book

Adobe ColdFusion 8 Web Application Construction Kit, Volume 3: Advanced Application Development

Name: Adobe ColdFusion 8 Web Application Construction Kit, Volume 3: Advanced Application Development
ISBN: 9780321550057

by Ben Forta, Charlie Arehart, Jeffrey Bouley, Jeff Tapper, Matt Tatam, Raymond Camden, Robi Sen, Sarge Sargent

December 2007

Intermediate to advanced

696 pages

34h 31m

English

Adobe Press

Read now

Unlock full access

Copyright
Dedications
Biographies
Ben FortaCharlie ArehartJeff BouleyJeff TapperMatt TatamRay CamdenRobi SenSarge Sargent
Acknowledgments
Ben FortaCharlie ArehartJeff BouleyRay CamdenSarge Sargent
Introduction
Who Should Use This Book?How to Use This BookPart VIII: Advanced ColdFusion DevelopmentPart IX: Creating High-Availability ApplicationsPart X: Ensuring SecurityPart XI: Extending ColdFusionThe Web Site
Online Content
Part VIII: Advanced ColdFusion Development
VIII. Advanced ColdFusion Development
41. More About SQL and Queries
Advanced SQL TopicsGetting Unique Records with DISTINCTSummarizing Data with Aggregate FunctionsStandard Aggregate FunctionsGetting More Selective with WHEREBreaking It Down with GROUP BYFiltering Summarized Records with HAVINGSelecting Related Data with JoinsJoining Two TablesJoining Three TablesImproving Readability with Table AliasesThe Two Types of Join SyntaxUsing Outer JoinsSubqueriesSubqueries in WHERE CriteriaSubqueries Are Often Just AlternativesUsing Subqueries with INUsing Subqueries with NOT INCalculating New Columns with SubqueriesCombining Record Sets with UNIONWorking with NULL ValuesSetting Values to NULLTesting for NULL Values in SQL CodeTesting for NULL Values in CFML CodeWorking with Date ValuesSpecifying Dates in <cfquery> TagsDates in Query CriteriaUnderstanding ViewsCreating a ViewAdvantages of Using ViewsAdditional <cfquery> TopicsQuery of Queries (In Memory Queries)The BasicsUsing QofQ for Heterogeneous Data AnalysisSQL Statements Supported by Query of QueriesUsing QofQ to Reduce Database InteractionColdFusion Is Not a Database ServerA Real-World ExampleUsing QofQ with Nondatabase QueriesJoining Database and Nondatabase QueriesCase Sensitivity and Query of QueriesWorking with Column TypesReserved Words and Query of QueriesParameterized QueriesIntroducing <cfqueryparam>Using Parameterized Queries for Database IndependenceUsing Parameterized Queries for SecurityBuilding Query Results ProgrammaticallyUsing Database TransactionsUsing the <cftransaction> TagUsing Transactions for ID Number SafetyUsing Transactions for the Ability to UndoTransactions and CFML Error HandlingTransactions and Stored ProceduresUsing <cfdbinfo>Other Information Returned By <cfdbinfo>
42. Working with Stored Procedures
Why Use Stored Procedures?Advantages of Using Stored ProceduresModularity Is a Good ThingSharing Code Between ApplicationsIncreasing PerformanceMaking Table Schemas IrrelevantAddressing Security ConcernsComparing Stored Procedures to CFML Custom TagsCalling Stored Procedures from ColdFusion TemplatesTwo Ways to Execute Stored ProceduresWith the <cfstoredproc> TagWith the <cfquery> TagUsing the <cfstoredproc> TagStored Procedures That Return RecordsetsThe <cfprocresult> TagUsing <cfprocresult>Using <cfprocresult> with OracleStored Procedures That Take Parameters and Return Status CodesProviding Parameters with <cfprocparam>Ordinal Versus Named Parameter PositioningParameter Data TypesWrapping a Stored Procedure Call in a Custom TagMultiple Recordsets Are Fully SupportedCalling Procedures with <cfquery> Instead of <cfstoredproc>Using the ODBC/JDBC CALL CommandUsing Your Database’s Native SyntaxCreating Stored ProceduresCreating Stored Procedures with Microsoft SQL ServerCreating Your First Stored ProcedureDefining Status Codes, Input Parameters, and Output ParametersReturning Multiple Recordsets to ColdFusionCreating Stored Procedures with OracleCreating the ImportCustomers Stored ProcedureCreating the FetchRatingsList Stored ProcedureCreating Stored Procedures with Sybase
43. Using Regular Expressions
Introducing Regular ExpressionsWhat Are Regular Expressions?What Are Regular Expressions Similar To?What Are Regular Expressions Used For?What Do Regular Expressions Look Like?Do Regular Expressions Differ Among Languages?RegEx Support in ColdFusionWhere Can You Use Regular Expressions?Using Regular Expressions in ColdFusionFinding Matches with reFind()A Simple Example([\w._]+)\@([\w_]+(\.[\w_]+)+)Ignoring Capitalization with reFindNoCase()Getting the Matched Text Using the Found PositionGetting the Matched Text Using returnSubExpressionsWorking with Subexpressions([\w._]+)@([\w_]+(\.[\w_]+)+)Working with Multiple MatchesReplacing Text using reReplace()Using reReplace to Filter Posted ContentAltering Text with BackreferencesAltering Text Using a LoopSome Convenient RegEx UDFsUsing reFindString()Building a RegEx Testing PageCrafting Your Own Regular ExpressionsUnderstanding Literals and MetacharactersIncluding Metacharacters LiterallyIntroducing the Cast of MetacharactersMetacharacters 101: Character ClassesSpecifying Character Classes with [ ]Negating a Character Class with ^Common Character ClassesMetacharacters 102: QuantifiersUsing QuantifiersMaking Certain Portions Be Optional with ?Including One or More Matches with +Matching Any Number of Matches with *<b>[^<]*</b>Using Minimal Matching (Non-Greedy) QuantifiersMetacharacters 201: AlternationMetacharacters 202: Word BoundariesMetacharacters 203: String AnchorsUnderstanding Multiline ModeMetacharacters 301: Match ModifiersMetacharacters 302: Lookahead MatchingMetacharacters 303: Backreferences ReduxMetacharacters 304: Escape SequencesConcluding Remarks
44. ColdFusion Scripting
What Is <cfscript>?What You Can and Cannot Do with <cfscript>AssignmentOutputIf-Elseif-ElseSwitch-CaseFor LoopsWhile LoopsDo-While LoopsFor-In LoopsArray LoopsList LoopsQuery LoopsBreakContinueObject ProcessingException HandlingThrowing a Custom ExceptionRethrowing a Caught ExceptionFunctionsDifferences Between <cfscript> and JavaScriptWhy Use <cfscript>?Implementing <cfscript>Creating and Using VariablesCommenting CodeCalling ColdFusion FunctionsFlow Control Using <cfscript>if-elseif-else Constructsswitch-case ConstructsLoopsfor Loopswhile Loopsdo-while Loopsfor-in LoopsUsing continue and breakCommon Problems and SolutionsA Note About the {} SymbolsA Note About QuotesUser-Defined Functions in <cfscript>Where to Define UDFsException Handling in <cfscript>

45. Working with XML
XML Document StructureElements and Their AttributesNaming ConventionsReading and Creating XML DocumentsReading an XML File Using XmlParse()Creating XML Documents Using CFXMLCreating XML Documents Using XmlNew()Accessing XML Elements and AttributesUsing Array and Structure FunctionsUsing Special Characters in XMLEntity ReferencesCDATA SectionsXML NamespacesThe Default NamespaceWhen to Use NamespacesValidating XMLDTDsXML SchemasWalkthrough of a Basic SchemaValidating XML in ColdFusionValidating by Using XmlValidate()Embedding Schema Information within a DocumentMore XML Resources
46. Manipulating XML with XSLT and XPath
Understanding XPathExample: A CD CollectionXPath SyntaxSelections Using / and //Restrictions Using []Using XmlSearch() to Retrieve an Array of NodesTransforming XML into Content by Using XSLTCreating a Basic Transformation<xsl:transform><xsl:output><xsl:template> and <xsl:apply-templates><xsl:value-of><xsl:apply-templates> RevisitedPerforming the Transformation by Using XmlTransform()Ignoring Nodes in the HierarchyCreating a More Complex Transformation<xsl:if><xsl:choose>, <xsl:when>, and <xsl:otherwise><xsl:for-each> and <xsl:text><xsl:element> and <xsl:attribute>Using Named TemplatesMore XPath and XSLT Resources
47. Using WDDX
Introducing WDDXSome WDDX TerminologyWDDX PacketSerializingDeserializingTools and Languages Supported by WDDXWDDX or XML?Using WDDX with ColdFusionIntroducing the <cfwddx> TagCreating Your First WDDX PacketDeserializing Your First WDDX PacketSerializing and Deserializing Complex DataValidating Packets with IsWDDX()Anatomy of a WDDX PacketUsing WDDX Packets to Store Information in FilesAbout Storing Packets in FilesBuilding a Simple WDDX Function LibraryStoring Application Settings as a WDDX PacketWhat Have We Learned?Other Places to Store WDDX PacketsStoring Packets as Client VariablesStoring Packets in DatabasesExchanging WDDX Packets Among Web PagesThe Concept of a Back-End Web PageBack-End WDDX Pages vs. Web ServicesCreating a Back-End Web PagePutting the Back-End Web Page to UseUnderstanding the PossibilitiesBinary Content in WDDX Packets
48. Using JavaScript and ColdFusion Together
A Crash Course in JavaScriptJavaScript Language ElementsThe Basic StatementsStatements for LoopingStatements for Creating FunctionsStatements for Error HandlingJavaScript OperatorsUnderstanding the Core ObjectsUnderstanding JavaScript’s Relationship to Web BrowsersUnderstanding Scripting Object ModelsJavaScript Objects Available in Web PagesUnderstanding JavaScript EventsIncluding JavaScript Code in Web PagesBrowser Specific Features and Compatibility IssuesThat’s the End of the Crash CourseWorking with Form ElementsPassing Variables to JavaScriptPassing Numbers to JavaScriptPassing Strings to JavaScriptVariable Passing Example: Mortgage CalculatorPassing Arrays to JavaScriptPassing Structures to JavaScript as ObjectsPassing Enough Data to Relate Two Select BoxesCascading Selects, Approach #1: Creating an Array of FilmsCascading Selects, Approach #2: Using a Custom JavaScript ObjectPassing Data to JavaScript Using <cfwddx>Using this Form of <cfwddx>Is This Serialization?Cascading Selects, Approach #3: Passing the Data Via <cfwddx>Working with WddxRecordset ObjectsIncluding the wddx.js JavaScript FileUsing WddxRecordset MethodsCascading Selects, Approach #4: Using a WddxRecordset ObjectCreating Recordsets from ScratchWorking with WDDX Packets in JavaScriptSerializing Packets with WddxSerializerBuilding a Simple Recordset-Editing InterfaceProcessing the Posted Packet on the ServerDeserializing Packets with WddxDeserializerCascading Selects, Approach #5: Fetching Matching Films in Real TimeCascading Selects, Approach #6: Wrapping the WDDX Fetching in a Custom TagCalling CFCs from JavaScriptPassing Simple Variables to ColdFusionPassing Variables as URL ParametersPassing Variables as Form ParametersOpening Popup Windows
49. Using XForms
What’s Wrong with HTML Forms?What Is XForms?Why Use XForms?Barriers to XForms AdoptionCreating XForms in CFMLThe XForms Form DefinitionSkinning and Styling: Rendering the FormXSL: The Extensible Stylesheet LanguageWriting Extensions to XForms Using XSL
50. Internationalization and Localization
Why Go Global?What Is Globalization?“Secret” Globalization Language RevealedDancing the Globalization JigGoing GlobalLocalesDetermining a User’s LocaleLocale StickinessCLDR: The Common Locale Data RepositoryIBM’s ICU4JCollationCharacter EncodingNot Unicode? Not So SmartUnicodeResource BundlesUsing a Resource BundleWhat Isn’t a Resource Bundle?Resource Bundle FlavorsResource Bundle ToolsAddressesDate/TimeCalendarsGregorian CalendarBuddhist CalendarChinese CalendarHebrew CalendarIslamic CalendarJapanese CalendarPersian CalendarCalendar CFC UsageTime ZonesDatabasesMicrosoft AccessMicrosoft SQL ServerMySQLPostgreSQLOracleDisplayText SearchingWhat’s New in ColdFusion InternationalizationRelevant ColdFusion Tags/FunctionsBetter G11N PracticesWhat Not to DoMonolingual or Multilingual Web SitesLocale StickinessHTMLCFMLResource BundlesJust Use UnicodeWhen ColdFusion Isn’t Enough
51. Error Handling
Catching Errors as They OccurWhat Is an Exception?Introducing <cftry> and <cfcatch>Basic Exception HandlingA Typical ScenarioA Basic Template, Without Exception HandlingAdding <cftry> and <cfcatch>Understanding What Caused the ErrorWriting Templates That Work Around ErrorsWorking Around a Failed QueryWorking Around Errors SilentlyWriting Templates That Recover from ErrorsNesting <cftry> BlocksDeciding Not to Handle an ExceptionExceptions and the Notion of Bubbling UpUsing <cfrethrow>Examining Exception Messages to Improve UsabilityUsing Exception Handling In UDFsCreating the UDFsUsing the UDFsThrowing and Catching Your Own ErrorsIntroducing <cfthrow>Throwing Custom ExceptionsCreating Custom Exception FamiliesCustom Exceptions and Custom TagsExceptions and Database Transactions
52. Using the Debugger
OverviewTraditional Forms of DebuggingIntroducing Step DebuggingInstalling the DebuggerConfiguring ColdFusion and the DebuggerConfiguring the ColdFusion AdministratorEnable Debugger SettingsConfiguring RDS to Secure the ServerIncrease Maximum Request TimeoutsSpecial Considerations for MultiServer DeploymentConfiguring EclipseConfiguring RDSDebug MappingsDebug Settings: Variables Shown and Stop on ErrorManage Debug ConfigurationsUsing the DebuggerOpening a file (within a Project)Defining a New ProjectSwitching to the Debug PerspectiveOpening a FileSetting a BreakpointStarting a Debugging SessionWhen Starting a Debug Session FailsBrowsing a Page to Be DebuggedWhat You, the Developer, SeeWhat the User SeesBeware Page TimeoutsStepping Through CodeStepping Line by Line: Step Over, Step IntoStep Return and ResumeObserving Variables and ExpressionsThe Variables PaneThe Expressions PaneChanging Variables on the FlyObserving the Debug Output BufferServer Output BufferBrowserStopping the DebuggerTerminating Debugging Within the DebuggerForcing Termination from the Server
53. Managing Your Code
Coding StandardsSeparate Processing-oriented Code from Presentation-oriented CodeAvoid Overuse of Subqueries in a Select StatementUSE <cfQueryparam>Don’t Reassign Variable Values with Each RequestDon’t Use If Statements to Test for the Existence of VariablesUse <cfparam> at the Top of Your TemplatesAlways Scope Your VariablesUse <cfswitch> and <cfcase> in Place of <cfif>Don’t Overuse the # SignAvoid Overuse of the <cfoutput> TagReduce White Space in Your OutputComment, Comment, CommentDocumentationVersion ControlPlanning for Version ControlVersion-Control Systems
54. Development Frameworks
Why Use a Development Methodology or Framework?The Model Viewer Controller Design PatternFuseboxHow Fusebox 5.1 WorksUsing Fusebox to Display a List of ContactsFusebox BenefitsDrawbacksMach-IIHow Mach-II WorksMach-II Building BlocksFurther Exploration of the Contact Manager ExampleMach-II BenefitsMach-II DrawbacksModel-Glue: UnityHow Model-Glue WorksA Simplified Contact Manager in Model-GlueSolving Common OOP Problems with Model-Glue: UnityModel-Glue: Unity BenefitsModel-Glue: Unity DrawbacksIssues to Consider with All Development FrameworksConclusions
Appendices
C. ColdFusion MX 8 and ICU4J-Supported Locales
Introduction
D. Locale Differences
Introduction
IX. Creating High-Availability Applications
55. Understanding High Availability
High Availability ExplainedHow Do I Know My Server Load?Load and Performance TestingThe High-Availability Plan: Seven Must-Haves for Building High-Availability SolutionsImplement a Load-Balanced Web-Server ClusterSoftware-Based Load BalancingHardware-Based Load BalancingCombination Software and Hardware Load BalancingChoose a Network Provider with Circuit RedundancyInstall a FirewallUse RAID Level 5 on Database ServersCalculate Acceptable RiskRedundant Server Components vs. Commodity ComputingDisaster PlanningSome Truths About Web HostingActive Site MonitoringThe Quality-of-Service GuaranteeWhat Next?
56. Monitoring System Performance
Monitoring Your ColdFusion 8 ServerDeveloping a BaselineHistorical AnalysisAnalyzing ColdFusion Log FilesOther LogsJRun MetricsAnalyzing Web Server Log FilesActive MonitoringServer ProbesSetting Up a Probe to Verify ContentOther ProbesSetting Up a System Probe to Verify External ConnectivityThe ColdFusion Server MonitorStarting MonitorsTracking Memory UtilizationMonitoring the DatabaseMonitoring ColdFusion ErrorsUsing Server Statistics for TuningColdFusion Monitor Alerts and SnapshotsServer Monitor APIDeciding What to Do NextSome Issues to Consider When Looking for Performance ProblemsTypical Bottlenecks
57. Scaling with ColdFusion
The Importance of ScalingScaling ConsiderationsTiered Application ArchitectureFront-End Servers Vs. Back-End ServersServer and Hardware ComponentsConsiderations for Choosing a Load-Balancing OptionRound-Robin DNSUser-Request Distribution AlgorithmsSession State ManagementFailoverMixed Web Application EnvironmentsHow to Write ColdFusion 8 Applications That ScaleCode OrganizationModularityMultithreading and Asynchronous ProcessingStreamlined, Efficient CodeAvoiding Common BottlenecksQuerying a DatabaseAbsolute Path, Relative Path, and Other LinksNesting Files Too DeeplyKeeping Web Site Servers in SyncWhat to Maintain?Archive and DeployOther OptionsMultiple ColdFusion 8 InstancesHardware vs. Software Load Balancing OptionsColdFusion 8 Load Balancing and Software-Based Load BalancingDedicated Load-Balancing HardwareScaling with ColdFusion 8 Load BalancingUnderstanding ColdFusion 8 Load BalancingConfiguring a Load Balanced ClusterHardware Load-Balancing OptionsLocalDirectorLoad-Balancing AlgorithmsBig IPFinishing Up
58. Scaling with J2EE
Benefits of Deploying ColdFusion on J2EE Application ServerStandards-BasedMultiple PlatformsSupport for Legacy Infrastructure and Prior InvestmentsInheritance of Multiplatform InteroperabilityDevelopment Values of ColdFusion 8 on J2EEDeploying Rich Internet Applications in JavaExtending the PlatformEase of DevelopmentLeveraging Diverse Developer Skill SetsUsing J2EE Built-In Security FeaturesImproving Web Site ScalabilityTiered InfrastructureNative Load Balancing and FailoverHow ColdFusion Lives on Top of Java ServerCoding Implications from the Developer’s PerspectiveJ2EE Session ManagementScaling with ColdFusion and JRunConfiguring a JRun ClusterManaging a JRun ClusterScaling with Other Java Application ServersTuning the Java Virtual MachineIntroducing the JVMTuning Garbage CollectionSelecting a CollectorTesting and TuningSummary
59. Managing Session State in Clusters
What Is Session State?The History of Managing StateEnter CookiesWhy Maintain State?Options for Managing Session StateA Little About Server-Side ColdFusion CLIENT, APPLICATION, SERVER, and SESSION VariablesEmbedding Parameters in a URL or a FORM PostCookiesSESSION Variables vs. CLIENT VariablesKeeping the User on the Same MachineUsing a Central CLIENT Variable RepositoryJava SessionsSerializing ColdFusion ComponentsHardware-Based Session ManagementHybrid Solutions
60. Deploying Applications
Deployment OptionsColdFusion ArchivesDefining the ArchiveModifying the DefinitionDeleting the DefinitionBuilding the ArchiveDeploying the ArchiveJ2EE ArchivesDefining J2EE ArchivesModifying the DefinitionDeleting the DefinitionJ2EE Archive Definition ConsiderationsDeploying the ArchiveJ2EE Archive Deployment ConsiderationsColdFusion CompilerCompiling Sourceless TemplatesPrecompiling ColdFusion TemplatesColdFusion Template Deployment ConsiderationsCustomizing the cfcompile ScriptChoosing the Right Deployment Option
X. Ensuring Security
61. Understanding Security
Security RisksWhat Is ColdFusion’s Concern and What Is NotEncryptionCleartext RisksColdFusion Encryption FunctionsHow Encrypt() and Decrypt() WorkEncrypt() and Decrypt()ParametersstringkeyalgorithmencodingIVorSaltiterationsColdFusion’s Hash() FunctionstringalgorithmencodingForcing a Page Request to Use SSLSSL LiabilitiesSecuring ColdFusion in Distributed ModeBrowser ValidationCross-Site Scripting (XSS)The Scriptprotect SettingForm and URL HacksValidation TechniquesFile UploadsAuthentication and Authorization
62. Securing the ColdFusion Administrator
Administrator Security OptionsAdministrator PageRDS PageUser Manager PageCreating a New User
63. ColdFusion Security Options
ColdFusion Security FrameworkDevelopment SecurityUser SecurityAbout AuthenticationAbout AuthorizationSecurity Tags and FunctionsAuthenticating with <cflogin>Storing Login InformationBest Practice: ColdFusion Sessions and CFLOGINLogging OutBasic ColdFusion Login ExampleColdFusion Login Wizard ExtensionColdFusion Login Wizard Example
64. Creating Server Sandboxes
Understanding SandboxesUnderstanding File and Directory PermissionsChanges in ColdFusion MXChanges in ColdFusion MX 7Changes in ColdFusion 8ColdFusion Edition DifferencesSecurity DefaultsCreating and Securing Applications Using SandboxesEnabling Sandbox SecurityAdding a SandboxConfiguring Your SandboxThe Blackbox Sandbox Example
65. Security in Shared and Hosted Environments
CFML-Based RisksSecuring ColdFusion ServiceFactorySecuring RDSEnabling RDS Password SecurityDisabling RDS on Production ServersApplying ColdFusion Sandbox SecuritySecuring Multiple Server ConfigurationsConfiguration Issues for Multi-homed Web ServersProblems with the Stand-Alone Web Server and Web Server Path CachingIssues with ColdFusion Administrator AccessAccess to CFIDE/scriptsConfiguring ColdFusion for Multiple HostsMicrosoft IIS 5.x, 6.0, and 7.0Creating the JRun Connector ISAPI Filter and the JRunScripts Virtual DirectoryAdding the ColdFusion ExtensionsSun Java System Web ServerOther IssuesRunning ColdFusion as a UserAdobe Flex and LiveCycle IntegrationFlash Gateway AdaptersFlash Gateway SecurityDisabling JSP FunctionalitySecuring the CFIDE DirectoryLimiting Session Timeout ValuesRemoving Help Docs and Example ApplicationsSetting Debugging RestrictionsEncrypting ColdFusion TemplatesHandling Error MessagesSetting Custom Tag PathsSetting the File Name ExtensionAdding the Default DocumentStaying Informed
66. Using the Administrator API
Understanding the Admin APIBuilding Custom Admin ConsolesThe Façade ComponentSecurity Implications for the Admin APIColdFusion ServiceFactoryAdmin API Security RisksSecuring the Admin APIColdFusion Administrator SecuritySecuring the Admin API DirectorySecuring the Façade ComponentAdmin API Best PracticesAdmin API ConfigurationCustom Console Coding Best Practices
XI. Extending ColdFusion
67. Using Server-Side HTTP and FTP
Overview<cfhttp>Errors and Results for a <cfhttp> CallUsing the <cfhttpparam> TagPutting <cfhttp> to UseUsing the GET MethodBuilding a Query from a Text FileUsing the POST MethodCreating Intelligent Agents with <cfhttp>Server Interaction with Intelligent AgentsInteracting with Planned AgentsSummarizing the <cfhttp> Tag<cfftp>Connection Operations with <cfftp>File and Directory Operations with <cfftp>Errors and Results for a <cfftp> CallPutting <cfftp> to UseDisplaying Available FilesUsing <cfftp> to Download a FileUsing <cfftp> to Upload a FileSecure FTP ConnectionsSummarizing the <cfftp> Tag
68. Creating and Consuming Web Services
Understanding Web ServicesEvolution of the WebBusiness ModelsProvider ModelConsumer ModelSyndication ModelCore TechnologiesHTTP (Hypertext Transfer Protocol)XML (Extensible Markup Language)SOAP (Simple Object Access Protocol)WSDL (Web Services Description Language)UDDI (Universal Description, Discovery, and Integration)WSDLCreating Web ServicesComponentsDefining Complex Data TypesConsuming Web ServicesConsult the WSDLInvoking ColdFusion Web ServicescreateObject()/<cfobject><cfinvoke>Complex Data TypesInvocation with DreamweaverInvoking .NET Web ServicesInvoking Java Web ServicesDatabase Web ServicesDealing with Generated WSDLWorking with SOAP RequestsCalling Web Services with Nillable ArgumentsBest PracticesError HandlingConfiguring in ColdFusion AdministratorSecurity
69. Working with Feeds
Why Use Feeds?Flavors of RSS and AtomCreating FeedsReading FeedsUsing Dublin Core and iTunes ExtensionsDublin Core ExtensionsiTunes Extensions
70. Interacting with the Operating System
Introduction to <cffile>The Varied Faces of <cffile>Accessing the Server’s File SystemReading and Writing FilesCopying, Moving, Renaming, and Deleting FilesUploading FilesWhat If the File Already Exists on the Server?Determining the Status of a File UploadBuilding an Upload InterfaceUsing File FunctionsGetting File InformationReading Files with <cfloop>Manipulating Folders on the Server with <cfdirectory>Using <cfdirectory>Getting the Contents of a DirectoryBuilding a Simple File ExplorerExecuting Programs on the Server with <cfexecute>Interacting with the System Registry Using <cfregistry>Working with Zip FilesCreating Zip FilesExpanding Zip FilesListing, Reading, and Deleting from Zip FilesWorking with <cfzipparam>
71. Server-Side Printing
OverviewUsing <CFPRINT>Printing to the Default PrinterPrinting to Another PrinterControlling Printer CapabilitiesPrimary <CFPRINT> AttributesPrinter-Dependent AttributesExample: Determining One Printer’s Available AttributesPassing Printer-Dependent Attributes with AttributeStructThe fidelity AttributeJava Print Services and AttributesAdditional <CFPRINT> AttributesDetermining Available PrintersDetermining Available PrintersWhat About Other Printers?Printer PermissionsRelated FeaturesPrint LogUsing <CFTHREAD>Printing Other than PDFs
72. Interacting with Directory Services
Understanding LDAPDirectory StructuresName ConventionsUsing <cfldap>Tag OverviewThe ACTION AttributeThe SCOPE AttributeThe MODIFYTYPE AttributeThe SECURE AttributeQuerying Public LDAP ServersInteracting with DirectoriesActive DirectoriesQuerying DirectoriesAdding EntriesModifying EntriesModifying Existing Attribute ValuesModification by Adding EntriesModifying Entries with ModifyTypeModifying a Distinguished NameDeleting EntriesBuilding an LDAP CFC
73. Integrating with Microsoft Exchange
ColdFusion Exchange Server Tags<cfexchangeconnection><cfexchangecalendar><cfexchangecontact><cfexchangefilter><cfexchangemail><cfexchangetask>Managing Exchange Server ConnectionsConnection RequirementsPersistent ConnectionsTransient ConnectionsDelegate Account AccessManaging Exchange Server ItemsRetrieving Exchange Items and AttachmentsDeleting Exchange ItemsModifying Exchange ItemsManaging Meeting Notifications and Requests
74. Integrating with .NET
.NET FundamentalsAccessing .NET ServicesColdFusion and .NET Local Integration ExampleColdFusion and .NET Remote Integration Example.NET DataTable to ColdFusion Query Conversion Example.NET Web Service: Returning a Simple TypeColdFusion and .NET Web Service Integration Example.NET Web Service: Returning a Complex TypeColdFusion Web Service: Returning a Complex TypeSumming Up
75. Extending ColdFusion with COM
Understanding COMWorking with COM Objects in ColdFusionUsing COM with <cfobject>Using COM with CreateObject()Setting and Retrieving PropertiesNested Attributes and Previous Versions of ColdFusionNested Attributes and ColdFusion 8Using MethodsColdFusion Is Mostly Typeless; COM Is Mostly NotRegistering ObjectsViewing Objects with OLEViewAccessing Remote ObjectsNew Techniques for Improving Performance and ReliabilityStoring Objects in Shared Memory ScopesCreating a Custom Tag to Make the Practice EasierCreating Java Stubs for COM ObjectsCreating the Java StubUsing the StubUsing CFCs to Represent COM ObjectsPassing Complex Datatypes to COM ObjectsCommon Questions and ProblemsReleasing COM ObjectsTroubleshooting COMCOM Error 0x5 (Access Is Denied)COM Error 0x80040154 (Class Not Registered)COM Error 0x800401F3 (Invalid Class String)
76. Integrating with Microsoft Office
Office Open XMLCreating a New OOXML ContainerAccessing an Existing ContainerWord OOXML ContainersCreating a New Word OOXML FileViewing a Word OOXML FileCreating a Dynamic Word OOXML DocumentExcel OOXML ContainersCreating a Dynamic Excel OOXML DocumentBuilding the OOXMLExcel ComponentCreating a Worksheet as a StructureCalling the OOXMLExcel ComponentAutomation
77. Extending ColdFusion with CORBA
Introduction to CORBAWho Is the OMG?How CORBA WorksObject Request BrokerOMG Interface Definition LanguageConfiguring ColdFusion to Work with CORBAWorking with CORBA in ColdFusionHandling CORBA Exceptions
78. Extending ColdFusion with Java
Using Java Class ObjectsInstantiating Objects and Calling Methods<cfobject> and CreateObject(): Separated at Birth?Working with ConstructorsA Practical Example: Creating HistogramsUsing External Java ClassesA Practical ExampleManaging Method-Selection ProblemsUsing JavaBeansUsing Tag LibrariesFinding Tag LibrariesInstalling the Tag LibraryImporting the Library with <cfimport>Using the Tag Library’s TagsUsing the Google Map Tag LibraryCreating Your Own JSP Tag LibrariesAccessing the Underlying Servlet ContextIntegrating with Java Servlets and JSP PagesUnderstanding Which Variables Can Be SharedSharing REQUEST VariablesShared Variables and Case-SensitivityShared Variables and Data TypesShared Variables and Multifaceted ValuesA Simple ExampleIntegrating with EJBsA Simple ExampleMaking It Easier with a Custom TagWriting Java CFX Tags
79. Extending ColdFusion with CFX
What Are CFX Tags?When to Write (and Avoid Writing) a CFX TagChoosing Between C++ and JavaIntroducing the CFX APIWorking with the Tag’s AttributesReturning Variables and TextWorking with QueriesWorking with Exceptions and DebuggingWriting CFX Tags with JavaGetting StartedWriting the Java CodeUnderstanding the Java CodeCompiling the CFX TagRegistering the New TagUsing the New TagA Word on ExceptionsReturning Query ObjectsWriting the Java CodeUsing the New Tag in ColdFusionWriting CFX Tags with Visual C++Getting StartedInstalling the Tag Wizard and LibrariesStarting a New CFX Tag ProjectWriting the C++ CodeCompiling Your New CFX TagRegistering the New TagUsing the New TagOther C++ ExamplesGenerating Debug OutputReturning Structures from CFX TagsCFX Tags Are Smart, TooAn Important WarningUsing CFX Tags Safely: Locking and Thread SafetyUnderstanding Thread SafetyLocking CFX Tags with <cflock>If the CFX Tag Works with FilesKeeping the Page Itself in MindUsing CFX Tags with Previous Versions of ColdFusion
80. Working with Gateways
What Is an Event Gateway?Categories of Event GatewaysCreating a Simple Gateway ApplicationCreating an Event Gateway InstanceCreating an Initiator Application Using the ColdFusion GatewayDebugging CFML Applications for Event GatewaysCreating Your Own Custom GatewaysColdFusion Event Gateway ArchitectureEvent Gateway ElementsGateway InterfaceGateway Services ClassCFEvent ClassGateway Helper ClassGateway Configuration FilesGateway Development ToolsA POP3 Custom GatewayDeploying a Custom Event Gateway
81. Integrating with SMS and IM
Understanding IMUnderstanding PresenceCreating a Development EnvironmentXMPP ClientsDefining IM GatewaysThe Gateway Configuration FileCreating the Gateway InstanceCreating Your First IM ApplicationGenerating IM MessagesMaking New FriendsUser Status ManagementThe IM Gateway HelperBuddy List ManagementGateway Status ManagementPermission ManagementGateway ConfigurationCreating Interactive ApplicationsUnderstanding SMSTesting Your SMS ApplicationsGetting Your Messages OutDefining SMS GatewaysGenerating SMS MessagesResponding to SMS MessagesEnsuring Delivery of Your MessagesSessions and SMSExtending Your Application Even Further

Content preview from Adobe ColdFusion 8 Web Application Construction Kit, Volume 3: Advanced Application Development

Chapter 61. Understanding Security

<feature><title>In This Chapter</title>

</feature>

It is important to understand that security risks are inherent to any application running on a networked machine. This remains true of all Internet applications. The risks do not apply only to the code, database, servers, and infrastructure of the application. The risks are just as real to end users because they often use the applications to enter sensitive information, which then needs to be transmitted back to the servers. In this time of increasing cyber-terrorism, protecting sensitive data should be a chief priority for Web applications.

Security Risks

The reality of Internet ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Adobe ColdFusion 9 Web Application Construction Kit, Volume 2: Application Development

Publisher Resources

ISBN: 9780321550057Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Adobe ColdFusion 8 Web Application Construction Kit, Volume 3: Advanced Application Development

by Ben Forta, Charlie Arehart, Jeffrey Bouley, Jeff Tapper, Matt Tatam, Raymond Camden, Robi Sen, Sarge Sargent

Chapter 61. Understanding Security

Security Risks

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.