David,

That's great advice, but I'm not allowed to make such changes in
project. I need to put encryption in the DLL. That could be quite
simple and symbolic, but it should be there... Any more ideas?


DA> In the same way that you create a SQL string to directly query the database,
DA> you could also send a stored procedure with parameters to your ActiveX DLL.
DA> It would require another method to the DLL, but you can then send the stored
DA> procedure and cmd parameters to the DLL and have your Oracle Stored
DA> procedure return the recordset (encrypted by some algorithm of your choice).

DA> You can have the ActiveX be oblivious to the encryption as it is just a
DA> conduit that has no need for anything within the recordset.

DA> I try to avoid designing systems where my User's application does raw SQL
DA> commands to my Database.  Stored procedures allow you to break the Coupling
DA> that occurs using raw SQL and instead if there is a change to the Database
DA> only , your application is oblivious as it still calls the same stored
DA> procedures.

DA> Hope this helps.
DA> David Adams
DA> ----- Original Message -----
DA> From: "Janeks" <janexx@k...>
DA> To: "professional vb" <pro_vb@p...>
DA> Sent: Friday, March 15, 2002 09:05 AM
DA> Subject: [pro_vb] Encrypting ADO recordset


>>
>> I have a client application which makes SQL string to query database,
>> then sends it to a server, where resides ActiveX DLL. After that, this
>> DLL queries actual database (Oracle), gets back ADO recordset and returns
DA> it to
>> client application. The problem is, I need to encrypt data before it
>> is sent back to client application. I could loop through all
>> columns
>> and all rows of the recordset and do the encryption, maybe even use
>> superfast C++ DLL but I fear that anyway would be VERY slow. Any
>> ideas how to solve this problem?
>> To avoid looping through recordset object, I thought about getting a
>> binary image of the recordset(through memory dump or something like
>> that) , then
>> encrypting it, sending it as a byte array and then re-constructing it
>> on client machine. Is something like this possible or is it just my
>> tired hacker's mind? :)
>>
>> Thanks in advance and sorry for my bad futuristic English.
>>
>> --
>> Best regards,
>>  Janeks                          mailto:janexx@k...
>>
>>
>>

DA> ---
DA> 
DA> 



-- 

 Janeks                            mailto:janexx@k...