coldfusion-9

Can I get the source of a hacked Coldfusion template?

由 独自空忆成欢 提交于 2019-11-28 07:35:58
问题 We recently had a hacker gain access to our system. They dumped some Coldfusion templates and included them in random pages on our sites. The files they dump start with Allaire Cold Fusion Template and then contain what appears to be "garbage", but I believe that this is some kind of pre-compiled Coldfusion code. We've cleared out the hacks, but I saved off the files because I was hoping that there would be some way to de-compile them and maybe make some sense of them. Although I think the

Spreadsheet Cell Formatting

由 主宰稳场 提交于 2019-11-28 05:43:03
问题 Edit at the end Can anyone see what I am doing wrong? These are my expectations and observations: I expect a worksheet named Search Parameters to have cell a1 in bold red font. I get what I expect. I expect a worksheet named "4D,CCCU,SDAU" which has data starting in row 3. I get this. I expect row 3 to have the text "bold font 3 green true", and to be in bold green font. I get the text, but I get bold red font, which matches cell a1 in the other sheet. In fact, the formatting in this cell

Getting ColdFusion-Called Web Service to Work with JavaLoader-Loaded Objects

由 纵饮孤独 提交于 2019-11-28 02:03:20
Is it possible to use JavaLoader to get objects returned by CF-called web services, and JavaLoader-loaded objects to be the same classpath context? I mean, without a lot of difficulty? // get a web service ws = createObject("webservice", local.lms.wsurl); // user created by coldfusion user = ws.GenerateUserObject(); /* user status created by java loader. ** this api provider requires that you move the stubs ** (generated when hitting the wsdl from CF for the first time) ** to the classpath. ** this is one of the stubs/classes that gets called from that. */ UserStatus = javaLoader.create("com

How can <cfqueryparam> affect performance for constants and null values?

由 喜欢而已 提交于 2019-11-28 01:27:41
Consider the following: <cfquery name="aQuery" datasource="#aSource#"> SELECT aColumn FROM aTable WHERE bColumn = <cfqueryparam value="#aVariable#" cfsqltype="#aSqlType#" /> AND cColumn = 'someConstant' AND dColumn is null </cfquery> If I change AND cColumn = 'someConstant' to AND cColumn = <cfqueryparam value="someConstant" cfsqltype="#aSqlType#" /> Is there a potential performance improvement? Is there potential to hurt performance? What if I do the same (use cfqueryparam) with AND dColumn is null ? My findings have been inconclusive. If it's important, assume ColdFusion9 and Oracle db 11g.

ColdFusion 9 Dynamic Method Call

由 空扰寡人 提交于 2019-11-28 01:12:39
问题 I am trying to work out the correct <cfscript> syntax for calling a dynamic method within ColdFusion 9. I have tried a number of variations and had a good search around. <cfinvoke> is clearly the tag I want, sadly however I cannot use this within my pure cfscript component as it was implemented in ColdFusion 10. i.e coldfusion 9 dynamically call method I have tried the following within my CFC: /** Validate the method name **/ var resources = getResources(); if (structKeyExists(variables

Why isvalid(“integer”,“1,5”) = YES?

由 浪尽此生 提交于 2019-11-27 23:36:14
问题 Why does #isValid("integer","1,5")# output YES? I expected it to output NO like #isValid("integer","1.5")# does. I'm going to validate with <CFIF isvalid("integer","1,5") AND isnumeric("1,5")> ... 回答1: Adobe is aware of this, but... State: Closed Status: Withdrawn Reason: AsDesigned https://bugbase.adobe.com/index.cfm?event=bug&id=3169196 TBH I'm a little embarrassed to be using a language that can't even validate integer correctly. UPDATE: Guess what, it'll be addressed in CF12 ! There is no

Java SimpleCrypto Class for encryption / decryption producing different results in Coldfusion 9 and Java (Android)

由 你说的曾经没有我的故事 提交于 2019-11-27 14:55:06
I am trying to use the widely used SimpleCrypto java class to encrypt a string in Java (Android) and decrypt the string in ColdFusion 9 (and vice versa). I have imported the exact same SimpleCrypto class into ColdFusion and called it like this: <cfset myKey = "apple"> <cfscript> sc = createObject("java", "SimpleCrypto").init(); encrypted = sc.encrypt(myKey, "john"); </cfscript> <cfdump var="#encrypted#"> When encrypting the string "john" with a key of "apple" it outputs this in CF: 9E90A36325AE4F4F7352D6469A7068A2 When I use the EXACT SAME class in Android: String key = "apple"; try {

Things to watch out for in ColdFusion 9 with CF-ORM

由 房东的猫 提交于 2019-11-27 09:52:18
问题 What are some of the things you've observed in ColdFusion 9 with CF-ORM (Hibernate) that one should watch out for? 回答1: entity init() method must not have required argument(s), otherwise EntityNew() and other CF-ORM actions will break. You may want to use a Factory to create the entity, and enforce the required arguments there. A bug regarding this limitation has been filed in the Adobe Bugbase. ORMReload() with ormsettings.dbcreate = "drop create" might not drop all tables for you. CF9

Passing more then 100 arguments to ColdFusion function throws an error

由 狂风中的少年 提交于 2019-11-27 06:48:04
问题 There is a ColdFusion function where we have to pass more then 100 arguments to get a search result. When passing these 100 odd parameters into the function, ColdFusion throws the error: " 404 not found " I tried to increase post size Limit in CF server settings from 100 to 300 but am still getting the error. 回答1: Increasing the "post size limit" only changes how many megabytes can be received, not the quantity. For that, you need to increase the "post parameters limit" in neo-runtime.xml ,

IIS7 Displays BOTH Its Own 404 Message & CF9 Message; Should Display Just Its Own

由 荒凉一梦 提交于 2019-11-27 06:38:28
问题 My goal seems simple. I want IIS 7.5 to handle ALL 404 File Not Found requests, whether to static or dynamic (ColdFusion 9) content, and direct users to its custom 404 HTML page. I believe that the IIS settings I need are existingReponse=Replace , errorMode=Custom , and a file path specified for the 404. That's what I've done. With a ColdFusion 10 install, it works. With ColdFusion 9, for some reason both the static IIS 404 response AND the ColdFusion 404 response are sent to the client and
订阅 coldfusion-9