Our client must conform to PCI-DSS rules. They work also with credit card PAN’s in their SQL statements. PAN can not be stored anywhere on the system in native form. If they execute an SQL statement with PAN as a variable, TOAD stores the sentence in the SQL history and thus they violate PCI-DSS rul…

As the expression goes - “anything is possible”. Of course there will be a tradeoff - most notably speed and the ability to easily recover SQL Recall data but it is possible. You should add it to the Idea Pond - www.toadworld.com/…/i From: tomaz [ mailto:bounce-tomaz@toadworld.com ] Sent: Monday,…

So, does it mean that the encryption is not an inside TOAD option?

Currently, no it is not an option

It’s easy enough to encrypt a folder at the system level. Why not just do that? Scattering encryption code throughout Toad everywhere we write to User Files would surely lead to both errors and performance problems. The errors could be sorted out in time, the performance issues not so much.

I added the idea to the Idea Pond, but would need a faster response. The problem is compliance with PCI-DSS standard, that requires that at no point in time the unencrypted PAN should be stored on any media. SaveSQL.dat file stores SQL statements in native form thus violating the PCI-DSS standard. …

Setting the value to 0 eliminates the ability of Toad do automatically save the SQL statements (Recently Used or History depending on the version) but adding SQL to Personal/Named or Saved (depending on the version) is no different than doing a File -> Save except the location of the storage is cent…

I see in older Toad’s that 0 did not mean 0. This is fixed in newer versions. I tested in 12.9 and setting statements to 0 does in fact disable automatic SQL Recall.

Thank you. As Michael Staszewski wrote in his email (copy/paste of it below), tested it in 12.9. We tested it in 12.6. We will install 12.9. and test it again. I will come back to you with the results.

Thank you. As Michael Staszewski wrote in his email (copy/paste of it below), tested it in 12.9. We tested it in 12.6. We will install 12.9. and test it again. I will come back to you with the results. Best regards, Tomaž I see in older Toad's that 0 did not mean 0. This is fixed in newer versi…

Encryption of UserFIles?

Toad for Oracle & DevOps Toolkit

tomaz September 8, 2016, 2:44am 12

We tested it in 12.9 and the file is really empty. I will suggest to encrypt this file or folder.

THANKS guys!!!

Topic		Replies	Views
Please let us encrypt our password Toad for Oracle & DevOps Toolkit	17	5276	June 26, 2020
Security encryption question Toad for Oracle & DevOps Toolkit	5	2014	August 19, 2013
TOAD for Oracle 12.6.0.53 won't save my password Toad for Oracle & DevOps Toolkit	15	3058	December 1, 2015
How to Setup & Use Toad for Oracle in a Secure Environment Blog Posts	0	644	November 9, 2018
Warning Toad Message Toad for Oracle & DevOps Toolkit	25	6562	December 22, 2017

Encryption of UserFIles?

Related topics