Skip to main content
Inspiring
Mar 18, 2019 11:11 AM UTC
Answered

cfexecute security issue

Hi All,

I have the next command cfexecute in CF11

<cfexecute name="#app_dir#resources\oracle_instantclient\sqlldr.exe" timeout="10"

                        arguments='userid=sampleDB/\"mypass\"@//10.230.44.7:1521/sampleDB control=#app_dir#upload\importME.ctl log=#app_dir#upload\importME.log'

                        errorVariable="errorReport">

                    </cfexecute>

The sql loader is working but I have an issue with security because i am including the DB password in my cfc page.

Is there a way to use the CF admin data source Oracle connection here? Or

Is there a way to encrypt the password in the cfexecute?

Thanks

Johnny

    This topic is closed to new replies. Start a new post to keep the conversation going.
    jfb00Correct answer
    Inspiring
    Mar 19, 2019 11:16 AM UTC

    FYI, I found a solution passing parameter as parfile.

    preventing password leakage with SQL*Loader

    1 reply

    jfb00AuthorCorrect answer
    Inspiring
    Mar 19, 2019 11:16 AM UTC

    FYI, I found a solution passing parameter as parfile.

    preventing password leakage with SQL*Loader

    Translate