Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
Computer Name
Message
 
To
22/07/2003 21:05:03
General information
Forum:
Visual Basic
Category:
Other
Title:
Miscellaneous
Thread ID:
00810946
Message ID:
00812620
Views:
15
Just a security note. Hard coding the UserName and Password may not be the best idea, at least in string form. You might want to store it in encoded form and decode it in memory. VB stores string right in the built exe and you can simply open it in a hex editor to rip out that type of information.
I used to be involved in a lot of reverse engineering and string literals are one of the simplest ways to get information.

The GetHostName api call should be simple enough for the computer name since it is unique on the network. Note that only ties it to a computer and not a user. If a user wants access to the application they just simply need to sign on to another persons computer and the data log will not show who actually accessed the data but simply which terminal accessed the data.



>Hi Rene,
>
>It cause by every computers are using SA login, and the access control is restriced at the application; so I put the COMPUTER NAME as USER ID in the connection string.
>
>What do u think? Are u also hard code the SQL Server login name and password into the application?
>
>Thanks
>Aston
Brian Seekford
Seekford Solutions, Inc.
http://www.SeekfordSolutions.com
Internet ActiveX Controls and .NET Class Libraries.
SMTP/S FTP POP3/S HTTP/S SNTP MIME PING WHOIS TRACEROUTE NNTP DNS MX
Base64, UUEncode, yEnc, MD5, SHA1, URL, Quoted-Printable.
Resizer and Tooltips
Email Verification and more. Check us out!
Previous
Next
Reply
Map
View

Click here to load this message in the networking platform