ColdFusion 9.0.1 CHF1

Cumulative Hotfix 1 (CHF1) for ColdFusion 9.0.1 is released. 

Look for details at technote 

ColdFusion Security Hotfix

Security Hotfix available for ColdFusion 8, 8.0.1, 9, 9.0.1. released.

Duplicate flex session error in Server Manager and MultiServer Monitor while registering instances running on same machine

In Server Manager AIR application or MultiServer Monitor, when you register two or more ColdFusion server instances running on the same machine with same hostname, you might experience issues while fetching the settings from the server resulting in DuplicateSessionException on the server.

The Workaround is to register different aliases to the same IP in the hosts file

and associating each alias with one CF server instance when there are multiple instances running.
Eg: In the machine where Server Manager AIR application (or the MultiServer Monitor) is running, add the multiple hostnames to the servers
Say on the machine  10.101.25.22 ,  3 ColdFusion instances are running and on the machine where Server Manager AIR application (say 10.28.272.28) add as follows in the hosts file
        10.101.25.22        prod-1
        10.101.25.22        prod-2
        10.101.25.22        prod-3
And while registering the CF server instances use prod-1 for one instance, prod-2 for second  instance & prod-3 for 3rd instance as host names.
This resolves the issue.

New Article on ColdFusion 9.0.1 ActionScript ORM Library

Jayesh Viradiya is one of the ColdFusion engineers.  In his article he is explaining  ORM capability for SQLite in AIR. 


Here is his new article on the Adobe Developer Center about it. 

New Article on Building ColdFusion applications using Java

Vinu Kumar is one of the ColdFusion engineers. He has written a demo application explaining how to deploy ColdFusion in JBoss and about developing ColdFusion applications with Java. His sample application, a travel website, demonstrates how to rewrite your JSP to CFML pages and access Java code from your CFML pages. It also shows you how to write portlets for the JBoss portal and embed the sample application in the portal.  


He's got a new article on the Adobe Developer Center about it. Check it out.

ColdFusion Session cookies & HttpOnly

With ColdFusion 901  release now ColdFusion Session Cookies can be marked HttpOnly.  This reduces the chance of session information being compromised on Cross Site Scripting (XSS) attack.
To mark these session Cookies (CFID, CFTOKEN, jsessionid HttpOnly), add the following jvm property -

coldfusion.sessioncookie.httponly=true

Currently there is a limitation on JBoss/Tomcat for marking jsessionid cookie as httponly.

Any other ColdFusion cookies can be marked as HttpOnly by using "httponly" attriibute of cfcookie tag.

Sameeksha

Sameeksha means, "Abstract". It also means, "Analysis"