Skip to main content
Inspiring
March 18, 2019
Answered

cfexecute security issue

  • March 18, 2019
  • 1 reply
  • 503 views

Hi All,

I have the next command cfexecute in CF11

<cfexecute name="#app_dir#resources\oracle_instantclient\sqlldr.exe" timeout="10"

                        arguments='userid=sampleDB/\"mypass\"@//10.230.44.7:1521/sampleDB control=#app_dir#upload\importME.ctl log=#app_dir#upload\importME.log'

                        errorVariable="errorReport">

                    </cfexecute>

The sql loader is working but I have an issue with security because i am including the DB password in my cfc page.

Is there a way to use the CF admin data source Oracle connection here? Or

Is there a way to encrypt the password in the cfexecute?

Thanks

Johnny

    This topic has been closed for replies.
    Correct answer jfb00

    FYI, I found a solution passing parameter as parfile.

    preventing password leakage with SQL*Loader

    1 reply

    jfb00AuthorCorrect answer
    Inspiring
    March 19, 2019

    FYI, I found a solution passing parameter as parfile.

    preventing password leakage with SQL*Loader