NewsLab
Oct 27 16:33 UTC

Is PHP Running on Your ColdFusion Server? How to Check, and Remove It (gregoryalexander.com)

47 points|by rmason||37 comments|Read full story on gregoryalexander.com

Comments (37)

37 shown
  1. 1. harel||context
    There is so much in this title alone that sounds like a time capsule from 1999...
  2. 2. giancarlostoro||context
    They're just missing either Shockwave (Director) or Flash as half of their website.
  3. 3. rebeccapowell||context
    I’m kind of blown away that there are still people out there using ColdFusion. Blast from the past.
  4. 4. emacdona||context
    Same! I have a huge soft spot for CF. It put a lot of food on my table in the early 2000’s. Then I switched to Java :-)
  5. 5. denkmoon||context
    The entire stack described in the post is the stuff of nightmares. ColdFusion, IIS on Windows Server, PHP. Things that make you wake up in a cold sweat.
  6. 6. lakeviewterrace||context
    They're well-documented, well-supported products.

    What gives me cold sweats are custom application servers that no one knows how they work.

  7. 7. CableNinja||context
    Next someone is gonna pipe up and say they used AI to enable them to continue using FrontPage extensions to keep their php+cf sites working
  8. 8. dizhn||context
    Frontpage on Linux. That was fun to support :).
  9. 9. cricalix||context
    Frontpage on Linux, backed by file storage on Netware. That was hell to support (student home pages).
  10. 10. IgorPartola||context
    When I was in undergrad we used CF quite a bit for the custom university applications. I cut a lot of my wed development teeth on it. But everyone hated it. So we were actually quite excited to get a PHP server. It could run open source alternatives to Blackboard after all!

    I played around with PHP quite a bit in my senior year and got a job as a developer working for a PHP shop when I graduated. Boy was I absolutely disillusioned within 12 months. PHP nearly ruined my love of computers. It was an abusive relationship: I would spend my working hours writing horrible little patches to ancient systems that were made of spaghetti 10 miles long, then go home and night and weekend try to write beautiful code in PHP. The more little patches I wrote the more I felt the need to somehow make them right.

    I escaped to Python and JS and have done a lot of therapy since. Doing much better these days, thankfully. My addiction to C seems like such a minor vice in comparison.

  11. 11. rmason||context
    I have ported programs from PERL and PHP. I think it is a personal preference but I didn't care for them. I did like Ruby on Rails immensely and did a couple of projects in it prior to it reaching version 1.0. But the jobs at that time were with CFML so I migrated back.

    My user group recently had a presentation on Wheels, which is a CF version of Ruby on Rails. Its been around for a few years but never quite delivered what it promised. But it has a new project leader and has been totally rewritten. There will also be a book coming out. It uses another open-source project RustCFML which is an interpreter that converts the code to Rust. CF is pretty fast all by itself but this is lightning fast. You can also now run CF programs on Cloudflare. So the community does keep moving along. Lots of AI work being done as well.

    https://www.youtube.com/watch?v=lgIwXMlinJw&t=1487s

  12. 12. mrweasel||context
    Years ago I worked for a company that had an application, written in Delphi, running as a DLL in IIS (on Windows obviously). To more easily deliver certain features fast, open source PHP code was run in parallel, e.g. some customer wants a visitor counter, so that just got bolted on using PHP.

    There are some absolutely insane systems out there.

  13. 13. cloudbonsai||context
    ColdFusion has been maintained by Adobe since 2005. Apparently, they think there is future for it:

        ColdFusion Next is evolving into an AI-powered, cloud-native platform designed for modern business automation.
    
    See “Roadmap for Adobe ColdFusion 2026” for more details: https://www.adobe.com/cc-shared/assets/pdf/products/coldfusi...
  14. 14. bombcar||context
    Everything says that - look at Filemaker: https://www.claris.com/filemaker/agentic-development/
  15. 15. kstrauser||context
    Lawdy. Now we just need FoxPro Copilot to round it out.

    Edit: No we don't oh please god no.

  16. 16. graemep||context
    > evolving into an AI-powered, cloud-native platform

    Everything is doing that.

  17. 17. rmason||context
    ColdFusion has a very lively community and there are two open-source versions: Lucee and BoxLang. The language has also stayed very modern and something like two thirds of the Fortune 500 are using it. Also there are a few well-known startups like DistroKid using it.
  18. 18. hackthemack||context
    Wayback Machine already has a copy. If the site does not load for you, try https://web.archive.org/web/20261026222905/https://www.grego...
  19. 19. brightball||context
    ColdFusion...now there's a name I haven't heard in some time.
  20. 20. good8675309||context
    Still running a saas I built on Coldfusion/Lucee with a Vue frontend that I started in 2011 that supports myself and 2 employees.
  21. 21. djfobbz||context
    I feel like Ben Forta just woke me up and it's 2002!
  22. 22. kmanlives||context
    Ben actually spoke at last year's CF Summit. It felt very nostalgic!
  23. 23. kmanlives||context
    I've made a very good living with ColdFusion consistently since I picked it up in 1997. There are now several really nice MVC frameworks for ColdFusion out there. If you've not used it in decades, it has a fully script-based syntax now, and there is a strong free CF engine (Lucee).

    The newest integrations with AI are definitely interesting.

    I've been pleasantly surprised to see some inklings of growth in CF adoption, though I'm comfortable saying that most new code in ANY language is going to be written with AI going forward.

    With the latest PHP vulnerabilities - ColdFusion is actually a selling point: "Gee, it doesn't run 60+ percent of the internet, but it's actively maintained and can be configured to be secure."

  24. 24. conductr||context
    > it has a fully script-based syntax now

    What does this mean? This being a revelation for a web tech solution strikes me as strange. I saw a tiny bit of CF like 25 years ago and perhaps mistakenly thought it did this back then.

  25. 25. bitexploder||context
    It used by be a markup language like:

      <cfif blah="something is true">do this<cfelse>do that</cfif>
    
    But now it has its own scripting language like:

      <cfscript>
      // scripty stuff
      </cfscript>
    
    At least, that is how it used to be :)
  26. 26. conductr||context
    Ahh. Yeah. Well that sparks a memory of why I quickly went another direction after looking at it back then when I was learning web dev lol. Tbf a lot of people were, probably still are, using PHP and JavaScript way back then too. It just made sense for me to do some MVC style separation long before I found out there was an acronym for it.
  27. 27. bdcravens||context
    cfscript has been part of ColdFusion since 1998. It has expanded over time to include more functionality, but it has been there.

    Also the markup-based functionality hasn't gone anywhere.

  28. 28. bitexploder||context
    A long time ago, in a galaxy far away, I used to write a bunch of ColdFusion with a dude that owned an S2000 :)
  29. 29. kstrauser||context
    "Yo dawg, I hear you like security vulnerabilities..."

    CF was an interesting path. I used the Python equivalent, Zope, extensively back in the day. Both could glue together some really powerful components and allow you to write whole web apps more or less declaratively.

    That said, we collectively tried that experiment ("we" includes you, my JBoss compatriots) and realized this is not The Way Forward. That doesn't mean they're valueless, not at all! And it's the sort of experiment you have to try or else it's always going to be nagging at the back of your mind: "what if we tried this... and it was amazing?" But we did try it, and it was not amazing.

    If you have to maintain CF or Zope or JBoss today, godspeed. Just know that life is easier elsewhere. It doesn't have to be this way. It's not this way for everyone.

  30. 30. anonzzzies||context
    We do it’s a nice little niche. There was a lot of Zope around me. Opus has no issues with it at all.
  31. 31. stmw||context
    ColdFusion did a lot of things right for its time, but it can only be appreciated if one understands the engineering challenges of the time period (e.g. perl cgi-bin). Using HTML templating and good support from a small and agile company had a lot to recommend it, and many people built a living out of it, both inside and outside Allaire.
  32. 32. BobMcBob||context
    You just gave me flashbacks as a teenager using Allaire HomeSite to build websites for friends and family. Man what a good piece of software before they bolted CF to it and sent it off to Macromedia>Adobe hell.
  33. 33. bdcravens||context
    I spent a good part of my career as a CF developer, but I found Homesite in the mid-90s. As a poor kid at college, carrying my editor around on a floppy to the various computer labs (yes it fit!) was very convenient.
  34. 34. 1659447091||context
    I caught a lot of jokes for sticking with CF over PHP into the 2010's (before moving over to clojure) -- I'm sure they all forgot by now, but I've been pretty satisfied with my past choices this last week. Before the move I mostly worked with Lucee and FW/1 [0]. I still think its a better alternative to PHP or Ruby(rails).

    [0] https://github.com/framework-one/fw1

  35. 35. Capricorn2481||context
    What made you move to Clojure?
  36. 36. 1659447091||context
    Started with @seancorfield, he was the one behind FW/1 and the way he thought about architecture and would write about just resonated. Then he started migrating over doing these CF/Clojure things like `cfmljure` and kept reading his writing (which I recommend) and that got me to finally look into Clojure -- which led to Rich Hickey talks, and everything he talked about was everything I was overly frustrated with in programming, the mutations, over-engineered/complected objects and data modeling.

    I forget which talk it is, but there is one (or more) where he goes into how we modeling the world/data in OOP and his annoyance with confusing identity, value, and state; bundling them up into mutating objects instead of having a stable identifier(label) that has an immutable fact or facts(values) at a point in time(state). And how objects act on each other instead of function working on data. I felt like someone reached into my head and said everything I was thinking in a way I was never able to express or formulate and then instead of just bitching about it he created a solution. I was sold, hook line and sinker.

    It all just clicked for me, even reading clojure code (writing at first was another story) came easier than trying to follow some javascript. Maybe it was because I already had years of programming experience, but I knew nothing of Functional Programming, was skeptical of this immutable data bit but really wanted it to be real, and had never seen a Lisp before or knew anything about it (I got hired programming out of high school) -- but it all just made sense and was basically a come-to-Jesus moment that I dove into and it drastically improved my understanding of systems, architecture, data, and the like.

  37. 37. Good4boothee||context
    Isn't that in a huge issue in general, as software keeps getting more and more complex? If someone asked me to guess if random network attached device has nodejs somewhere inside, I might as well flip a coin.