security and connection string

[iccsi]

Hi,

   I am a new developer using ColdFusion.

   Does ColdFusion support Windows Authentication or I have to have my connection string in plain text in my cfm files?

   Can I have connection string in my form or I have in one config file?

   Is it possible to encryp my password and user name in the cfm file?

   Your information and help is great appreciated,

   Regards,

  iccsi,

[Carl Von Stetten · Accepted solution]

That is a broad question.  Are you referring to connections to data sources, or recognizing user IDs for site logins?  If the former, you can configure the database logins (with some caveats) within the secure CF Administrator, and never have to pass credentials directly in your CFML code.  As for user IDs for logins, if you configure your webserver (IIS) to use Windows Authentication via NTLM, Coldfusion will receive the Windows login and make it acccessible to you via CGI variables.

-Carl V.

[iccsi]

Thanks a million for helping and information,

iccsi