How can I hide my password key?

[dtkelly72]

Hi,

I am using the Encrypt/Decrypt functions in ColdFusion MX to secure password fields in my database. I am using a password key that is established in the application.cfm document.

I need a safe place to hide my password key value because if someone gets in to view my code they know the password key, and if they get into the database they have the encrypted values for the passwords. If someone has the key and the encrypted value, they can run the decrypt function themselves.

How can I hide that key value so my CF pages can access it, but it is secure form prying eyes.

Thanks!

 

[webmigit]

Refer to my reply to this exact same post in

thread232-827421

ALFII.com

http://www.alfii.com

---------------------
If this post answered or helped to answer your question, please reply with such so that forum members with a similar question will know to use this advice.