Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
How to make external prg look for DBF inside calling exe
Message
From
11/10/2015 23:30:29
Lutz Scheffler
Lutz Scheffler Software Ingenieurbüro
Dresden, Germany
 
 
To
09/10/2015 06:00:30
Dragan Nedeljkovich (Online)
Now officially retired
Zrenjanin, Serbia
General information
Forum:
Visual FoxPro
Category:
Coding, syntax & commands
Environment versions
Visual FoxPro:
VFP 9 SP2
OS:
Windows 10
Network:
Windows 2008 Server
Database:
MS SQL Server
Application:
Web
Miscellaneous
Thread ID:
01625594
Message ID:
01625834
Views:
60
>>So if you're using external PRGs the DoCmd function is not going to open extra doors that were not already open anyways. If someone wants to do something bad they don't need that extra door. Closing down the DoCMD is doing absolutely nothing to security or protection of your code.
>
>And even if all such holes are shut, there's still the possibility that your exe can be run from VFP IDE (via "do the.exe") from inside a .prg where you have an "on key label ctrl+shift+F4 suspend". With 101 keys on the standard keyboard, that would be about 800 lines of "on key label xxx *" just to prevent this kind of trick, executing in the first milliseconds of the start, which I guess nobody has done yet. And then there's the debugger and intellisense in the command window, which make the suspended exe open for surgery.
>
>I had to do this only once, some 15 years ago, but I'd guess this gate is still open.

Hi Dragan,

#1
on key label ctrl+shift+F4 suspend
will fail
#2
ON KEY LABEL F1,F2,F3 ....
, see HELP ON KEY LABEL might limit the number of rows a bit

;)
Words are given to man to enable him to conceal his true feelings.
Charles Maurice de Talleyrand-Périgord

Weeks of programming can save you hours of planning.

Off

There is no place like [::1]
Previous
Next
Reply
Map
View

Click here to load this message in the networking platform