Lucee Administrator Insecure by Default

IIS , Lucee , Railo , Web Development , Web Servers No Comments »

Just a tip for those installing Lucee with the IIS connector... it is NOT secure by default.  When you add a new IIS website, it will automatically create a folder for the Web context for that website.  The administrator screens in that context are NOT password protected.  I have not confirmed if this is true on other Web server platforms (Apache, etc).

It's easy to correct this issue.  In your server context administrator (http://{your domain}/lucee/admin/server.cfm), go to Passwords, then Set Default Password.  You can enter a password there that will be used for all new Web contexts.

I don't know why they would ever make this open by default, but that is how it is.

For more on securing Lucee, check out the Lucee lockdown guide.

Also, see Pete Freitag's Securing the Railo Context, which can be adapted for Lucee. 

Getting CFSPREADSHEET working on Lucee In the server context

Lucee , Web Servers 1 Comment »

By default, the cfspreadsheet-lucee extension does not allow you to install it at the server context level.  It only installs at the web context level.  Here are some instructions to modify it and get it running on the server level, making it available to all contexts on your server.


A Java JVM Update Adventure - ColdFusion Won't Start!

ColdFusion , Default , Java , Web Servers 1 Comment »

A simple JVM update misunderstanding caused a real mess on one of our ColdFusion 11 (Windows) servers. 

For those who might run into this, below are the steps.  These could also be used as instructions for updating the Java JVM that ColdFusion 11 runs on - if you didn't install it to the <drive>:\ColdFusion11\jvm folder.


Railo - Multiple contexts on ONE instance

ColdFusion , Default , IIS , Railo , Web Servers No Comments »

For a specific installation of Railo, I had to make a single instance of Railo run multiple sites (contexts) in IIS that share one domain name. 


Why we may be moving from Adobe CF to Railo

ColdFusion , Default , Railo , Web Development , Web Servers 12 Comments »

We're still in the testing and investigation stage, but I think we'll be building a relationship with Railo in the near future.


Powered by Mango Blog. Design and Icons by N.Design Studio
RSS Feeds