Jamie Krug's ColdFusion Blog

CFML on Tomcat via Apache AJP Proxy, Redux

Tue, 31 Aug 2010 22:27:00 -0400

I often use Tomcat as my servlet container to power my CFML apps (works great for ColdFusion, Open BlueDragon and Railo!). I've been perfectly happy with the power and flexibility of using Apache HTTPD's mod_rewrite with an AJP proxy, as Sean Corfield has detailed. Then, after repeating a lot of rewrite rules in all of my virtual host definitions, I decided to merely place the following in my main Apache configuration file:


    Allow from 127.0.0.1

ProxyPreserveHost On
ProxyPassMatch  ^/(.+\.cf[cm])(/.*)?$  ajp://localhost:8009/$1$2

That's it! Now, any Apache virtual hosts for CFML application can be defined as simple as this:


    ServerName myrockinapp
    DocumentRoot /var/www/myrockinapp
    DirectoryIndex index.cfm

I can still easily add URL rewriting to my Apache virtual hosts. For example, when using Mura CMS I often set the properties siteIdInURLs=0 and indexFileInURLs=0 to make super clean looking URLs (with no siteID or index.cfm in the URLs). This then of course requires a rewrite rule to ensure the proper requests are passed to Tomcat, which is as simple as adding these lines to your virtual host (or an .htaccess file in your Web root):

RewriteEngine On
RewriteCond %{DOCUMENT_ROOT}%{REQUEST_URI} !-d
RewriteRule ^([a-zA-Z0-9/-]+)$ /index.cfm%{REQUEST_URI} [PT]

Makes all the configuration I used in this post look a bit silly now :P Also, if you're interested in a clean, production-worthy server setup running on Ubuntu 10.04 with Railo, Tomcat, Apache and MySQL, I have this fairly well documented in this Google Doc.

Git Global Ignores, Can Be Overridden

Thu, 27 May 2010 11:06:00 -0400

First off, I'm loving Git (fast/awesome/free/open-source distributed version control system). If you haven't already, check it out! I'd like to briefly mention how to ignore certain files from version control, both by project and globally. I'd also like to confirm that it's very easy to add files to version control, which are normally globally ignored. Git makes it simple to ignore certain files/directories/patterns from version control by creating a .gitignore file in your project root, and optionally in any sub-directory. Check out the gitignore docs page for more. That said, I quickly found myself ignoring the same patterns for every repository. Fortunately, Git also makes it easy to globally ignore patterns. You just set a global config property of core.excludesfile to tell Git where to look for a global gitignore file. The following two commands take care of setting the property and creating a file with a few popular ignore patterns.

git config --global core.excludesfile ~/.gitignore
printf ".project\n*.iml\n.idea/\nWEB-INF/\n" >> ~/.gitignore

The above commands will work on both Linux and Mac. Windows users will likely want to locate a global .gitignore file in some common user settings directory. You can then create/edit the text file any way you'd like. For me, on Ubuntu Linux, I end up with a /home/jkrug/.gitignore file that looks like this:

.project
*.iml
.idea/
WEB-INF/

You can also manually edit your .gitignore file, of course, and add comments if you'd like:

# Eclipse project files
.project

# IntelliJ IDEA project files
*.iml
.idea/

# Java WAR directories
WEB-INF/

Now here's the bonus: if you have one repository in which you'd like to add a file that is globally ignored to version control, you can do so. Simply use a standard add command with a -f flag, e.g., git add -f WEB-INF/web.xml The global ignores are especially useful to me when I fork a project that may not have an ignore for my primary IDE's (IntelliJ IDEA) configuration files. And when I have a custom project in which I'd like to add one of those global ignores--no problem! Happy versioned coding :)

cf.Objective() 2010: Intro to JEE Servlet Containers for ColdFusion Developers

Wed, 27 Jan 2010 15:23:00 -0400

I am thrilled and honored to have the opportunity to speak at this year's cf.Objective() 2010 conference! My session title is "Intro to JEE Servlet Containers for ColdFusion Developers" and here is the preliminary description I used when submitting my session topic:

An alternate title for this session might be, "What the heck is a servlet container and what does it have to do with CFML?" We'll discuss the relationship between CFML "engines" (i.e., servlets), JEE application servers and servlet containers, and Web servers. Understanding the basics of this relationship can provide CFML developers with a greater confidence to leverage underlying Java tools, improve development environments and deployments and write more flexible and powerful applications.

Why Bother?

I submitted this topic because I believe there are many CF developers, of all skill levels, with very little knowledge in this area. I was most certainly one of these developers for the better part of my CF career thus far! Over the past year or two I've developed a much deeper understanding of Java Enterprise Edition (JEE/J2EE), Servlets, Servlet Containers, Java Application Servers and Web servers. Most importantly I've learned a lot more about how Adobe ColdFusion, Open BlueDragon and Railo leverage the power of these Java platform specifications. Much of my learning has been out of necessity -- and I feel like I had to do it the hard way (on my own)! But looking back, had I possessed some base knowledge in the right areas, I really think I may have put all the puzzle pieces together much more quickly. So I'm hoping to provide these building blocks in my cf.Objective() session this year. You don't need to become a Java guru to grok these concepts, but they can greatly increase your toolset as a ColdFusion developer, allowing you to design and develop more robust applications and gain greater marketability in the job market. Here are some points that I hope to provide attendees:

10,000-foot view of how CFML Engines, Servlet Containers, Java Applications Servers and Web Servers interact to make the magic we've all come to know and love
Understanding the many options the Adobe ColdFusion installer provides and what you can (and might want to) do on your own
Confidence and flexibility in CF development environments (application isolation, starting app servers from your IDE, super-simple portability, etc.)
Configuration options to keep both development and production environments running smoothly
Understanding and leveraging EAR/WAR deployments
Awareness of the many options and not being afraid to check them out!

Lots to talk about, feedback needed!

As you can imagine, there is a lot that can be covered here. My goal for this session is to provide an understanding of the important pieces of the big picture, tools you can put to immediate use, and a confidence to safely explore more deeply. If any of the concepts or buzz words I've mentioned in this post are scary, please know that they're not -- not if you start in the right place. If you feel any one area or concept that I've mentioned would be of greatest value to you... If you have a more specific question that keeps coming up, or something that you continue to avoid... If you know this stuff cold, but see common problem points out in the CFML community... I would highly value your feedback as I continue to refine my session preparation. Please comment on this blog post or use my contact form to contact me directly. Whether you're already grokking some or none of what I've discussed here, I hope you can make it to my cf.Objective() session and take away some useful bits!

Bash Script to Set Sensible Directory/File Permissions

Mon, 28 Dec 2009 15:57:00 -0400

Every once in a while a directory structure's permissions just get messy (or an archive I download and extract has stupid permissions, like making every single file executable). So I'll occasionally want to chmod 755 all directories and chmod 644 all files. If you're new to file system permissions in Linux, let me translate that goal. For every directory I want the owner to be able to read/write/execute (execute allows to cd into directory) and both group and all others to have read/execute permissions. For every file I want the owner to have read/write permissions and both the group and all others to have read-only permission. The Ubuntu Community Documentation has a good File Permissions page that covers this in more detail. That same documentation has a Recursive chmod using find, pipemill, and sudo section that details precisely the two commands I need, but I hate to waste time finding this link and carefully remembering what I want to do. So, I've whipped up a simple Bash script that simply accepts a directory path as its only parameter and prompts me to confirm before making the permission changes. Here it is.

#!/bin/bash

# exit this bash script if any statement returns a non-true return value (same as: set -e)
set -o errexit

if [ -z "$1" ]; then
	echo
	echo "ERROR: Must pass parameter of path to directory (which will have permissions set accordingly; 755 directories and 644 files)."
	echo "USAGE: $0 /path/to/directory"
	echo
	exit 1
fi

echo
echo "Working recursively with directory $1 this script will chmod 755 all directories and chmod 644 all files."

read -p "Okay to continue (y/n)? "
if [ "$REPLY" != "y" ]; then
	echo
	echo "EXITING -- NO ACTION TAKEN."
	echo
	exit 1
fi

echo
echo "Starting..."
echo

find "$1" -type d -print0 | xargs -0 chmod 755
find "$1" -type f -print0 | xargs -0 chmod 644

echo "Done."
echo

exit 0

Since I'll often need to run this script as root, I've taken a few extra steps to protect it by making it owned and executable only by root:

sudo chown root:root setperms.sh
sudo chmod 744 setperms.sh

So, from the directory containing this script (as you can see I've named mine setperms.sh), here's an example usage: sudo ./setperms.sh ~/directory-to-clean-up-permissions If your directory has strange owners and/or groups set, you can quickly clean that up recursively as well. For example: sudo chown -R jkrug:jkrug ~/directory-to-clean-up-permissions

SvnAnt Task/Type Definition Import

Tue, 13 Oct 2009 15:05:00 -0400

I'm finally getting wise and leveraging ANT more, and yesterday was my first attempt at integrating some Subversion tasks. I discovered SvnAnt rather quickly, but didn't have a good sense for the best way to leverage it. Marc Esher kindly helped with a response to my comment here. Rather than repeating a bunch of path/fileset/typedef lines in every build file that requires SVN tasks, I decided to create a simple build file that would handle this type definition and allow me to place just one import line into each build file that requires SVN tasks. To start, I downloaded the proper SvnAnt distribution (from here), unzipped the folder under my /opt directory (I'm running Ubuntu), and created a symbolic link to the folder so I can reference it as /opt/svnant. Then, under my /opt/svnant folder I created a build file called svnant-typedef.xml with the following:

You can read about the ANT import task and its special properties here. Now I need only import the above file in build file's that will use SVN tasks. Here's an example:

Apache Authentication with Proxy

Thu, 06 Aug 2009 22:53:00 -0400

I've enjoyed leveraging Apache mod_rewrite and mod_proxy to leverage both the power of URL rewriting and the APJ proxy to proxy CFML requests to Railo running on Tomcat. I allow Apache to still handle requests for static assets (images, javascript, etc.). Today, I ran into a problem when I wanted to slap some basic authentication on a site. Requests handled entirely by Apache (static assets) were challenged for authentication, but CFML requests were proxied to Tomcat without requiring authentication. It makes perfect sense, as did the solution once I found it, but it just didn't occur to me at first. First, here's a quick example of a basic virtual host that I'd use:


	ServerName mysite
	DocumentRoot /var/www/mysite/webroot/
	DirectoryIndex index.cfm

	
		Allow from 127.0.0.1
	

	ProxyPreserveHost On
	ProxyPassReverse  /  ajp://mysite:8009/

	RewriteEngine On

	RewriteRule  ^(.+\.cf[cm])(/.*)?$  ajp://%{HTTP_HOST}:8009$1$2  [P]

After creating a password file using the htpasswd command, I thought I'd simply add the following inside my VirtualHost to provide basic authentication.


	AuthType Basic
	AuthName "Restricted Files"
	AuthUserFile /usr/local/etc/apache/mysite.passwd
	Require user someusername

Unfortunately, as I mentioned, this only protected non-proxied requests. Fortunately, I found the tip for my solution relatively quickly at stackoverflow, here. I simply needed to apply the same authentication directives within the Proxy context. Here's the revised virtual host with basic authentication for both static assets and those proxied to Tomcat:


	ServerName mysite
	DocumentRoot /var/www/mysite/webroot/
	DirectoryIndex index.cfm

	
		AuthType Basic
		AuthName "Restricted Files"
		AuthUserFile /usr/local/etc/apache/mysite.passwd
		Require user someusername
	

	
		Allow from 127.0.0.1
		AuthType Basic
		AuthName "Restricted Files"
		AuthUserFile /usr/local/etc/apache/mysite.passwd
		Require user someusername
	

	ProxyPreserveHost On
	ProxyPassReverse  /  ajp://mysite:8009/

	RewriteEngine On

	RewriteRule  ^(.+\.cf[cm])(/.*)?$  ajp://%{HTTP_HOST}:8009$1$2  [P]

Catch-all Apache Virtual Host to Force WWW Redirect on Canonical Hostnames

Thu, 06 Aug 2009 16:07:00 -0400

I find myself doing the same thing with nearly every Web site that I launch on my VPS (and client VPS/dedicated servers). I was to use http://www.domain.com as the primary host and have http://domain.com permanently redirect (301) while keeping the request URI intact. Today, I decided to simplify this configuration by using a single Apache virtual host to handle all "www redirects." I thought I'd share this simple little tip. When using name based hosting with Apache, this is very simple with mod_rewrite:



	ServerName  jamiekrug.com
	ServerAlias thekrugs.com

	RewriteEngine On
	RewriteRule  .  http://www.%{HTTP_HOST}%{REQUEST_URI}  [R=301,NE,L]

Now, as I add other virtual hosts to the server, I need only add a ServerAlias line to the above virtual host and I'm good to go.

CFC Creation Time in ColdFusion 8/9, Open BlueDragon 1.1 and Railo 3.1

Tue, 21 Jul 2009 16:50:00 -0400

There's lots of chatter about CFC creation performance in the popular CFML engines (Adobe ColdFusion, Open BlueDragon and Railo), and plenty of others have ran their own tests, but I'm just curious and had to see some tests for myself. I do not intend to encourage anyone to choose any one engine over another solely based on these tests. This is just one small indicator of the many performance considerations! In a real world application, there are many other performance considerations (hardware, operating system, application server, JVM tuning, CFML engine admin settings, various cache mechanisms, database server, database tuning, etc.). I'm just focused on the speed of CFC creation here. In many small or medium sized apps, this is not much of a factor, but in larger applications where large sets of objects need to be created, this can potentially become crippling to application performance. Also keep in mind that not all CFML applications are guaranteed or even likely to migrate flawlessly between any two CFML engines, despite lots of great progress towards compatibility and a core CFML spec. There are also lots of vendor specific features that may sway a particular developer or team to a particular CFML engine, and this may vary from project to project. I could ramble on with more disclaimers, but let's get to the good stuff! [More]

"Does anyone have an opinion on Adobe Coldfusion?"

Thu, 02 Jul 2009 23:08:00 -0400

A (very) brief list of ColdFusion/CFML resource links in response to Tweet from @ryanmaurodesign: "Does anyone have an opinion on Adobe Coldfusion?"

The short answer: yes :) There is a vibrant CFML community and many will be excited to tell you why it's so fantastic!

Adobe ColdFusion Evangelism Kit

Other major (open source and free) CFML engines:
Open BlueDragon
Railo

CFML Advisory Committee

ColdFusion is a Java EE application... http://en.wikipedia.org/wiki/Coldfusion#ColdFusion_and_Java

Just a few of the very many busy bloggers:
Ben Forta
Ben Nadel
Charlie Arehart
Hal Helms
Ray Camden
Sean Corfield

...and a bunch more ;-)
http://coldfusionbloggers.org/

A bunch of open source ColdFusion apps (as well as other Adobe RIA related stuff):
RIAForge

Popular MVC frameworks (there are more):
ColdBox
Fusebox
Mach-II
Model-Glue

Other popular frameworks (there are more):
ColdSpring ("Spring framework for ColdFusion")
Reactor (ORM)
Transfer ORM

There's a ton of other great information out there, so go check it out! (Ignore the occasional/ignorant "ColdFusion is dead" nonsense that somehow still creeps up from time to time, despite continued growth!:)

Support Flex/Flash Builder for Linux

Thu, 04 Jun 2009 15:24:00 -0400

It was reported that Flex Builder for Linux is on hold. Rather than go into a lengthy discourse here on why I feel Flex/Flash Builder should be available to Linux desktop developers, I'll direct those interested to this Adobe issue/bug report, which contains plenty of great comments and lots of votes in support. If you agree, please be sure to vote for this issue. I would also like to draw attention to a recent survey by the Eclipse Foundation. So... The number of developers using Eclipse on Linux workstations has grown from 20% in 2007 to 27% in 2009...
+
Eclipse is likely the most popular open source IDE (certainly for Java/CFML developers)...
+
Adobe has open-sourced the Flex SDK...
+
Linux likely has the most vibrant open source software community of developers...
+
Adobe has a Flex Builder Eclipse plug-in...
+
Adobe provides no means for a developer using Eclipse on Linux to become a Flex developer???
=
I will be happy to spend $249 on IntelliJ IDEA, which appears to provide great Flex support out of the box.

Mura CMS bug and mod_rewrite workaround: 200 OK instead of 404 error

Thu, 04 Jun 2009 14:35:00 -0400

I've discovered a bit of a bug in the way Mura CMS handles 404s and wanted to share my workaround. Valid path_info for Mura pages consist of only letters, numbers, hyphens and forward slashes. If you browse to a path that doesn't exists, Mura properly throws a 404 error -- well, sometimes... If it's a valid Mura formatted URL, you'll get a 404. For example: http://www.getmura.com/index.cfm/i-do-not-exist/ ...however, if the path_info is not "valid," Mura seems to ignore it and display the home page -- for example: http://www.getmura.com/index.cfm/i-do-not-exist.html On some sites, you might not care about this, but Google and other spiders can become very suspicious when non-existent URLs return a 200 response instead of a 404. I discovered this when our SEO/content guru was having trouble getting Google Webmaster tools to verify after I uploaded the specified uniquely-named html file. Google refused to authenticate us, because they were attempting to "test" for a 404 and instead got 200 responses. I assume they just make up a random file name or path and expect a 404. It makes sense that they want to ensure that the site doesn't return a 200 OK for everything, because they can not count on the 200 from the authenticity file/URL to be true. You can leverage URL rewriting as one workaround, as I have. Based on the standard default site URL format of Mura CMS, you can use something like the following with Apache mod_rewrite to force a Mura 404 when an "invalid" path_info exists:

RewriteEngine On
RewriteRule ^/default/index.cfm/([^a-zA-Z0-9/-]+)$ /default/index.cfm/force-a-404-error/ [PT,L]

URL Rewrite Goodies for Apache, Tomcat, Railo and Mura CMS

Fri, 22 May 2009 23:33:00 -0400

UPDATE, 8/31/2010: I'm going with a simplified approach these days, as posted here. I've worked with Apache mod_rewrite quite a bit in the past, but never got into any terribly complex rewrite rules. On average, I've probably leveraged about 2% of the incredible potential power that mod_rewrite offers. More recently I finally had the opportunity to learn a bit more and leverage this handy tool. My rewrite rules evolved over the past couple months as I got into testing out the Railo CFML engine a bit more, and then while setting up my first Mura CMS powered site. I thought I'd share what I've learned, as others may be likely to use some or all of this type of Apache virtual host configuration. Here's a run-down of the "end goal," if you will, which I will walk through step by step to recap the problems and solutions I discovered along the way:

Apache will proxy CFML requests to Tomcat servlet engine, for Railo to handle (while Apache handles all other static content, PHP, etc.)
Tomcat will properly have Railo handle this common SES style URL (leveraging cgi.path_info): http://host/index.cfm/path-info/
Protect Railo Admin URLs from public access (well, actually hide them to mitigate hacking attempts)
Run a Mura CMS site with super SEO friendly URLs (e.g., http://host/a-cms-page/ instead of the default http://host/siteid/index.cfm/a-cms-page/), while still allowing for standard CFML requests (for custom app integration under same host as CMS)

Please note that the following Apache modules must be activated in your Apache configuration: mod_rewrite, mod_proxy and mod_proxy_ajp.

Apache Proxy CFML Request to Tomcat/Railo

I'll simply direct you to existing resources for this first bit and then show my basic example virtual hosting configuration. First, I'm running Railo in a multi-web setup on a single instance of Tomcat, which Sean Corfield has nicely outlined here (including a kind nod to a prior blog post of mine :). I learned a very nice means of proxying CFML requests from Apache to Tomcat thanks to this Sean Corfield post, which was prompted by some helpful comments from Barney Boisvert on Sean's prior post. So here is an example Apache virtual host:


	ServerName railocmstest
	DocumentRoot /var/www/railocmstest/webroot
	DirectoryIndex index.cfm

	
		Allow from 127.0.0.1
	

	ProxyPreserveHost On
	ProxyPassReverse / ajp://railocmstest:8009/

	RewriteEngine On

	# If it's a CFML (*.cfc or *.cfm) request, just proxy it to Tomcat:
	RewriteRule  ^(.+\.cf[cm])$  ajp://%{HTTP_HOST}:8009$1  [P]

SES URLs with path_info

Okay, the above gets Apache proxying standard *.cfm/*.cfc requests to Tomcat for Railo to handle, but a request to http://railocmstest/index.cfm/some-path-info/ will simply throw a 404 error, because Apache finds neither file nor directory at /var/www/railocmstest/webroot/index.cfm/some-path-info/. Plus, the current rewrite rule is not even proxying this type of request to Tomcat, because the regular expression used only looks for any URI that ends with ".cfc" or ".cfm". Simply change this line: RewriteRule ^(.+\.cf[cm])$ ajp://%{HTTP_HOST}:8009$1 [P] ...to this: RewriteRule ^(.+\.cf[cm])(/.*)?$ ajp://%{HTTP_HOST}:8009$1$2 [P] Okay, now if we reload Apache the http://railocmstest/index.cfm/some-path-info/ will indeed be proxied to Tomcat, however, now we just get the 404 error from Tomcat instead of Apache! Not a problem -- I picked up another trick from a comment by Tony Garcia on, again, this Sean Corfield post. In either our Tomcat's conf/server.xml file or in our Web root's WEB-INF/web.xml (you can create one if it doesn't exist) file, add the following servlet mapping:

CFMLServlet

/index.cfm/*

Just be sure the servlet name you use here matches the one used for Railo, which is CFMLServlet by default, but I change mine to GlobalCFMLServlet in my multi-web setup as explained here. We can now restart our Tomcat service and http://railocmstest/index.cfm/some-path-info/ is now good to go -- no more 404 error and cgi.path_info will now properly return /some-path-info/. You may be inclined to try a URL pattern of /*.cfm/* in your servlet mapping, as I was, but it will not work as expected. If you also need URLs ending with /other.cfm/path-info/ and /app/index.cfm/path-info/, for example, you'll have to add two more servlet mappings with URL patterns /other.cfm/* and /app/index.cfm/*.

Hide Railo Admin URLs

A simple way to hide your Railo Admin URLs is to use one rewrite rule to forbid access to any paths beginning with /railo-context/admin/ and use some unusual URL to proxy in its place:

RewriteRule  ^/railo-context/admin/(.*)  -  [F]

RewriteRule  ^/SOMETHING-DIFFICULT-TO-GUESS/admin/(.*\.cf[cm])$  ajp://%{HTTP_HOST}:8009/railo-context/admin/$1  [P]

After an Apache reload, the above rewrite rules will cause a 403 (Forbidden) error to be thrown at http://railocmstest/railo-context/admin/index.cfm, but you can find what you're looking for at http://railocmstest/SOMETHING-DIFFICULT-TO-GUESS/admin/index.cfm with no problem. In this Railo Google Groop thread Sean Corfield also suggests using a separate virtual host to access your admin, which can listen on an unusual port. You could also use SSL to encrypt transmissions at the admin URLs.

Super SES CMS URLs

"Out of the box," Mura CMS has relatively friendly, SES URLs of the form http://host/siteid/index.cfm/something-friendly/, but we can do better. In the helpful Mura forums I quickly found the information I needed to make very quick changes to the Mura code to get rid of the /siteid/index.cfm portion of the URLs generated. Since there were two steps, in two different threads, plus one other tweak I found necessary, I posted a summary thread to a Mura forum. The rewrite rule example I provide in the form thread is more generic, intended to work without consideration for Tomcat proxying, Railo Admin hiding, etc., so here's what I've actually done for my first Mura CMS powered site... I found that I needed to cover a few extra use cases. These four situations must be covered:

If there's a trailing slash and it resolves to an existing physical directory, then we'll assume there should be an index.cfm in there and proxy to Tomcat.
If it's an existing file, just let Apache serve it -- this takes care of all static and non-CFML requests.
If rewrite rules are still processing, then we must be looking for a Mura CMS powered URL, which must have a trailing slash, so we'll permanently redirect with an appended trailing slash if it's missing.
Finally, if rewrite rules are still processing, then we'll just prepend "index.cfm" in front of the REQUEST_URI.

...and here it is:

# If trailing slash and real directory, then append index.cfm and proxy it to Tomcat/Railo:
RewriteCond  %{DOCUMENT_ROOT}%{REQUEST_URI}  -d
RewriteRule  ^(.+/)$  ajp://%{HTTP_HOST}:8009%{REQUEST_URI}index.cfm  [P]

# If it's a real file (and we haven't proxied to Tomcat, so it must be static), just serve it:
RewriteCond  %{DOCUMENT_ROOT}%{REQUEST_URI}  -f
RewriteRule  .  -  [L]

# Require trailing slash at this point:
RewriteRule  ^(.+[^/])$  $1/  [R=301,L]

# Everything else must be a CMS URL path, which is rewritten and proxied to Tomcat/Railo:
# MUST COME AFTER ANY OTHER FIXED/EXPECTED REWRITES!
RewriteRule  .  ajp://%{HTTP_HOST}:8009/index.cfm%{REQUEST_URI}  [NE,P]

If you're wondering why I have rewrite conditions with %{DOCUMENT_ROOT}%{REQUEST_URI} instead of %{REQUEST_FILENAME} when checking for file/directory existence, it's because the latter just didn't work for me! All examples I've seen suggest the latter, but it just didn't work -- possibly something Ubuntu-specific, or something that I changed elsewhere in my Apache configuration? I don't know, but what I've used should work on any setup.

UPDATE (2009-06-04)

I've discovered a little bug in Mura CMS regarding the handling of would-be 404 pages, so the last two rewrite rules from above must be changed to be less broad and an additional final rule can be added to still leverage the friendly/skinned Mura 404 page (rather than Apache's default 404):

# Require trailing slash at this point, if otherwise valid CMS URL:
RewriteRule  ^([a-zA-Z0-9/-]+[^/])$  $1/  [R=301,L]

# Valid CMS URL path is proxied to Tomcat/Railo:
# MUST COME AFTER ANY OTHER FIXED/EXPECTED REWRITES!
RewriteRule  ^([a-zA-Z0-9/-]+)$  ajp://%{HTTP_HOST}:8009/index.cfm%{REQUEST_URI}  [NE,P]

# Anything else must be a 404 error:
RewriteRule  .  ajp://%{HTTP_HOST}:8009/index.cfm/this-will-force-a-404/  [NE,P]

I've also updated the following Complete Package section to reflect these updates...

The Complete Package

So, here is the complete virtual host example, incorporating all of the above:


	ServerName railocmstest
	DocumentRoot /var/www/railocmstest/webroot
	DirectoryIndex index.cfm

	
		Allow from 127.0.0.1
	

	ProxyPreserveHost On
	ProxyPassReverse / ajp://railocmstest:8009/

	RewriteEngine On

	# Forbid access to Railo Admin URLs:
	RewriteRule  ^/railo-context/admin/(.*)  -  [F]

	# Proxy "secret" Railo Admin URLs to "real" Railo Admin URLs on Tomcat:
	RewriteRule  ^/SOMETHING-DIFFICULT-TO-GUESS/admin/(.*\.cf[cm])$  ajp://%{HTTP_HOST}:8009/railo-context/admin/$1  [P]

	# If it's a CFML (*.cfc or *.cfm) request, just proxy it to Tomcat:
	RewriteRule  ^(.+\.cf[cm])(/.*)?$  ajp://%{HTTP_HOST}:8009$1$2  [P]

	# If trailing slash and real directory, then append index.cfm and proxy it to Tomcat/Railo:
	RewriteCond  %{DOCUMENT_ROOT}%{REQUEST_URI}  -d
	RewriteRule  ^(.+/)$  ajp://%{HTTP_HOST}:8009%{REQUEST_URI}index.cfm  [P]

	# If it's a real file (and we haven't proxied to Tomcat, so it must be static), just serve it:
	RewriteCond  %{DOCUMENT_ROOT}%{REQUEST_URI}  -f
	RewriteRule  .  -  [L]

	# NOTE: Everything else must be a CMS URL path (letters/numbers/hyphens/slashes only), or a 404...

	# Require trailing slash at this point, if otherwise valid CMS URL:
	RewriteRule  ^([a-zA-Z0-9/-]+[^/])$  $1/  [R=301,L]

	# Valid CMS URL path is proxied to Tomcat/Railo:
	# MUST COME AFTER ANY OTHER FIXED/EXPECTED REWRITES!
	RewriteRule  ^([a-zA-Z0-9/-]+)$  ajp://%{HTTP_HOST}:8009/index.cfm%{REQUEST_URI}  [NE,P]

	# Anything else must be a 404 error:
	RewriteRule  .  ajp://%{HTTP_HOST}:8009/index.cfm/this-will-force-a-404/  [NE,P]

Cheers!

CFFormProtect Rocks!

Tue, 12 May 2009 11:38:00 -0400

Others have praised CFFormProtect, but I wanted to share a couple quick stats and give another shout out to Jake Munson for the very useful CFFormProtect. If you're not familiar with CFFormProtect, here is a snippet from the description at RIAForge:

CFFormProtect is a fully accessible, invisible to users form protection system to stop spam bots, and even human spammers. CFFormProtect works like some email spam protection systems, in that it uses a series of tests to find out if a form submission is from a spammer or not. Each test is given an amount of points, and each test that is failed accumulates points. Once a form submission passes the threshold of 'spamminess', the message is flagged as spam and is not posted. The points assigned to each test and the failure limit are easily configurable by you.

It is quite simple to implement, and the code is rather simple and lightweight, but brilliantly useful and powerful! The latest version of BlogCFC ships with CFFormProtect and you can optionally enable it to block comment spam. I rarely see any comment spam get through on my blog, but this morning I had a flurry of 10 or more, from the same spammer. I was quickly able to tweak my INI file for CFFormProtect so this particular spam would be blocked from now on. I also decided to peak at the log file for CFFormProtect (you can optionally have CFFormProtect log blocked spam occurrences) and noticed that my blog gets a *LOT* of comment spam, but I never have to deal with it, thanks to CFFormProtect! This morning was the first comment spam I've had get through in months, but it turns out that CFFormProtect has quietly blocked more than 80 spam attempts for me in just the last 24 hours! If you're a CFML developer and you'd like to protect any form from spam without bothering with CAPTCHA, I highly encourage you to check out CFFormProtect.

Railo JARs on JBoss (or Tomcat) - Tips and Tricks

Wed, 01 Apr 2009 17:00:00 -0400

As a follow up to a previous related post, I wanted to share a couple potentially helpful tricks that I've since learned. Everything I document here has been tested with both Railo 3.0.2.004 (current stable) and Railo 3.1.0.012 (current beta), both of which can be downloaded from here, on JBoss Application Server (AS) 4.2.3.GA. The purpose (as I see it) of a Railo JARs installation is to provide an alternative to using a full-blown Railo WAR for each of your Railo CFML applications. This allows you to define your Railo CFML servlet "globally" in JBoss/Tomcat and then use virtual hosts for multiple CFML apps. Each CFML app is then leveraging the same Railo instance, one copy of the jars and one Railo server admin (but still multiple Web contexts with unique Railo Web Admin for each Web site/context). Also keep in mind that JBoss AS leverages Tomcat as its Web server, so just about everything here should directly translate. Here are the locations of key configuration files and directories in both JBoss 4.2 and Apache Tomcat 6: {JBOSS_HOME}/lib/ {JBOSS_HOME}/server/default/lib/
or
{TOMCAT_HOME}/lib/ {JBOSS_HOME}/server/default/deploy/jboss-web.deployer/conf/web.xml
or
{TOMCAT_HOME}/conf/web.xml {JBOSS_HOME}/server/default/deploy/jboss-web.deployer/server.xml
or
{TOMCAT_HOME}/conf/server.xml

Quick Review of Railo JARs Install on JBoss/Tomcat

I will first give a very brief outline of the steps required to install Railo (jars) on JBoss/Tomcat here. There are, however, some potential problems with this configuration, which I'll outline below, with a solution/workaround for each. [More]

Sitemaps.org Data Driven Sitemap XML Generator (sitemap.xml for Google, Yahoo!, MSN and others)

Fri, 20 Mar 2009 09:24:00 -0400

Update: Get SitemapCFC at Google Code or at RIAForge. If you're not familiar with Sitemaps, visit the sitemaps.org home page, which provides an overview of the Sitemaps protocol (adopted by Google, Yahoo! and Microsoft, among others). I wanted to generate a sitemap.xml file to submit to Google, Yahoo!, etc. based on data from a simple CMS application's database. I ran some quick searches and was surprised to not quickly find a CFC that did exactly what I was looking for. There are a few sitemap generators out there that crawl site links to produce a sitemap XML file, but I didn't find any that generated an XML file based on data. I know there are a number of applications that have built-in site generator support (like BlogCFC and probably most modern blog and CMS apps), but I didn't find anything generic and flexible enough for my needs. Ray Camden did share a UDF that handles the basics very nicely, but I wanted to be able to pass in different URL collection types with flexible key/column names. I'd already cooked up two different (albeit simple) application-specific sitemap generators for apps that I maintain, so it was time to genericize and reuse! I'll outline the Sitemap.cfc I created, its features and some examples. I will update this post with a link to RIAForge once I have the project approved for upload there. If you're not looking for a data-driven sitemap generator, but rather a crawler or spider style sitemap generator, then check out this "Google Sitemap XML Generator". For a data driven sitemap generator (or, if you want to use your own crawler and just need to model and generate a valid sitemap.xml file), read on... I quickly put together a relatively simple Sitemap.cfc to suit my needs, but then I found myself adding more and more little enhancements. Since the sitemaps.org protocol is relatively simple, it wasn't too difficult to create a CFC to model the protocol. I tried to keep it simple, but flexible enough to take a collection of URLs (and relevant meta data) in just about any form and spit out a valid sitemap.xml file.

SitemapCFC Feature Overview

Use a list, query or array (of structs) to initialize a sitemap object.
Query column or struct key names used to initialize a Sitemap.cfc object are not important; an optional init() argument can be used to map to standard sitemaps.org protocol tag names.
Write your sitemap.xml file to disk or dynamically send a sitemap XML document to the browser as binary page output (cfcontent type text/xml).
Debugging methods available to access a Sitemap.cfc object's URL collection in the form of an array, an XML object or the raw XML string.
XML document is schema validation ready.
All initialization data values are cleaned (entity escaping, date/time format, valid string values, etc.) and validated.
Date(/time) values for the <lastmod> tags can be passed in as any valid date/time string or object; they will be automatically converted to UTC in proper W3C Datetime format (again, per sitemaps.org protocol).

Read on for an [] of examples... [More]