Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • WombleNumber1 6 posts 87 karma points
    Oct 16, 2024 @ 18:43
    WombleNumber1
    0

    Member Data Encryption

    Has anybody had any joy with being able to encrypt the member email/loginname/name fields at the database level?

    Email and LoginName are in the cmsMember table, and are stored in plaintext. The Name field is stored in the cmsContentNu table (in either the data or rawData field, depending on caching config) again in unencrypted format.

    In an ideal world, I'd use SQL Always Encrypted and be done with it, however the CMS seems to throw lots of errors when trying that.

    Another approach would be to intercept membersaving and read events to encrypt/decrypt just before write/read.

    Has anybody been down this road before, and if so, what solution did you arrive at?

Please Sign in or register to post replies

Write your reply to:

Draft