Which to use application.cfm or application.cfc?

Hi,
Just a general question, i have been using application.cfm
for my applications so far. I came across a tag that would be used
under application.cfc, but i tried putting both templates together
in one application and boom, an error showed up.
So, which is better to use with most of the applications
application.cfm or .cfc?
Thanks for any help!
Syed

It's actually a bit easier to use session and application
scope variables with Application.cfc, I think.
Application.cfc has methods for specific "events" or states:
onApplicationStart() -- where to load application variables,
security logic, etc.
onSessionStart() -- initialize session varialbes, etc.
onRequestStart() -- runs at the start of each page request
onRequestEnd()
onSessionEnd()
onApplicationEnd()
onError() -- very nice place to get some good
Application-wide error handling code in place
onRequest() -- be sure to read the notes on this
method...it's a bit different.
Check out the MX7 reference page for Application.cfc:
http://livedocs.adobe.com/coldfusion/7/htmldocs/wwhelp/wwhimpl/common/html/wwhelp.htm?cont ext=ColdFusion_Documentation&file=00000692.htm
CF* (if you're using that yet)
http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=Part_3_CFML_Ref_1.html

Similar Messages

Difference between application.cfm and application.cfc

Hi,
Can anybody explain the difference between Application.cfm
and application.cfc?
For example:
I have Application.cfm and Application.cfc in the same
folder.
/folder/application.cfm
/folder/application.cfc
/folder /test.cfm
…. And I run the test.cfm.
Which one is executed first?
Thanks,
Krishna

Your last question - Which one is executed first?
The application.cfc will be executed first if you call the
test.cfm. The application.cfm will not get executed.
and, about ur first question... cfm and cfc are entirely
different. You have onRequestStart, onRequestEnd and other events
on cfc. cfc is powerful than cfm.

How to idtentify web services which are used in the web application?

Hi All,
We need to identify all the web services that a web application is using. We need them so that we can use test them. We are a group of independent testers. We have access to IIS server's on which the application is hosted. Is there any way we can identify
them other than seeking out the DEV team to give out the list?
Thanks in advance.
Regards,
Umesh

Hello,
You have posted your query in the Project / Project Server forum, is this related to Microsoft's Project / Project Server? If not, you are better off posting this in one of the development forums. If you are unsure where to post, try here first:
https://social.technet.microsoft.com/Forums/en-US/home?forum=whatforum
In the mean time, you could look at using something like Fiddler:
http://www.telerik.com/fiddler
Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS

Convert Application.cfm

I am working on a project that uses both Application.cfm and
Application.cfc(CF6.1) and I think it is time to convert
Application.cfm to Application.cfc, however I really don't know
where to start from so please help.
Application.cfm
<cfprocessingdirective pageencoding="ISO-8859-15" />
<meta http-equiv="description" content="Copyright Saragon
1993 - 2000"></meta>
<cfsetting enablecfoutputonly="YES">
<cfsetting showdebugoutput="YES">

<cfcontent type="text/html; charset=ISO-8859-1">
<cfscript>
setEncoding("form","iso-8859-1");
setEncoding("url","iso-8859-1");
</cfscript>
<cfapplication name="ODYSSEYDEV_CUTS"
sessionmanagement="YES"
sessiontimeout="#CreateTimeSpan(0,0,20,0)#"
applicationtimeout="#CreateTimeSpan(2,0,0,0)#"
clientmanagement="NO"
setclientcookies="YES">

<cfif isDefined("Cookie.CFID") and
isDefined("Cookie.CFTOKEN")>
<cfset cfid_local = cookie.cfid>
<cfset cftoken_local = cookie.cftoken>
<cfcookie name="CFID" value="#cfid_local#">
<cfcookie name="CFTOKEN" value="#cftoken_local#">
</cfif>
<cfset request.cv_directory = "cv_eps/src">

<cfinvoke component="#request.cv_directory#.Application"
method="getSettings"
returnVariable="variables.settings">
<cfscript>
s_dbt = variables.settings.dbt;
s_dsn = variables.settings.dsn;
s_dsn2 = variables.settings.dsn2;
s_dsn3 = variables.settings.dsn3;
s_interfacedsn = variables.settings.interfacedsn;
s_readdsn = variables.settings.readdsn;
s_host_token = variables.settings.program_id;
</cfscript>

<cfset dbt = "#s_dbt#">
<cfset dsn = "#s_dsn#">
<cfset dsn2 = "#s_dsn2#">
<cfset dsn3 = "#s_dsn3#">
<cfset interfacedsn = "#s_interfacedsn#">
<cfset request.readdsn = "#s_readdsn#">
<cfset back_ground_color = "##E8EBF0">

<cfset demo=false>
<cfset debug=false> 
<cfset request.debug=false>
<cfset redirectUsers="tr_user">
<cflock scope="SESSION" type="READONLY" timeout="10">
<cfif isDefined("session.userid") AND
(ListFind(redirectUsers,session.userid))>
<cfset dsn = "cmedgar_at_coldman">
<cfset dsn2 = "pmi">
<cfset dsn3 = "pmi">
<cfset dbt = "Oracle80">
</cfif>
</cflock>

<cfif NOT IsDefined("session.demoMode")> 
<cfif IsDefined("session.userid")> 
<cflock scope="SESSION" type="READONLY" timeout="10">
<cfset user_id = session.userid>
</cflock>
<cfif user_id NEQ "">
<cfif NOT isDefined("demoUserList")>


<cfset demoUserList =
"ifenton,samichie,agthorne,consultant,clerk">
<cfif listFind(demoUserList,"#user_id#")>
<cflock scope="SESSION" type="EXCLUSIVE" timeout="10">
<cfset session.demoMode = true>
</cflock>
<cfelse>
<cflock scope="SESSION" type="EXCLUSIVE" timeout="10">
<cfset session.demoMode = false>
</cflock>
</cfif>



<cfset appsDemoUserList =
"ifenton,samichie,agthorne,consultant,clerk">
<cfif listFind(appsDemoUserList,"#user_id#")>
<cflock scope="SESSION" type="EXCLUSIVE" timeout="10">
<cfset session.appsDemo = true>
</cflock>
<cfelse>
<cflock scope="SESSION" type="EXCLUSIVE" timeout="10">
<cfset session.appsDemo = false>
</cflock>
</cfif>

</cfif>
</cfif>
</cfif>
</cfif>
<cflock scope="SESSION" type="READONLY" timeout="10">
<cfif isDefined("session.appsDemo") AND
session.appsDemo>
<cfset del_file=false> 
<cfelse>
<cfset del_file=true> 
</cfif>
</cflock>

<cflock scope="SERVER" timeout="10" type="READONLY">
<cfif server.os.name IS "UNIX">
<cfset app_path="">
<cfset to_directory="/opt/ebiz/saragon/to/">
<cfset from_directory="/opt/ebiz/saragon/from/">
<cfset slash="/"> 
<cfelse>
<cfset slash="\"> 
<cfset app_path="C:\"> 
<cfset to_directory="opt\ebiz\saragon\to\"> 
<cfset from_directory="opt\ebiz\saragon\from\">

</cfif>
</cflock>
Application.cfc
<cfcomponent displayname= "Application Settings" hint =
"Stores all the settings for the application.">
<cfprocessingdirective pageencoding="iso-8859-15" />

<cfscript>
this.settings = StructNew();
this.settings.dbt = "Oracle80";
this.settings.dsn = "tayside10gcluster";
this.settings.dsn2 = "NLG_PMI_at_coldman";
this.settings.dsn3 = "NLG_PMI_at_coldman";
this.settings.readdsn = "read_codes_at_testmx";
this.settings.interfacedsn = "cmedgar_at_coldman";
this.settings.program_id = "CF1";
</cfscript>
<cffunction name="getSettings" access="public"
returntype="struct">
<cfset st_return_value= this.settings>
<cfreturn st_return_value>
</cffunction>
</cfcomponent>

For a start, be aware of two things. First, use
Application.cfc alone, never together with Application.cfm.
Secondly, the code in Application.cfc must be lean. It must contain
just the bare necessities.
Read up on the
purpose
of each function in Application.cfc. I skimmed through your
code and came up with the following.
added edit: added application scope argument in
onSessionEnd()

Application.cfm

Does ColdFusion need application.cfm to store the application parameter?
Is application.cfm is required in the ColdFusion application?
Your information and help is great appreciated,
Regards,
Iccsi,

No. Application.cfm is very badly named: it should be OnRequestStart.cfm. It doesn't - intrinsically - have anything to do with applications in the ColdFusion sense of that notion.
What you do need, however, is a <cfapplication> tag that gets run on every request, to bind the request to an application (and, by proxy, to a session). The best place to put something that needs to be run every request is in Application.cfm.
That said, you ought to be using Application.cfc for this sort of thing, not Application.cfm. Application.cfm is - for all intents and purposes - obsolete. It still works, but it is grossly inferior to Application.cfc. And there is no reason to be using it in favour of going with the recommended Application.cfc route.
Adam

Application.cfm in root and subdirectory, help.

I cannot figure this out. I understand that an application
will use the application.cfm file in it's current directory first
and not search further. However, my page in a subdirectory seems to
not see the application.cfm in it's own directory and instead uses
the root application.cfm. Can anyone explain? And I have tried
capitalizing the "A", etc. but I am not using Linux so I do not
think it matters anyway. (CF MX)

Hard to tell exactly, but in the subdirectory, is the ONLY
line the <cfset application.dsn_test = "DiningHall">?
If so, the subdirectory application.cfm would execute and the
parent would not, which would cause the undefined error since from
what I can tell, you haven't used the <cfapplication> tag in
the subdirectory.
What you can do is use a cfinclude in the subdirectory
application.cfm.
<cfinclude template="../application.cfm">
<cfset application.dsn_test = "DiningHall">
However.... That's a big no no if you're using this to
actually change application scope parameters, since someone
visiting the subdirectory would reset the DSN for someone that
might still be navigating around in the parent directory.
So what good is using the cfinclude method? Well, you can
lock subdirectories to roles this way.
<cfinclude template="../application.cfm">
<cfif getAuthUser() eq "" or not IsUserInRole("Admin")>
Access Denied!
<cfabort>
<cfif>
Consider changing the DSN setting to use the request.scope to
isolate the change to the user.
<cfset Request.appDSN = "DININGHALL">

Application.cfm and CFC's

for some reason my cfc is not seeing any of the variables set
in application.cfm. Furthermore it does not see them when I use
application.cfc. I am running 6.1MX on iis5. Any info would be
helpful.
Thanks

Duke Snyder wrote:
> for some reason my cfc is not seeing any of the
variables set in
> application.cfm. Furthermore it does not see them when I
use application.cfc. I
> am running 6.1MX on iis5. Any info would be helpful.
>
> Thanks
>
In deference to Adam, I'm going to go ahead an make a guess.
Directory structure is very important here. Application.cfm
will only
apply to code that is run in the same directory or any sub
directory
there under. This applies to CFC's as well. A common idea is
to place
a CFC in some type of common folder that is outside the
normal
application structure, thus the CFC is not in the directory
structure
under which the Application.cfm file has dominion. So it will
not apply
in such a case.
If this is so, the fix is to either move the CFC so that it
is under the
Application.cfm dominion. Or to provide it it's own
<cfapplication...>
tag with the desired application name to be able to access
the desired
application scope. This can be done directly in the CFC file
or an
Application.cfm file in the CFC folder hierarchy.
Of course doing so really complicates the usefulness of
having CFCs in a
common place where they can be used by multiple applications
equally.
Thus providing a strong argument to the OOP concept of
encapsulation.
That an object (component) should not be aware of anything
outside of
itself and everything it needs to do its job should be passed
into it.
I.E. Pass the required application data into the component as
arguments
and make use of it that way.

Application.cfm - Should I use queries or set session variables?

Hi,
I have an application that has many users for many different
companies logged in at the same time using the system. I use the
application.cfm to call and set a bunch of variables that make the
system work, such as preferences and things. Would it be better to
use 5 or 6 queries all pulling one record, or call the queries only
once at the start of the session and set 30 to 50 session variables
based on the query results? Which method would bog the system down
less? It seems that session variables use quite a bit of memory.
I'm just trying to get the "simple answer" for this, if that's even
possible.
Please let me know your thoughts and experience on this.
Thanks much,
Jeff W!

In order to give you a simple "do it this way" answer, more
information is needed.
How long does it take to run those 5-6 queries on each
request? How many users are logged in at peak times? How much data
would you be storing in the session for each user? How much RAM do
you have on your server?
On one application, we've decided to go the session variable
route. The size for each users' session maxes out at 2.5 KB. We
have 512 MB dedicated to CF, but can easily scale up on the
hardware we have to 1.5 GB or more. At 512 MB, 2.5 KB per user
session, we can handle a little over 200,000 concurrent users
(assuming all CF memory could be utilized for session variables,
which isn't true). There are only 6,000 users total in our system,
so we have quite a bit of headroom.
Are you on CF8? If so, open up the server monitor, start
monitoring, profiling, and memory tracking, and log in with a
couple users (with your code setup to store all that info in the
session). See how much storage each session takes. Then look at
your server. How much RAM do you have? what do you currently have
allocated to ColdFusion? What's your peak concurrent user level? Do
you have headroom? Also, see if the benefits of storing it in the
session are even worth it (how long do those 5-6 queries add to
each requst?)

How to upload a file which may contain text as well as image to the server using windows phone 8 application ?

How to upload a file which may contain text as well as image to the server using windows phone 8 application ?

You're going to need to give way more detail about the situation before we can help.

I have created a merged letter (mail merge) using Word for Mac. But I cannot merge the letter to my contacts which are in the Apple Mail Application. Is it possible to do this?

I have created a merged letter (mail merge) using Word for Mac. But I cannot merge the letter to my contacts which are in the Apple Mail Application. Is it possible to do this?
Word for Mac 8
i mac intel

This is the Apple Keynote discussion, you should post in the Microsoft forums where the experts there can help you, there is a dedicated mailmarge discussion here: Microsoft Office Word Mailmerge

Use of % for height with application.cfm

How comes the height in % in both tags doesn't works when an application.cfm exists. When I remove the application.cfm everything works fine.
<iframe src="messages.cfm" width="95%" height="74%"></iframe>
<cfform format="flash" skin="halosilver" wmode="transparent" style="backgroundAlpha:0;" height="48.3%"></cfform>

Any Application.cfm (note the capital letter, btw), or your specific Application.cfm? What about an Application.cfm file which simply has a CF comment in it, and nothing else?
Adam

1) (Right click) Context menu is IE's context menu(!) and when I attempt to use a sight that uses scripts (a site that I've used extensively and which I use to conduct my online college courses - application is Angel), it goes blank

1) (Right click) Context menu is IE's context menu(!) and (2)when I attempt to use a sight that uses scripts (a site that I've used extensively and which I use to conduct my online college courses - application is Angel), it goes blank
== This happened ==
Every time Firefox opened
== 2 days ago ==
== User Agent ==
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; WWTClient2; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; Creative AutoUpdate v1.10.10)

Previous post from "Not Anonymous" but from the original poster; I used the link provided in the email notification and now have to indicate who I am???
Thanks; starting FireFox in safe mode and disabling all add-ons did solve the problem; however, a new problem has emerged. To re-enable the add-ons, you need to open up and use the add-ons control panel through FireFox. Any attempt to do so causes the FireFox add-on control page to close immediately.
Thanks for your help.

Trying to understand an application.cfm attack

I have a site that I've been running without issue, for years now - I sniff and block for cross site scripting, sql injection, executable file uploads, and employ honeypot fields on forms...
This past week I wanted to watch some slow page loads for performance, noting their time to execute. I chose to use an application.cfm and an onrequestend.cfm to set a timestamp and to place it on the end of my pages. Prior to this, I have not utilzed an application.cfm. I'm pragmattic and look upon the application.cfm as a catch-all to do things that I should be planning better for in my application.
I soon found myself the recipient of a cross site scripting attack. I realised easily that I opened myself wide to this because the application.cfm runs _before_ everything, including my sniffer code. Derrrr!
I deleted the application.cfm and onrequestend.cfm and cleanded up my files having caught it same day and experiencing little damage. The attack was only inserting javascript into my index pages via the application.cfm . Rather ingenious and it was fun to find and consider. Payday loan spam.
I've been google'ing and reading on uploading vulnerabilities, but I can only find one instance where someone described their application.cfm file having been modified in similar fashion, the vector being a vulnerability in fckeditor - which I do not use. Nor do I use any other third party editor plugin.
An article I found mentions vulnerable files in legacy CFDOCS folder that allow access and uploads. I have a fresh install of CF9 so this did not exist. There was a cfx folder tree with some "example" code folders. I've zipped and deleted these.
I have changed ftp to use a non-standard port. Something that I used to do, but failed to re-instate when I moved to a different host. I have a ticket submitted to get help in blocking CFIDE path requests to the outside world (so that it will only be accessable locally via RDP).
If someone/something could modify the application.cfm file, why look for just it, unless it was just a lazy scripted attack looking for application.cfm files specifically. And while I did not have one before, why did someone not just upload their own?
How and why was my application.cfm changed, and why not the index.cfm files directly if they had some other avenue of access?
My question is this - can the application.cfm be tricked into modifying itself?
Thanks in advance!

Sorry about that - a misunderstanding. When you said you "deleted the application.cfm and onrequestend.cfm and cleanded up my files...", I took that to mean you only deleted the code. I assumed the files to still be on the file system. For, to run a ColdFusion application of any substance, you do need an Application file.
aotgnat wrote:
The attack was only inserting javascript into my index pages via the application.cfm .
Not necessarily via the application file. What the attacker may very likely have exploited is a ColdFusion Cross Site Scripting (XSS) vulnerability. This link shows you that a cfform, user-agent HTTP header, etc. may be used in an XSS attack. (See the XSS vulnerabilities relevant to CF9, which include CVE-2009-3467, CVE-2010-1293, CVE-2011-0583, CVE-2011-0733, CVE-2011-0734, CVE-2011-0735, CVE-2011-2463, CVE-2011-4368).

Symbolic Links do not work for Application.cfm in CF10

I have a Web, that use a symbolic link for centralized code.
The Application.cfm, stored in the original web-root, will not read from code
in the linked directory.
Thank you for your assistance.

Adam,
it seems to be a bug.
The "Application.cfc/Application.cfm lookup order" in the ColdFusion Administrator seems not functional as expected. I did several tests and it happens not only at symbolic links. This happens on every subdirectory.
Am I wrong, when I expect, that the "highest" Application.cfm found in a tree should be executed?
Example:
Application.cfm
aaa.cfm
"subdir1"                                 "subdir2"
bbb.cfm                                   Application.cfm
                                                ccc.cfm
Settings in the ColdFusion Administrator
Default order:
- aaa.cfm: should execute the Application.cfm in root (/) only.
- bbb.cfm: should execute the Application.cfm in root (/) only.
- ccc.cfm: should execute the Application.cfm in subdir2 only.
Until Webroot
- aaa.cfm: should execute the Application.cfm in root (/) only.
- bbb.cfm: should execute the Application.cfm in root (/) only.
- ccc.cfm: should execute first the Application.cfm root (/) and then in subdir2
In Webroot
- aaa.cfm: should execute the Application.cfm in root (/) only.
- bbb.cfm: should execute the Application.cfm in root (/) only.
- ccc.cfm: should execute the Application.cfm in root (/) only.
Am I wrong with this?
In my case, only "In Webroot" work as expected.
Torsten

Turning off application.cfm

Hello,
not sure about this but is there a tag or method whereby I
can overwrite the CF servers automatic inclusion of an
application.cfm (.cfc). I have one page in a sub-subfolder of a
website where the application.cfm is in the top (parent) folder. I
am having problems including this page in a programme and am
looking at any possible causes for this.
One thought was that some methods in my application.cfm may
be causing the error. Without removing or altering the
application.cfm in anyway... is it possible to just deactivate it
on certain pages?
Thanks

> not sure about this but is there a tag or method whereby
I can overwrite the
> CF servers automatic inclusion of an application.cfm
(.cfc).
No. There is not.
> I have one page in
> a sub-subfolder of a website where the application.cfm
is in the top (parent)
> folder.
To bypass this grandparent Application.cfm, you simply have
to a "nearer"
Application.cfm which is empty. But...
> I am having problems including this page
... Only the initial template referenced in a request
triggers the process
that seeks an Application.cfm. If you're simply including the
file,
Application.cfm plays no part in it (beyond what I already
said).
> One thought was that some methods in my application.cfm
There's no such thing as "methods" in an Application.cfm. Do
you mean
UDFs? Without you actually posting your error, it's a bit
hard to guess
WTF you're on about, to be honest.
> is it
> possible to just deactivate it on certain pages?
No.
Adam

Which to use application.cfm or application.cfc?

Similar Messages

Maybe you are looking for