1

ColdFusion's documentation states

Another option available is to use a URL parameter mode=debug. The URL would look like this www.allaire.com?mode=debug. This URL will display debug information whether you have debug information turned on or off in the administrator.

http://helpx.adobe.com/coldfusion/kb/coldfusion-debug-information-using-mode.html

The documentation does not list the ColdFusion version number and it does not seem to work in CF 9.01.

Does this still work? (It sounds like a security risk)

James A Mohler
  • 11,060
  • 15
  • 46
  • 72
  • 1
    Funnily enough [that URL](http://helpx.adobe.com/coldfusion/kb/coldfusion-debug-information-using-mode.html) is returning a 404 page now – duncan Dec 06 '13 at 09:59
  • It can be seen at https://web.archive.org/web/20120327062555/http://helpx.adobe.com/coldfusion/kb/coldfusion-debug-information-using-mode.html – James A Mohler Dec 06 '13 at 14:39

1 Answers1

3

I am assuming that is just old documentation. You are correct, that is a HUGE security risk.

I found this reference and this reference related to ColdFusion 4.5

I found this reference related to ColdFusion 5.0

And here is some old documentation with it as well, from the Allaire days.

I am also running ColdFusion 9.0.1 and adding ?mode=debug to the URL does nothing.

Miguel-F
  • 13,450
  • 6
  • 38
  • 63
  • That sounds crazy .. IIRC the admin settings trump all in most recent versions. Of course it does say "wwww.allaire.com", so I vote for *very* "outdated" documentation ;-) – Leigh Dec 05 '13 at 22:10
  • @Leigh I had to laugh when I found that one. Adobe is notorious for carrying forward their documentation without changing anything. I'm still trying to find any mention of when they disabled this functionality. – Miguel-F Dec 05 '13 at 22:11
  • Yeah, but ... "Allaire"?! Haha, I would say that is carrying bad habits just a little too far. – Leigh Dec 05 '13 at 22:12
  • Funny - I heard Jeremy Allaire testify before congress the other day. I said, "hey... I almost know that guy!" :) – Mark A Kruger Dec 05 '13 at 23:02