There must be a security hole in the server configuration then, because it is relatively simple to add a security policy that can block access to DSNs on a selective basis. At least that is the case on my Win2k/Win2003 servers. All our tests have successfully prevented using unauthorized DSNs.
Secondly, our tech staff reviews uploaded code in the background, and will disable a site that uploads hostile code. (AUP violation) ====================================== Stop spam on your domain, use our gateway! For hosting solutions http://www.clickdoug.com ISP rated: http://www.forta.com/cf/isp/isp.cfm?isp_id=772 ====================================== If you are not satisfied with my service, my job isn't done! ----- Original Message ----- From: "Andy Ewings" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Friday, July 25, 2003 7:53 AM Subject: RE: Client Vars | yup but I can't pass the username or password into the DSN as is on a shared | server and anyone could hijack the DSN then | | -----Original Message----- | From: Mike Townend [mailto:[EMAIL PROTECTED] | Sent: 25 July 2003 13:46 | To: CF-Talk | Subject: RE: Client Vars | | | The DSN stuff will need to be already setup in the admin. | | So you will need to create a DSN (Passing in the Username and password (im | pretty sure you cant have the password passed in later)) | | Then in client variables section of the Admin, you must register the DSN as | a ClientVariables DSN (but you don't have to set it as the default) | | Then in the <CFAPPLICATION> tag you set CLIENTSTORAGE="" to you DSN | | | HTH | | Mikey | | | -----Original Message----- | From: Andy Ewings [mailto:[EMAIL PROTECTED] | Sent: Friday, July 25, 2003 13:41 | To: CF-Talk | Subject: Client Vars | | | Hi | | Does any one know how to specify a DSN for clientmanagement n the | application.cfm and also pass in the username and password? - basically I | have always coded the username/password into the DSN but this is not an | option in this instance. Any work arounds? | | Andy | | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
