Well, I'll just leave my form variables unencrypted for the time being. But after those CFNORTH security sessions I am a little freaked.
Erik -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of A. Karl Zarudny Sent: Tuesday, May 14, 2002 4:19 PM To: [EMAIL PROTECTED] Subject: Re: [CFTALKTor] Decrypting A form variable I thought maybe trimming before encryption. I did a search on google for this error and didn't turn up much - at least nothing actually relevant. > From: "Erik Fenkell" <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > Date: Tue, 14 May 2002 16:06:02 -0400 > To: <[EMAIL PROTECTED]> > Subject: RE: [CFTALKTor] Decrypting A form variable > > Trimming does not fix the problem. Should I trim when I encrypt the variable > or Decrypt? Tried both but to no avail. > > > Erik > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of A. Karl Zarudny > Sent: Tuesday, May 14, 2002 3:56 PM > To: [EMAIL PROTECTED] > Subject: Re: [CFTALKTor] Decrypting A form variable > > > Arrgh! I got this one too. Have you tried a trimming the variable? I never > managed (or bothered) to try and figure it out. But it's good to know it > wasn't just me :-) It seems like CF throws in some special invisible > characters when encrypting the value, that mess things up when trying to > decrypt. > > Karl > >> From: "Erik Fenkell" <[EMAIL PROTECTED]> >> Reply-To: [EMAIL PROTECTED] >> Date: Tue, 14 May 2002 15:17:01 -0400 >> To: <[EMAIL PROTECTED]> >> Subject: [CFTALKTor] Decrypting A form variable >> >> I am having a helluva time decrypting a form variable that I have > encrypted. >> I have no problem with an encrypted url variable just the form variable. >> >> Here is some code to explain. >> >> >> ---------------------------------------------- >> <cfif IsDefined('url.variable')> >> <cfset decrypted_url_variable = #Decrypt(url.variable,8)#> >> <cfset url.variable = #decrypted_url_variable#> >> <cfelse> >> <!--- ::: DO NOTHING ---> >> </cfif> >> >> <cfif IsDefined('form.variable)> >> <cfset decrypted_form_variable = #Decrypt(form.variable,8)#> >> <cfset form.variable = #decrypted_form_variable#> >> <cfelse> >> <!--- ::: DO NOTHING ---> >> </cfif> >> ---------------------------------------------- >> >> Yes, both variables have the same name. But they are different types. I >> thought this might cause a problem but even when I give >> the variables different names the error is thrown. Here is the error: >> >> ---------------------------------------------- >> Error Diagnostic Information >> >> An error occurred while evaluating the expression: >> >> >> decrypted_form_variable = #Decrypt(form.variable,8)# >> The value to be decrypted is not valid >> ---------------------------------------------- >> I am at a serious loss. Thanks for any advice. >> Best, >> Erik >> >> >> >> > > - > You are subscribed to the CFUGToronto CFTALK ListSRV. > This message has been posted by: "A. Karl Zarudny" > <[EMAIL PROTECTED]> > To Unsubscribe, Please Visit and Login to http://www.CFUGToronto.org/ > Manager: Kevin Towes ([EMAIL PROTECTED]) http://www.CFUGToronto.org/ > This System has been donated by Infopreneur, Inc. > (http://www.infopreneur.net) > > - > You are subscribed to the CFUGToronto CFTALK ListSRV. > This message has been posted by: "Erik Fenkell" <[EMAIL PROTECTED]> > To Unsubscribe, Please Visit and Login to http://www.CFUGToronto.org/ > Manager: Kevin Towes ([EMAIL PROTECTED]) http://www.CFUGToronto.org/ > This System has been donated by Infopreneur, Inc. > (http://www.infopreneur.net) - You are subscribed to the CFUGToronto CFTALK ListSRV. This message has been posted by: "A. Karl Zarudny" <[EMAIL PROTECTED]> To Unsubscribe, Please Visit and Login to http://www.CFUGToronto.org/ Manager: Kevin Towes ([EMAIL PROTECTED]) http://www.CFUGToronto.org/ This System has been donated by Infopreneur, Inc. (http://www.infopreneur.net) - You are subscribed to the CFUGToronto CFTALK ListSRV. This message has been posted by: "Erik Fenkell" <[EMAIL PROTECTED]> To Unsubscribe, Please Visit and Login to http://www.CFUGToronto.org/ Manager: Kevin Towes ([EMAIL PROTECTED]) http://www.CFUGToronto.org/ This System has been donated by Infopreneur, Inc. (http://www.infopreneur.net)
