1. Oğuz Demirkapı Sr. Application Developer, TeraTech 1

2. TeraTech  Sr. Application Developer at TeraTech  Coding since ‘85, CGI Programming since ’94  CF Developer since ’97  Founder and Manager (prev) of CFUG for Turkey  Interested in ColdFusion, Flex, Ajax, Frameworks, i18N, L10N, g13N  Have big interest in epistemology 2

3. TeraTech  What is goal?  History  ColdFusion Code Deployment Methods  Code Deployment Details  Sample Code 3

4. TeraTech  Code deployment may needs different scenarios and we will consider a sourceless code deployment in an easy way.  We also want to resolve misunderstanding points on code deployment techniques.  Pre compiled code advantages would be interesting specially for commercial organizations. 4

5. TeraTech  CFEncode and encrypted code  ColdFusion Archives (CAR files)  Pre-compiling ◦ ColdFusion MX 7  Souceless Deployment ◦ CFCompile ◦ ColdFusion MX 7 and up ◦ BlueDragon 6.1 and up 5

6. TeraTech  Direct Source Code (common usage)  Encyrpted Code (CFEncode)  CAR (ColdFusion Archive)  EAR/WAR Packaging ◦ Only in ColdFusion MX 7 Enterprise Edition  Pre-compiled and Sourceless Deployment ◦ In all version of ColdFusion MX 7 6

7. TeraTech  Can be found at ◦ “cf_root/bin” (ColdFusion MX) ◦ “cf_webapp_root/WEB-INF/cfusion/bin” (JRun)  ColdFusion code encryption  Good for basic encryption and still using by lots of companies to protect code  Easy to decode (http://downloads.securityfocus.com/vulnerabilities/ exploits/cfdecrypt.c)  Not secure enough 7

8. TeraTech  Allaire Cold Fusion Template Header Size: New Version.ȆüVHE5:[‰ø„ñ.hqؤä8X°É¿Ìò©‰P^qv.ßNÊÒ‡ù F.Íû'ÉÊE´Žå¿ˆpcw..*¬Ó¦N47Â{{c;.û=Ò“š.ü.ù>eÐ×åR— ˜î¥¡’¡è‡rB^T.½¸6ÛºÀE’)ñf{.âÑôÚ<Üû¶.Y%ŽQÄmBœ4.H.P’.„ ÷ီ¯»~"ß<"©:¥ºmZLìBXIÂÕ¿|°ÍãˆÁ6wÜX..zeA]¸ó­ ‡[ªŒ‹.×:Oñ.å.ç.f×.¾ w\Œ·.Êó»¢È³‚)8...®Ü—ã\÷.*ÝÐ1Ì4&— ÜÓ¸!®.0¸‰.næ‘YU&­.½ÿõ¨.5Öû].¥ ›ÎA/¼¸.Þö‚›í1.Ù’ÈŒ v½Äš ×¢Ñ!Lê«ÚAÁH¬„ 8

9. TeraTech  Basically J2EE Package Deployment  Includes ColdFusion runtime  Deploy to J2EE Servers such as JRun, TomCat, WebLogic, WebSpere etc.  The J2EE packaged deployment can be sourceless (optional) and can also omit the CF Administrator (optional).  Create at any ColdFusion Server but deploy only Enterprise edition  Need separate license for ColdFusion runtime (otherwise works a developer edition) 9

10. TeraTech  Compile Source Code (CFM,CFC, and CFR) to create Java byte code  The byte code is processed by the JVM - it is not interpreted by the CF runtime  But still needs ColdFusion MX 7 to run compiled code and not compatible with old ColdFusion MX versions  Deploy into any ColdFusion MX 7 server  No need for any extra license 10

11. TeraTech  Can be found at ◦ “cf_root/bin” (ColdFusion MX) ◦ “cf_webapp_root/WEB-INF/cfusion/bin” (JRun)  Can be run also for directories  Default action is recursively on defined directory  Default compile directory is ◦ “cf_webapp_root/WEB-INF/ cfclasses” 11

12. TeraTech  Easy compile: ◦ cfcompile webroot [directory-to-compile] ◦ C:\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB- INF\cfusion\bin\cfcompile.bat C:\SERVER\Domains\sourceless C:\SERVER\Domains\sourceless\codedir C:\SERVER\Domains\sourceless\codedir\sample.cfm... successful 1 total 1 elapsed 2.453 sec  Sourceless Compile: ◦ cfcompile -deploy webroot directory-to-compile output-directory ◦ C:\JRun4\servers\cfusion\cfusion-ear\cfusion-war\WEB- INF\cfusion\bin\cfcompile.bat -deploy C:\SERVER\Domains\sourceless C:\SERVER\Domains\sourceless\codedir 12

13. TeraTech Sample Code #loopid#: #Now()# 13

14. TeraTech - SourceFile/C:\SERVER\Domains\sourceless\codedir\sample.cfmcfsample2ecfm354487559coldfusion/runtime /CFPage ()V thisLcfsample2ecfm354487559;LocalVariableTableCodebindPageVariablesD(Lcoldfusion/runtime/Variable Scope;Lcoldfusion/runtime/LocalScope;)Vcoldfusion/runtime/CfJspPage LOOPIDLcoldfusion/runtime/Variable;bindPageVariabler(Ljava/lang/String;Lcoldfusion/runtime/VariableScop e;Lcoldfusion/runtime/LocalScope;)Lcoldfusion/runtime/Variable; com.macromedia.SourceModTimem+ pageContext#Lcoldfusion/runtime/NeoPageContext;!" #getOut()Ljavax/servlet/jsp/JspWriter;%&javax/servlet/jsp/PageContext 14

15. TeraTech  ColdFusion MX 7 and Up ◦ Both Standard and Enterprise Editions  BlueDragon Standard Edition (Server JX) ◦ Not in BlueDragon (free) Server ◦ Starting from version 6.1 (2004) 15

16. TeraTech  Let us check some sample code and usage … 16

17. TeraTech  Macromedia LiveDocs (http://livedocs.adobe.com/coldfusion/7/htmldocs/00001762.htm)http://livedocs.adobe.com/coldfusion/7/htmldocs/00001762.htm  Designing ColdFusion Applications for Deployment as EAR Files (http://www.adobe.com/devnet/coldfusion/articles/ear.html)http://www.adobe.com/devnet/coldfusion/articles/ear.html  Protecting Applications with WAR and EAR Packaging and Sourceless Deployment (http://www.adobe.com/devnet/coldfusion/articles/clustering_06.html)http://www.adobe.com/devnet/coldfusion/articles/clustering_06.html  Deploying Applications with ColdFusion MX 7 (http://coldfusion.sys- con.com/read/48654.htm)http://coldfusion.sys- con.com/read/48654.htm  Sourceless / J2EE Deployment (http://corfield.org/blog/index.cfm/do/blog.entry/entry/Sourceless__J2E E_Deployment)http://corfield.org/blog/index.cfm/do/blog.entry/entry/Sourceless__J2E E_Deployment 17

18. TeraTech ? oguz.demirkapi@teratech.com 18