Solved

Question about CFencrypt

Posted on 2013-05-29
3
305 Views
Last Modified: 2013-05-29
I understand that cfencrypt will encrypt data and then write it to the database and also descrypt it when necessary. Can someone tell me if the data transfer between the web server and the database server is encrypted with this cfencrypt method?

Thank you.
0
Comment
Question by:earwig75
  • 2
3 Comments
 
LVL 52

Expert Comment

by:_agx_
ID: 39205911
EDIT:

What do you mean by "CFEncrypt"?  There is no such thing in the built in tags and functions.


Can someone tell me if the data transfer between the web server and the database server is encrypted ...?

When you enter a username and password for a datasource, CF encrypts the password before storing it the config files.  But standard communication though a jdbc datasource is not encrypted.
0
 

Author Comment

by:earwig75
ID: 39206023
So if I use Encrypt/Decrypt with ColdFusion it will not be encrypted between the web server and the database? Thanks again.
0
 
LVL 52

Accepted Solution

by:
_agx_ earned 500 total points
ID: 39206407
You can encrypt individual values before sending them to the database, and they will be sent in encrypted form.  Everything else is sent in plain text.

For example, here "value1" will be sent encrypted. But value2 will be sent in plain text ie "orange".

               <cfset value1  = encrypt( "apple", .....etc ...)>
               <cfset value2 = "orange">

               <cfquery ....>
                    INSERT INTO Table (....)
                   VALUES (
                             <cfqueryparam value="#value1#" ...>
                             , <cfqueryparam value="#value2#" ...>
                    )
              </cfquery>
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article  is about submitting  form through  ColdFusion.Ajax.submitForm to the action page and send a response back in JSON format which later can be decoded using ColdFusion.JSON.decode. By this way you can avoid the usual page refresh for subm…
Hi. There are several upload tutorials using jquery and coldfusion. I found a very interesting one here Upload Your Files using Jquery & ColdFusion and Preview them (http://www.randhawaworld.com/) . I did keep the main js functions but made sever…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question