How to Encrypt or Compile ColdFusion Files - Revision history

Jakeh: /* Using cfcompile.bat */

2014-06-09T21:48:41Z

‎Using cfcompile.bat

Marcusc: /* Using cfencode.exe */

2014-06-09T20:28:16Z

‎Using cfencode.exe

Marcusc: /* Using cfcompile.bat */

2014-06-09T20:27:55Z

‎Using cfcompile.bat

Jakeh: /* Using cfencode.exe */

2014-05-06T19:27:50Z

‎Using cfencode.exe

Jakeh: /* Using cfcompile.bat */

2014-05-06T19:27:24Z

‎Using cfcompile.bat

Jakeh at 00:40, 15 January 2014

2014-01-15T00:40:35Z

Jakeh: /* Using cfcompile.bat */

2014-01-06T23:48:01Z

‎Using cfcompile.bat

Jakeh at 23:45, 6 January 2014

2014-01-06T23:45:41Z

Jakeh: /* Using cfencode.exe */

2014-01-06T23:43:51Z

‎Using cfencode.exe

Jakeh: Created page with "If you wish to obscure your ColdFusion source code before deploying it to Hostek, you have a couple options: '''cfcompile.bat''' and '''cfencode.exe'''. In order to use either..."

2014-01-06T23:43:31Z

Created page with "If you wish to obscure your ColdFusion source code before deploying it to Hostek, you have a couple options: '''cfcompile.bat''' and '''cfencode.exe'''. In order to use either..."

New page

If you wish to obscure your ColdFusion source code before deploying it to Hostek, you have a couple options: '''cfcompile.bat''' and '''cfencode.exe'''. In order to use either of these options, you must first download and install a copy of ColdFusion to your local computer. To obtain a free developer-edition of Coldfusion, follow the link at [http://www.adobe.com/support/coldfusion/downloads.html#cf10productdownloads Adobe's ColdFusion Support Center].

==Using cfcompile.bat==
The cfcompile.bat utility will compile all '''.cfm''' and '''.cfc''' files within a given directory into Java bytecode. This has the effect of making your source code unreadable, and it also prevents ColdFusion from having to compile your ColdFusion files on first use which provides a small performance enhancement.

Cfcompile.bat uses the following syntax:
*Example: <pre>c:\ColdFusion10\cfusion\bin\cfcompile.bat -deploy HOSTEKWEBROOT SOURCE COMPILED</pre>

In the above example, make the following changes:
*'''HOSTEKWEBROOT''' should be the path to your site's '''wwwroot''' folder at Hostek.
**Eg: d:\home\mysite.com\wwwroot
*'''SOURCE''' should be the path to the un-compiled ColdFusion site files on your computer.
**Eg: c:\SOURCE
*'''COMPILED''' should be where cfcompile.bat will save the compiled ColdFusion files.
**Eg: c:\COMPILED

Once cfcompile.bat has finished executing, you can copy the contents of your COMPILED directory to your site's Web root at Hostek (through FTP). Once the compiled files have been uploaded, ColdFusion will begin using them immediately.

==Using cfencode.exe==
The cfencode.exe utility will apply basic encryption to a specific file or directory. If used to encrypt a directory, it will apply encryption to '''ALL''' files in the directory which can break any JS, CSS, images, or other non-ColdFusion files. As such, use the following directions to encrypt ONLY your '''.cfm''' and '''.cfc''' files:

#Use robocopy to copy only your site's '''.cfm''' and '''.cfc''' files to a temporary working directory. If you do not have robocopy, it can be easily installed as part of the [http://www.microsoft.com/en-us/download/details.aspx?id=17657 Windows Server Resource Kit].
#*'''Example''': <pre>C:\Program Files (x86)\Windows Resource Kits\Tools\robocopy.exe c:\SOURCE c:\ENCODED *.cfm *.cfc /E</pre> (Where '''SOURCE''' is the location of your unmodified site files, and '''ENCODED''' is your temporary working directory)
#Run cfencode.exe against the files in your temporary working directory
#*'''Example''': <pre>c:\ColdFusion10\cfusion\bin\cfencode.exe c:\ENCODED /r /v 2</pre> (Where '''ENCODED''' is the path to your temporary working directory from the previous step)
#At this point, you can copy the contents of c:\ENCODED to your site at Hostek (through FTP), and the server will begin using the encrypted versions of your '''.cfm''' and '''.cfc''' files immediately.

''Note'': Encrypting your site files does not guarantee absolute security of your source code, but it does add a layer of obfuscation to help prevent unauthorized individuals from viewing the source.

@@ Line 8: / Line 8: @@
 Cfcompile uses the following syntax:
 *Example: <pre>c:\ColdFusion11\cfusion\bin\cfcompile.bat -deploy HOSTEKWEBROOT SOURCE COMPILED</pre>
 In the above example, make the following changes:

@@ Line 7: / Line 7: @@
 Cfcompile uses the following syntax:
-*Example: <pre>c:\ColdFusion10\cfusion\bin\cfcompile.bat -deploy HOSTEKWEBROOT SOURCE COMPILED</pre>
+*Example: <pre>c:\ColdFusion11\cfusion\bin\cfcompile.bat -deploy HOSTEKWEBROOT SOURCE COMPILED</pre>
 In the above example, make the following changes:

← Older revision		Revision as of 19:27, 6 May 2014
Line 30:		Line 30:
	#At this point, you can copy the contents of c:\ENCODED to your site at Hostek (through FTP), and the server will begin using the encrypted versions of your '''.cfm''' and '''.cfc''' files immediately.		#At this point, you can copy the contents of c:\ENCODED to your site at Hostek (through FTP), and the server will begin using the encrypted versions of your '''.cfm''' and '''.cfc''' files immediately.

−	''Note: Encrypting your site files does not guarantee absolute security of your source code, but it does add a layer of obfuscation to help prevent unauthorized individuals from viewing the source.''	+	''Note: Encrypting your site files with cfencode does not guarantee absolute security of your source code, but it does add a layer of obfuscation to help prevent unauthorized individuals from viewing the source.''

← Older revision		Revision as of 00:40, 15 January 2014
Line 1:		Line 1:
		+	__FORCETOC__
		+
	If you wish to obscure your ColdFusion source code before deploying it to Hostek, you have a couple options: '''cfcompile.bat''' and '''cfencode.exe'''. In order to use either of these options, you must first download and install a copy of ColdFusion to your local computer. To obtain a free developer-edition of Coldfusion, follow the link at [http://www.adobe.com/support/coldfusion/downloads.html#cf10productdownloads Adobe's ColdFusion Support Center].		If you wish to obscure your ColdFusion source code before deploying it to Hostek, you have a couple options: '''cfcompile.bat''' and '''cfencode.exe'''. In order to use either of these options, you must first download and install a copy of ColdFusion to your local computer. To obtain a free developer-edition of Coldfusion, follow the link at [http://www.adobe.com/support/coldfusion/downloads.html#cf10productdownloads Adobe's ColdFusion Support Center].

← Older revision		Revision as of 23:48, 6 January 2014
Line 16:		Line 16:

	Once cfcompile.bat has finished executing, you can copy the contents of your COMPILED directory to your site's Web root at Hostek (through FTP). Once the compiled files have been uploaded, ColdFusion will begin using them immediately.		Once cfcompile.bat has finished executing, you can copy the contents of your COMPILED directory to your site's Web root at Hostek (through FTP). Once the compiled files have been uploaded, ColdFusion will begin using them immediately.
		+
		+	More details about using cfcompile.bat can be found in [https://learn.adobe.com/wiki/display/coldfusionen/Deploying+ColdFusion+Applications#DeployingColdFusionApplications-Usingthecfcompileutility ColdFusion's Documentation].

	==Using cfencode.exe==		==Using cfencode.exe==

@@ Line 27: / Line 27: @@
 #*'''Example''': <pre>C:\Program Files (x86)\Windows Resource Kits\Tools\robocopy.exe c:\SOURCE c:\ENCODED *.cfm *.cfc /E</pre> (Where '''SOURCE''' is the location of your unmodified site files, and '''ENCODED''' is your temporary working directory)
 #Run cfencode.exe against the files in your temporary working directory
-#*'''Example''': <pre>c:\ColdFusion10\cfusion\bin\cfencode.exe c:\ENCODED /r /v 2</pre> (Where '''ENCODED''' is the path to your temporary working directory from the previous step)
+#*'''Example''': <pre>c:\ColdFusion11\cfusion\bin\cfencode.exe c:\ENCODED /r /v 2</pre> (Where '''ENCODED''' is the path to your temporary working directory from the previous step)
 #At this point, you can copy the contents of c:\ENCODED to your site at Hostek (through FTP), and the server will begin using the encrypted versions of your '''.cfm''' and '''.cfc''' files immediately.

@@ Line 6: / Line 6: @@
 The cfcompile.bat utility will compile all '''.cfm''' and '''.cfc''' files within a given directory into Java bytecode. This has the effect of making your source code unreadable, and it also prevents ColdFusion from having to compile your ColdFusion files on first use which provides a small performance enhancement.
-Cfcompile.bat uses the following syntax:
+Cfcompile uses the following syntax:
 *Example: <pre>c:\ColdFusion10\cfusion\bin\cfcompile.bat -deploy HOSTEKWEBROOT SOURCE COMPILED</pre>

← Older revision		Revision as of 23:45, 6 January 2014
Line 27:		Line 27:

	''Note: Encrypting your site files does not guarantee absolute security of your source code, but it does add a layer of obfuscation to help prevent unauthorized individuals from viewing the source.''		''Note: Encrypting your site files does not guarantee absolute security of your source code, but it does add a layer of obfuscation to help prevent unauthorized individuals from viewing the source.''
		+
		+
		+	[[Category:Windows]]
		+	[[Category:ColdFusion]]
		+	[[Category:ColdFusion-VPS]]

← Older revision		Revision as of 23:43, 6 January 2014
Line 26:		Line 26:
	#At this point, you can copy the contents of c:\ENCODED to your site at Hostek (through FTP), and the server will begin using the encrypted versions of your '''.cfm''' and '''.cfc''' files immediately.		#At this point, you can copy the contents of c:\ENCODED to your site at Hostek (through FTP), and the server will begin using the encrypted versions of your '''.cfm''' and '''.cfc''' files immediately.

−	''Note'': Encrypting your site files does not guarantee absolute security of your source code, but it does add a layer of obfuscation to help prevent unauthorized individuals from viewing the source.	+	''Note: Encrypting your site files does not guarantee absolute security of your source code, but it does add a layer of obfuscation to help prevent unauthorized individuals from viewing the source.''