Yup...I've sen ISPs do that one too...yikes! Bryan Stevenson VP & Director of E-Commerce Development Electric Edge Systems Group Inc. p. 250.920.8830 e. [EMAIL PROTECTED] --------------------------------------------------------- Allaire Alliance Partner www.allaire.com
----- Original Message ----- From: "Jerry Johnson" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Friday, December 21, 2001 12:25 PM Subject: RE: Password Protecting an Access ODBC connection > And if I can interject with a hair-raising warning... > > Make sure the Access DB is not in an http-published directory. > > I watched a project (in horror) where the Access table was in a database > directory under wwwroot. A simple http://www.ohmygod.com/database/db1.mdb > would download the db! > > I'm sure this warning is unneccessary, but... > > Jerry Johnson > > >>> [EMAIL PROTECTED] 12/21/01 03:08PM >>> > You said, "Already had that discussion, about not storing CC nums etc and > encryption > but they still want to store the cc info anyway. I was asked if it was > possible to setup some sort of secure connection the DB. I haven't used > Access outside of simple proto-typing in a long time." > > In the CF administrator when you add a datasource you can enter the > databases password but if someone had access to the registry they could > get > that password in no time. > > Also, I didn't say don't store cc's. I said if you have to store them at I > would at least encrypt them. Especially when it's easy. It only takes a > few > minutes to implement encryption/decryption and can save you a heck of a > lot > more time, money and hassle later (oh and lawsuits).. > > That code I sent you in my last message works great and it would not take > more than a few minutes to implement. Maybe run that by them. > > Anyhow, good luck. > > - Joseph > > > -----Original Message----- > From: Duane Boudreau [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 21, 2001 10:46 AM > To: CF-Talk > Subject: Password Protecting an Access ODBC connection > > > A colleague asked if it is possible to password protect an ODBC connection > to an access database, but its been so long since I've used MS Access that > cant remember. Is this possible? > > > ______________________________________________________________________ Dedicated Windows 2000 Server PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER Instant Activation · $99/Month · Free Setup http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
