Hiding username and password in CFQUERY

[Albion]

I'm a little bit apprehensive of putting a site online that has the DSN username and password on each CFQUERY I run. Is there a good way to hide those fields? Or is there a way to access the DSN with the username and password once in Application.cfm?

Thanks

-Al

 

[cfSearching]

AFAIK, you do not need to use username and password at all. They are stored with the datasource settings. So they are not needed in cfquery unless you want to override the datasource settings.

----------------------------------

http://cfsearching.blogspot.com/

 

[LyndonOHRC]

If you will view the source of one of your dynamic pages in a browser you will see none of the <cf...> code is published; only the results those tags yeild.

Lyndon

---People Remember about 10% of what you say ---They never forget how you made them feel. Covey

 

[cfSearching]

True, but there have been exploits that expose the underlying code: CF, ASP, etcetera. So if username and password are not really needed anyway, it probably best not to use them in the code of every page.

----------------------------------

http://cfsearching.blogspot.com/