RE: Password Protecting an Access ODBC connection

2001-12-22 Thread Michiel Boland

> Also, I didn't say don't store cc's. I said if you have to store them at I
> would at least encrypt them. Especially when it's easy.

The coldfusion built-in encryption functions are trivial to break, once
you know the key. Since the key must be stored on the server, there is
100% probability that a skilled person will find it.
__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Cary Gordon

I suppose you could not put the password in the ODBC connection and put it 
in through the query, then encrypt the template.

Please let me know the name of the company so that I don't accidentally 
shop there .

At 02:22 PM 12/21/2001 -0500, you wrote:
>once the odbc connection is created on the box, if anyone knows the dsn name
>they have access to the db. *I THINK* they are planning on storing CC
>numbers in the db.
>
>Duane
>
>-Original Message-
>From: Cary Gordon [mailto:[EMAIL PROTECTED]]
>Sent: Friday, December 21, 2001 2:09 PM
>To: CF-Talk
>Subject: Re: Password Protecting an Access ODBC connection
>
>
>You can password protect the Access database.  I don't really understand
>what you mean by password protecting an ODBC connection.
>
>At 01:45 PM 12/21/2001 -0500, you wrote:
> >A colleague asked if it is possible to password protect an ODBC connection
> >to an access database, but its been so long since I've used MS Access that
> >cant remember. Is this possible?
__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Password Protecting an Access ODBC connection

2001-12-21 Thread Jim McAtee

Can't tell you how many times I've seen users, usually sales types or
order-takers, storing plain text CC numbers in memo fields and the like.
Often this is a direct result of _not_ having stored the number in a more
secure means somewhere in the system.

Jim


- Original Message -
From: "Joseph DeVore" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, December 21, 2001 1:23 PM
Subject: RE: Password Protecting an Access ODBC connection


> Not at all.
>
> I just want to stress *DO NOT STORE PLAIN TEXT CC NUMBERS* in a db.
> IMO, It's a bad, bad thing. But that's only one opinion..
>
>
> Happy holidays
>
>
> Joseph DeVore
> VeloxWeb Technologies
>
>
>
> -Original Message-
> From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 21, 2001 12:21 PM
> To: CF-Talk
> Subject: RE: Password Protecting an Access ODBC connection
>
>
> thanks Joseph. i hope i didn't sound snippy. thanks for the tips.
>
> tgif and happy holidays,
> duane
>
> -Original Message-
> From: Joseph DeVore [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 21, 2001 3:09 PM
> To: CF-Talk
> Subject: RE: Password Protecting an Access ODBC connection
>
>
> You said, "Already had that discussion, about not storing CC nums etc and
> encryption
> but they still want to store the cc info anyway. I was asked if it was
> possible to setup some sort of secure connection the DB. I haven't used
> Access outside of simple proto-typing in a long time."
>
> In the CF administrator when you add a datasource you can enter the
> databases password but if someone had access to the registry they could
get
> that password in no time.
>
> Also, I didn't say don't store cc's. I said if you have to store them at I
> would at least encrypt them. Especially when it's easy. It only takes a
few
> minutes to implement encryption/decryption and can save you a heck of a
lot
> more time, money and hassle later (oh and lawsuits)..
>
> That code I sent you in my last message works great and it would not take
> more than a few minutes to implement. Maybe run that by them.
>
> Anyhow, good luck.
>
> - Joseph
>
>
> -Original Message-
> From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 21, 2001 10:46 AM
> To: CF-Talk
> Subject: Password Protecting an Access ODBC connection
>
>
> A colleague asked if it is possible to password protect an ODBC connection
> to an access database, but its been so long since I've used MS Access that
> cant remember. Is this possible?
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Larry Engleman

If you're going to store CC#, even if you encrypt them, make sure that
the machine goes into lockdown.  Close all unused ports, don't run any
software that you don't have too.  Don't connect it to any of your other 
boxes (those could be comprimised and then could connect to the CC box)
Also encrypt it with a password that is a string of random numbers and
letters.  Don't use regular words, backwards regular words, or words
with numbers after it.  There are programs that will crack those open 
in minutes.
Just my $0.02.
Also, if you're interested in just how much people that want to hack
into your system can actually do, a good place to start is...

http://neworder.box.sk

__
Why Share?
  Dedicated Win 2000 Server · PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Duane Boudreau

usually isps only give you access to http accessible directories but i don't
think that this project is going on a conventional shared environment.


-Original Message-
From: Bryan Stevenson [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 3:23 PM
To: CF-Talk
Subject: Re: Password Protecting an Access ODBC connection


Yup...I've sen ISPs do that one too...yikes!

Bryan Stevenson
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
p. 250.920.8830
e. [EMAIL PROTECTED]
-
Allaire Alliance Partner
www.allaire.com

- Original Message -
From: "Jerry Johnson" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, December 21, 2001 12:25 PM
Subject: RE: Password Protecting an Access ODBC connection


> And if I can interject with a hair-raising warning...
>
> Make sure the Access DB is not in an http-published directory.
>
> I watched a project (in horror) where the Access table was in a database
> directory under wwwroot.  A simple http://www.ohmygod.com/database/db1.mdb
> would download the db!
>
> I'm sure this warning is unneccessary, but...
>
> Jerry Johnson
>
> >>> [EMAIL PROTECTED] 12/21/01 03:08PM >>>
> You said, "Already had that discussion, about not storing CC nums etc and
> encryption
> but they still want to store the cc info anyway. I was asked if it was
> possible to setup some sort of secure connection the DB. I haven't used
> Access outside of simple proto-typing in a long time."
>
> In the CF administrator when you add a datasource you can enter the
> databases password but if someone had access to the registry they could
> get
> that password in no time.
>
> Also, I didn't say don't store cc's. I said if you have to store them at I
> would at least encrypt them. Especially when it's easy. It only takes a
> few
> minutes to implement encryption/decryption and can save you a heck of a
> lot
> more time, money and hassle later (oh and lawsuits)..
>
> That code I sent you in my last message works great and it would not take
> more than a few minutes to implement. Maybe run that by them.
>
> Anyhow, good luck.
>
> - Joseph
>
>
> -Original Message-
> From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 21, 2001 10:46 AM
> To: CF-Talk
> Subject: Password Protecting an Access ODBC connection
>
>
> A colleague asked if it is possible to password protect an ODBC connection
> to an access database, but its been so long since I've used MS Access that
> cant remember. Is this possible?
>
>
>

__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Carlisle, Eric

Out of curiosity, can you get the same effect by password protecting 
the
Access database?
If so, is it advisable to password protect the database or the ODBC
connection?
BTW, I realize that access passwords are pretty sketchy in terms of
security.

Happy Holidays!

EC

-Original Message-
From: Jon Hall [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 3:14 PM
To: CF-Talk
Subject: Re: Password Protecting an Access ODBC connection


Yes it is possible. It's possible from the CF admin as well as the 
Windows
ODBC control panel. Just select the ODBC datasource, click
configure/advanced.

jon
- Original Message -
From: "Duane Boudreau" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, December 21, 2001 1:45 PM
Subject: Password Protecting an Access ODBC connection


> A colleague asked if it is possible to password protect an ODBC 
connection
> to an access database, but its been so long since I've used MS Access 
that
> cant remember. Is this possible?
> 

__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Joseph DeVore

Not at all.

I just want to stress *DO NOT STORE PLAIN TEXT CC NUMBERS* in a db.
IMO, It's a bad, bad thing. But that's only one opinion..


Happy holidays


Joseph DeVore
VeloxWeb Technologies



-Original Message-
From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 12:21 PM
To: CF-Talk
Subject: RE: Password Protecting an Access ODBC connection


thanks Joseph. i hope i didn't sound snippy. thanks for the tips.

tgif and happy holidays,
duane

-Original Message-
From: Joseph DeVore [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 3:09 PM
To: CF-Talk
Subject: RE: Password Protecting an Access ODBC connection


You said, "Already had that discussion, about not storing CC nums etc and
encryption
but they still want to store the cc info anyway. I was asked if it was
possible to setup some sort of secure connection the DB. I haven't used
Access outside of simple proto-typing in a long time."

In the CF administrator when you add a datasource you can enter the
databases password but if someone had access to the registry they could get
that password in no time.

Also, I didn't say don't store cc's. I said if you have to store them at I
would at least encrypt them. Especially when it's easy. It only takes a few
minutes to implement encryption/decryption and can save you a heck of a lot
more time, money and hassle later (oh and lawsuits)..

That code I sent you in my last message works great and it would not take
more than a few minutes to implement. Maybe run that by them.

Anyhow, good luck.

- Joseph


-Original Message-
From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 10:46 AM
To: CF-Talk
Subject: Password Protecting an Access ODBC connection


A colleague asked if it is possible to password protect an ODBC connection
to an access database, but its been so long since I've used MS Access that
cant remember. Is this possible?



__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Password Protecting an Access ODBC connection

2001-12-21 Thread Bryan Stevenson

Yup...I've sen ISPs do that one too...yikes!

Bryan Stevenson
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
p. 250.920.8830
e. [EMAIL PROTECTED]
-
Allaire Alliance Partner
www.allaire.com

- Original Message -
From: "Jerry Johnson" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, December 21, 2001 12:25 PM
Subject: RE: Password Protecting an Access ODBC connection


> And if I can interject with a hair-raising warning...
>
> Make sure the Access DB is not in an http-published directory.
>
> I watched a project (in horror) where the Access table was in a database
> directory under wwwroot.  A simple http://www.ohmygod.com/database/db1.mdb
> would download the db!
>
> I'm sure this warning is unneccessary, but...
>
> Jerry Johnson
>
> >>> [EMAIL PROTECTED] 12/21/01 03:08PM >>>
> You said, "Already had that discussion, about not storing CC nums etc and
> encryption
> but they still want to store the cc info anyway. I was asked if it was
> possible to setup some sort of secure connection the DB. I haven't used
> Access outside of simple proto-typing in a long time."
>
> In the CF administrator when you add a datasource you can enter the
> databases password but if someone had access to the registry they could
> get
> that password in no time.
>
> Also, I didn't say don't store cc's. I said if you have to store them at I
> would at least encrypt them. Especially when it's easy. It only takes a
> few
> minutes to implement encryption/decryption and can save you a heck of a
> lot
> more time, money and hassle later (oh and lawsuits)..
>
> That code I sent you in my last message works great and it would not take
> more than a few minutes to implement. Maybe run that by them.
>
> Anyhow, good luck.
>
> - Joseph
>
>
> -Original Message-
> From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 21, 2001 10:46 AM
> To: CF-Talk
> Subject: Password Protecting an Access ODBC connection
>
>
> A colleague asked if it is possible to password protect an ODBC connection
> to an access database, but its been so long since I've used MS Access that
> cant remember. Is this possible?
>
>
> 
__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Duane Boudreau

thanks Joseph. i hope i didn't sound snippy. thanks for the tips.

tgif and happy holidays,
duane

-Original Message-
From: Joseph DeVore [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 3:09 PM
To: CF-Talk
Subject: RE: Password Protecting an Access ODBC connection


You said, "Already had that discussion, about not storing CC nums etc and
encryption
but they still want to store the cc info anyway. I was asked if it was
possible to setup some sort of secure connection the DB. I haven't used
Access outside of simple proto-typing in a long time."

In the CF administrator when you add a datasource you can enter the
databases password but if someone had access to the registry they could get
that password in no time.

Also, I didn't say don't store cc's. I said if you have to store them at I
would at least encrypt them. Especially when it's easy. It only takes a few
minutes to implement encryption/decryption and can save you a heck of a lot
more time, money and hassle later (oh and lawsuits)..

That code I sent you in my last message works great and it would not take
more than a few minutes to implement. Maybe run that by them.

Anyhow, good luck.

- Joseph


-Original Message-
From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 10:46 AM
To: CF-Talk
Subject: Password Protecting an Access ODBC connection


A colleague asked if it is possible to password protect an ODBC connection
to an access database, but its been so long since I've used MS Access that
cant remember. Is this possible?


__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Jerry Johnson

And if I can interject with a hair-raising warning...

Make sure the Access DB is not in an http-published directory.

I watched a project (in horror) where the Access table was in a database 
directory under wwwroot.  A simple http://www.ohmygod.com/database/db1.mdb 
would download the db!

I'm sure this warning is unneccessary, but...

Jerry Johnson

>>> [EMAIL PROTECTED] 12/21/01 03:08PM >>>
You said, "Already had that discussion, about not storing CC nums etc and
encryption
but they still want to store the cc info anyway. I was asked if it was
possible to setup some sort of secure connection the DB. I haven't used
Access outside of simple proto-typing in a long time."

In the CF administrator when you add a datasource you can enter the
databases password but if someone had access to the registry they could 
get
that password in no time.

Also, I didn't say don't store cc's. I said if you have to store them at I
would at least encrypt them. Especially when it's easy. It only takes a 
few
minutes to implement encryption/decryption and can save you a heck of a 
lot
more time, money and hassle later (oh and lawsuits)..

That code I sent you in my last message works great and it would not take
more than a few minutes to implement. Maybe run that by them.

Anyhow, good luck.

- Joseph


-Original Message-
From: Duane Boudreau [mailto:[EMAIL PROTECTED]] 
Sent: Friday, December 21, 2001 10:46 AM
To: CF-Talk
Subject: Password Protecting an Access ODBC connection


A colleague asked if it is possible to password protect an ODBC connection
to an access database, but its been so long since I've used MS Access that
cant remember. Is this possible?


__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Password Protecting an Access ODBC connection

2001-12-21 Thread Jon Hall

Yes it is possible. It's possible from the CF admin as well as the Windows
ODBC control panel. Just select the ODBC datasource, click
configure/advanced.

jon
- Original Message -
From: "Duane Boudreau" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Friday, December 21, 2001 1:45 PM
Subject: Password Protecting an Access ODBC connection


> A colleague asked if it is possible to password protect an ODBC connection
> to an access database, but its been so long since I've used MS Access that
> cant remember. Is this possible?
> 
__
Get Your Own Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread savan . thongvanh

can't you do that in the ODBC settings? assuming since ur using access
you're also using windows.

try going to
Control Panel > ODBC Datasources > User DSN > Configure > Advanced

is this a bad way to do this?




"Joseph DeVore" <[EMAIL PROTECTED]> on 12/21/2001 02:08:44 PM

Please respond to [EMAIL PROTECTED]

To:   CF-Talk <[EMAIL PROTECTED]>
cc:

Subject:  RE: Password Protecting an Access ODBC connection


You said, "Already had that discussion, about not storing CC nums etc a
nd
encryption
but they still want to store the cc info anyway. I was asked if it wa
s
possible to setup some sort of secure connection the DB. I haven't us
ed
Access outside of simple proto-typing in a long time."

In the CF administrator when you add a datasource you can enter the
databases password but if someone had access to the registry they could
 get
that password in no time.

Also, I didn't say don't store cc's. I said if you have to store them
 at I
would at least encrypt them. Especially when it's easy. It only tak
es a few
minutes to implement encryption/decryption and can save you a heck of a
 lot
more time, money and hassle later (oh and lawsuits)..

That code I sent you in my last message works great and it would not ta
ke
more than a few minutes to implement. Maybe run that by them.

Anyhow, good luck.

- Joseph


-Original Message-
From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 10:46 AM
To: CF-Talk
Subject: Password Protecting an Access ODBC connection


A colleague asked if it is possible to password protect an ODBC connect
ion
to an access database, but its been so long since I've used MS Access t
hat
cant remember. Is this possible?


__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Joseph DeVore

You said, "Already had that discussion, about not storing CC nums etc and
encryption
but they still want to store the cc info anyway. I was asked if it was
possible to setup some sort of secure connection the DB. I haven't used
Access outside of simple proto-typing in a long time."

In the CF administrator when you add a datasource you can enter the
databases password but if someone had access to the registry they could get
that password in no time.

Also, I didn't say don't store cc's. I said if you have to store them at I
would at least encrypt them. Especially when it's easy. It only takes a few
minutes to implement encryption/decryption and can save you a heck of a lot
more time, money and hassle later (oh and lawsuits)..

That code I sent you in my last message works great and it would not take
more than a few minutes to implement. Maybe run that by them.

Anyhow, good luck.

- Joseph


-Original Message-
From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 10:46 AM
To: CF-Talk
Subject: Password Protecting an Access ODBC connection


A colleague asked if it is possible to password protect an ODBC connection
to an access database, but its been so long since I've used MS Access that
cant remember. Is this possible?

__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Joseph DeVore

IMO, If they plan to store credit card numbers in a database *don't* do it
in plain text. Especially if it's an Access database.

What I would do at the very least is encrypt the card number before storing
it and then decrypt it when you need to use it.


This code will encrypt your card number:
CC ->    
ECC-> 556274467958045A73655A77464D7E605F5110










#encrypted#





to decrypt





#decrypted#


HTH,

Joseph DeVore



-Original Message-
From: Duane Boudreau [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 11:23 AM
To: CF-Talk
Subject: RE: Password Protecting an Access ODBC connection


once the odbc connection is created on the box, if anyone knows the dsn name
they have access to the db. *I THINK* they are planning on storing CC
numbers in the db.

Duane

-Original Message-
From: Cary Gordon [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 2:09 PM
To: CF-Talk
Subject: Re: Password Protecting an Access ODBC connection


You can password protect the Access database.  I don't really understand
what you mean by password protecting an ODBC connection.

At 01:45 PM 12/21/2001 -0500, you wrote:
>A colleague asked if it is possible to password protect an ODBC connection
>to an access database, but its been so long since I've used MS Access that
>cant remember. Is this possible?


__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: Password Protecting an Access ODBC connection

2001-12-21 Thread Duane Boudreau

once the odbc connection is created on the box, if anyone knows the dsn name
they have access to the db. *I THINK* they are planning on storing CC
numbers in the db.

Duane

-Original Message-
From: Cary Gordon [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 21, 2001 2:09 PM
To: CF-Talk
Subject: Re: Password Protecting an Access ODBC connection


You can password protect the Access database.  I don't really understand
what you mean by password protecting an ODBC connection.

At 01:45 PM 12/21/2001 -0500, you wrote:
>A colleague asked if it is possible to password protect an ODBC connection
>to an access database, but its been so long since I've used MS Access that
>cant remember. Is this possible?

__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Password Protecting an Access ODBC connection

2001-12-21 Thread Cary Gordon

You can password protect the Access database.  I don't really understand 
what you mean by password protecting an ODBC connection.

At 01:45 PM 12/21/2001 -0500, you wrote:
>A colleague asked if it is possible to password protect an ODBC connection
>to an access database, but its been so long since I've used MS Access that
>cant remember. Is this possible?
__
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists