Skip to main content
Inspiring
October 26, 2012
Answered

security and connection string

  • October 26, 2012
  • 1 reply
  • 587 views

Hi,

   I am a new developer using ColdFusion.

   Does ColdFusion support Windows Authentication or I have to have my connection string in plain text in my cfm files?

   Can I have connection string in my form or I have in one config file?

   Is it possible to encryp my password and user name in the cfm file?

   Your information and help is great appreciated,

   Regards,

  iccsi,

    This topic has been closed for replies.
    Correct answer Carl Von Stetten

    That is a broad question.  Are you referring to connections to data sources, or recognizing user IDs for site logins?  If the former, you can configure the database logins (with some caveats) within the secure CF Administrator, and never have to pass credentials directly in your CFML code.  As for user IDs for logins, if you configure your webserver (IIS) to use Windows Authentication via NTLM, Coldfusion will receive the Windows login and make it acccessible to you via CGI variables.

    -Carl V.

    1 reply

    Carl Von Stetten
    Carl Von StettenCorrect answer
    Legend
    October 26, 2012

    That is a broad question.  Are you referring to connections to data sources, or recognizing user IDs for site logins?  If the former, you can configure the database logins (with some caveats) within the secure CF Administrator, and never have to pass credentials directly in your CFML code.  As for user IDs for logins, if you configure your webserver (IIS) to use Windows Authentication via NTLM, Coldfusion will receive the Windows login and make it acccessible to you via CGI variables.

    -Carl V.

    iccsiAuthor
    Inspiring
    October 26, 2012

    Thanks a million for helping and information,

    iccsi