Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Question about CFencrypt

Posted on 2013-05-29
3
Medium Priority
?
326 Views
Last Modified: 2013-05-29
I understand that cfencrypt will encrypt data and then write it to the database and also descrypt it when necessary. Can someone tell me if the data transfer between the web server and the database server is encrypted with this cfencrypt method?

Thank you.
0
Comment
Question by:earwig75
  • 2
3 Comments
 
LVL 53

Expert Comment

by:_agx_
ID: 39205911
EDIT:

What do you mean by "CFEncrypt"?  There is no such thing in the built in tags and functions.


Can someone tell me if the data transfer between the web server and the database server is encrypted ...?

When you enter a username and password for a datasource, CF encrypts the password before storing it the config files.  But standard communication though a jdbc datasource is not encrypted.
0
 

Author Comment

by:earwig75
ID: 39206023
So if I use Encrypt/Decrypt with ColdFusion it will not be encrypted between the web server and the database? Thanks again.
0
 
LVL 53

Accepted Solution

by:
_agx_ earned 2000 total points
ID: 39206407
You can encrypt individual values before sending them to the database, and they will be sent in encrypted form.  Everything else is sent in plain text.

For example, here "value1" will be sent encrypted. But value2 will be sent in plain text ie "orange".

               <cfset value1  = encrypt( "apple", .....etc ...)>
               <cfset value2 = "orange">

               <cfquery ....>
                    INSERT INTO Table (....)
                   VALUES (
                             <cfqueryparam value="#value1#" ...>
                             , <cfqueryparam value="#value2#" ...>
                    )
              </cfquery>
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article  is about submitting  form through  ColdFusion.Ajax.submitForm to the action page and send a response back in JSON format which later can be decoded using ColdFusion.JSON.decode. By this way you can avoid the usual page refresh for subm…
Sometimes databases have MILLIONS of records and we need a way to quickly query that table to return the results me need. Sure you could use CFQUERY but it takes too long when there are millions of records. That is why SOLR was invented. Please …
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?
Enter Foreign and Special Characters Enter characters you can't find on a keyboard using its ASCII code ... and learn how to make a handy reference for yourself using Excel ~ Use these codes in any Windows application! ... whether it is a Micr…
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question