On Dec 10, 2007, at 5:50 PM, Ricardo Aráoz wrote:

> Hi, so CxnEditor creates a XML file. Now you have in an ASCII file  
> your
> sensitive information (user, password - of course it will be a user  
> with
> append/update/delete rights) for anyone to see. My question is, how
> would you manage the database security?

        First off, the Password is stored in an obscured format. If your  
password was the word 'password', it would be stored in the XML as  
something like 'V14IA4U54DAEG76V6EG1CX35'. This will stop casual  
glances from revealing much.

        However, anyone with a copy of Dabo will be able to extract the  
original from that, since the tools are all available to everyone.  
Therefore, we strongly suggest that you change your app's Crypto  
property to your own class; as long as that class has an encrypt()  
and a decrypt() method, the app will use that instead of the default  
SimpleCrypt that ships with Dabo.

-- Ed Leafe
-- http://leafe.com
-- http://dabodev.com




_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://leafe.com/mailman/listinfo/dabo-users
Searchable Archives: http://leafe.com/archives/search/dabo-users
This message: http://leafe.com/archives/byMID/dabo-users/[EMAIL PROTECTED]

Reply via email to