RE: Data Base Security (Posted by Ken Murphy) - www.foxite.com

> > > Hi Experts
> > >
> > > I am facing problem of Data Base Security. Users at user end open table in browse window and change data manually and blaming me that my software automatically changes their data. No body is accepting the responsibility. Some of my friends are saying me to shift to SQL Data Base and leave VFP becase its data is unsecured. I am using Free Table. If I shift then is it my correct decesion. Is VFP have no solution at all for this kind of problems.
> > >
> > > Tnnx in advance
> > >
> > > Ahsan Rana
> >
> > In addition to what Tushar told you, remember that there are additional costs, as well as major changes to your application code, to changing to another database. You SHOULD use a DBC though and, since you are working in VFP 7.0 you can use Database Events to control access to your data from outside the application.
> >
> > Check out "Database Container Events" in the help file - specifically you need to use dbc_BeforeOpenTable and test to see if your application is running (check for some variable, object or property) and if it isn't, just return .F. That will stop users from opening the tables outside of the application by using VFP and Browse!
> >
> > However, it will NOT stop users from accessing the data with hacking tools or programs.
> >
> > Regards
> > Andy Kramek
> > Microsoft MVP (Visual FoxPro)
> > Tightline Computers Inc, Akron Ohio, USA
>
> Is it benefitable in any way to scramble the data so the customer will not understand the fields to modify .

Do you mean, encrypt the data? If so, it is advisable to use encryption only when you do not want to allow inappropriate users to see what is in the table. Using encryption adds to your programming workload as you have to decrypt and re-encrypt each record as the user modifies them. (You have to allow appropriate users to see the data somewhere.)

Encryption will not be a solution to Ahsan's problem. The user can still make changes to the data with a browse. If it were encrypted though, when the app tries to decrypt that record, it would probably come out as garbage.

Ken
You shall know the truth - and the truth shall set you free. (John 8:33)

COMPLETE THREAD

Data Base Security Posted by Ahsan Rana @ 2/1/2007 8:45:45 AM

RE: Data Base Security Posted by tushar @ 2/1/2007 8:59:56 AM

RE: Data Base Security Posted by Ahsan Rana @ 2/1/2007 12:38:58 PM

RE: Data Base Security Posted by Ken Murphy @ 2/1/2007 1:41:30 PM

RE: Data Base Security Posted by suhas hegde @ 12/20/2007 3:31:55 PM

RE: Data Base Security Posted by Frank Cazabon @ 2/1/2007 1:47:50 PM

RE: Data Base Security Posted by Boudewijn Lutgerink @ 2/1/2007 5:34:56 PM

RE: Data Base Security Posted by Ken Murphy @ 2/1/2007 5:44:05 PM

RE: Data Base Security Posted by Boudewijn Lutgerink @ 2/1/2007 5:46:21 PM

RE: Data Base Security Posted by Daniel Hofford @ 8/26/2007 3:22:47 PM

RE: Data Base Security Posted by William Sanders @ 12/19/2007 6:08:03 PM

RE: Data Base Security Posted by Andy Kramek @ 2/1/2007 11:37:49 AM

RE: Data Base Security Posted by meid lababidi @ 2/1/2007 2:47:49 PM

RE: Data Base Security Posted by Ken Murphy @ 2/1/2007 3:33:42 PM

RE: Data Base Security Posted by Tariq mehmood @ 2/6/2007 4:49:21 PM

RE: Data Base Security Posted by Boudewijn Lutgerink @ 2/7/2007 10:44:54 AM

RE: Data Base Security Posted by Tariq mehmood @ 2/7/2007 1:37:03 PM

RE: Data Base Security Posted by Ken Murphy @ 2/7/2007 2:18:30 PM

RE: Data Base Security Posted by randy loberiano @ 2/27/2008 4:05:13 AM

RE: Data Base Security Posted by Pete Sass @ 2/2/2007 3:24:02 AM

RE: Data Base Security Posted by Bernard Bout @ 2/2/2007 4:18:42 AM

RE: Data Base Security Posted by Pete Sass @ 2/10/2007 7:14:25 PM

RE: Data Base Security Posted by Bernard Bout @ 2/14/2007 5:26:58 AM

RE: Data Base Security Posted by Jamie Osborn @ 3/15/2007 1:06:09 AM

RE: Data Base Security Posted by Naomi Nosonovsky @ 3/15/2007 3:50:17 AM

RE: Data Base Security Posted by Jamie Osborn @ 3/15/2007 3:51:16 AM

RE: Data Base Security Posted by Bernard Bout @ 3/15/2007 9:15:03 AM

RE: Data Base Security Posted by Pete Sass @ 3/15/2007 1:05:09 PM

RE: Data Base Security Posted by Bernard Bout @ 3/15/2007 2:32:10 PM

RE: Data Base Security Posted by Frank Cazabon @ 3/15/2007 7:49:19 PM

RE: Data Base Security Posted by suhas hegde @ 12/19/2007 5:16:28 PM

RE: Data Base Security Posted by Prasad Sakharkar @ 2/2/2007 7:33:51 AM

RE: Data Base Security Posted by Ravi Taxali @ 2/5/2007 9:30:25 PM

RE: Data Base Security Posted by kenan cejvan @ 2/5/2007 1:27:00 PM

RE: Data Base Security Posted by mk sharma @ 3/14/2007 5:35:09 PM

RE: Data Base Security Posted by Ken Murphy @ 3/14/2007 7:26:26 PM

RE: Data Base Security Posted by mk sharma @ 3/15/2007 8:16:54 AM

RE: Data Base Security Posted by tushar @ 3/15/2007 8:29:02 AM

RE: Data Base Security Posted by mk sharma @ 3/15/2007 8:45:45 AM

RE: Data Base Security Posted by tushar @ 3/15/2007 10:45:57 AM

RE: Data Base Security Posted by Ulhas Amrite @ 8/25/2007 10:46:23 AM

RE: Data Base Security Posted by tushar @ 8/25/2007 1:18:26 PM

RE: Data Base Security Posted by Ken Murphy @ 3/15/2007 10:39:44 PM

RE: Data Base Security Posted by Ulhas Amrite @ 8/31/2007 1:31:44 PM

RE: Data Base Security Posted by Ken Murphy @ 8/31/2007 2:30:32 PM

RE: Data Base Security Posted by Jamie Osborn @ 3/15/2007 1:40:16 AM

RE: Data Base Security Posted by Bernard Bout @ 3/16/2007 2:32:21 PM

RE: Data Base Security Posted by vivek deodhar @ 8/22/2007 5:53:35 PM

RE: Data Base Security Posted by Bernard Bout @ 8/22/2007 11:40:41 PM

RE: Data Base Security Posted by vivek deodhar @ 8/23/2007 6:36:34 AM

RE: Data Base Security Posted by vivek deodhar @ 8/23/2007 9:41:35 AM

RE: Data Base Security Posted by Bernard Bout @ 8/23/2007 10:33:37 PM

RE: Data Base Security Posted by vivek deodhar @ 8/25/2007 7:16:50 AM

RE: Data Base Security Posted by Bernard Bout @ 8/27/2007 6:42:08 AM

RE: Data Base Security Posted by vivek deodhar @ 2/27/2008 5:31:57 AM

RE: Data Base Security Posted by Bernard Bout @ 2/29/2008 6:24:47 AM

RE: Data Base Security Posted by Binod Binani @ 3/15/2007 7:03:46 PM

RE: Data Base Security Posted by Kip Dole @ 12/18/2007 4:42:43 PM

RE: Data Base Security Posted by Bernard Bout @ 12/19/2007 5:53:27 AM

RE: Data Base Security Posted by Cetin Basoz @ 12/19/2007 11:40:39 AM

RE: Data Base Security Posted by Joe Estrella @ 1/9/2008 8:37:27 AM