Web Trenches
Lucee Logo


This is a follow-up to my previous post, Tips for Moving From ColdFusion to Lucee. I found these additional issues/differences when converting a major enterprise environment containing 15+ years of legacy code and over 200 applications. Most of these are due to poor programming practices, but I want to note them here because they are differences (incompatibilities?) that […]



With the IIS Rewrite module installed, it is fairly easy to lock down the Lucee Web and Server administrative pages by creating a rule in web.config. <rewrite> <rules> <!— you may have other rules here —> <rule name=”BlockLuceeAdminAccess” patternSyntax=”Wildcard” stopProcessing=”true”> <match url=”lucee/admin*” /> <conditions> <add input=”{REMOTE_ADDR}” pattern=”111.111.1.*” negate=”true” /> <add input=”{REMOTE_ADDR}” pattern=”127.0.0.1″ negate=”true” /> <add input=”{REMOTE_ADDR}” pattern=”192.168.1.*” […]



Creating PDF thumbnails with Lucee has been broken since version 5, and possibly longer. https://dev.lucee.org/t/cfpdf-action-thumbnail-not-working-on-lucee-5/1389 https://luceeserver.atlassian.net/browse/LDEV-967 Here is a function that should help you if you really need to get it working. UPDATE: Please see Brad Wood’s new solution in the Comments section, which works with new versions of Lucee. <cfscript> // Creates a jpg thumbnail from […]

Lucee Logo


I have moved well over 100 websites and applications from Adobe ColdFusion to Lucee servers over the past few months. While 95% of the code is cross-compatible and works right away, I have run into a few things that I thought I should share. This is not meant to be a comprehensive list of incompatibilities between Adobe […]



First, you will need to extract and repackage the appropriate classes and DLL from a Java 1.7 install. This section is adapted from http://bigfatball.blogspot.it/2016/03/how-to-enable-jdbc-odbc-bridge-for-jdk-8.html. Download a JDK 7 or JRE 7 and install it. Goto JRE\lib folder and find the rt.jar Unzip it (if you have WinRAR installed) or you can rename it to rt.zip and unzip it. […]



As a defense against cross-site ccripting attacks (XSS), modern browsers now disallow ajax calls made across domains by default.  You can enable certain sites to make ajax calls to your site by adding the Access-Control-Allow-Origin header to the page.   For example, if your page at http://www.mydomain.com/main-page needs to make an ajax call to http://www.otherdomain.com/ajax-page, you would add […]



I noticed that there is a file upload size restriction in Lucee (at least on Windows).  Lucee appears to use the .NET framework when uploading files.  With Adobe ColdFusion, you could adjust the IIS settings to allow for larger files to be uploaded.  With Lucee, there are TWO places you’ll need to adjust the setting.  In addition […]



Just a tip for those installing Lucee with the IIS connector… it is NOT secure by default.  When you add a new IIS website, it will automatically create a folder for the Web context for that website.  The administrator screens in that context are NOT password protected.  I have not confirmed if this is true on other Web […]



Andrew Kretzer (Leftbower) did a great job of porting the Team CFAdvance cfspreadsheet-railo extension over to work with Lucee.  Since we have multiple sites (contexts) running on our servers, I needed his cfspreadsheet-lucee extension to install at the server context instead of individually for each site.  The default intall of cfspreadsheet-lucee installs only on the web context.  After […]



A simple JVM update misunderstanding caused a real mess on one of our ColdFusion 11 (Windows) servers. After being prompted, I installed an update for the JVM (to 1_8_60) at the console of a Windows server.  We have some admin tools that require Java, so we update Java when needed.  Upon completion, the installer prompted me that […]