And there are now lessons on the web on how to exploit buffer overflows:

http://www.cultdeadcow.com/cDc_files/cDc-351/

>Hi,
>Bad design again, it is like all these "Buffer Overflow" errors we see these days, isn't the first part of good design setting the error & parsing error tailouts so these events can't occur?
>
>>I have seen numerous foxpro applications that were nothing more than simple data entry forms with no data integrity checks let alone proper design. For years a power-user could write a simple foxpro app and it would run. These apps ran into problems overtime though and the data was accessible using excel (wide-open). It gave VFP a bad rep.
>>
>>
>>>Hi,
>>>
>>>I think we should look at why VFP ends up on the net admins black list.
>>>
>>>A badly written native Foxpro app can kill a badly designed/patched/maintained network far quicker than most other products due to it's bandwidth requirements.
>>>
>>>Whereas using anyone of the SQL's that are available puts minimal load on these systems.
>>>
>>>This is also why they prefer Web app's or TS, it causes far less network problems.
>>>
>>>
>>>
>>>>That, Mr. Winter, is the best I've seen since I have been conscientously reminding myself to stay upwind when conversing with Network Admin types.
>>>>
>>>>It defies common sense. Why, in a shop that has MS servers and MS desktops, filled with MS apps, would some low-on-the-pole "no" guy deny the installation of a project developed with a microsoft programming language that was logo compliant? There are suck-a_s "Net" programmers and suck-a_s "C++" programs too. But some somehow those are Mr NA's radar? Give me a break!
>>>>
>>>>It's insane. The world is, indeed, upside down. More evidence of the "crappy guy" syndrome that seems to have clogged the creative and fiscal prospects of "maturing" companies like Microsoft. Fortunately - life goes on - and somewhere - someone is applying common sense - and MS will be one of those "do you remember that company" small talk items like Lotus, Digital Reearch and Wang. "Where are they now" bit players in a stream of blips that were, for a few years, the glitter queens under the fading disco lights of history.
>>>>
>>>>But your response is good. Maybe Ken Levy can offer some additional embelishments that we "quote" to get around this issue.
>>>>
>>>>>>
>>>>>>You could come up with a "fib". C++ is part of the installer. What is the database? It's a microsoft Rushmore database - the fastest in the world.
>>>>>>
>>>>>
>>>>>Terry,
>>>>>
>>>>>Or try this line from Malcolm Greene.
>>>>>
>>>>>"Our applications run on top of a runtime engine built with the latest version of the MS Visual Studio .NET C compiler. Our distributions use the most current releases of the MS Visual C runtime (version 7.1) and
>>>>>GDI++ modules.
>>>>>
>>>>>Our applications are totally self contained, do not use ActiveX or COM components or update the registry, and can be installed in locked down environments without admin priviledges.
>>>>>
>>>>>Our applications can be installed via a single standalone setup without dependencies on Windows Installer technology or they can be deployed as simple XCOPY distributions."
>>>>>
>>>>>Regards,