Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Question about CFencrypt

Posted on 2013-05-29
3
Medium Priority
?
323 Views
Last Modified: 2013-05-29
I understand that cfencrypt will encrypt data and then write it to the database and also descrypt it when necessary. Can someone tell me if the data transfer between the web server and the database server is encrypted with this cfencrypt method?

Thank you.
0
Comment
Question by:earwig75
  • 2
3 Comments
 
LVL 52

Expert Comment

by:_agx_
ID: 39205911
EDIT:

What do you mean by "CFEncrypt"?  There is no such thing in the built in tags and functions.


Can someone tell me if the data transfer between the web server and the database server is encrypted ...?

When you enter a username and password for a datasource, CF encrypts the password before storing it the config files.  But standard communication though a jdbc datasource is not encrypted.
0
 

Author Comment

by:earwig75
ID: 39206023
So if I use Encrypt/Decrypt with ColdFusion it will not be encrypted between the web server and the database? Thanks again.
0
 
LVL 52

Accepted Solution

by:
_agx_ earned 2000 total points
ID: 39206407
You can encrypt individual values before sending them to the database, and they will be sent in encrypted form.  Everything else is sent in plain text.

For example, here "value1" will be sent encrypted. But value2 will be sent in plain text ie "orange".

               <cfset value1  = encrypt( "apple", .....etc ...)>
               <cfset value2 = "orange">

               <cfquery ....>
                    INSERT INTO Table (....)
                   VALUES (
                             <cfqueryparam value="#value1#" ...>
                             , <cfqueryparam value="#value2#" ...>
                    )
              </cfquery>
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PROBLEM: How to add your own buttons to the bottom toolbar with paging info ( result count ). While creating a cfgrid, I ran into an issue where I wanted to embed my own custom buttons where the default ones ( insert / delete / etc… ) are for aes…
I spent nearly three days trying to figure out how incorporate OAuth in Coldfusion for the Eventful API. Hopefully, this article will allow Coldfusion Programmers to buzz through the API when they need to. Basically, what this script does is authori…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question