I don't know the answer, but I would ask your colleague for more info or at least some links to more reading on the matter.
If you don't get an answer here, try cf-talk as I think this is a little more than a newbie question. Adrian -----Original Message----- From: David Hind-Smith [mailto:[EMAIL PROTECTED] Sent: 17 March 2006 13:58 To: CF-Newbie Subject: ODBC Security Hello all, I'm wondering if anyone could provide a bit of background on ODBC connections and ColdFusion. We were talking with a colleague about a ColdFusion system that would use an ODBC connection to talk to a backend database (which happens to be FileMaker 8). Essentially the database will hold 4,000 names and addresses in a membership database. Members will log onto the system, provide a username and password held in the database and be able to edit their information. Passwords will be randomly generated and not 'sequential' so that they cannot easily be guessed. The colleague asked how many ODBC DSNs we would use to use connect to the database and we answered between 1-3 for all functions. The client retorted that this was a security concern because of ODBC connection pooling and that an experienced ColdFusion hacker could crack the system. Can anyone provide some insight into the concern? Thanks, David ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Message: http://www.houseoffusion.com/lists.cfm/link=i:15:1714 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/15 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:15 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.15 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
