Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

CFX problem

Posted on 2002-05-03
4
Medium Priority
?
314 Views
Last Modified: 2013-12-24
Hi everybody,

System:
Coldfusion 5.0 (Linux)
Apache

I'm writing a CFX tag to securly retrieve passwords for our users. In order to confirm their identity i need the CFX to workout what directory the calling template is in (i have a UNIX library that uses the getUID() call) - but WITHOUT the user entering the template.

The only option i have come up with so far is using a CFML tag that uses getCurrentTemplatePath() (or whatever its called :) and then it calls the CFX. The down side of this is that you can decompile CFML tags very easily.

Points will go to the first viable solution other than the one above.

GR.
0
Comment
Question by:googlyralph
  • 2
  • 2
4 Comments
 
LVL 11

Accepted Solution

by:
jimmy282 earned 800 total points
ID: 6988736
GetDirectoryFromPath(GetTemplatePath())

You can pass the above as a parameter to the CFX from the calling page.

Or just set it as a variable in your application.cfm and you are done!

Jimmy
0
 
LVL 1

Author Comment

by:googlyralph
ID: 6993635
Jimmy,

trying to avoid passing in a parameter, as user could call the resulting CFX with a string and then retrieve another users password.

GR.
0
 
LVL 11

Expert Comment

by:jimmy282
ID: 6994502
Well thats avoidable.

1)Encrypt the parameter and Send, then decrypt in CFX.
2) Pass Another Parameter and if that is passes only then CFX will run. e.g. "Hideme=Yes"

Jimmy


0
 
LVL 1

Author Comment

by:googlyralph
ID: 7095347
Sorry for the delay, didnt realise i hadnt closed these questions.

GR.
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Periodically we have to update or add SSL certificates for customers. Depending upon your hosting plan you may be responsible for the installation and/or key generation. In the wake of Heartbleed many sites were forced to re-key. We will concen…
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Suggested Courses

886 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question