and improvements. Utilize cfqueryparam: Protect your applications from SQL injection attacks by consistently using cfqueryparam in your queries. Despite these fundamental security measures, it’s essential […]