Welcome To The Home Of The Visual FoxPro Experts  
home. signup. forum. archives. search. google. articles. downloads. faq. members. weblogs. sponsors. rss.
 From: Pete Sass
  Where is Pete Sass?
 Marathon, Ontario
 Canada
 Pete Sass
 To: Bernard Bout
  Where is Bernard Bout?
 Brisbane
 Australia
 Bernard Bout
 Tags
Subject: RE: Data Base Security
Thread ID: 120452 Message ID: 121372 # Views: 135 # Ratings: 0
Version: Visual FoxPro 7 Category: Databases, Tables and SQL Server
Date: Saturday, February 10, 2007 7:14:25 PM         
   


> > > Hi Experts
> > >
> > > I am facing problem of Data Base Security. Users at user end open table in browse window and change data manually and blaming me that my software automatically changes their data. No body is accepting the responsibility. Some of my friends are saying me to shift to SQL Data Base and leave VFP becase its data is unsecured. I am using Free Table. If I shift then is it my correct decesion. Is VFP have no solution at all for this kind of problems.
> > >
> > > Tnnx in advance
> > >
> > > Ahsan Rana
> >
> >
> > Hi,
> > VFP backend are unsecure .. end of story and end of debate.
> > You can try a variety of things, even encrypting, but what is to
> > say a user will open a table and enter over your encryption and
> > destroy your decryption.
> > I moved off to SQL-Server for all of the above reasons.
> > The only method I have found that provides secuity for VFP backends
> > is to place the VFP database and tables in a share that is not
> > seen on the network. You then in you application use the
> > SET DEFAULT TO UNC path and the logged in use has permissions
> > into this path. If the user cannot see the share and does not
> > know the path your VFP backend is secure.
> > Pete from the Great White North. (Only in Canada, ay.) Over and Out ...
>
> Hi Pete
>
> Given that the user may not want the additional overhead and COST of SQLServer, I think your solution makes the most sense for a VFP backend without going to Client Server. I don't believe that encrypting a field will solve anything, and what if you need to do a SELECT or INDEX on that field?
>
> Your solution is similar to Application Roles in SQLServer which is what we use. Even in SQLServer only our VFP application has access to the data.
>
> Could you please elaborate on your idea or maybe a FAQ?
>
> PS I did not rate your post but will when you post the FAQ, since not everyone can afford SQLServer :)
>
> Bernard
>
> ** If you see someone without a smile, give em one of yours :) **


Hi,
I am considering writing a BLOG on this a few other items.
Pete from the Great White North. (Only in Canada, ay.) Over and Out ...



COMPLETE THREAD
Data Base Security Posted by Ahsan Rana @ 2/1/2007 8:45:45 AM
RE: Data Base Security Posted by tushar @ 2/1/2007 8:59:56 AM
RE: Data Base Security Posted by Ahsan Rana @ 2/1/2007 12:38:58 PM
RE: Data Base Security Posted by Ken Murphy @ 2/1/2007 1:41:30 PM
RE: Data Base Security Posted by suhas hegde @ 12/20/2007 3:31:55 PM
RE: Data Base Security Posted by Frank Cazabon @ 2/1/2007 1:47:50 PM
RE: Data Base Security Posted by Boudewijn Lutgerink @ 2/1/2007 5:34:56 PM
RE: Data Base Security Posted by Ken Murphy @ 2/1/2007 5:44:05 PM
RE: Data Base Security Posted by Boudewijn Lutgerink @ 2/1/2007 5:46:21 PM
RE: Data Base Security Posted by Daniel Hofford @ 8/26/2007 3:22:47 PM
RE: Data Base Security Posted by William Sanders @ 12/19/2007 6:08:03 PM
RE: Data Base Security Posted by Andy Kramek @ 2/1/2007 11:37:49 AM
RE: Data Base Security Posted by meid lababidi @ 2/1/2007 2:47:49 PM
RE: Data Base Security Posted by Ken Murphy @ 2/1/2007 3:33:42 PM
RE: Data Base Security Posted by Tariq mehmood @ 2/6/2007 4:49:21 PM
RE: Data Base Security Posted by Boudewijn Lutgerink @ 2/7/2007 10:44:54 AM
RE: Data Base Security Posted by Tariq mehmood @ 2/7/2007 1:37:03 PM
RE: Data Base Security Posted by Ken Murphy @ 2/7/2007 2:18:30 PM
RE: Data Base Security Posted by randy loberiano @ 2/27/2008 4:05:13 AM
RE: Data Base Security Posted by Pete Sass @ 2/2/2007 3:24:02 AM
RE: Data Base Security Posted by Bernard Bout @ 2/2/2007 4:18:42 AM
RE: Data Base Security Posted by Pete Sass @ 2/10/2007 7:14:25 PM
RE: Data Base Security Posted by Bernard Bout @ 2/14/2007 5:26:58 AM
RE: Data Base Security Posted by Jamie Osborn @ 3/15/2007 1:06:09 AM
RE: Data Base Security Posted by Naomi Nosonovsky @ 3/15/2007 3:50:17 AM
RE: Data Base Security Posted by Jamie Osborn @ 3/15/2007 3:51:16 AM
RE: Data Base Security Posted by Bernard Bout @ 3/15/2007 9:15:03 AM
RE: Data Base Security Posted by Pete Sass @ 3/15/2007 1:05:09 PM
RE: Data Base Security Posted by Bernard Bout @ 3/15/2007 2:32:10 PM
RE: Data Base Security Posted by Frank Cazabon @ 3/15/2007 7:49:19 PM
RE: Data Base Security Posted by suhas hegde @ 12/19/2007 5:16:28 PM
RE: Data Base Security Posted by Prasad Sakharkar @ 2/2/2007 7:33:51 AM
RE: Data Base Security Posted by Ravi Taxali @ 2/5/2007 9:30:25 PM
RE: Data Base Security Posted by kenan cejvan @ 2/5/2007 1:27:00 PM
RE: Data Base Security Posted by mk sharma @ 3/14/2007 5:35:09 PM
RE: Data Base Security Posted by Ken Murphy @ 3/14/2007 7:26:26 PM
RE: Data Base Security Posted by mk sharma @ 3/15/2007 8:16:54 AM
RE: Data Base Security Posted by tushar @ 3/15/2007 8:29:02 AM
RE: Data Base Security Posted by mk sharma @ 3/15/2007 8:45:45 AM
RE: Data Base Security Posted by tushar @ 3/15/2007 10:45:57 AM
RE: Data Base Security Posted by Ulhas Amrite @ 8/25/2007 10:46:23 AM
RE: Data Base Security Posted by tushar @ 8/25/2007 1:18:26 PM
RE: Data Base Security Posted by Ken Murphy @ 3/15/2007 10:39:44 PM
RE: Data Base Security Posted by Ulhas Amrite @ 8/31/2007 1:31:44 PM
RE: Data Base Security Posted by Ken Murphy @ 8/31/2007 2:30:32 PM
RE: Data Base Security Posted by Jamie Osborn @ 3/15/2007 1:40:16 AM
RE: Data Base Security Posted by Bernard Bout @ 3/16/2007 2:32:21 PM
RE: Data Base Security Posted by vivek deodhar @ 8/22/2007 5:53:35 PM
RE: Data Base Security Posted by Bernard Bout @ 8/22/2007 11:40:41 PM
RE: Data Base Security Posted by vivek deodhar @ 8/23/2007 6:36:34 AM
RE: Data Base Security Posted by vivek deodhar @ 8/23/2007 9:41:35 AM
RE: Data Base Security Posted by Bernard Bout @ 8/23/2007 10:33:37 PM
RE: Data Base Security Posted by vivek deodhar @ 8/25/2007 7:16:50 AM
RE: Data Base Security Posted by Bernard Bout @ 8/27/2007 6:42:08 AM
RE: Data Base Security Posted by vivek deodhar @ 2/27/2008 5:31:57 AM
RE: Data Base Security Posted by Bernard Bout @ 2/29/2008 6:24:47 AM
RE: Data Base Security Posted by Binod Binani @ 3/15/2007 7:03:46 PM
RE: Data Base Security Posted by Kip Dole @ 12/18/2007 4:42:43 PM
RE: Data Base Security Posted by Bernard Bout @ 12/19/2007 5:53:27 AM
RE: Data Base Security Posted by Cetin Basoz @ 12/19/2007 11:40:39 AM
RE: Data Base Security Posted by Joe Estrella @ 1/9/2008 8:37:27 AM