Connecting Tech Pros Worldwide Forums | Help | Site Map

DB Security

Newbie
 
Join Date: Jul 2008
Posts: 2
#1: Jul 19 '08
While developing my website I notice that sometimes when there is an error in my database the error page shows my connection string with the username and password for my database. Just wondering what the proper way is to prevent this from happening.

acoder's Avatar
Site Moderator
 
Join Date: Nov 2006
Location: UK
Posts: 14,581
#2: Jul 19 '08

re: DB Security


Firstly, Robust Exception Information should be off in production. Secondly, you can use a site-wide error handler or use onerror/cferror to deal with errors and display a custom page.
Reply


Similar ColdFusion bytes