I often help people who are reporting that CF is "running hot on the CPU", maybe reaching 80 or even 100% of the CPU, whether in spikes or for extended periods.
While helping people with various problems in my CF server troubleshooting services, I often have the chance to help people identify security vulnerabilities, especially in their configuration of CF and/or their web server, and sometimes related to their code.
I realize that title may seem anachronistic.
Some of you may have seen that Adobe released a new hotfix for ColdFusion 10 last night, called Update 13.
Several weeks ago, I did an entry, CF911: Why/when you MUST update the web server connector for #ColdFusion 10, and may have missed it.
Have you installed or updated CF10 (or 11) and found that you still have problems with it running right, even when you have "fully updated" CF10? In this blog entry, I explain how it may NOT be that "CF 10 is broken" but rather that you may have missed an important step when updating it.
By now most should know that a new CF10 version of the classic Web Application Construction Kit (or WACK) series was released some months ago: Adobe ColdFusion Web Application Construction Kit: ColdFusion 10 Enhancements and Improvements But some may not have known who the contributors were, becau...
Just wanted to note that I'll be speaking tonight at the Atlanta CFUG on two important topics: Updating/Hotfixing #ColdFusion 10, 9 and 8: Tips and Traps Locking down the #ColdFusion Administrator: Your First Line of Defense Against Hackers For more details on the talks, or to get the slides onc...
If you may have looked at the release notes for the latest (as of this writing) JVM update (Java 1.7 update 21), you may have noticed that it refers to an "expiration date" for this version of the JVM. What's that about, you may wonder? [More]
Here's a new document from Adobe (new as of last week, it seems) that you may have missed, but which I would argue is REQUIRED READING for all CF admins and developers: Important hotfix-related notes for ColdFusion 9 and ColdFusion 10 What is this about? and why is it important? Read on below, as ...
Adobe has come out with a new security hotfix for a very serious attack on ColdFusion servers which had hit many (perhaps most) CF shops over the past couple of weeks, and it's vital that all shops apply that fix.
Since I posted my entry earlier today about a Serious security threat for #ColdFusion servers [not now covered by a hotfix], I have had many questions and discussions which lead me to share more info.
Hey folks, there's a fairly serious security threat out in the wild, and you may want to check if your server's been hit.
If you may still be using Dreamweaver or HomeSite+ (or its older brother, HomeSite, or its older uncle, ColdFusion Studio), you may find that the tag insight, tag help, tag completion, and other features are not recognizing newer ColdFusion tags and functions, if perhaps you have updated to later ve...
I often see people struggling with confusion over what hotfixes have been applied to CF.
I just blogged about how the hidden gem "enable monitoring server" option in CF 9.
Have you been led to believe that the "Enable Monitoring Server" option (new in the CF 9.
As a follow-on to my last entry, Setting up CFBuilder to process htm files with the ColdFusion editor, I wanted to offer more info for those who may want to know more about this--or ensure that more is shared with any who would consider doing this.
Today the publisher of John Farrar's new book, ColdFusion 9 Developer Tutorial offered to send me a review copy.
Here's good news for folks seeking more documentation on how to configure, use, and troubleshoot the ColdFusion Builder debugger.
