Re: [sqlite] Create a GUI for interacting with a test questions sqlite db

2010-09-06 Thread Stef Mientki
 On 05-09-2010 10:47, Arthur Avramiea wrote:
> I would like to use sqlite to create a question db for test generation. It
> will be organized in a couple of questions cathegories. A random function
> will generate a test by selecting a couple of questions from each section.
> The sqlite db will be encrypted with http://www.zetetic.net/code/sqlcipher
> so that the users of the application without the proper credentials will not
> be able to see or modify them. 
>
> I would like to create a graphical interface which will allow me (after
> using the proper pass), to add or modify questions, that will allow the
> generation of the tests themselves,of the formatted test pages ready to be
> printed, and of a page with the answers for correction. I do not want to use
> a web interface for that, to make it more portable. It will run on Windows
> XP/Vista. 
>
> Is C++ a proper language for creating this interface? If not, which
> programming language do you recommend for the task? Which libraries should I
> use? Thank you very much. 
take a look at web2py
http://www.web2py.com/

cheers,
Stef
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] Create a GUI for interacting with a test questions sqlite db

2010-09-06 Thread Roger Binns
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 09/06/2010 12:21 PM, Arthur Avramiea wrote:
> The pass doesn't have to be in plain text in the software ... I
> can store it as sha1 or other kind of hash. Wouldn't that solve most of it?
> Or some implementation of SSL.

You are confusing encryption algorithms with the keys.  The decryption
runs on the client and is using a key.  A cracker can intercept that
key.  You can try and obfuscate things as much as you want, but it is
still fairly trivial for a determined cracker to get it, assuming that
is even the cheapest way of doing things.

> The software will be ran only by the course instructor so it will not have a
> big chance to get in the wrong hands. I want less exposure so that is why I
> want to avoid a web interface for it.

Another simple approach for a cracker is to bribe an instructor to hand
over credentials and database content.  Or install a USB keyboard
sniffer they won't notice.

If you have a web interface then the decryption and keys are all server
side, so at least they remain private.  That won't stop screen shots or
similar approaches but at least you won't be handing over all the
content at once.

Anyone can design a security scheme they cannot crack themselves.  That
doesn't mean it can't be cracked or that it is even any good.  Heck even
so called experts have made mistakes - for example see SSLv1 and WEP.

Roger

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkyEs4cACgkQmOOfHg372QS2EQCghyZpJXD3h3diyrD2yCRULtMg
TUYAoODS1Vk4ivT/5d7b6lsn7CCGJZYa
=3uPA
-END PGP SIGNATURE-
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] Create a GUI for interacting with a test questions sqlite db

2010-09-06 Thread Amit Chaudhuri
Arthur,

Nokia's Qt4 may be worth a look.

Amit

On Mon, Sep 6, 2010 at 7:51 AM, Arthur Avramiea <arthurav2...@gmail.com>wrote:

>
> Thank you very much for your answers. I already have mysql, php, c and some
> beginner c++ experience. Learning a new language wouldn't be about
> difficulty, but about time :). I am also considering java for it. What do
> you think? The pass doesn't have to be in plain text in the software ... I
> can store it as sha1 or other kind of hash. Wouldn't that solve most of it?
> Or some implementation of SSL.
> The software will be ran only by the course instructor so it will not have
> a
> big chance to get in the wrong hands. I want less exposure so that is why I
> want to avoid a web interface for it.
> --
> View this message in context:
> http://old.nabble.com/Create-a-GUI-for-interacting-with-a-test-questions-sqlite-db-tp29626091p29631420.html
> Sent from the SQLite mailing list archive at Nabble.com.
>
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] Create a GUI for interacting with a test questions sqlite db

2010-09-06 Thread Arthur Avramiea

Thank you very much for your answers. I already have mysql, php, c and some
beginner c++ experience. Learning a new language wouldn't be about
difficulty, but about time :). I am also considering java for it. What do
you think? The pass doesn't have to be in plain text in the software ... I
can store it as sha1 or other kind of hash. Wouldn't that solve most of it?
Or some implementation of SSL.
The software will be ran only by the course instructor so it will not have a
big chance to get in the wrong hands. I want less exposure so that is why I
want to avoid a web interface for it.
-- 
View this message in context: 
http://old.nabble.com/Create-a-GUI-for-interacting-with-a-test-questions-sqlite-db-tp29626091p29631420.html
Sent from the SQLite mailing list archive at Nabble.com.

___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] Create a GUI for interacting with a test questions sqlite db

2010-09-05 Thread Simon Slavin

On 5 Sep 2010, at 9:47am, Arthur Avramiea wrote:

> I would like to create a graphical interface which will allow me (after
> using the proper pass), to add or modify questions, that will allow the
> generation of the tests themselves,of the formatted test pages ready to be
> printed, and of a page with the answers for correction. I do not want to use
> a web interface for that, to make it more portable. It will run on Windows
> XP/Vista.

This makes no sense.  Web interfaces are /more/ portable than writing an 
interface for a particular version of Windows, which may break when Microsoft 
issues the next support pack, or the user installs some program you've never 
heard of.

> Is C++ a proper language for creating this interface?

C++ is an extremely difficult language to learn, especially if you have no 
prior programming experience.

> If not, which
> programming language do you recommend for the task? Which libraries should I
> use? Thank you very much. 

If portability is important to you, and you have access to a web server that 
supports PHP, then I'd highly recommend you learn HTML and PHP, and host your 
test on your web server.  This means

* You never need to pass out copies of your test program, just one URL.
* Users can update their tests on any computer, not just the one they have your 
software installed on.
* People can use your test on any internet-connected computer using any web 
browser: supports Mac, Windows, Linux of all recent versions.
* Your SQLite database is never on any user's own computer, so encryption is 
irrelevant (assuming they can't hack into your server).
* You are acquiring HTML and PHP skills which are very useful in other projects.

I have to assure you that learning HTML and PHP together is less total work 
than learning C++ and the foibles of any particular version of Windows.

Simon.
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] Create a GUI for interacting with a test questions sqlite db

2010-09-05 Thread Roger Binns
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 09/05/2010 02:17 PM, Arthur Avramiea wrote:
> The sqlite db will be encrypted with http://www.zetetic.net/code/sqlcipher
> so that the users of the application without the proper credentials will not
> be able to see or modify them. 

The last part of your sentence in no way follows from the first.  The
encryption key and code has to be present on the machine in order to
access the database.  For example a cracker could just attach a debugger
to the process. Additionally it would seem that the database copies are
the same, so if any one person cracked it then they could publish the
information in the clear for all other users.

A better way of looking at security is to assign dollar amounts.  How
much should an adversary have to spend to bypass your goals?  For
example attaching a debugger is $0 for the tools and a few hundred
dollars for labour (if that).

> Is C++ a proper language for creating this interface?

SQLite access is easy from almost every programming language.  Pick
whatever GUI toolkit you intend to use and work from that as it will be
the bulk of the code.  Especially consider things like will you need
clipboard access, screen resolutions, printing, different input devices,
screen reading and audio cues etc.

Roger
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkyDfQMACgkQmOOfHg372QRrwwCgx7qv7eFFLUQ+hHsN1slLrHat
SW0AoNEIqJ1glqRxXkr1RgUwXW1FhKV9
=mAUF
-END PGP SIGNATURE-
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


[sqlite] Create a GUI for interacting with a test questions sqlite db

2010-09-05 Thread Arthur Avramiea

I would like to use sqlite to create a question db for test generation. It
will be organized in a couple of questions cathegories. A random function
will generate a test by selecting a couple of questions from each section.
The sqlite db will be encrypted with http://www.zetetic.net/code/sqlcipher
so that the users of the application without the proper credentials will not
be able to see or modify them. 

I would like to create a graphical interface which will allow me (after
using the proper pass), to add or modify questions, that will allow the
generation of the tests themselves,of the formatted test pages ready to be
printed, and of a page with the answers for correction. I do not want to use
a web interface for that, to make it more portable. It will run on Windows
XP/Vista. 

Is C++ a proper language for creating this interface? If not, which
programming language do you recommend for the task? Which libraries should I
use? Thank you very much. 
-- 
View this message in context: 
http://old.nabble.com/Create-a-GUI-for-interacting-with-a-test-questions-sqlite-db-tp29626091p29626091.html
Sent from the SQLite mailing list archive at Nabble.com.

___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users