Wrox Home  
Search P2P Archive for: Go

  Return to Index  

asp_ado_rds thread: RDS DSN Security


Message #1 by "Brian Baker" <bakerb28@h...> on Tue, 3 Jul 2001 06:11:52

Is it possible to prevent the DSN username/password from being displayed 

within the client source code using RDS?
Message #2 by <gigsvoo@y...> on Tue, 3 Jul 2001 16:53:20 +0800
Stored it inside your DSN

----- Original Message -----

From: "Brian Baker" <bakerb28@h...>

To: "ASP_ADO_RDS" <asp_ado_rds@p...>

Sent: Tuesday, July 03, 2001 6:11 AM

Subject: [asp_ado_rds] RDS DSN Security





>

> Is it possible to prevent the DSN username/password from being displayed

> within the client source code using RDS?

> 







Message #3 by "Constantin Dimitrov" <kdimitrov@u...> on Tue, 3 Jul 2001 12:58:36 +0200
Try to use some Component with the database RDO management

in the class initialization you can retrieve the crypted DNS from the file

stored to the end

of your HDD for example.Decrypt and use it. It's a perfect method I think

and only the creators knows

what it happend.So from your ASP you can call just Obj 

Server.CreateObject("Your.Obj")

and use it Obj.GetUser(....)



Regards,

Constantin Dimitrov Jr.

Software Development Manager

Universal Link GmbH

------------------------------

Web: http://www.unilinknet.de

Email: cdimitrov@u...

Tel: +493047000336

Fax: +493047000335

----- Original Message -----

From: "Brian Baker" <bakerb28@h...>

To: "ASP_ADO_RDS" <asp_ado_rds@p...>

Sent: Tuesday, July 03, 2001 6:11 AM

Subject: [asp_ado_rds] RDS DSN Security





>

> Is it possible to prevent the DSN username/password from being displayed

> within the client source code using RDS?

>







Message #4 by "Brian Baker" <bakerb28@h...> on Thu, 5 Jul 2001 05:53:16
I cannot store the DSN anywhere on the server for security reasons. The 

connection object is created on the fly by a web admin by setting the 

appropriate application variables during runtime.



This prohibits any encrypted or unencrypted connection strings to be 

stored on the web server. This wasn't my idea but is nevertheless a 

requirement.



Any other ideas? 

  Return to Index