>>Besides, in all the decades that I have been working with VFP code, Malicious virus, or whatever, have never been discovered in a VFP or any of the applications created. With this unspoken truths about the VFP. I can, and have, reassured my clients of this fact. So, open the permission to the root folder (and subfolders) for VFP has never been a concern.

Hacking is an increasingly popular replacement for the Nigerian Prince scam and other antics to grab $$$$ from Joe Public, including our customers large and small. VFP does have weaknesses; e.g. if you're not using Refox or VFP C++ Compiler or similar to protect what you send to customers, hackers can use widely shared tools to crack your work and peel out customers' credentials and database connection strings in literally moments. Then they're into the database to scoop confidential information and/or encrypt it to see how much of a ransom they can demand. As hacker capabilities change, some of us go to quite a lot of trouble to move our work into the "too hard" basket so hackers look for easier pickings. Relatively little process is needed, so even if you feel your customers are unlikely targets, there's no particular downside to protecting anyway and who knows, evidence that you're looking out for customers via app hardening efforts might allow an extra tick that gets you the deal. I'm due to give a presentation at the upcoming FoxFest on VFP C++ Compiler and converting VFP app vulnerabilities into strengths if you're interested...