Previous Issue Current Issue Main page Next Issue
Fusion Authority Fusion Authority
The House of Fusion Technical Magazine 		Issue: 109

May 8, 2002
May 21, 2002
This is an opt-in magazine. To join, leave or change subscription mode, please visit the signup page. All content of this magazine is copyright Fusion Authority, Inc. It may not be reproduced without permission.
Specials
A Thank You to Our Readers
 
Community
CFUN-02 Hotel Room Discount Expires Soon!
New Function to Parse XML Resource Feed
Fantastic ColdFusion FAQ
More Conversations from Hal and Steve
 
News
Macromedia Exec Talks Web Services
IBM, Sun Court Macromedia
Macromedia Unveils New Dreamweaver, ColdFusion
More Developments in the Macromedia/Adobe Lawsuits
Macromedia Rolls Out JRun 4
 
Tech and Tags
What's New in the Tag Gallery?
What's New at CFLib.org?
 
Reviews
Infoworld: A Striking Balance (A Review of Macromedia's Studio MX)
A Flash-Forward Look
 
Security
Microsoft Supplies 'Critical' Patch for IE
SQLSnake Worm Spreads Like Crazy off of SQL Server Vulnerability
Website Security Hole Found and Patched
Update to Macromedia Flash Player 6 Streaming Issue
 
Knowledge Base
ColdFusion Server (All Versions): Connection Failure Errors With the CFCACHE and CFHTTP Tags
ColdFusion Server 5, ColdFusion Studio 5, and HomeSite 5 (Windows): The Error Number 0x80040707 Occurs During Installation
Installing the IIS Lockdown Tool 2.1 Causes Users To Be Prompted To Download or Save ColdFusion Pages
ColdFusion Server 5 (Linux): After Upgrading ColdFusion Server with an Apache Web Server, Any CFML Request Returns HTML Source Code
ColdFusion Server 5 (And Previous Versions): Client Variable Size Limit of 65,000 Characters
ColdFusion Server versions 4.5 and 5: Sendmail May Reject Mail Generated From the CFMAIL Tag
Removing Basic Authentication When Using Apache or Other NCSA Web Servers
Processing Alternate File Extensions in ColdFusion Server Running on IIS Web Server
ColdFusion Server 5: Error When Updating a Grid Control Using cfgridupdate and the j2re1.4.0 Plug-in
ColdFusion Server (versions 4.5.1 sp2 and 5): Using cfwddx to Deserialize Extended ASCII Characters Causes an XML Parsing Error
Macromedia Spectra 1.0.1: Extending the Spectra Studio Tools for ColdFusion Studio 4.x and Up
JRun 4.0: Using JRun Studio 3.0.1 with JRun 4.0
JRun 4.0: Known Issues
JRun 4.0: Using Full-Text Search in JRun 4 Online Documentation
JRun 4.0: Connecton Pool Logging in JRun 4.0
JRun 4.0: Using SSL in JRun Web Server Connector
JRun 3.x/4.x: Capitalization of Files and Directories and JRun
JRun 4.0: JRun Server Won't Start After Editing XML Property Files With Dreamweaver MX
JRun 4.0: Configuring Individual JVM Settings for each JRun Server
JRun 4.0: Windows Security Patches Required for Windows Login Module
JRun 4.0: IIS Patch Requirements for the ISAPI Connector
JRun 4.0 Scrollable ResultSets with Oracle: The Oracle Thin Driver vs. Data Direct Oracle Type 4 Driver
JRun 4.0: JNDI Name Space Differences between JRun 4.0 and JRun 3.x.
JRun 4.0: Migration Issues When Moving From 3.x to 4.0
JRun 3.1: Hot Fix Build 39664 Available
JRun 3.1: Build 40461 Hot Fix Available
JRun 3.1: Build 41399 Hot Fix Available
JRun 3.1: Build 44850 Hot Fix Available
JRun 3.1: Build 48037 Hot Fix Available
JRun 3.1: Build 48049 Hot Fix Available
 

Specials

A Thank You to Our Readers

Doing Fusion Authority is a labor of love. I spend a lot of time sifting through mailing lists, search engines and sites, in order to bring you what I hope is a wide variety of news, tech articles and reviews, all centered around that language we love: ColdFusion. My job would be much harder without the help of my husband, Michael Dinowitz, and of my eyes and ears out there in the field: our readers.

In particular, I owe thanks this issue to Chris Montgomery, who sent me a list of articles from Infoworld focused on ColdFusion and Macromedia. Thank you, Chris, for your help! And there have been others who have sent me tips in the past, or who have sent information about services they provide. Without them, my efforts would be much harder, and this magazine would not be as rich.

Please feel free to send any news you have of ColdFusion, or the URLs of any articles you come across, to me at editor@fusionauthority.com. If I end up including your article, you'll see your name in the issue! And don't forget to tell your friends to sign up for the alerts -- we can always use more subscribers. : )

Thank you,

Judith Dinowitz
Editor-in-Chief
Fusion Authority

[Top]

Community

CFUN-02 Hotel Room Discount Expires Soon!

If you've registered for CFUN-02 (http://www.cfconf.org/cfun-02/), the Washington DC conference taking place on June 15-16, and you haven't booked your hotel room, you should do so soon. The hotel room discount ($10 off per night, for a cost of $89 a night) expires on May 24th. Call the Doubletree Hotel (301-468-1100) to make your reservation. Be sure to use the block code 'TeraTech' to receive the group rate. You will be required to provide a form of guarantee when calling.

If you haven't registered for CFUN-02, you might want to check out the site and see what you're missing! They just publicized the schedule:

Saturday

7:45am - 8:45 Registration
8:45 - 9:00 Michael Smith "Welcome"
9:00 - 10:00 Adam Churvis "Leveraging the New MX Functions and Components In Your Applications"
10:00 - 11:00 Sandra Clark "Migrating from CF 5 to CF Mx"
11:00 - 11:15 Break - Raffle
11:15 - 12:15 Benjamin Elmore "Unlocking the power of Java in CFMX"

12:15 - 1:15 Lunch - Raffle

1:15 - 1:45 CF Jeopardy Game
1:45 - 2:45 Charlie Arehart "CFMX Hidden Gems"
2:45 - 3:45 Raymond Camden "Security in CFMX"
3:45 - 4:00 Break - Raffle
4:00 - 5:00 Hal Helms "Implementing model view controller with Fusebox"

Sunday

7:45am - 8:45 Registration
8:45 - 9:00 Michael Smith "Welcome Day 2"
9:00 - 10:00 Shlomy Gantz "Project Management for the MX generation"
10:00 - 11:00 Michael Dinowitz "CFSCRIPT tips and tricks"
11:00 - 11:15 Break - Raffle
11:15 - 12:15 Robi Sen "Web Services and CF"

12:15 - 1:15 Lunch - Raffle

1:15 - 2:15 Steve Drucker "Printing, Reporting, and Graphing"
2:15 - 3:15 Kevin Towes "Flash MX and ColdFusion - Advanced Techniques"
3:15 - 3:30 Break - Raffle
3:30 - 4:30 Ben Forta "XML"

CFUN-02 is sponsored by TeraTech, MDCFUG and Fusion Authority.

http://www.cfconf.org/cfun-02/

[Top]

New Function to Parse XML Resource Feed

For those of you who are still considering entering into the Macromedia XML Resource Feed contest, Jeffry Houser has just updated the original function he wrote. It now returns a query instead of a simple structure. He says he should get an MX function up there soon, but probably not before the end of the contest.

http://www.instantcoldfusion.com/resources/articles.cfm

[Top]

Fantastic ColdFusion FAQ

If you've got some basic questions about ColdFusion, check out the fantastic FAQ at http://www.thenetprofits.co.uk/coldfusion/faq/.

It needs an update or two, but it's a great place to start if you're just joining the community.

Thanks to Erika L. Walker-Arnold for passing on this resource.

[Top]

More Conversations from Hal and Steve

Hal Helms and Steve Nelson have come up with some new conversations to intrigue, entertain and educate:

Conversations No. 10: How do we estimate the cost/time of an application?

Conversations No. 11: More on estimating

Conversations No. 12: Nested Layouts: Hal's Credit Card Number

Conversations No. 13: Is Fusebox Doomed?

Converstaions No. 14: Exit Fuseactions (XFAs)

[Top]

News

Macromedia Exec Talks Web Services

An interview with Keven Lynch, Macromedia's Chief Software Architect, who discusses the use and benefit of Web Services, and some specific examples of sites that have put MX to work (the most high profile one being E*Trade).

Macromedia Exec Talks Web Services (Infoworld, April 29, 2002)

[Top]

IBM, Sun Court Macromedia

This article focuses on Macromedia's pact with Sun and IBM, and its strategy for incorporating Web Services into its new MX product line (Studio MX). The article brings some quotes about Macromedia's attempt both to attract new developers who might have been interested in .Net, as well as opening up the world of Java and Web Services to its ColdFusion developer base.

IBM, Sun Court Macromedia (Infoworld, April 29, 2002)

[Top]

Macromedia Unveils New Dreamweaver, ColdFusion

Here's Infoworld's coverage on the announcement of Studio MX's upcoming release (on April 29).

Macromedia Unveils New Dreamweaver, ColdFusion (Infoworld, April 29, 2002)

[Top]

More Developments in the Macromedia/Adobe Lawsuits

Soon after Adobe won a claim against Macromedia for patent infringement (having to do with Macromedia's Flash interface), Macromedia won 4.9 million dollars in a countersuit against Adobe. Macromedia's counterclaims were based on three patents the company said were infringed by Adobe's Illustrator, a Web graphics program, and Premiere, Adobe's video-editing tool.

Macromedia wins $4.9 mln in countersuit vs. Adobe (Yahoo, May 10, 2002)

This is InfoWorld's coverage of the original judgement against Macromedia (see our comments in views and news last issue).

Adobe Wins Patent Trial Against Macromedia (InfoWorld, May 2, 2002)

[Top]

Macromedia Rolls Out JRun 4

Below you'll find three articles covering Macromedia's release of JRun 4, which was rolled out on Monday, May 13.

Macromedia Site:

May 13 -- Macromedia announced the immediate availability of JRun 4, which focuses on providing a fast, reliable J2EE 1.3 compatible platform. JRun 4 brings Java 2 Platform, Enterprise Edition (J2EE platform) compatibility to a new level of affordability by offering a complete solution (including clustering and web services integration) in a single product priced at $899 per processor. Macromedia JRun 4 is available for immediate download from the Macromedia Online Store at www.macromedia.com/go/buyjrun4/.

Macromedia JRun 4 Delivers Fast, Affordable and Reliable J2EE Compatible Platform

InfoWorld:

May 12 -- Macromedia said it is planning to announce an upgrade of JRun, the company's J2EE enterprise application server, on Monday, May 13. This version features a new Java API, Web services support, and enterprise-class clustering. More information on this announcement can be found at the URL below. (Note: The release date here is given as May 17 -- I believe this is an error, as Macromedia's press release says JRun 4 is immediately available.)

Macromedia Spruces Up App Server (InfoWorld, May 12, 2002)

eWeek:

Some more praise and information about JRun 4.

Macromedia Adds Clustering Features to JRun 4 Upgrade (eWeek, May 13, 2002)

[Top]

Tech and Tags

What's New in the Tag Gallery?

Forward
** NOTE: Works in CFMX only. No current option to indicate that in Dev Exchange Submission form *** Provides true server-side redirection from one CF page to another page on the server. The benefit of server-side redirect over CFLOCATION is that: a) as opposed to CFLOCATION, this tag does NOT do a client-side redirection . The transfer of control is all done on the server. It leverages the CFMX capability to call the PageContext.forward() method available in the servlets API. b) any CF variables created on the starting page can be made available on the page to which control is forwarded. They are only made available if they are placed in the REQUEST scope. Called as < cf_forward url="templatename" >
CFPOISON
Sick of spammers sweeping your site for e-mail addresses? CFPOISON can help. Inspired by the WPOISON, CFPOISON is a ColdFusion-based SPAM bot trap. It generates random, useless e-mail addresses to pollute SPAM bots, and makes your site a less attractive target. The tag is free.
runSQL - Manage database content online
Complete one page form that scans available ODBC datasources and allows users to insert, update and delete database content. Works with all ODBC datasources on Windows O/S. Utilizes CFGRID tag. Not encrypted, free use. Simply copy 'runSQL.cfm' to your webserver and open with browser.
2simplifi Online Commerce - SQL 2000
2simplifi Online Commerce is a 100% open source ColdFusion application. By following the installation directions and reading the explicit comment tags in the ColdFusion files, ColdFusion Developers will be able to successfully implement e-Commerce Solutions in as little as 1-2 hours. (not including product development and design alterations). This application has been developed for SQL Server 2000.
CF_USAddressVerification v1.2
Verifies a US address, gets Zip+4 information and formats it for proper delivery by the US Postal Service. It returns the following variables: streetAddress1, streetAddress2, City, State, Zip5 and Zip4. streetAddress1, City and State are required parameters. usps_userid and usps_password are required. According to licensing requirements set by the United States Postal Service, customers that purchase this tag must register with and be authorized by the US Postal Service to use the functionality of their APIs. Please visit http://www.usps.com/ to find out more about becoming an authorized user of their APIs. In the meantime, while you apply and wait for authorization to use this API, you can ignore these parameters. streetAddress2 is optional and its value is usually passed-through back to the calling template, although sometimes it is updated based on USPS records.
myCFAdmin beta
myCFAdmin is a web-based MySQL manager.
Income Center
Income Center is an application that I had designed for my personal use that tracks customers, manages product inventory, and generates invoices, all in an easy-to-use, browser-based interface.
intelli MailBot 3.5
The new and improved intelli MailBot® 3.5 list management tool will help you reach targeted subscribers and maximize your marketing efforts. Includes subscriber and campaign reports, HTML mail capability, one-click subscriber opt-in/out, and more.
InstaCredit Manager
InstaCredit Manager is an Online Credit Decisioning System. A bank or any type of business which either grants credit or makes decisions based on credit histories or scoring can use this system. (Auto and home loans, leasing, auto insurance, apartment management companies, etc.) We have integrated the (3) three major credit reporting agencies (TransUnion, Experian and Equifax)in order to retrieve real time credit files for our system to scrub the customers application. It takes only milliseconds to process a credit application once submitted. The software runs on our servers in an extremely secure environment, in order to remain connected to the credit reporting agencies. We will however entertain the possibilities of loading the software on your server. There will be additional charges for this. The database is SQL2000. We have priced the system to make it affordable for all banks, credit unions and brokers.
CF_USAddressVerification v1.1
Verifies a US address, gets Zip+4 information and formats it for proper delivery by the US Postal Service. It returns the following variables: streetAddress1, streetAddress2, City, State, Zip5 and Zip4. streetAddress1, City and State are required parameters. usps_userid and usps_password are required. According to licensing requirements set by the United States Postal Service, customers that purchase this tag must register with and be authorized by the US Postal Service to use the functionality of their APIs. Please visit http://www.usps.com/ to find out more about becoming an authorized user of their APIs. In the meantime, while you apply and wait for authorization to use this API, you can ignore these parameters. streetAddress2 is optional and its value is usually passed-through back to the calling template, although sometimes it is updated based on USPS records.
CFX_JavaZipper
CFX_JavaZipper is an enterprise class Zip archive solution. It's fast, lightweight (Only 7k!), and extremely useful. CFX_JavaZipper can zip, unzip, view, and update Zip archives. It does gzip and gunzip too! CFX_JavaZipper is 100% Java and supports Windows, Unix, and Linux ColdFusion Servers.
Powered Calendar
Powered Calendar is a stand-alone events calendar system where you can create unlimited calendars, allow members to have their own private calendars, display a global calendar as well a assign Calendar Managers.
CF_DialogBox
FINALLY!!! A SIMPLE way for ColdFusion developers to create and use Windows-type TABBED dialogue menus and boxes!
1WebCalendar V 2.5
1WebCalendar v 2.5 features: Calendar News, Previous and Next Month Views on Main Calendar, Easier Navigation to Add Events, Optional Hidden Layer for Search Categories, and Same Great Features from v 1.0 and 2.0. We can host a calendar system for you, inquire for pricing details. Uses Access database. Only $29.00 when purchased using PayPal!
Ektron eWebEditPro+XML
Ektron eWebEditPro+XML is a browser-based XML word processor-like editor that enables business users to apply XML to Web content. It provides a user layer between the XML tags themselves and user actions. Scripting and commands work together to control what tags the user has access to and where the tags can be used. The business user will not realize they are working with XML tags, but instead think they are working within a set of content parameters, definitions, and/or rules. Integration by a Web developer required.
LiveNow Auction Server 3.0

LiveNow auctions are designed to run in short periods of time much like a live auction. Updates are handled through data-piping so you never have to hit your refresh button, switch screens or leave the auction to refresh the data. This software can be hosted and run on our own hosted server, corporate servers or third party servers using ColdFusion Server 4.5 on Linux, NT or Windows 2000 (recommended).

TASK Manager
Task Manager is developed to assist in managing the activities of employees engaged in different projects for a company. Using Task Manager, you will be able to quickly receive necessary information about all current and completed projects and tasks. TASK allows you to view information in many formats. View by user, project, deadline, status, and a combination of those criteria.

[Top]

What's New at CFLib.org?

(Note: As CFLib is now publishing UDFs for ColdFusion MX, we have noted those UDFs that we are sure are made for ColdFusion MX. If you do not see (CFMX) after the UDF's description, you can assume the UDF was created for ColdFusion 5.)
IsEmail
Tests passed value to see if it is a valid e-mail address (supports subdomain nesting and new top-level domains).
IsSSN
Checks passed value to see if it is a properly formatted U.S. social security number.
IsZip
Tests passed value to see if it is a properly formatted U.S. zip code.
IsZipCA
Tests passed value to see if it is a properly formatted Canadian zip code.
LastDayOfMonth
Returns a date object representing the last day of the given month.
CreatePIN
Flexible PIN generator, supporting alphabetical, numeric, and alphanumeric types, upper, lower, and mixed cases, and validating presence of letters and numbers in alphanumeric PINs at least 2 characters long.
FlashHtmlFormat
Converts a string into "Flash" safe HTML.
HMSFormat
Formats a time difference in hours, minutes and seconds.
HoyToHour
Converts hour of the year to hour of the day.
InitialTrueCourse
Calculates the initial true course between two latitudes and longitudes.
IsISBN
Checks to to see if value is a valid ISBN.
IsScheduledTask
Returns true if the specified task name exists as a scheduled task in the CF Administrator. (CFMX)
LatLonDist
Calculates the distance between two latitudes and longitudes.
LatLonForCourseAndDistance
Calculates the latitude and longitude for a given latitude, longitude, true course and distance in nautical miles.
ListWrap
Wraps a list every n elements.
ParseURLData
An alternative way to retrieve data from a URL.
TurkishDateFormat
Display date in Turkish language and Turkish date format.
UCaseAll
Returns a string with all words capitalized with special non- English characters.
WDDXFileRead
Reads a file containing WDDX and returns the CF variable. (CFMX)
WDDXFileWrite
Write a flat file containing a WDDX packet of any CF variable. (CFMX)

[Top]

Reviews

Infoworld: A Striking Balance (A Review of Macromedia's Studio MX)

This Infoworld article does a balanced job of analyzing Macromedia's new Studio MX, now in preview release. (To avoid confusion: Studio MX here refers to Macromedia's complete suite of new products under the MX line, including Dreamweaver MX, ColdFusion MX and Flash MX, among others.) The reviewer, Tom Yager, discusses Dreamweaver MX, Flash MX and ColdFusion MX in detail, giving all of them very favorable reviews, while acknowledging small ways in which they could perhaps be improved (for instance, that Mr. Yager had hoped that "Dreamweaver would enable drawing of Flash MX interface layouts, but it doesn't." Yager approves highly of Dreanweaver's new interface design (replacing the "traditional Macromedia independent, free-floating tool windows" with dockable panels, and he likes ColdFusion MX's new integrated Apache SOAP engine, allowing CF to be exported as Web Services. One memorable comment on Macromedia's direction with Studio MX: "Macromedia serves developers who, after being handed a set of requirements, skip the diagramming and dive straight into graphics editing, layout, and scripting. Studio MX seeks to strike a better balance between coding and visual design, but it's still an environment for developers who eschew modeling and management in favor of just knocking it out."

Does Studio MX achieve this balance between coding and design? Yager's conclusion is that "it's hard to imagine that any set of tools could be better at creating great-looking cross-platform applications." Way to go, Macromedia!

A Striking Balance (Infoworld, April 29, 2002 -- Review of Macromedia's Studio MX)

[Top]

A Flash-Forward Look

Another analysis of Studio MX, this time concentrating on Macromedia's strategy with Flash and ColdFusion, and more particularly, how the new MX products work together to attract both developers and designers. The point, Jon Udell seems to be saying, is universal compatibility and portability of Web applications.

The article also emphasize a new feature of Studio MX: an architecture called "Flash Remoting." Udell describes this as "a carefully chosen mix of open and proprietary protocols. Through a gateway that's included in ColdFusion MX, and will also be made available separately, Flash clients can use remote components. These include native ColdFusion services, which deliver the highest levels of abstraction (that is, data-bound controls), and also generic Web services. In both cases, the gateway handles basic plumbing such as proxy generation and data marshalling." These new uses of Flash with ColdFusion are just one more tool in the ColdFusion programmer's toolbox.

See the article below for more of Udell's comments on Macromedia's strategy with Flash and ColdFusion MX.

A Flash-Forward Look (Infoworld, May 3, 2002)

[Top]

Security

Microsoft Supplies 'Critical' Patch for IE

May 16 -- Microsoft has issued a patch for six vulnerabilities within IE 5.1, 5.5 and 6.0 browsers. Describing the bugs as "critical," Microsoft urged in an security bulletin that the patch should be downloaded by anyone using IE 5.1, 5.5 or the newest 6.0 versions.

Some of the bugs the patch fixes: a buffer overflow hole that could give an attacker complete control of a user's machine and another vulnerability that would let an attacker view files on an IE user's local drive. The most serious of these vulnerabilities (according to Microsoft) involves the way the IE 6.0 browser handles "content-disposition" and "content-type" header fields within HTML streams. This bug would let an attacker change HTML header information, affecting how IE handles downloads. Some serious holes here -- I would suggest that all of you who are currently using Internet Explorer read the article below and download the patch.

Microsoft Supplies 'Critical' Patch for IE (InternetNews.com, May 16)

Microsoft Security Bulletin on Their New Patch

[Top]

SQLSnake Worm Spreads Like Crazy off of SQL Server Vulnerability

Apparently there's a new worm on the loose that targets SQL servers, specifically searching for servers that have blank administator passwords to exploit. Internet Security Systems Security Alert, May 21, 2002, says that this worm is "responsible for large amounts of Internet traffic as well as millions of TCP/IP probes at the time of this alert's publication. This worm attempts to locate and login to MS/SQL servers with the "sa" account and a blank password. Once a vulnerable computer is found, the worm will infect that target, send its configuration and password information to an external host, and begin scanning for new targets."

What is the worm's impact? The ISS alert warns, "Although the Spida worm is not destructive to the infected host, it may generate a damaging level of network traffic when it scans for additional targets. The scanner bundled with the worm is multi-threaded and is capable of scanning with 100 threads. A large amount of network traffic is created by the worm, which scans both internal and external IP addresses for vulnerable servers."

I know that many of our readers may be running Microsoft SQL servers, and it is very important that you protect your systems and your networks and keep from getting infected by this worm. For more information on how the worm works, and what to look for, I've provided you with several links:

Microsoft SQL Spida Worm Propagation

Product Support Services Informational Alert on SQL Server (Microsoft.com, May 21, 2002)

SQLSnake Code Analysis (Incidents.org, report by George Bakos and Guofei Jiang, Institute for Security Technology Studies, Dartmouth College)

'SQLsnake' Worm Blamed For Spike In Port 1433 Scans

[Top]

Website Security Hole Found and Patched

Deerfield.com (current distributors of Website) has released a service pack for WebSite Pro that will address a possible source code disclosure from active documents, such as ASP or ColdFusion. This security problem is present in all current versions of the product as well as past versions.

Download WebSite 3.1.13.0 (which contains the service pack mentioned above): http://www.deerfield.com/download/website/

Release Notes: http://www.deerfield.com/support/website/releasenotes/

Bob Denny, author of Website, also mentioned this workaround to the problem: "Don't use any active documents with file extensions longer than 3 characters. Remove the mapping for .html-ssi or change it to .ssi and rename all your .html-ssi documents. Fix all the links to same. I know it's ugly, but upgrading would solve the problem."

[Top]

Update to Macromedia Flash Player 6 Streaming Issue

Thank you to Dave Watts of Figleaf Software for informing us that one of the security issues we covered last issue, the Macromedia Flash Player 6 Streaming Issue, is not a new problem, and that the newest version of the Flash player fixes it:

http://chattyfig.figleaf.com/ezmlm/ezmlm-cgi/1/33286

[Top]

Knowledge Base

ColdFusion Server (All Versions): Connection Failure Errors With the CFCACHE and CFHTTP Tags

Using the CFCACHE or CFHTTP tags in a ColdFusion page can cause a connection failure error. You can fix or prevent the error with the tips listed in the Tech Note below.

ColdFusion Server (All Versions): Connection Failure Errors With the CFCACHE and CFHTTP Tags

[Top]

ColdFusion Server 5, ColdFusion Studio 5, and HomeSite 5 (Windows): The Error Number 0x80040707 Occurs During Installation

Sometimes when installing Macromedia ColdFusion Server 5, Studio 5, or HomeSite 5 on a Windows platform, the user will encounter an error and is unable install the product. This technote explains how to resolve this problem.

ColdFusion Server 5, ColdFusion Studio 5, and HomeSite 5 (Windows): The Error Number 0x80040707 Occurs During Installation

[Top]

Installing the IIS Lockdown Tool 2.1 Causes Users To Be Prompted To Download or Save ColdFusion Pages

After installing the IIS Lockdown Tool 2.1, users browsing Coldfusion pages on your website are prompted with the download/save dialog box. This behavior is caused by the IIS Lockdown Tool 2.1 installation procedure, which removes the web server configuration mappings for ColdFusion Server pages.

For a workaround, see the URL below.

Installing the IIS Lockdown Tool 2.1 Causes Users To Be Prompted To Download or Save ColdFusion Pages

[Top]

ColdFusion Server 5 (Linux): After Upgrading ColdFusion Server with an Apache Web Server, Any CFML Request Returns HTML Source Code

After upgrading to ColdFusion Server 5 for Linux, if you request any CFML page, the HTML source code displays. This problem only occurs when you are using Apache Web Server. This technote explains how to resolve the issue.

ColdFusion Server 5 (Linux): After Upgrading ColdFusion Server with an Apache Web Server, Any CFML Request Returns HTML Source Code

[Top]

ColdFusion Server 5 (And Previous Versions): Client Variable Size Limit of 65,000 Characters

Macromedia ColdFusion Server versions 5 and earlier have a hard-coded limit of 65,000 characters per client for client variables. Although customers may create client variables greater than 65,000 characters in size, ColdFusion will only be able to store and retrieve 65,000 characters for client variables on ColdFusion pages. (Please note that there is no such limit in ColdFusion MX.)

ColdFusion Server 5 (And Previous Versions): Client Variable Size Limit of 65,000 Characters

[Top]

ColdFusion Server versions 4.5 and 5: Sendmail May Reject Mail Generated From the CFMAIL Tag

A sendmail MTA (Mail Transfer Agent) that is set up with header checking enabled can reject mail generated with the CFMAIL tag in Macromedia ColdFusion Server versions 4.5 and 5. Here's why and how to get around this.

ColdFusion Server versions 4.5 and 5: Sendmail May Reject Mail Generated From the CFMAIL Tag

[Top]

Removing Basic Authentication When Using Apache or Other NCSA Web Servers

When browsing a Macromedia ColdFusion application, customers receive a basic authentication dialog box for certain ColdFusion pages, even though the pages are not protected by basic authentication. This issue affects configurations that use Apache or other NCSA web servers. For more information, and a workaround, see the article below.

Removing Basic Authentication When Using Apache or Other NCSA Web Servers

[Top]

Processing Alternate File Extensions in ColdFusion Server Running on IIS Web Server

This document describes how to use your ColdFusion Server to process file extensions other than CFM when ColdFusion Server is configured with IIS web server. (For example, you may want to mask the application server you're using for security reasons, or you might want to process a non-ColdFusion file type, such as a streaming media file.)

Processing Alternate File Extensions in ColdFusion Server Running on IIS Web Server

[Top]

ColdFusion Server 5: Error When Updating a Grid Control Using cfgridupdate and the j2re1.4.0 Plug-in

An error occurs with ColdFusion Server 5 when updating a grid control using the CFGRIDUPDATE tag and the j2re1.4.0 plug-in. This error occurs in setups running with ColdFusion Server 5 and j2re1.4.0 on either Redhat 7.2 or Solaris 2.8. This TechNote explains how install the JRE 1.3.0_01plug-in, which resolves the issue.

ColdFusion Server 5: Error When Updating a Grid Control Using cfgridupdate and the j2re1.4.0 Plug-in

[Top]

ColdFusion Server (versions 4.5.1 sp2 and 5): Using cfwddx to Deserialize Extended ASCII Characters Causes an XML Parsing Error

Using the cfwddx tag to deserialize a WDDX packet which contains characters higher than ASCII 127 may result in the error "XML parsing error: not well-formed." This technote explains how to prevent this error and provides some background information on using extended ASCII characters with WDDX and ColdFusion.

ColdFusion Server (versions 4.5.1 sp2 and 5): Using cfwddx to Deserialize Extended ASCII Characters Causes an XML Parsing Error

[Top]

Macromedia Spectra 1.0.1: Extending the Spectra Studio Tools for ColdFusion Studio 4.x and Up

The Macromedia Spectra 1.0.1 studio tools install makes available a limited number of the most common Spectra tags for use with the Tag Insight feature of ColdFusion Studio. This article provides files that allow you to install the Macromedia Spectra toolbar and extend the number of Spectra tags that can be edited and validated within ColdFusion Studio 4.x (and up) installations on Windows.

(Note: This technote presumes that you have already installed the Spectra studio tools and only provides files to extend your current studio tools install. If this is not the case, you'll need to install the Macromedia Spectra studio tools first. This article gives directions on how to accomplish that as well.)

Macromedia Spectra 1.0.1: Extending the Spectra Studio Tools for ColdFusion Studio 4.x and Up

[Top]

JRun 4.0: Using JRun Studio 3.0.1 with JRun 4.0

Starting with JRun 4.0, the RDS (Remote Development Services) web application will no longer be included with the JRun Application Server. This TechNote will explain the remaining ways in which JRun Studio 3.01 and JRun 4.0 may be used together.

JRun 4.0: Using JRun Studio 3.0.1 with JRun 4.0

[Top]

JRun 4.0: Known Issues

This document describes the known issues in JRun 4. It is organized based on the following categories: JRun 4.0: Known Issues

[Top]

JRun 4.0: Using Full-Text Search in JRun 4 Online Documentation

JRun 4 provides online documentation in both HTML and PDF format. Both formats include full-text search functionality; however, the availability of full-text search may be limited, depending on your environment. For more information, see the link below.

JRun 4.0: Using Full-Text Search in JRun 4 Online Documentation

[Top]

JRun 4.0: Connecton Pool Logging in JRun 4.0

Because connecting to a database can introduce some performance overhead, the use of connection pooling is generally recommended for optimizing application performance. This article explains how to monitor the behavior of the connections in the pool by setting specific properties in JRun 4.0.

JRun 4.0: Connecton Pool Logging in JRun 4.0

[Top]

JRun 4.0: Using SSL in JRun Web Server Connector

JRun 4.0 now supports the Secure Sockets Layer (SSL) protocol, providing encrypted communications across the JRun web server connector (between the web server and the JRun container). This feature is particularly useful for customers who wish to configure JRun in the distributed mode, but are concerned about the security of the JRun JCP connection. The article will describe how to enable and use this new product feature.

JRun 4.0: Using SSL in JRun Web Server Connector

[Top]

JRun 3.x/4.x: Capitalization of Files and Directories and JRun

As a Java application, JRun deals with the capitalization of file and directory names in very specific ways, consistent with the rules of the Java programming language. This TechNote explains how capitalization can affect an application running within JRun. It also explains some common ways to work around these behaviors.

JRun 3.x/4.x: Capitalization of Files and Directories and JRun

[Top]

JRun 4.0: JRun Server Won't Start After Editing XML Property Files With Dreamweaver MX

JRun servers fail to start after editing XML-based property files with Dreamweaver MX. This article explains the cause and provides steps to work around the problem.

JRun 4.0: JRun Server Won't Start After Editing XML Property Files With Dreamweaver MX

[Top]

JRun 4.0: Configuring Individual JVM Settings for each JRun Server

While modifying JVM configuration settings through the JRun Management Console (JMC) will update the JVM settings for all JRun servers installed on a particular machine, JVM configuration changes can be made on a per-JRun-server basis. This TechNote describes how to create individual server configuration files for JRun 4.0 servers.

JRun 4.0: Configuring Individual JVM Settings for each JRun Server

[Top]

JRun 4.0: Windows Security Patches Required for Windows Login Module

JRun 4.0 supports Windows Domain Authentication via the Windows Login Module. This module requires the latest Windows security patches to enable domain logons. This TechNote explains how to download the latest Microsoft security patches.

JRun 4.0: Windows Security Patches Required for Windows Login Module

[Top]

JRun 4.0: IIS Patch Requirements for the ISAPI Connector

The JRun 4.0 ISAPI connector requires that the latest Microsoft security service packs be installed for IIS 5.0. This TechNote identifies the IIS patch level requirements for the ISAPI connector and provides a link to the Microsoft website to download the required patch.

JRun 4.0: IIS Patch Requirements for the ISAPI Connector

[Top]

JRun 4.0 Scrollable ResultSets with Oracle: The Oracle Thin Driver vs. Data Direct Oracle Type 4 Driver

The Oracle "Thin" (Type 4) JDBC driver and the Data Direct Oracle driver that ship with JRun 4.0 behave differently with respect to scrollable result sets (an object type included in the JDBC 2.0 specification) and the SQL SELECT statement. This TechNote identifies and explains the differences.

JRun 4.0 Scrollable ResultSets with Oracle: The Oracle Thin Driver vs. Data Direct Oracle Type 4 Driver

[Top]

JRun 4.0: JNDI Name Space Differences between JRun 4.0 and JRun 3.x.

JRun Server architecture modifications have changed the way that JNDI lookups are handled in Macromedia JRun 4.0. JRun 4.0 is a fully complaint J2EE 1.3 application server. This TechNote provides information on what the changes are and how to migrate an application from JRun 3.x to 4.0.

JRun 4.0: JNDI Name Space Differences between JRun 4.0 and JRun 3.x.

[Top]

JRun 4.0: Migration Issues When Moving From 3.x to 4.0

This article provides information on migrating from JRun 3.x to 4.0, as well as additional references to other sources of information that may be useful during the migration process.

JRun 4.0: Migration Issues When Moving From 3.x to 4.0

[Top]

JRun 3.1: Hot Fix Build 39664 Available

The following bugs are specifically addressed in this hot fix build:

Bug #26431 - JRun Web Server does not log in W3C Log File Format.
Bug #31594 - The following messages "An ACCESS VIOLATION occured in JRun Connector extension!" and "An ACCESS VIOLATION occured in JRun Connector filter!" are written into the JRun connector log file.

For the download (and more information), see the link below.

JRun 3.1: Hot Fix Build 39664 Available

[Top]

JRun 3.1: Build 40461 Hot Fix Available

Hot fix build 40461 corrects bug 33850, which caused a memory leak when large numbers of dynamic were used within a single JSP page. This build also features updated Data Direct JDBC driver documentation.

JRun 3.1: Build 40461 Hot Fix Available

[Top]

JRun 3.1: Build 41399 Hot Fix Available

Hot fix build 41399 corrects two product defects that concern improperly parsed application mappings in the connector module, resulting in incorrect URI mappings being passed to the container. This hot fix build corrects this behavior.

JRun 3.1: Build 41399 Hot Fix Available

[Top]

JRun 3.1: Build 44850 Hot Fix Available

Hot fix build 44850 corrects a bug in which a call to the getAuthType() method returned null values when using Integrated Windows Authentication with IIS on Windows platforms. This hot fix will cause JRun to return "Negotiate" and "domain/userid" (where "domain" is the Windows domain and "userid" is the domain user account).

JRun 3.1: Build 44850 Hot Fix Available

[Top]

JRun 3.1: Build 48037 Hot Fix Available

This TechNote provides a link to JRun 3.1 Build 48037, which now includes JRun Connector Wizard support for the iPlanet 6 web server. Using the connector wizard via the JMC or the command line interface will now allow the JRun NSAPI filter to be connected to iPlanet 6 without requiring additional hand editing of the obj.conf and magnus.conf files.

JRun 3.1: Build 48037 Hot Fix Available

[Top]

JRun 3.1: Build 48049 Hot Fix Available

This technote provides a link to JRun 3.1 build 48049, which corrects a cross site scripting vulnerability in Internet Explorer when IE "Show Friendly HTTP Error Messages" is turned off. This build of JRun 3.1 provides a fix for this problem.

JRun 3.1: Build 48049 Hot Fix Available

[Top]

This is an opt-in magazine. To join, leave or change subscription mode, please visit the signup page. All content of this magazine is copyright Fusion Authority, Inc. It may not be reproduced without permission.