Can't tell you how many times I've seen users, usually sales types or order-takers, storing plain text CC numbers in memo fields and the like. Often this is a direct result of _not_ having stored the number in a more secure means somewhere in the system.
Jim ----- Original Message ----- From: "Joseph DeVore" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Friday, December 21, 2001 1:23 PM Subject: RE: Password Protecting an Access ODBC connection > Not at all. > > I just want to stress *DO NOT STORE PLAIN TEXT CC NUMBERS* in a db. > IMO, It's a bad, bad thing. But that's only one opinion.. > > > Happy holidays > > > Joseph DeVore > VeloxWeb Technologies > > > > -----Original Message----- > From: Duane Boudreau [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 21, 2001 12:21 PM > To: CF-Talk > Subject: RE: Password Protecting an Access ODBC connection > > > thanks Joseph. i hope i didn't sound snippy. thanks for the tips. > > tgif and happy holidays, > duane > > -----Original Message----- > From: Joseph DeVore [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 21, 2001 3:09 PM > To: CF-Talk > Subject: RE: Password Protecting an Access ODBC connection > > > You said, "Already had that discussion, about not storing CC nums etc and > encryption > but they still want to store the cc info anyway. I was asked if it was > possible to setup some sort of secure connection the DB. I haven't used > Access outside of simple proto-typing in a long time." > > In the CF administrator when you add a datasource you can enter the > databases password but if someone had access to the registry they could get > that password in no time. > > Also, I didn't say don't store cc's. I said if you have to store them at I > would at least encrypt them. Especially when it's easy. It only takes a few > minutes to implement encryption/decryption and can save you a heck of a lot > more time, money and hassle later (oh and lawsuits).. > > That code I sent you in my last message works great and it would not take > more than a few minutes to implement. Maybe run that by them. > > Anyhow, good luck. > > - Joseph > > > -----Original Message----- > From: Duane Boudreau [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 21, 2001 10:46 AM > To: CF-Talk > Subject: Password Protecting an Access ODBC connection > > > A colleague asked if it is possible to password protect an ODBC connection > to an access database, but its been so long since I've used MS Access that > cant remember. Is this possible? ______________________________________________________________________ Get Your Own Dedicated Windows 2000 Server PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER Instant Activation · $99/Month · Free Setup http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
