Coldfusion - Source Code Deployment

Hi All,
I've been into development of an application, that makes use
of Coldfusion and uses Oracle as the backend. My predominant
expertise is in Oracle, although i have worked on Coldfusion, since
joining this project. I had a few queries regarding the
implementation of CFM files.
The platform details are:- Coldfusion MX 6.1, Oracle 8i, IIS
6.0
The process, that i have followed is that :
1) Verify if the default client store, and the database
source name are all valid.
2) Deploy the modified files in the root directory of the Web
Server (In this case, IIS)
3) If there are no other changes to other configurations,
then restart the Coldfusion Application Server.
4) An IIS reset, would be needed in the Web server.
5) Logon to the configured, URL and verify the changes you
deployed/ expected are reflected.
This was the process i followed in my development. However on
the TEST environment, the logic is quite fuzzy. I have noticed the
source code content is duplicated in the Coldfusion's root
directory (WWW) as well as in the Web server's root directory.
However, changes made to the Web server are not reflected, when i
have reset the IIS and have re - started, the Coldfusion Server.
Am i missing something? Is there some means by which
Coldfusion, reads the content in its own Web Server, before
checking external, web servers. (I understand, that it may all be
due to configuration issues. My question is, i want to know, if
there is any log Coldfusion maintains to check, where its reading
the source code from? i.e. If its reading from a Web Server like
IIS or from its own in built Web server.)
It would be helpful, if you all could throw some light on the
same.
Regards,
J

There is a little know gotcha in CFML code deployment that
most of us
ignore by just making sure all CFML source files are in one
location.
But there are TWO roots that ColdFusion will check for CFML
files. The
first one is in the JRUN server. This path can vary somewhat
depending
on exactly which flavor of CF is installed. On my Multi-home,
Enterprise, Development machine it is here:
C:\JRun4\servers\{cfInstanceName}\cfusion-ear\cfusion-war.
Then if the
CFML file is not there, ColdFusion will check the web server
root directory.
I can't imagine how something would be mixing these
directories up. But
if a CFML file ends up in both, there could definitely be
confusion.
Also be aware of the CF configuration options that tell
ColdFusion to
NOT check for updates to CFML files. This is done for
performance
reasons but could have the same effect as you are describing.

Similar Messages

Parse ColdFusion Source Code

I'm looking for some help in parsing ColdFusion source code,
say a cfc, to provide some documentation.
Does anyone have some pointers for me to research?
dickbob

> the standard
> CFC administrator tool is not available on shared
hosting.
All the tool does is to instantiate the component and output
it's metadata
on a template. There's no special trick to it.
http://livedocs.macromedia.com/coldfusion/7/htmldocs/00000488.htm
Adam

Is it possible to debug coldfusion source code remotely

Is it possible to debug coldfusion source code remotely, if
so can you do it at the same time as debuging a flex app
remotely(which I can do already)

What do you mean by "remotely"?

Uix 11 source code

Hi,
Can anybody please help me in getting the uix 11 source code (deployed in weblogic 11g)
Thanks,
Mayilvahanan .V

thanks Vinod & Timo Hahn
The uix 11 version comes with the jdeveloper installation (Build JDEVADF_11.1.1.4.0_GENERIC_101227.1736.5923) <<Install Directory>>\Jdeveloper\Jdev111140\Middleware\oracle_common\modules\oracle.uix_11.1.1
I am try for migration feasibility on our application to this version, it would be better to debug with source code for any changes that challenge the migration.
I will try using the jdgui.exe or try to raise a SR.
-Mayil
Edited by: user10254453 on Jul 17, 2011 11:00 PM

Q: Unauthorised access to coldfusion source cfm

From the point of view, of security, how easy it for a visitor to a website to get access to the actual coldfusion source code, residing in the .cfm pages, that make up a website ?
Are there any good practices to follow to help safeguard things, perhaps using includes and placing sensitive source code in those, located outside the public folder on the webserver ?

Right, so a "visitor to the website" is not going to be able to see your code, on the whole, because visitors go in through the front door. What you're asking is "how do I harden my website".
Things to watch out for:
* do not have debugging switched on;
* do not have robust exception handling switched on;
* only have files intended to be web browsed in directories that are web browseable. On the whole, very few of your CFM files would / should fall into this category. Someone else mentioned XML files. In general the only XML files that should be web browseable should be things like RSS feeds. Config files should not be web browseable.
* have a global error handler so that if any error DOES happen, the raw error message is not displayed. Having an error "could not find variables.theSecretPassword" gives a person a clue as to what variable names they should be trying to hack. Just display "there was an error", and nothing else.
* clean all user input before writing it to the DB or outputting it on the screen (and that's URL variables, form variables, cookie values, and probably other things too). Don't assume a post comes from your form. It might not. Even search forms input needs to be cleaned, even if it never gets stored: you're probably rendering it on the search results page, which means if there's JS in it, it'll execute as if it's come from your domain.
* tread with caution with file uploads. I've been able to upload a file to a CMS which allowed me to bypass admin access to the management interface, which gave me full access to CF on that box. because CF was running as an administrator, I had full access to the machine too.
* google "website security" and "website hardening" and read everything you can find. This is not a trivial topic.
Adam

Retrieve already deployed webdynpro for java source code from portal server

HI ,
We have webdynpro for java apllication already deployed on the J2EE server. We found the ear file related to this application. But I am not able to make any changes to the ear file in NWDS as it cannot be directly imported into NWDS. We do not have NWDI for software logistics and the resource who built the WDJ application has left the company. Is there any way that I can retrieve the complete source code of the application from the portal. I need to make some changes to Webdynpro component and its view. I have worked with basis team to retrieve the ear file from portal server. But I could not make any progress just with the ear file. Thank you for your help in advance
Regards,
KMM.

You are probably breaking some license agreement by de-compiling the content of the 'war' files. Why not ask the people who provided the 'war' file if you could have the source and build system.

How to include source code in web dynpro java deployment

Hi,
We dont have NWDI.
We are creating ear files out of web dynpro applications packaging them as sca files and deploying them in server.
But the source code is not included in ear.
How to include source code with your ear/sca , so that when anyone downloads the sca file later, they are build the Project in the studio.
How would they typically download? Do they require NWDI ,
Right now we dont have NWDI in place, but we want to do is parcel the applications such that the source code should be available at a later time for download.
This is possible with .par files , but what about web dynpro?
Thanks,
Deb

If you are not using NWDI use the _comp file.

Can I deploy Mathscript subfunctions without revealing .m source code?

Good morning.
I am developing MATLAB algorithms containing functions and subfunctions. To integrate them in LabVIEW, I plan to use Mathscript nodes. And if I do so, I have to leave the subfunctions .m files in a repository on the PC (right?).
My problem is that I do not want to reveal these easily readable files when deploying my LabVIEW code. So I am looking for a way to deploy this code without making my source code available and open to all.
Thanks for any help!

Thanks smercurio.
smercurio_fc wrote:
I think Ravens Fan was referring to actually putting the MathScript code inside a MathScript node, not leaving it as its own file. That way the code is saved with the VI.
Please allow me to illustrate my question through an example.
Let's say my code is script S1. S1 contains functions f1, f2 and f3, f1 contains subfunctions sf1 and sf2, and so on. I end with a code structure looking like this one (all .m files):
S1
- f1
---sf1
---sf2
-f2
---sf3
-f3
---sf4
---sf5
If S1 is copied in a Mathscript node, how can it work without leaving f1.m, sf1.m and others available on the user's pc after deployment?
Now, as I understand from my readings and my experimentations, when I put the function and subfunction files in the "LabVIEW Data" file, the functions name in the script S1 copied in a Mathscript node will appear in purple (by default). The node executes fine then. But if I copy the functions in Mathscript nodes in other VIs, the functions name appear in grey, and the node won't work. I don't know how to point to these other Mathscripts... Is there something I miss here?
smercurio_fc wrote:
You started out by saying you're developing Matlab algorithms. You should keep in mind that MathScript and Matlab are two different languages. While there are many similarities, there are also a lot of differences, and Matlab code is definitely not 100% compatible in MathScript. Thus, if you write the code in Matlab there is no guarantee it will even work in MathScript.
Thanks for the warning. I tried my algorithms using the method described above, and they work well.

Protecting Source Code

I am developing and application that I am planning on
"leasing" out to busnesses but to keep my source code safe I will
only allow the application to be run under a hosting account that I
control so that the source is not subject to being stolen. Other
then cfencrypt (which can be decrypted) is there a way for me to
distribute my application to companies that want to outright
purchase it and allow them to install it on a different server yet
protecting the source code? Can I compile it into .jar files and us
it that way? And if so how do I do that?
Thanks,

You can deploy as a J2EE application, see:
http://livedocs.adobe.com/coldfusion/8/htmldocs/deploying_4.html#117456
Also for some tips from the trenches:
http://www.adobe.com/devnet/coldfusion/articles/ear.html
One caveat, the people you sell the application to _must_
have a valid Enterprise copy of CF or it will not deploy.
hehe, never done the above tho!

Source code for "Creating an Extended Web Dynpro Application"?

Hello!
I'm a rookie in the field of SAP Netweaver and I'm justing getting started with some tutorials. My problems with "Creating an Extended Web Dynpro Application" are to massive to be posted on this forum in this stage. What I want to have some help with is to find the source code for that tutorial so I can get som guidence from there.
Following text is cut out of this page:
http://help.sap.com/saphelp_nw70/helpdata/EN/5d/f42fef2eec724597a03b6bcc670c2c/frameset.htm
Creating an Extended Web Dynpro Application
You can download the Web Dynpro project for the current tutorial from the Software Developer Network SDN (http://sdn.sap.com -> Web Application Server -> Web Dynpro -> Sample Applications and Tutorials) in two versions: one skeleton version you can use for exercises and one final version (solution) for an immediate build, deployment and run on the Java engine of the SAP Web Application Server.
How hard I try I can't find the specific source code on sdn.sap.com
Does anyone have a clue where it is?
Thanks!
Best regards
/Johan Månsson Lindströ

Hi!
I did what you said but I seem to miss the IDE folder. This is what it looks in my Explorer
C: > Program Files > SAP > IDE > CE > eclipse > (no folder called "examples")
I also did a search in this eclipse folder for "examples" but I did'nt find the example I'm looking for
I am running a newer version of NWDS:
SAP NetWeaver Developer Studio
SAP NetWeaver 7.1 Composition Environment SP03 PAT0000
Maybe that's why things don't look the same?

Unable to depoly Web Serivce for the source code written in other editors

Hi all,
I am planning to implement webservice with the following code. But I am facing few problems with this can some body help me with this.
The code looks like this AND IS NOT WRITTEN IN Jdeveloper BUT EDITPLUS
package package1;
public class Sum
public int getSum(int a, int b)
          return a+b;
package package2;
public class Sub
public int getSub(int a, int b)
          return a-b;
package package3;
import package1.*;
import package2.*;
public class Mul implements TestInterface
     Sum sm = new Sum();
     Sub sb = new Sub();
public int getMul(int a, int b)
          return sm.getSum(a,b)*sb.getSub(a,b);
public static void main(String [] args)
          Mul ml = new Mul();
          System.out.println(âThe result of (3+6)*(3-6) is â+ ml.getMul(3,6));
package package3;
interface TestInterface extends java.rmi.Remote;
     public int getMul(int a, int b) throws java.rmi.RemoteException;
I have written this in editplus. Not in Jdeveloper.
Now I want publish getMul() as web service using Jdeveloper.
I have created a new application work space. And from File-->New
I have choose project from existing source and imported âpackage3â.
At this stage it was unable to find the class files Sum and Sub so I placed Sum.class and Sub.class in Appliction1-Project1-classes-
Now the Mul class did not have any errors and it compiled fine. When run it gave the correct output.
Using the web service wizard I was able to generate wsdl file , deployment descriptors etc.
The problem I was facing was form this stage when I am trying to deploy it on to a standalone oc4j server it is not able generate the WebServices.war file and hence is not deployed on to the server.
With the same code written in Jdeveloper everything is working fine.
My doubts are
1)     why is it not able to generate WebService.war file?
2)     It is giving some ClassNotFound exception during the deployment. But when compiled and run its giving the correct output.
3)     Even when everything was written from within the Jdevelper it did not include Sum.calss and Sub.class in WebSevice.war. Is there any way we could mention during its (WebService.war) generation , the class files to be Included.
The other issue is how to add an existing source code to already existing project. In my case Once I have imported package3 I also want to import package2 and package1 in different steps.
I thank in advance for helping me.
Raja Vamshi k Gopu

Can you tell us what you mean by correct type of project?
You can start with an empty project. Then, you have to create an "EAR file" deployment profile (New Gallery / General / Deployment Profiles).
So when I deploy a J2SE module onto oc4j server should I specify the class path? If so where ? How can I solve this problem?
Once you deploy your code into oc4j, it becomes a J2EE application. You don't need to deal with the classpath - just make sure that all the required code is included in your .war file. To do so, check the list of classes packaged under the deployement properties dialog.
Can you send me the links of few articles where I can learn more about these kind of stuff?
If you want to assemble applications without to use JDeveloper wizard, you have another option: using the WebServiceAssembler tool that is par of the oc4j bits will help you to do this from a command line promt, and will handle the J2EE packaging aspect for you.
See online documentation (10.1.2): http://download-west.oracle.com/docs/cd/B14099_04/web.htm
In the "Developer's Guide", chapter 9 is about "Web Services Tools"
For JDeveloper J2EE samples, you can start by looking at the OBE: http://www.oracle.com/technology/obe/obe_as_1012/j2ee/index.html
Hope this helps,
Eric

How to get the source code in PAR file

Hi All,
I used the PAR migration tool to migrate from PAR to EAR file. When I imported the EAR into NWDS 7.3, I was just able to see the structure and jsp files and could not find the java source code files. I would requires the java source code to make modifications so that deprecated APIs can be replaced and to also make the code compatible with JDK 1.6.
I think the original 7.0 PAR file itself does not contain the source code. I decided to use the "Include source code" option when exporting the 7.0 PAR.
I have the portal application DC project in my NWDS 7.0. However, when I try to export the PAR file using Export --> PAR File -- > Next... I am unable to select any project from the list. The list appears blank with disabled Next & Finish buttons.
I also noticed that in the portal DC application structure, there is a .sda file under /gen/default/deploy. Also there is no PAR folder under /gen/default/public.
How do I include the source in the PAR file so that I can edit the same after migrating to EAR format ?
Regards,
Melwyn

DC and PAR/EAR stuff are different formats, SC/DC is an archive type used by NWDI, if I got it right.
How do I go about generating the PAR file (with source) ?
In fact through including the seources while creating the PAR/EAR in NWDS, but: no need to do that, you can also depack SDA (rename it to zip). If you wanna just see the Java sources you will find them there, otherwise decompile as Vijay already sad.
cheers

Real-Time Application doesn't run; source code works fine

The short version is I'm programming a cRIO and apparently the RT code isn't running after being deployed and I can't figure out why. This is further complicated that I'm doing all this remotely and I don't have direct access to the unit since I'm 500 miles away. I'm working through a couple of other guys who know some LabVIEW, but neither works at the site so they have to explicitely travel out there every time I have a bright idea.
I was out there a few weeks ago. During this time I created a simple cRIO code, since I'm new to cRIO, that allowed the user to move a control and change a graph. It worked fine, but I should note it did not have an FPGA component. After that I worked on the real code, which reads some sensors, displays the results on a UI and logs the results. This did have FPGA. I used it in the LabVIEW environment and it worked fine, but I ran out of time before I could complete a release version and deploy the RT as a compiled application. I sent them the release version later, my contact deployed it but got network stream errors when running the UI.
After hours of looking at network problems and sending over debug versions, I tried creating a log on the RT level so I could see what was going on. The log doesn't even open, even if it's the first command in the code. I pored through the forums and found http://forums.ni.com/t5/LabVIEW/cRIO-Troubleshooting-creation-and-deployment-of-startup/td-p/1956475... which took me in a new direction.
I had my contact use the RT debug console and when he pulls up the RT front panel, it shows a broken run arrow. He clicks it and nothing happens -- no running, no bug list. If he pulls up the bug list manually, it's empty. Again the RT works fine if you run it through LabVIEW and not as a compiled real-time application. He also noticed that the Open FPGA VI was grayed out on the block diagram. No other icons are.
So the problem appears to be that the compiled RT application is getting some kind of error but not telling me what it is, and it seems to be related to opening the FPGA. I've recompiled the FPGA and RT. I've had him recompile the RT himself, but not the FPGA because it would take hours. He's downloading everything correctly to the cRIO. The RT is set to run automatically. He's rebooting the cRIO every time he deploys the RT. They have LabVIEW on a computer there but it doesn't have the right drivers to run the code from the LV environment. I'm resisting having them install the dirvers because downloading big files is complicated there due to security restrictions and a lousy network connection at a remote site. Besides that doesn't solve the problem of the RT executable not running the same as the source code, which according to the thread above appears to be a thing.
The latest thing I'm trying is that I sent him instructions for how to build a source distribution from the project I sent and try deploying that to the cRIO. Even if that works I'm not sure that's an acceptable solution because I assume running the VI rather than the EXE is slower, and they need speed on this project.
I simply have no idea where to go from here. I probably need to get direct acess to the cRIO and I might be able to convince them to ship it to me so I can figure this out, but I'm not sure where I'd even start other than the standard voodoo debugging of "try stuff at random until something works". I'm open to suggestions if anyone has managed to solve this before.
Code snippet of the first part of the project is attached, though I'm not sure how much good it will do. I'm really stumped and the client is getting frustrated with how much of the budget is going to fix this.
Solved!
Go to Solution.
Attachments:
RTMainSnippet.png ‏623 KB

Have you checked the cRIO error log? Usually I'd access it through the LabVIEW project (right-click on the target, don't remember the exact menu options and I don't have the RT toolkit installed on this machine to check), but it must be stored somewhere on the cRIO as well, although I don't know if it's in a human-readable format.
Which cRIO are you using? What exactly do you mean by "debug console"? (This may be related to the cRIO - the newer ones have video out, although I don't know if that's what you're referring to.) With a broken run arrow, you won't get an error list unless you're running in the development environment.
Have you confirmed that the software installed on the cRIO matches the version you're using for development, including patch level? Get someone to connect to the cRIO with Measurement and Automation Explorer, and get a list of the software installed on the cRIO.
Sounds like the ability to connect with a remote debugger would be helpful here, if you can get the right drivers installed on the machine with LabVIEW that's connected to the cRIO. Make sure all driver versions match what you're using. Any chance you could then do a remote desktop connection from your work site to the remote LabVIEW machine?

To see the source code in .sca file

Hi Experts,
We have installed EP with NWDI 7.0 2004s SP11 version.
I have installed NWDS 7.0.08 in mysystem.
I have been provided with a .sca file which contains the applications which are developed.
Now I have to see the source code of those applications in NWDS thru NWDI or by any other means.
Thanks & regards
Vardhan

Hi Pascal,
I have already unzipped it and I got the folders like Build archives, Deploy archives, Meta inf, source archives.
Deploy archives consists of .sda files what you have said in your post.
Source archives folder has a .sc file.
I deployed that .sca file through sdm, but it is not available in the software components under CMS inorder to import it into track.
But that software component is available under my SLD--> installed systems products.
My objective is to see the source code in that .sca file.
What do you mean by double post and tripple post?
Best Regards
Harshavardhan

Instead of requested page source code is getting populated in WAS 6.1.0.15

Hi All,
I'm trying to bring up an application using jnlp.please find below the source code for the same.
When i deploy the application in WAS 6.1.0.0, i'm able to bring up the application without any issue.
But other than 6.1.0.0 if i deploy the same war file in any other WAS server, itz just showing the source code when i request for href in the browser.
Kindly some one help me to resolve this.
<?xml version="1.0" encoding="UTF-8" ?>
- <jnlp spec="1.0+" codebase="http://10.66.193.212:9080/<appname>/">
- <information>
<title> Application name</title>
<vendor>vendor</vendor>
<homepage href="/RSA" />
<description>JNLP Application for <appname></description>
</information>
<offline-allowed />
- <security>
<all-permissions />
</security>
- <resources>
<j2se version="1.4+" />
<jar href="appname.jar" />
<extension name="jcalendar" href="jcalendar.jnlp" />
<extension name="jcommon" href="common.jnlp" />
<extension name="jfreechart" href="jfreechart.jnlp" />
</resources>
<application-desc main-class="a.b.c.d.mainclass" />
</jnlp>Thanks in advance,
siva.

Type must be registered with jnlp extension so that content type is set (in the header with value application/x-java-jnlp-file), this should be done in httpd.conf (with an AddType), you can google for it or ask any server administrator for it, should be something like:
AddType .jnlp application/x-java-jnlp-fileMaybe you can give a look at working httpd.conf (on 6.1.0.0 searching for 'application/x-java-jnlp-file') and copy/paste in other configs.
Bye.

Coldfusion - Source Code Deployment

Similar Messages

Maybe you are looking for