SonarQube Setup Guide

 

                                    SonarQube Setup Guide

Download the SonarQube Community Edition

Note : SonarQube requires disk space of around 100 GB.

2. Unzip it, let's say in C:\sonarqube or /etc/sonarqube.

3. Install java 11 and set the path.

4. Edit the wrapper.conf file from the sonar and set the path location of java.

5. Start the SonarQube Server.

6. Log in to http://localhost:9000 with System Administrator credentials (admin/admin)

7. Download sonar scanner from the given link. SonarScanner | SonarQube Docs

8. Create sonar-project.properties file in the project folder which is to be scanned and configure the project properties.

9. Set user variable for the sonar scanner.

10. Run sonar-scanner.bat command on command prompt from the project folder.

11. Log in to http://localhost:9000 with System Administrator credentials (admin/admin) to check the scan results.

REFERENCES:

https://github.com/SonarSource/sonar-.net-documentation/blob/master/doc/installation-and-configuration.md#:~:text=In%20the%20extracted%

20folder%20navigate,the%20currently%20in%20use%20ports.

Adding trace in ts-app container in HCL commerce

 

Adding new trace from ts-app container : Execute you container then from there run :

run set-dynamic-trace-specification com.ibm.commerce.*=all

To Revert:

run set-dynamic-trace-specification *=severe

Installing NetBeans12.2

 

Download NetBeans : https://www.apache.org/dyn/closer.cgi/netbeans/netbeans/12.2/Apache-NetBeans-12.2-bin-windows-x64.exe

open NetBeans installer location in command prompt and type: netbeans*****.exe --javahome "C:\Program Files\Java\jdk"

e.g. C:\Users\Documents\>Apache-NetBeans-12.2-bin-windows-x64.exe --javahome "C:\Program Files (x86)\Java\jdk1.8.0_281"

Input validation of number in JSP

 As per one security flaw in security scan Input Validation : We have to validate input is number or not .

Use below code for same

<jsp:forward page="AccessError.jsp">

<jsp:param name="storeId" value="${WCParam.storeId}" />

<jsp:param name="langId" value="${WCParam.langId}" />

<jsp:param name="catalogId" value="${WCParam.catalogId}" />

</jsp:forward>

Solution used was: 

<c:set var="storeId">
		<c:if test="${WCParam.storeId.matches('[0-9]+')}">
		   <c:out value="${WCParam.storeId}"/>

	        </c:if></c:set>

RestTemplate to POST with UTF-8 encoding

Sometime we see extra character in rest response like Â, â. To overcome this issue We need to add StringHttpMessageConverter to rest template's message converter with charset UTF-8. Like below

RestTemplate restTemplate = new RestTemplate();
restTemplate.getMessageConverters()
        .add(0, new StringHttpMessageConverter(StandardCharsets.UTF_8));

Refer : UTF encoding from rest response

msgtypes related tables in WCS

select * from msgtypes
select * from profile
select * from iseditatt
select * from cseditatt 

WCS Useful loggers

Struts

com.ibm.websphere.commerce.WC_SERVER=all: org.apache.struts.*=all

REST

com.ibm.commerce.foundation.rest.providers.*=all:com.ibm.commerce.store.taglibs.RESTTag=all:com.ibm.commerce.foundation.internal.client.taglib.HeaderTag=all:com.ibm.commerce.component.internal.client.util.RESTInvoker=all:com.ibm.commerce.component.internal.client.util.RESTHandler=all

Search in WAS

com.ibm.commerce.catalog.*=all:com.ibm.commerce.foundation.*=all:com.ibm.commerce.search.*=all

Search in solr:

com.ibm.commerce.foundation.*=all: com.ibm.commerce.rest.*=all: org.apache.solr.*=all: org.apache.wink.*=all: com.ibm.commerce.solr.*=all

Price index:

com.ibm.commerce.foundation.dataimport.priceindex.*=finest

com.ibm.commerce.price.*=finest

com.ibm.websphere.commerce.WC_ORDER

JPA

*=info:JPA=all:openjpa.*=finer:openjpa.kernel=finest

SQL

com.ibm.ws.rsadapter.jdbc.WSJdbcCallableStatement=finer:
com.ibm.ws.rsadapter.jdbc.WSJdbcStatement=finer:
com.ibm.ws.rsadapter.jdbc.WSJdbcPreparedStatement=finer:
com.ibm.ws.rsadapter.jdbc.WSJccCallableStatement=finer:
com.ibm.ws.rsadapter.jdbc.WSJccStatement=finer:
com.ibm.ws.rsadapter.jdbc.WSJccPreparedStatement=finer

ACPOLICY

com.ibm.websphere.commerce.WC_SERVER=all:com.ibm.websphere.commerce.WC_USER=all:com.ibm.websphere.commerce.WC_ACCESSCONTROL=all:

com.ibm.commerce.component.helper.*=all:com.ibm.commerce.component.registry.*=all:com.ibm.commerce.foundation.logging.*=all

To Get xml in log:  

com.ibm.commerce.foundation.server.command.bod.BusinessObjectDocumentProcessor

In ts-app enable log :

 

 

 run set-dynamic-trace-specification "*=info:com.ibm.websphere.commerce.WC_ORDER=all:com.ibm.commerce.foundation.logging.*=all:com.ibm.commerce.order.facade.server.commands.ComposeOrderDetailsCmdImpl=all:com.ibm.commerce.order.*=all:com.ibm.commerce.foundation.server.command.bod.*=all:com.ibm.commerce.order.event.*=all"

crs-app

run set-trace-specification "*=warning:org.apache.commons.httpclient.*=all:java.net.*=all"

xc-app

run set-trace-specification "*=warning:com.ibm.commerce.order.ue.rest.*=all"