one more time to rephrase.

CF should not have an account stored anywhere on the system. I assume
execute grants were obvious.

-Adam


On Fri, 18 Feb 2005 13:35:28 -0800, Barney Boisvert <[EMAIL PROTECTED]> wrote:
> To rephrase this the "right" way:
> 
> If you're concerned about database security, you should lock down CF's
> user account(s) so it can only execute specific stored procs, and is
> unable to run arbitrary queries.
> 
> cheers,
> barneyb
> 
> On Fri, 18 Feb 2005 16:22:06 -0500, Adrocknaphobia
> <[EMAIL PROTECTED]> wrote:
> > Micha,
> >
> > If you are concerned about database security you shouldn't be placing
> > any SQL inline in your CF and should rely strictly on StoredProcs.
> >
> > -Adam
> >
> >
> 
> --
> Barney Boisvert
> [EMAIL PROTECTED]
> 360.319.6145
> http://www.barneyb.com/
> 
> Got Gmail? I have 50 invites.
> 
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:195487
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to