database and form security

Reply

Join Date: May 2007
Posts: 266
Reputation: quintoncoert is an unknown quantity at this point 
Solved Threads: 3
quintoncoert quintoncoert is offline Offline
Posting Whiz in Training

database and form security

 
0
  #1
Jun 14th, 2007
i have a form which i have to protect with a password. this form is called from a user form which does not have any passwords on it. which means anyone can access it. in order to accomplish the security i placed a password in an access database but the database itself cannot be password protected since the no-password calling form has to access this database. based on that there is a potential security issue since a person can just open the database and alter the password and then access the form which is supposed to be secure. but i cannot think up a better solution. does anyone have a suggestion?

i thought about encrypting the password before writing it to the database in such a form that if someone wants to change the password in the dbs he would have to first know and apply the encryption but i have little idea of how to do an encryption.
Reply With Quote Quick reply to this message  
Join Date: Sep 2004
Posts: 7,540
Reputation: Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute 
Solved Threads: 704
Team Colleague
Narue's Avatar
Narue Narue is offline Offline
Code Goddess

Re: database and form security

 
0
  #2
Jun 15th, 2007
>but i have little idea of how to do an encryption.
So this is your opportunity to learn. Storing a plain-text password anywhere is a really bad idea, so if you want to make claims about security, you need to encrypt it.
I'm here to prove you wrong.
Reply With Quote Quick reply to this message  
Join Date: May 2007
Posts: 266
Reputation: quintoncoert is an unknown quantity at this point 
Solved Threads: 3
quintoncoert quintoncoert is offline Offline
Posting Whiz in Training

Re: database and form security

 
0
  #3
Jun 15th, 2007
So this is your opportunity to learn.

i shall learn later. but i did do some sort of encryption. as a child i read puzzle as well as a few spy books so at least i knew secret codes. i applied a few and for now i believe that it was sufficient.
Reply With Quote Quick reply to this message  
Join Date: Sep 2004
Posts: 7,540
Reputation: Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute Narue has a reputation beyond repute 
Solved Threads: 704
Team Colleague
Narue's Avatar
Narue Narue is offline Offline
Code Goddess

Re: database and form security

 
0
  #4
Jun 15th, 2007
>as a child i read puzzle as well as a few spy books so at least i knew secret codes.
Hmm.

>i applied a few and for now i believe that it was sufficient.
Yea, I hope you don't mind that I won't hire you to add security to my software.
I'm here to prove you wrong.
Reply With Quote Quick reply to this message  
Join Date: May 2007
Posts: 266
Reputation: quintoncoert is an unknown quantity at this point 
Solved Threads: 3
quintoncoert quintoncoert is offline Offline
Posting Whiz in Training

Re: database and form security

 
0
  #5
Jun 18th, 2007
>i applied a few and for now i believe that it was sufficient.
Yea, I hope you don't mind that I won't hire you to add security to my software.

Sa! How easily a sentence shear a septum!

Just kidding! I know... The security is lousy. But all it does is protect a simple configuration file which remembers how some hardware devices connect to one another. If it had been up to me there would have been no password at all but my boss insists. Besides this is a demo only.(which demonstrates the behaviour of the hardware not the security!)
Reply With Quote Quick reply to this message  
Reply

This thread is more than three months old.
Perhaps start a new thread instead?
Message:


Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC