MFC ActiveX ISafeObject的实现

默认情况下，编译的MFC Activex控件，只能在本地代码中运行，即便是网页，也只能在本地运行，一旦要想放在Web服务器通过IE访问，需要设置其初始化和脚本运行的安全性，为此您需要作出如下修改：

在“工程名.cpp”文件中，增加以下方法：

 

// 创建组件种类

HRESULT CreateComponentCategory(CATID catid, WCHAR* catDescription) 

{    

       ICatRegister* pcr = NULL ;    

       HRESULT hr = S_OK ;    

       hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr, NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);    

       if (FAILED(hr)) return hr;    

       // Make sure the HKCR\Component Categories\{..catid...}    

       // key is registered.    

       CATEGORYINFO catinfo;    

       catinfo.catid = catid;    

       catinfo.lcid = 0x0409 ; // english    

       // Make sure the provided description is not too long.    

       // Only copy the first 127 characters if it is.    

       int len = wcslen(catDescription);    

       if (len>127) len = 127;    

       wcsncpy_s(catinfo.szDescription, catDescription, len);    

       // Make sure the description is null terminated.    

       catinfo.szDescription[len] = '\0';

       hr = pcr->RegisterCategories(1, &catinfo);    

       pcr->Release();    

       return hr;    

}  

 

// 注册组件种类

HRESULT RegisterCLSIDInCategory(REFCLSID clsid, CATID catid)

{    

       // Register your component categories information.    

       ICatRegister* pcr = NULL ;    

       HRESULT hr = S_OK ;    

       hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr, NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);    

       if (SUCCEEDED(hr)) {    

              // Register this category as being "implemented" by the class.    

              CATID rgcatid[1];    

              rgcatid[0] = catid;    

              hr = pcr->RegisterClassImplCategories(clsid, 1, rgcatid);    

       }    

       if (pcr != NULL) pcr->Release();    

       return hr;    

}    

// 卸载组件种类

HRESULT UnRegisterCLSIDInCategory(REFCLSID clsid, CATID catid)

{    

       ICatRegister* pcr = NULL ;    

       HRESULT hr = S_OK ;    

       hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr,    

              NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);    

       if (SUCCEEDED(hr)) {    

              // Unregister this category as being "implemented" by the class.    

              CATID rgcatid[1] ;    

              rgcatid[0] = catid;    

              hr = pcr->UnRegisterClassImplCategories(clsid, 1, rgcatid);    

       }    

       if (pcr != NULL) pcr->Release();    

       return hr;    

}

 

然后修改DllRegisterServer和DllUnregisterServer这个两个方法做如下修改：

 

// DllRegisterServer - 将项添加到系统注册表

STDAPI DllRegisterServer(void)

{

       HRESULT hr;    

       AFX_MANAGE_STATE(_afxModuleAddrThis);    

       if (!AfxOleRegisterTypeLib(AfxGetInstanceHandle(), _tlid))    

              return ResultFromScode(SELFREG_E_TYPELIB);    

       if (!COleObjectFactoryEx::UpdateRegistryAll(TRUE))    

              return ResultFromScode(SELFREG_E_CLASS);    

       // 标记控件初始化安全.

       // 创建初始化安全组件种类

       hr = CreateComponentCategory(CATID_SafeForInitializing, L"Controls safely initializable from persistent data!");    

       if (FAILED(hr)) return hr;    

       // 注册初始化安全

       hr = RegisterCLSIDInCategory(BASED_CODE _tlid , CATID_SafeForInitializing);    

       if (FAILED(hr)) return hr;    

       // 标记控件脚本安全

       // 创建脚本安全组件种类

       hr = CreateComponentCategory(CATID_SafeForScripting, L"Controls safely scriptable!");    

       if (FAILED(hr)) return hr;    

       // 注册脚本安全组件种类

       hr = RegisterCLSIDInCategory(BASED_CODE _tlid , CATID_SafeForScripting);    

       if (FAILED(hr)) return hr;

 

       return NOERROR;

}

 

// DllUnregisterServer - 将项从系统注册表中移除

STDAPI DllUnregisterServer(void)

{

       HRESULT hr;    

       AFX_MANAGE_STATE(_afxModuleAddrThis);    

       if (!AfxOleUnregisterTypeLib(_tlid, _wVerMajor, _wVerMinor))    

              return ResultFromScode(SELFREG_E_TYPELIB);    

       if (!COleObjectFactoryEx::UpdateRegistryAll(FALSE))    

              return ResultFromScode(SELFREG_E_CLASS);    

       // 删除控件初始化安全入口.

       hr=UnRegisterCLSIDInCategory(BASED_CODE _tlid , CATID_SafeForInitializing);    

       if (FAILED(hr)) return hr;    

       // 删除控件脚本安全入口

       hr=UnRegisterCLSIDInCategory(BASED_CODE _tlid , CATID_SafeForScripting);    

       if (FAILED(hr)) return hr;

 

       return NOERROR;

}

 

其中CATID_SafeForInitializing和CATID_SafeForScripting两个是guid，可以通过VC自带的guid生成工具自动生成。

 

下一步，实现IobjectSafety接口，步骤：

 

打开 “工程名Ctrl.h”

 

加入#include<objsafe.h>，

 

搜索

DECLARE_DYNCREATE(C工程名Ctrl)

 

在其下面添加：

DECLARE_INTERFACE_MAP()

       BEGIN_INTERFACE_PART(ObjSafe, IObjectSafety)

              STDMETHOD_(HRESULT, GetInterfaceSafetyOptions) (

              REFIID riid,

              DWORD __RPC_FAR *pdwSupportedOptions,

              DWORD __RPC_FAR *pdwEnabledOptions

              );

 

              STDMETHOD_(HRESULT, SetInterfaceSafetyOptions) (

                     REFIID riid,

                     DWORD dwOptionSetMask,

                     DWORD dwEnabledOptions

                     );

       END_INTERFACE_PART(ObjSafe);

 

打开“工程名Ctl.cpp”

 

在

BOOL C工程名Ctrl::C工程名CtrlFactory::UpdateRegistry(BOOL bRegister)

方法上面添加以下代码：

 

/

// Interface map for IObjectSafety

BEGIN_INTERFACE_MAP(C工程名Ctrl, COleControl)

       INTERFACE_PART(C工程名Ctrl, IID_IObjectSafety, ObjSafe)

END_INTERFACE_MAP()

/

// IObjectSafety member functions

// Delegate AddRef, Release, QueryInterface

ULONG FAR EXPORT C工程名Ctrl::XObjSafe::AddRef()

{

       METHOD_PROLOGUE(C工程名Ctrl, ObjSafe)

              return pThis->ExternalAddRef();

}

ULONG FAR EXPORT C工程名Ctrl::XObjSafe::Release()

{

       METHOD_PROLOGUE(C工程名Ctrl, ObjSafe)

              return pThis->ExternalRelease();

}

HRESULT FAR EXPORT C工程名Ctrl::XObjSafe::QueryInterface(

       REFIID iid, void FAR* FAR* ppvObj)

{

       METHOD_PROLOGUE(C工程名Ctrl, ObjSafe)

              return (HRESULT)pThis->ExternalQueryInterface(&iid, ppvObj);

}

const DWORD dwSupportedBits =

       INTERFACESAFE_FOR_UNTRUSTED_CALLER |

       INTERFACESAFE_FOR_UNTRUSTED_DATA;

const DWORD dwNotSupportedBits = ~ dwSupportedBits;

 

/

// CStopLiteCtrl::XObjSafe::GetInterfaceSafetyOptions

// Allows container to query what interfaces are safe for what. We're

// optimizing significantly by ignoring which interface the caller is

// asking for.

HRESULT STDMETHODCALLTYPE

       C工程名Ctrl::XObjSafe::GetInterfaceSafetyOptions(

       REFIID riid,

       DWORD __RPC_FAR *pdwSupportedOptions,

       DWORD __RPC_FAR *pdwEnabledOptions)

{

       METHOD_PROLOGUE(C工程名Ctrl, ObjSafe)

              HRESULT retval = ResultFromScode(S_OK);

       // does interface exist?

       IUnknown FAR* punkInterface;

       retval = pThis->ExternalQueryInterface(&riid,

              (void * *)&punkInterface);

       if (retval != E_NOINTERFACE) { // interface exists

              punkInterface->Release(); // release it--just checking!

       }

 

       // we support both kinds of safety and have always both set,

       // regardless of interface

       *pdwSupportedOptions = *pdwEnabledOptions = dwSupportedBits;

       return retval; // E_NOINTERFACE if QI failed

}

/

// CStopLiteCtrl::XObjSafe::SetInterfaceSafetyOptions

// Since we're always safe, this is a no-brainer--but we do check to make

// sure the interface requested exists and that the options we're asked to

// set exist and are set on (we don't support unsafe mode).

HRESULT STDMETHODCALLTYPE

       C工程名Ctrl::XObjSafe::SetInterfaceSafetyOptions(

       REFIID riid,

       DWORD dwOptionSetMask,

       DWORD dwEnabledOptions)

{

       METHOD_PROLOGUE(C工程名Ctrl, ObjSafe)

 

       // does interface exist?

       IUnknown FAR* punkInterface;

       pThis->ExternalQueryInterface(&riid, (void * *)&punkInterface);

       if (punkInterface) { // interface exists

              punkInterface->Release(); // release it--just checking!

       }

       else { // interface doesn't exist

              return ResultFromScode(E_NOINTERFACE);

       }

       // can't set bits we don't support

       if (dwOptionSetMask & dwNotSupportedBits) {

              return ResultFromScode(E_FAIL);

       }

 

       // can't set bits we do support to zero

       dwEnabledOptions &= dwSupportedBits;

       // (we already know there are no extra bits in mask )

       if ((dwOptionSetMask & dwEnabledOptions) !=

              dwOptionSetMask) {

                     return ResultFromScode(E_FAIL);

       }       

 

       // don't need to change anything since we're always safe

       return ResultFromScode(S_OK);

}

至此,该ActiveX组件就注册为安全组件了。