Adobe Coldfusion Server

To see a list of SQL Server versions that ColdFusion supports, go to www.adobe.com/go/learn_cfu_cfsysreqs_en. Use the settings in the following table to connect ColdFusion to SQL Server:

  1. Adobe Coldfusion Application Server
  2. Adobe Coldfusion Server Download

That’s what ColdFusion Server Auto-Lockdown does: it stops hackers dead in their tracks even after they have gained access. Once a hack is detected, a lockdown can be implemented to keep the remaining, unhacked parts of your server safe. And it works at the flick of a virtual switch. In this article, you will learn.

Setting

Description

CF Data Source Name

The data source name (DSN) that ColdFusion uses to connect to the data source.

Database

The database to which this data source connects.

Server

The name of the server that hosts the database that you want to use. If the database is local, enclose the word local in parentheses. If you are running SQL Server locally (or using MSDE), specify 127.0.0.1 for the

server name instead of the actual instance name.

Port

The number of the TCP/IP port that the server monitors for connections.

User name

The user name that ColdFusion passes to the JDBC driver to connect to the data source if a ColdFusion application does not supply a user name (for example, in a cfquery tag).

Password

The password that ColdFusion passes to the JDBC driver to connect to the data source if a ColdFusion application does not supply a password (for example, in a cfquery tag).

Description

(Optional) A description for this connection.

Connection String

A field that passes database-specific parameters, such as login credentials, to the data source.

Select Method

Determines whether server cursors are used for SQL queries.

  • The Direct method provides more efficient retrieval of data when you retrieve recordsets in a forward-only direction and you limit your SQL Server connection to a single open SQL statement at a time. This is typical for ColdFusion applications.

  • The Cursor method lets you have multiple open SQL statements on a connection. This is not typical for ColdFusion applications, unless you use pooled statements.

Limit Connections

Specifies whether ColdFusion limits the number of database connections for the data source. If you enable this option, use the Restrict Connections To field to specify the maximum.

Restrict Connections To

Specifies the maximum number of database connections for the data source. To use this restriction, enable the Limit Connections option.

Maintain Connections

ColdFusion establishes a connection to a data source for every operation that requires one. Enable this option to improve performance by caching the data source connection.

String Format

Enable this option if your application uses Unicode data in DBMS-specific Unicode data types, such as National Character or nchar.

Max Pooled Statements

Enables reuse of prepared statements (that is, stored procedures and queries that use the cfqueryparam tag). Although you tune this setting based on your application, start by setting it to the sum of the following:

  • Unique cfquery tags that use the cfqueryparam tag

  • Unique cfstoredproc tags

Timeout (min)

The number of minutes that ColdFusion MX maintains an unused connection before destroying it.

Interval (min)

The time (in minutes) that the server waits between cycles to check for expired data source connections to close.

Disable Connections

If selected, suspends all client connections.

Login Timeout (sec)

The number of seconds before ColdFusion times out the data source connection login attempt.

CLOB

Select to return the entire contents of any CLOB/Text columns in the database for this data source. If not selected, ColdFusion retrieves the number of characters specified in the Long Text Buffer setting.

BLOB

Select to return the entire contents of any BLOB/ Image columns in the database for this data source. If not selected, ColdFusion retrieves the number of characters specified in the BLOB Buffer setting.

LongText Buffer

The default buffer size, used if Enable Long Text Retrieval (CLOB) is not selected. The default value is 64000 bytes.

BLOB Buffer

The default buffer size, used if the BLOB option is not selected. The default value is 64000 bytes.

Allowed SQL

The SQL operations that can interact with the current data source.

Validation query

Called when a connection from the pool is resued. This can slow query response time because an additional query is generated. Configure the validation query just before restarting the database to verify all connections, but remove the validation query after restarting the database to avoid any performance loss.

Server

I haven't ever seen any serial number validation in any version of ColdFusion 8 server. Someone can correct me if I'm wrong but they don't do interenet serial number authorization in that version. I'd call Adobe - they can give you a new serial or tell you if that's invalid. Adobe ColdFusion Security Best Practices (Server Auto-Lockdown) September 22, 2020 By Michaela Light Leave a Comment Most security features and protocols focus on prevention. The version of Tomcat application server bundled with Adobe ColdFusion (2021 release) is 9.0.x. During the ColdFusion installation, choose a web server. If you select the built-in web server, your web root directory is located in the cfroot / wwwroot directory.

To see a list of SQL Server versions that ColdFusion supports, go to www.adobe.com/go/learn_cfu_cfsysreqs_en. Use the settings in the following table to connect ColdFusion to SQL Server:

ColdfusionApplicationAdobe Coldfusion Server

Adobe Coldfusion Application Server

Adobe Coldfusion Server

Adobe Coldfusion Server Download

Setting

Description

CF Data Source Name

The data source name (DSN) that ColdFusion uses to connect to the data source.

Database

The database to which this data source connects.

Server

The name of the server that hosts the database that you want to use. If the database is local, enclose the word local in parentheses. If you are running SQL Server locally (or using MSDE), specify 127.0.0.1 for the

server name instead of the actual instance name.

Port

The number of the TCP/IP port that the server monitors for connections.

User name

The user name that ColdFusion passes to the JDBC driver to connect to the data source if a ColdFusion application does not supply a user name (for example, in a cfquery tag).

Password

The password that ColdFusion passes to the JDBC driver to connect to the data source if a ColdFusion application does not supply a password (for example, in a cfquery tag).

Description

(Optional) A description for this connection.

Connection String

A field that passes database-specific parameters, such as login credentials, to the data source.

Select Method

Determines whether server cursors are used for SQL queries.

  • The Direct method provides more efficient retrieval of data when you retrieve recordsets in a forward-only direction and you limit your SQL Server connection to a single open SQL statement at a time. This is typical for ColdFusion applications.

  • The Cursor method lets you have multiple open SQL statements on a connection. This is not typical for ColdFusion applications, unless you use pooled statements.

Limit Connections

Specifies whether ColdFusion limits the number of database connections for the data source. If you enable this option, use the Restrict Connections To field to specify the maximum.

Restrict Connections To

Specifies the maximum number of database connections for the data source. To use this restriction, enable the Limit Connections option.

Maintain Connections

ColdFusion establishes a connection to a data source for every operation that requires one. Enable this option to improve performance by caching the data source connection.

String Format

Enable this option if your application uses Unicode data in DBMS-specific Unicode data types, such as National Character or nchar.

Max Pooled Statements

Enables reuse of prepared statements (that is, stored procedures and queries that use the cfqueryparam tag). Although you tune this setting based on your application, start by setting it to the sum of the following:

  • Unique cfquery tags that use the cfqueryparam tag

  • Unique cfstoredproc tags

Timeout (min)

The number of minutes that ColdFusion MX maintains an unused connection before destroying it.

Interval (min)

The time (in minutes) that the server waits between cycles to check for expired data source connections to close.

Disable Connections

If selected, suspends all client connections.

Login Timeout (sec)

The number of seconds before ColdFusion times out the data source connection login attempt.

CLOB

Select to return the entire contents of any CLOB/Text columns in the database for this data source. If not selected, ColdFusion retrieves the number of characters specified in the Long Text Buffer setting.

BLOB

Select to return the entire contents of any BLOB/ Image columns in the database for this data source. If not selected, ColdFusion retrieves the number of characters specified in the BLOB Buffer setting.

LongText Buffer

The default buffer size, used if Enable Long Text Retrieval (CLOB) is not selected. The default value is 64000 bytes.

BLOB Buffer

The default buffer size, used if the BLOB option is not selected. The default value is 64000 bytes.

Allowed SQL

The SQL operations that can interact with the current data source.

Validation query

Called when a connection from the pool is resued. This can slow query response time because an additional query is generated. Configure the validation query just before restarting the database to verify all connections, but remove the validation query after restarting the database to avoid any performance loss.