> I have written an application, ready to sell, but this is connection to a MySQL database for logging in.
> I know of the existance of REFOX (probably other decompilers to), probably using these it is not hard to find the connection string to hack the databse. Is it therefore possible to hide the connection string somewhere so that it is hard (or impossible) to find?
> Is it possible to be protected against a decompiler (seeing machine code or assembly does not disturb me, but a high-level programing does)? I do know that there is no 100% protection against hacking!
> Chris Van de Velde
It's always a bad idea to secure a system through hiding something. Even if you use some of the recommendations people gave you; the code can still be recovered. Even if the application could not be decompiled you run the risk of the info being revealed by someone using a sniffer. I recommend allowing the user to set and change the password. This will allow the user to ensure security because once your hidden info is found, everyone will know.