Re: [sqlite] System.Data.SQLite -> ChangePassword 2nd time has opposite behavior

2016-12-13 Thread Baugher, Melody
QLite -> ChangePassword 2nd time has opposite behavior > On Dec 12, 2016, at 5:00 AM, Baugher, Melody wrote: > > string passwordPragma = "PRAGMA key='" + password + "';"; Not quoting the password string leaves you open to SQL injection attack. This pro

Re: [sqlite] System.Data.SQLite -> ChangePassword 2nd time has opposite behavior

2016-12-12 Thread Jens Alfke
> On Dec 12, 2016, at 5:00 AM, Baugher, Melody wrote: > > string passwordPragma = "PRAGMA key='" + password + "';"; Not quoting the password string leaves you open to SQL injection attack. This probably isn’t an issue in an internal development tool, but if there’s any code like this in

Re: [sqlite] System.Data.SQLite -> ChangePassword 2nd time has opposite behavior

2016-12-12 Thread Simon Slavin
On 12 Dec 2016, at 1:00pm, Baugher, Melody wrote: > Starting with an encrypted database, if I run this code twice in a row with > applyPassword=false, the password is removed the first time but then applied > the second time. Your program is weird and buggy. There is one big test in the prog

[sqlite] System.Data.SQLite -> ChangePassword 2nd time has opposite behavior

2016-12-12 Thread Baugher, Melody
My SQLite databases are encrypted at build time. Small tools were developed to remove or apply the password to all 9 databases after build to facilitate the work of the database developers. The tools run the following bit of code against each database: string activatePragma = "PRAGMA acti