Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
How reliable/secure are getenv('User') & WScript.Network
Message
General information
Forum:
Visual FoxPro
Category:
Coding, syntax & commands
Miscellaneous
Thread ID:
00953302
Message ID:
00954654
Views:
12
>Hello Hugo,
>
>Thanks for this information. Do you know where WMI pulls the user information from? Is it pulling the username & domain from the same environment variables that getenv() & WScript.Network do?

I do not know for certain, but I am quite sure that it does not read the environment variables. AFAIK, WMI uses an internal database, but I ignore how that database gets populated, I also ignore how the environment variables get populated, sorry. Anyways, I do not believe it will be easy for a common end user to change the WMI database to fake it's identity, and I also doubt they will be able to change the environment to fake a user, at least I do not know how to change it :)

By the way, I just realized you used getenv('User') instead of getenv('UserName')
"The five senses obstruct or deform the apprehension of reality."
Jorge L. Borges?

"Premature optimization is the root of all evil in programming."
Donald Knuth, repeating C. A. R. Hoare

"To die for a religion is easier than to live it absolutely"
Jorge L. Borges
Previous
Next
Reply
Map
View

Click here to load this message in the networking platform