asp_ado_rds thread: RDS DSN Security
Message #1 by "Brian Baker" <bakerb28@h...> on Tue, 3 Jul 2001 06:11:52
|
|
Is it possible to prevent the DSN username/password from being displayed
within the client source code using RDS?
Message #2 by <gigsvoo@y...> on Tue, 3 Jul 2001 16:53:20 +0800
|
|
Stored it inside your DSN
----- Original Message -----
From: "Brian Baker" <bakerb28@h...>
To: "ASP_ADO_RDS" <asp_ado_rds@p...>
Sent: Tuesday, July 03, 2001 6:11 AM
Subject: [asp_ado_rds] RDS DSN Security
>
> Is it possible to prevent the DSN username/password from being displayed
> within the client source code using RDS?
>
Message #3 by "Constantin Dimitrov" <kdimitrov@u...> on Tue, 3 Jul 2001 12:58:36 +0200
|
|
Try to use some Component with the database RDO management
in the class initialization you can retrieve the crypted DNS from the file
stored to the end
of your HDD for example.Decrypt and use it. It's a perfect method I think
and only the creators knows
what it happend.So from your ASP you can call just Obj
Server.CreateObject("Your.Obj")
and use it Obj.GetUser(....)
Regards,
Constantin Dimitrov Jr.
Software Development Manager
Universal Link GmbH
------------------------------
Web: http://www.unilinknet.de
Email: cdimitrov@u...
Tel: +493047000336
Fax: +493047000335
----- Original Message -----
From: "Brian Baker" <bakerb28@h...>
To: "ASP_ADO_RDS" <asp_ado_rds@p...>
Sent: Tuesday, July 03, 2001 6:11 AM
Subject: [asp_ado_rds] RDS DSN Security
>
> Is it possible to prevent the DSN username/password from being displayed
> within the client source code using RDS?
>
Message #4 by "Brian Baker" <bakerb28@h...> on Thu, 5 Jul 2001 05:53:16
|
|
I cannot store the DSN anywhere on the server for security reasons. The
connection object is created on the fly by a web admin by setting the
appropriate application variables during runtime.
This prohibits any encrypted or unencrypted connection strings to be
stored on the web server. This wasn't my idea but is nevertheless a
requirement.
Any other ideas?
|