Re: CFQUERY accessing MS SQL DB on another CF server

2005-03-07 Thread Adam Haskell
I might also add that if you are on a MX 7 Ent box this is a great
example of how asynchronous cfm calls can really speed up an app. You
can make an async call to a cfc which would do the remote update, no
delays in your actual page rendering time and no try catch needed
around the call. These async calls are kick butt!

Adam H 


On Mon, 7 Mar 2005 16:02:43 +1100, Mike Kear [EMAIL PROTECTED] wrote:
 I have a couple of applications where I want to update two database
 servers simultaneously.  I have just set up a datasource for each
 server on my CFserver, and run the update query twice - once with each
 datasource name.  No need for connect strings.
 
 It breaks if the remote server isnt available for any reason, you have
 to surround the CFQuery with Try/Catch blocks, and have some erro
 handling, but as long as both servers are accessible at the instant
 you execute the page, there's no problem at all.  The CFServer doesn't
 care where the database server is, as long as it can connect to it.
 
 If I understand it right, you only need to have connect strings if the
 database name is dynamic.   I dont know much about them because I've
 never needed to use  them.
 
 Cheers
 Mike Kear
 Windsor, NSW, Australia
 Certified Advanced ColdFusion Developer
 AFP Webworks
 http://afpwebworks.com
 ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month
 
 
 On Sun, 06 Mar 2005 00:46:02 -0600, Nick Baker [EMAIL PROTECTED] wrote:
  MX 6.1
 
  In some of the earlier versions you could query a db on other servers
  around the Internet. V 6 and later (I think) changed up CFQUERY and I
  can't seem to get it going again.
 
  In earlier versions we had a connectString attribute which took something
  like the following.
 
  ConnectionString = DRIVER=SQL Server;SERVER={ipaddress};UID={username};
  PWD={password};APP=;DATABASE={database}
 
  Does anyone know how to accomplish this with V 6 and later?
 
  Thanks,
 
  Nick
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197674
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-06 Thread Phillip B. Holmes
James,

Exactly right. Also, I might add that if the server gets rooted and they get
partial access to the file system, hard coding your DB login becomes an
immediate target. Bad idea in any circumstance.

Phil



-Original Message-
From: James Holmes [mailto:[EMAIL PROTECTED] 
Sent: Sunday, March 06, 2005 2:05 AM
To: CF-Talk
Subject: RE: CFQUERY accessing MS SQL DB on another CF server

In fact, without sandboxing, it is trivial to write a CF template to get the
raw code of everyone else's CF templates to get their usernames and
passwords; since in this case the datasource is now written in the code, you
don't even have to guess it.

In other words, if your host doesn't sandbox, don't expect any security at
all.

-Original Message-
From: James Holmes
Sent: Sunday, 6 March 2005 3:19
To: CF-Talk
Subject: RE: CFQUERY accessing MS SQL DB on another CF server

Unless they are using sandboxing on CF Enterprise, like ay decent ISP
should.

-Original Message-
From: S. Isaac Dealey [mailto:[EMAIL PROTECTED]
Sent: Sunday, 6 March 2005 3:23
To: CF-Talk
Subject: RE: CFQUERY accessing MS SQL DB on another CF server

[snip]

Many shared hosting providers don't include the username / password in the
DSN definition in the CF Admin (forcing you to use them in your
code) because that would allow anyone with a hosting account to
theoretically access another one of their client's databases by guessing the
DSN. Which could be a particularly dangerous thing if the DSN names happen
to be formulaic.

[snip]



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197608
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-06 Thread James Holmes
In fact, without sandboxing, it is trivial to write a CF template to get the
raw code of everyone else's CF templates to get their usernames and
passwords; since in this case the datasource is now written in the code, you
don't even have to guess it.

In other words, if your host doesn't sandbox, don't expect any security at
all.

-Original Message-
From: James Holmes 
Sent: Sunday, 6 March 2005 3:19 
To: CF-Talk
Subject: RE: CFQUERY accessing MS SQL DB on another CF server

Unless they are using sandboxing on CF Enterprise, like ay decent ISP
should.

-Original Message-
From: S. Isaac Dealey [mailto:[EMAIL PROTECTED]
Sent: Sunday, 6 March 2005 3:23
To: CF-Talk
Subject: RE: CFQUERY accessing MS SQL DB on another CF server

[snip]

Many shared hosting providers don't include the username / password in the
DSN definition in the CF Admin (forcing you to use them in your
code) because that would allow anyone with a hosting account to
theoretically access another one of their client's databases by guessing the
DSN. Which could be a particularly dangerous thing if the DSN names happen
to be formulaic.

[snip]

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197607
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: CFQUERY accessing MS SQL DB on another CF server

2005-03-06 Thread Claude Schneegans
 it is trivial to write a CF template to get the

raw code of everyone else's CF templates to get their usernames and
passwords;

It is at least as trivial (at least in CF 5) to write a CF template to get the 
CF administrator password,
so storing the datasource password in it is not safe either.

-- 
___
REUSE CODE! Use custom tags;
See http://www.contentbox.com/claude/customtags/tagstore.cfm
(Please send any spam to this address: [EMAIL PROTECTED])
Thanks.


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197610
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-06 Thread S . Isaac Dealey
Afaik the vast majority of ISP's aren't doing this. any decent ISP
should -- perhaps -- but by and large ISP's don't take the time to
really learn about the ins and outs of the server -- they're just
trying to pay the rent, so it's a numbers game to them, and they often
don't earn enough on shared hosting accounts to want to take the time
to expand their knowledge of the server, and/or to take the time to
set up a sandbox for each new account, particularly with their target
market continually demanding lower and lower hosting fees. I need CF,
SQL 200 and unlimited bandwidth - but if you charge $7 and your
competito charges $5, I'm going to use your competitor ... it really
doesn't encourage them to want to spend more time working on that
account. Although there is something to be said for the old addage
you get what you pay for. I'm not saying your wrong -- I'm just
saying, it's not necessarily as black and white as it might seem.


 Unless they are using sandboxing on CF Enterprise, like ay
 decent ISP should.

 -Original Message-
 From: S. Isaac Dealey [mailto:[EMAIL PROTECTED]
 Sent: Sunday, 6 March 2005 3:23
 To: CF-Talk
 Subject: RE: CFQUERY accessing MS SQL DB on another CF
 server

 [snip]

 Many shared hosting providers don't include the username /
 password in the
 DSN definition in the CF Admin (forcing you to use them in
 your
 code) because that would allow anyone with a hosting
 account to
 theoretically access another one of their client's
 databases by guessing the
 DSN. Which could be a particularly dangerous thing if the
 DSN names happen
 to be formulaic.

 [snip]

 ~~
 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197612
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: CFQUERY accessing MS SQL DB on another CF server

2005-03-06 Thread Jared Rypka-Hauer - CMG, LLC
Oi... having an internet  connection is a security risk.

I locked my keys in the car the other night. I had to make a simple
tool and slid it down between the body of the car and the top of the
door, to hit the electric lock button. It took less than 30 seconds to
steal my own car. But it was locked down, in my driveway... but who
cares? It's out there and always at risk.

Have a patio door? It's a security risk.

Ever cross the street? That's not safe.

Best practices and due dilligence are the only recourse in an
unsecure, open world. So, which is more likely? Getting rooted or
parsing someone else's pages? Or guessing at the DSNs of others? I
don't know, I really don't (and I don't really care, either). What I
do know is this...

Having a CF Server (or Java, ISP, Oracle, Apache. IIS, or anything)
and a DB that are on the internet are the basic security risk here,
because the real jeopardy only comes when putting a system on the
internet... so bickering over details is silly. *MY* ISP puts the
passwords in the DSN, by default. So my pages have no access
credentials in them. That's fine with me. I hate the extra typing,
which is really my big motivation and has nothing to do with
security... because on this topic, it's an utterly irrelevant issue.

Upshot? Keep servers patched, updated, sandboxed, and so on so that
WHEN you're broken into (note: NOT IF, but when) you'll at least be
able to prove you maintained it as best as could be and shouldn't be
liable for damages or losses...

And the only way to create a connect-string-based DSN anymore is to
use a JDBC connect string in the CFADMIN. If you google for JDBC and
your driver you should be able to find syntax easily. I don't think it
can be done from within CF these days, but it certainly can be done
from the administrator DSN setup page. However, since you put the
hostname/ip, username. password, port... why mess with JDBC
connections when you can just use the form?

Laterz,
J


On Sun, 06 Mar 2005 12:56:03 -0500, Claude Schneegans
[EMAIL PROTECTED] wrote:
  it is trivial to write a CF template to get the
 
 raw code of everyone else's CF templates to get their usernames and
 passwords;
 
 It is at least as trivial (at least in CF 5) to write a CF template to get 
 the CF administrator password,
 so storing the datasource password in it is not safe either.


-- 
Continuum Media Group LLC
Burnsville, MN 55337
http://www.web-relevant.com
http://cfobjective.neo.servequake.com

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197613
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: CFQUERY accessing MS SQL DB on another CF server

2005-03-06 Thread Adam Haskell
Might I add that in CF 7 the complete ColdFusion Admin has an API so
you could make datasources dyhnmically that way...I would guess with a
little investigation you could figure out how to do simular in MX 6...

Adam H


On Sun, 6 Mar 2005 12:35:19 -0600, Jared Rypka-Hauer - CMG, LLC
[EMAIL PROTECTED] wrote:
 And the only way to create a connect-string-based DSN anymore is to
 use a JDBC connect string in the CFADMIN. If you google for JDBC and
 your driver you should be able to find syntax easily. I don't think it
 can be done from within CF these days, but it certainly can be done
 from the administrator DSN setup page. However, since you put the
 hostname/ip, username. password, port... why mess with JDBC
 connections when you can just use the form?
 
 Laterz,
 J
 
 On Sun, 06 Mar 2005 12:56:03 -0500, Claude Schneegans
 [EMAIL PROTECTED] wrote:
   it is trivial to write a CF template to get the
 
  raw code of everyone else's CF templates to get their usernames and
  passwords;
 
  It is at least as trivial (at least in CF 5) to write a CF template to get 
  the CF administrator password,
  so storing the datasource password in it is not safe either.
 
 --
 Continuum Media Group LLC
 Burnsville, MN 55337
 http://www.web-relevant.com
 http://cfobjective.neo.servequake.com
 
 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197617
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


Re: CFQUERY accessing MS SQL DB on another CF server

2005-03-06 Thread Mike Kear
I have a couple of applications where I want to update two database
servers simultaneously.  I have just set up a datasource for each
server on my CFserver, and run the update query twice - once with each
datasource name.  No need for connect strings.

It breaks if the remote server isnt available for any reason, you have
to surround the CFQuery with Try/Catch blocks, and have some erro
handling, but as long as both servers are accessible at the instant
you execute the page, there's no problem at all.  The CFServer doesn't
care where the database server is, as long as it can connect to it.

If I understand it right, you only need to have connect strings if the
database name is dynamic.   I dont know much about them because I've
never needed to use  them.

Cheers
Mike Kear
Windsor, NSW, Australia
Certified Advanced ColdFusion Developer
AFP Webworks
http://afpwebworks.com
ColdFusion, PHP, ASP, ASP.NET hosting from AUD$15/month




On Sun, 06 Mar 2005 00:46:02 -0600, Nick Baker [EMAIL PROTECTED] wrote:
 MX 6.1
 
 In some of the earlier versions you could query a db on other servers
 around the Internet. V 6 and later (I think) changed up CFQUERY and I
 can't seem to get it going again.
 
 In earlier versions we had a connectString attribute which took something
 like the following.
 
 ConnectionString = DRIVER=SQL Server;SERVER={ipaddress};UID={username};
 PWD={password};APP=;DATABASE={database}
 
 Does anyone know how to accomplish this with V 6 and later?
 
 Thanks,
 
 Nick

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197640
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-05 Thread James Holmes
Add the server as a datasource. 

-Original Message-
From: Nick Baker [mailto:[EMAIL PROTECTED] 
Sent: Sunday, 6 March 2005 2:46 
To: CF-Talk
Subject: CFQUERY accessing MS SQL DB on another CF server

MX 6.1

In some of the earlier versions you could query a db on other servers around
the Internet. V 6 and later (I think) changed up CFQUERY and I can't seem
to get it going again.

In earlier versions we had a connectString attribute which took something
like the following.

ConnectionString = DRIVER=SQL Server;SERVER={ipaddress};UID={username};
PWD={password};APP=;DATABASE={database}


Does anyone know how to accomplish this with V 6 and later?

Thanks,

Nick

  




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197600
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-05 Thread Phillip B. Holmes
Well, hard coding your SQL username  password is a security risk and IMHO
bad practice.
You should let the CFAdmin handle that for you. 

Warmest Regards,

Phillip B. Holmes



-Original Message-
From: Nick Baker [mailto:[EMAIL PROTECTED] 
Sent: Sunday, March 06, 2005 12:46 AM
To: CF-Talk
Subject: CFQUERY accessing MS SQL DB on another CF server

MX 6.1

In some of the earlier versions you could query a db on other servers around
the Internet. V 6 and later (I think) changed up CFQUERY and I can't seem
to get it going again.

In earlier versions we had a connectString attribute which took something
like the following.

ConnectionString = DRIVER=SQL Server;SERVER={ipaddress};UID={username};
PWD={password};APP=;DATABASE={database}


Does anyone know how to accomplish this with V 6 and later?

Thanks,

Nick

  




~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197601
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-05 Thread Nick Baker
CFAdmin's instructions are to provide the following ConnectionString. It is 
that way
or no way.

ConnectionString = DRIVER=SQL Server;SERVER={ipaddress};UID={username};
PWD={password};APP=;DATABASE={database}

I can't figure out where to put it?

Security is not an issue in this case. Some public information brought 
together for
our convenience at any given moment in time.

Nick


At 12:54 AM 3/6/2005, you wrote:
Well, hard coding your SQL username  password is a security risk and IMHO
bad practice.
You should let the CFAdmin handle that for you.

Warmest Regards,

Phillip B. Holmes



-Original Message-
From: Nick Baker [mailto:[EMAIL PROTECTED]
Sent: Sunday, March 06, 2005 12:46 AM
To: CF-Talk
Subject: CFQUERY accessing MS SQL DB on another CF server

MX 6.1

In some of the earlier versions you could query a db on other servers around
the Internet. V 6 and later (I think) changed up CFQUERY and I can't seem
to get it going again.

In earlier versions we had a connectString attribute which took something
like the following.

ConnectionString = DRIVER=SQL Server;SERVER={ipaddress};UID={username};
PWD={password};APP=;DATABASE={database}


Does anyone know how to accomplish this with V 6 and later?

Thanks,

Nick








~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197602
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-05 Thread S . Isaac Dealey
IMO hard-coding a database username/password in your app is only a
security risk if the wrong people already have access to your file
system, in which case you likely have bigger issues than the database
username in your application code.

Many shared hosting providers don't include the username / password in
the DSN definition in the CF Admin (forcing you to use them in your
code) because that would allow anyone with a hosting account to
theoretically access another one of their client's databases by
guessing the DSN. Which could be a particularly dangerous thing if the
DSN names happen to be formulaic.

but I digress...

The connectionstring attribute of cfquery was (and I'm sure someone
will correct me if I'm wrong) an element of what were referred to as
dsn-less connections. That is, you could connect to a database
without first creating a DSN in the ColdFusion Administrator.
ColdFusion MX and later no longer include the dsn-less connections
feature -- where it got off to, why it got off there and if it will
ever come back are questions to be pondered.

In the meantime unfortunately the only answer is no, you can't do
that anymore.


 Well, hard coding your SQL username  password is a
 security risk and IMHO
 bad practice.
 You should let the CFAdmin handle that for you.

 Warmest Regards,

 Phillip B. Holmes

 -Original Message-
 From: Nick Baker [mailto:[EMAIL PROTECTED]
 Sent: Sunday, March 06, 2005 12:46 AM
 To: CF-Talk
 Subject: CFQUERY accessing MS SQL DB on another CF server

 MX 6.1

 In some of the earlier versions you could query a db on
 other servers around
 the Internet. V 6 and later (I think) changed up CFQUERY
 and I can't seem
 to get it going again.

 In earlier versions we had a connectString attribute which
 took something
 like the following.

 ConnectionString = DRIVER=SQL
 Server;SERVER={ipaddress};UID={username};
 PWD={password};APP=;DATABASE={database}


 Does anyone know how to accomplish this with V 6 and
 later?

 Thanks,

 Nick


s. isaac dealey 954.522.6080
new epoch : isn't it time for a change?

add features without fixtures with
the onTap open source framework

http://macromedia.breezecentral.com/p49777853/
http://www.sys-con.com/story/?storyid=44477DE=1
http://www.sys-con.com/story/?storyid=45569DE=1
http://www.fusiontap.com


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197603
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-05 Thread James Holmes
Well, you can't do it in the cfquery tag, so it's no way. 

-Original Message-
From: Nick Baker [mailto:[EMAIL PROTECTED] 
Sent: Sunday, 6 March 2005 3:13 
To: CF-Talk
Subject: RE: CFQUERY accessing MS SQL DB on another CF server

CFAdmin's instructions are to provide the following ConnectionString. It is
that way or no way.

ConnectionString = DRIVER=SQL Server;SERVER={ipaddress};UID={username};
PWD={password};APP=;DATABASE={database}

I can't figure out where to put it?

Security is not an issue in this case. Some public information brought
together for our convenience at any given moment in time.

Nick


At 12:54 AM 3/6/2005, you wrote:
Well, hard coding your SQL username  password is a security risk and 
IMHO bad practice.
You should let the CFAdmin handle that for you.

Warmest Regards,

Phillip B. Holmes



-Original Message-
From: Nick Baker [mailto:[EMAIL PROTECTED]
Sent: Sunday, March 06, 2005 12:46 AM
To: CF-Talk
Subject: CFQUERY accessing MS SQL DB on another CF server

MX 6.1

In some of the earlier versions you could query a db on other servers 
around the Internet. V 6 and later (I think) changed up CFQUERY and I 
can't seem to get it going again.

In earlier versions we had a connectString attribute which took 
something like the following.

ConnectionString = DRIVER=SQL 
Server;SERVER={ipaddress};UID={username};
PWD={password};APP=;DATABASE={database}


Does anyone know how to accomplish this with V 6 and later?

Thanks,

Nick










~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197604
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54


RE: CFQUERY accessing MS SQL DB on another CF server

2005-03-05 Thread James Holmes
Unless they are using sandboxing on CF Enterprise, like ay decent ISP
should.

-Original Message-
From: S. Isaac Dealey [mailto:[EMAIL PROTECTED] 
Sent: Sunday, 6 March 2005 3:23 
To: CF-Talk
Subject: RE: CFQUERY accessing MS SQL DB on another CF server

[snip]

Many shared hosting providers don't include the username / password in the
DSN definition in the CF Admin (forcing you to use them in your
code) because that would allow anyone with a hosting account to
theoretically access another one of their client's databases by guessing the
DSN. Which could be a particularly dangerous thing if the DSN names happen
to be formulaic.

[snip]

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:197605
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations  Support: http://www.houseoffusion.com/tiny.cfm/54