Tech Sharing Blog

Computer knowledge, news, product, SEO, earn money online sharing place

Advertisement

Archive for the ‘ Coldfusion ’ Category

How coldfusion work

By on January 10, 2012

ColdFusion CF is a rapid application development language that allow us to build a dynamic web site and web application easily. ColdFusion application server is build on top of Java so it’s can work in multiple OS platform such as Window or Linux as well as difference web server such as IIS web server or Apache web server.

 

The major difference between Web Server and Web Application Server is that Web server only have the limited capability. It wait for the request from the user and serve the request as soon as possible.

 

Web application server actually is to extends the capabilities of a web server. With the extended functionality, the web server now able to do more work and fuction such as interacts with database, other resources, interacts with other web service, or other application.

 
How ColdFusion works:

  • Below steps explain how web server and application server work together.
  • User requests a page by typing a URL in the browser, and web server receives the request.
  • Web server looks at the file extension to determine whether a web application server must process the page.
  • If user requests a page that is simple web page like HTM or HTML extension, the web server fulfills the request and sends it back to browser.
  • If user requests a page that application server must process like CFM, CFML or CFC extensions, the web server passes the request to the application server.
  • The web application server processes the page and sends the result to the web server, which returns those results to browser.architecture How coldfusion work




Popularity: 1% [?]

Loop Over ColdFusion Structure

By on December 30, 2011

Just a quick reference on how to loop over a structure without knowing its keys. By the loop, you may also convert the structure

.

<cfset aaaa.ab1 = '111'>
<cfset aaaa.ab2 = '222'>
<cfset aaaa.ab3 = '333'>
<cfset aaaa.ab4 = '444'>

<cfset logcontent = "">
<cfloop list="#structKeyList(aaaa)#" index="key">
<cfoutput>
<cfset logcontent = logcontent & "(" & #key# & ": " & #aaaa[key]# & ")">
</cfoutput>
</cfloop>

<cfdump var="#aaaa#">




Popularity: 1% [?]

Useful Coldfusion Resources

By on November 24, 2011

This list is intended for developers new to ColdFusion, or to developers already using CF but looking for additional resources or information.

Adobe ColdFusion Resources

 

ColdFusion Documentation

 

Essential Resources

 

ColdFusion IDEs

 

Open Source CFML Engines

 

MVC Frameworks

 

ORM and Dependency Injection Frameworks

More From david_cheong

david_cheong Recommends

Useful Coldfusion ResourcesAsk david_cheong To Recommend Your Posts Useful Coldfusion Resources

Popularity: 1% [?]

Hardening ColdFusion Server E-Book

By on September 23, 2011

This is a very good tips from Pete Freitag on how to hardening your ColdFusion server. This E-Book include some important topic such as:

  • Installation Tips
  • ColdFusion Administrator Settings
  • Sandbox Security
  • Hiding Version Information
  • Overview of Web App Firewalls
Hardening Coldfusion Powerpoint (26)

 

 

 

More From david_cheong

david_cheong Recommends

Hardening ColdFusion Server E BookAsk david_cheong To Recommend Your Posts Hardening ColdFusion Server E Book

Popularity: 2% [?]

Pausing scheduled tasks in CF8

By on January 14, 2011


This is a pretty good function for CF8 administrator where you can pause your schedule task whenever you like to. Not like the previous version of Coldfusion where the administrator only can only edit or delete the scheduled task.


With this function exists, you can pause it wihtout editing anything like what you did last time by changing the url to something else or change to date to expire the scheduled task.




Running schedule task Pausing scheduled tasks in CF8

Currently on running schedule task display



Pause schedule task Pausing scheduled tasks in CF8

Currently pause scheduled task display



Cfmx schedule task Pausing scheduled tasks in CF8

CFMX 6.1 scheduled task display without the pause and resume button




More From david_cheong

david_cheong Recommends

Pausing scheduled tasks in CF8Ask david_cheong To Recommend Your Posts Pausing scheduled tasks in CF8

Popularity: 1% [?]

Import the server or CA certification in coldfusion server

By on September 15, 2010

Last whole week working with a project which involve the integration with 3th party API through the HTTPS secure channel using coldfusion CFHTTP. I come across with the following error message:


I/O Exception: peer not authenticated

coldfusioncerterror Import the server or CA certification in coldfusion server


Try to Google it for some time and find out that I need to import the 3th party certificate into my Coldfusion server by using some keytool certificate import tools. Trying few times but still can’t get it work until I found a blog which showing a very effective way and free tools for import the certificate.


These instructions are for Windows based machines but the concepts and tools should work on Mac or Unix based platforms.


1. Install tools

Download and install Portecle JVM certificate manager

(portecle-1.5.zip) You do not need the source (src) version

https://sourceforge.net/projects/portecle

The easiest way to install Portecle is to unzip the contents of the zip file to a directory such as C:\Program Files\portecle-1.5\ Then find the file “Portecle.jar”, right click it and send it to your desktop as a shortcut. You can then use this shortcut to launch Portecle. (optionally you can also change the name of the shortcut and change the icon to use the portecle.ico file for the icon)


2. Extract the certificate

The easy way to get the certificate is ask from the issuer, but if you unable to do so, you may have another alternative solution which you open the https page in your browser and double click on the lock logo at bottom left of the browser (the lock appear just beside the url addrss for Google Chrome)


Double click on the lock –> click the certificate information button –> go to details –> click the copy to file button –> Follow the wizard and select the base-64 encoded X.509 (.cer) format –> save the file


3. Install Certificate to Java Virtual Machine and/or ColdFusion server

Start Portecele.

On the [File] menu, select [Open Keystore File] navigate to and locate the keystore you are interested in.

For many java installations this will be located in your “jre\lib\security” directory and might be named “cacerts”

For the ColdFusion 8 default developer install the path will be “c:\coldfusion8\runtime\jre\lib\security\cacerts”

You will have to enter the password for the keystore. The default password is “changeit”


Now you are ready to import the key.

From the [Tools] menu select [Import Trusted Certificate]

Navigate to and locate the certificate you saved and click [Import]

You will need to reenter the keystore password.

You can change the alias if you desire but I would recommend leaving it as the default

Note: You may also be prompted to “trust” the certificate.


Click on the save button at the top of the portecle


4.       Restart you Java Virtual Machine/coldfusion application server.

For ColdFusion not installed on top of JRun you just need to restart the ColdFusion service. If you are running on top of JRun you also need to restart JRun.


Up to now, you already successfully import your partner certificate to your coldfusion/java server.


Please feel free to leave your suggestion if any. Click here for more information regarding Protecle

More From david_cheong

david_cheong Recommends

Import the server or CA certification in coldfusion serverAsk david_cheong To Recommend Your Posts Import the server or CA certification in coldfusion server

Popularity: 2% [?]

Advanced ColdFusion: Error handling

By on July 26, 2010


That’s nothing perfect in the world, no matter how good the application and web site is, that’s still some hole that we may need to handle. By handling that kind of hole, we try to make our application close to perfect.


This powerpoint show that Why we need the error handling, What are error, how the error being handled, type of error, type of error handling.


Advanced ColdFusion - Error Handling (192)


Error Catching with CFERROR and CFCATCH (175)

More From david_cheong

david_cheong Recommends

Advanced ColdFusion: Error handlingAsk david_cheong To Recommend Your Posts Advanced ColdFusion: Error handling

Popularity: 4% [?]

Building Secure Coldfusion Applications

By on July 21, 2010

Here is the presentation slide by Pete Freitag, Principal Consultant from Founeo Inc.

In the presentation slide show it will cover the following topic include:

  • Uchecked input
  • File Uploads
  • XSS-Cross Site Scripting
  • SQL Injection
  • Cross Site Request Forgery
  • CRLF Injection
  • Session Hijacking


Secure your Coldfusion application (162)

More From david_cheong

david_cheong Recommends

Building Secure Coldfusion ApplicationsAsk david_cheong To Recommend Your Posts Building Secure Coldfusion Applications

Popularity: 4% [?]

Hidding IIS web server header

By on July 9, 2010


Google for long time regarding how to hide the HTTP header for IIS in order to mask the server identity and finally found out this tools call URLScan.
Basically URLScan is an ISAPI filter that allows Web site administrators to restrict the kind of HTTP requests that the server will process. By blocking specific HTTP requests, the URLScan filter prevents potentially harmful requests from reaching the server and causing damage.
Actually most of the features that provided by URLScan are included in IIS but not the Remove Server Header features as microsfot find out that this is not an important issue that that’s no real security benefit of include in IIS. But that’s some marketing purposes why microsoft not encourage web master to hide the identity.

How to hide the IIS identity:

  1. download the URL scan
  2. Install the URL scan in your server.
  3. go to the URLScan config file at C:\WINDOWS\system32\inetsrv\urlscan\UrlScan.ini
  4. Change RemoveServerHeader=1 (by default is 0)
  5. Save the file
  6. Restart your IIS
  7. Check on your header (http://www.rexswain.com/httpview.html)
For more detail on the URLScan and the features, you may easily get a lot of information by Google on URLScan



More From david_cheong

david_cheong Recommends

Hidding IIS web server headerAsk david_cheong To Recommend Your Posts Hidding IIS web server header

Popularity: 1% [?]

Possible injection use keyword

By on May 19, 2010

SQLInjection1 1 Possible injection use keyword

All the web developer, web admin, as well as DB admin are always facing the attacking from all around the world toward their web site, but how to prevent it?


Some may use the 3th party software to prevent it, some may just filter all the possible keyword enter by the user, some will use the database store procedure to prevent it. The following are some of the keyword that you may need to take care of when you allow your user to enter any input to your system.


Web site injection attack keyword (204)

More From david_cheong

david_cheong Recommends

Possible injection use keywordAsk david_cheong To Recommend Your Posts Possible injection use keyword

Popularity: 4% [?]

SEO Powered by Platinum SEO from Techblissonline