CF Admin Login Security:Form Autocomplete Password?
Security vulnerablity exists within CF administrator log in page (/CFIDE/administrator/login.cfm) HTML form. Does anyone know how to apply a solution or work-around? Web site security scanning...
View ArticleRe: CF10 Server Oddities - Flakiness
There have been 12 relevant hotfix updates (the 13th update applies only if you are running Mac OSX Mavericks) released for CF10, plus a mandatory update to fix security certificate issues with the...
View ArticleRe: CF Admin Login Security:Form Autocomplete Password?
I think bugs related to security are automatically "hidden" for security reasons. Other (non-security) bugs result in notification emails whenever their status changes or comments are added. You may...
View ArticleRe: Coldfusion session timing out too soon?
SESSION scope is different from the CLIENT scope. Is your site using subdomains? If so, you'll need to set the setDomainCookies attribute to true (again, in CFC we use this.setDomainCookies, but if...
View ArticleRe: I can't access ColdFusion 10 Admin
Thanks. Turing on "IE Enhanced Security Configuration" was aslo preventing me from logging into the adminstrator and giving me the Incorrect Password message. Simply turning it off temporarily whenever...
View ArticleUsing Web Service with CFLDAP?
Has anyone ever been able to use the CFLDAP tag to connect to a secure LDAP Service without putting the username and password in clear text in the source code? For example:<cfldap action =...
View ArticleIs using current date and dateAdd the best way to show 30 days worth of...
I want to display files from the day a viewer logs in, through the next 30 days. I tried the code below but it does not work. What am I doing wrong? <cfoutput><cfset...
View ArticleRe: Is using current date and dateAdd the best way to show 30 days worth of...
Hi Rick, Depending on what database platform you're using you could do something similar to the following (My example is using T-SQL for SQL Server 2012) SELECT [m].[display_date], [m].[title]FROM...
View ArticleRe: CF Admin Login Security:Form Autocomplete Password?
Viewing page source (View|Source - IE) shows <input> password field uses attribute "autocomplete=false". "false" does work for me to disable automatic fill in. However security scan must be...
View ArticleRe: CF Admin Login Security:Form Autocomplete Password?
Like I said, the security-related bugs are handled differently from all non-security-related ones. They get hidden from the public bug tracker (for security reasons). Since the public bug tracker is...
View ArticleRe: Is using current date and dateAdd the best way to show 30 days worth of...
Rick, Just to clarify what ColdFusionChris is doing there: the DATEADD and GETDATE functions are SQL Server T-SQL functions. They are executed as part of the query on the database server (which is...
View ArticleRe: Is using current date and dateAdd the best way to show 30 days worth of...
Alternatively, use CFQueryParam and get rid of the DateFormat() calls: <cfquery name="getdevotional" datasource="#application.database#">SELECT display_date, titleFROM mobilewhere display_date...
View ArticleRe: CF Admin Login Security:Form Autocomplete Password?
I called Adobe customer support, Support found the bug number, discussed the concern, and issue is progressing. Thanks Carl
View ArticleRe: CF Admin Login Security:Form Autocomplete Password?
Here is the Bug# 3690477. We are looking into. Regards,Anit Kumar
View ArticleAny fixes to the buggy PDF conversion in Coldfusion 9?
Using CFDOCUMENT to convert html to PDF, but the resulting PDF pages are buggy. For instance table cell backgrounds bleed outside the table cell borders, and lots of other rendering issues that make it...
View ArticleClik here to view.
Re: When will Coldfusion 10 be updated with a newer version of Tomcat, to...
Sorry Steve It's surprising that this hasn't gotten more attention.I need to take an hour or two in the next couple days and try to call them.Hard to find a phone number for support these days.
View ArticleI cannot open any PDF file - Please help!
It says: 'There was an error opening this document. Acrobat cannot open this file because a task is still active in Acrobat. Please return to Acrobat and end the task before opening this file. ' I...
View ArticlePages with tabs are not working in CF 9.0.2 (cflayout=tabs error)
Hi, I recently did an upgrade from a perfectly working 9.0.0 installation of enterprise edition ColdFusion, to version 9.0.2 with CHF1. And with this, some cfm pages that used to work earlier in 9.0.0...
View ArticleRe: Coldfusion session timing out too soon?
I've had a look using firebug and the CFID expiration seems to be coming from the 'Cookie Timeout' option under Session Cookie Settings. So does that mean after 45 minutes the cookie will expire and I...
View ArticleRe: Is using current date and dateAdd the best way to show 30 days worth of...
Hi Carl, I appreciate you taking time to answer my question. I tried using the above code, but it is still showing 2013 even though I set mydatetime as the current time. Any idea?
View Article