There is no real good encryption you can use. You can use a symmetric key encryption algorithm to encrypt the data before inserting it into sql, and then decrypt when recalling the data, but you will have to keep the encryption key in the code somewhere, or read it from some source. Either way, if the attacker gets access to the code, he will be able to decrypt all your data. I guess it provides protection sort of the way security through obscurity provides protection.
Russ > -----Original Message----- > From: Steve Kahn [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 06, 2007 12:21 PM > To: CF-Talk > Subject: RE: Form Encryption > > Got the comodo ssl in place, want to encrypt the data when inserted into > sql and then decrypt it when calling it up > > -----Original Message----- > From: Adkins, Randy [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 06, 2007 12:13 PM > To: CF-Talk > Subject: RE: Form Encryption > > SSL is one piece of the pie you should have! > > -----Original Message----- > From: Steve Kahn [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 06, 2007 11:59 AM > To: CF-Talk > Subject: RE: Form Encryption > > protect credit card and personal info; > when the visitor submits form data at site and when the company employee > logs in to site to call up the data > > -----Original Message----- > From: Tom Chiverton [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 06, 2007 11:42 AM > To: CF-Talk > Subject: Re: Form Encryption > > On Wednesday 06 Jun 2007, Steve Kahn wrote: > > Does anyone have an easy to use 'Form Encryption' app they could > recommend? > > With the aim of doing what ? > And since you mention 'encryption' - against what sort of an attacker ? > > -- > Tom Chiverton > Helping to heterogeneously disintermediate total initiatives > on: http://thefalken.livejournal.com > > **************************************************** > > This email is sent for and on behalf of Halliwells LLP. > > Halliwells LLP is a limited liability partnership registered in England > and Wales under registered number OC307980 whose registered office > address is at St James's Court Brown Street Manchester M2 2JF. A list > of members is available for inspection at the registered office. Any > reference to a partner in relation to Halliwells LLP means a member of > Halliwells LLP. > Regulated by the Law Society. > > CONFIDENTIALITY > > This email is intended only for the use of the addressee named above and > may be confidential or legally privileged. If you are not the addressee > you must not read it and must not use any information contained in nor > copy it nor inform any person other than Halliwells LLP or the addressee > of its existence or contents. If you have received this email in error > please delete it and notify Halliwells LLP IT Department on 0870 365 > 8008. > > For more information about Halliwells LLP visit www.halliwells.com. > > > > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Macromedia ColdFusion MX7 Upgrade to MX7 & experience time-saving features, more productivity. http://www.adobe.com/products/coldfusion?sdid=RVJW Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:280265 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
