|
What are you trying to secure against?
If you are using a single key for all instances of the application, and including it in the application distribution, then it is pretty straightforward for a hacker to get hold of the key (or login credentials) and contact the database with it.
To avoid interception or viewing of data as it's on the network, you should always use SSL or something similar (i.e. an encrypted channel using a public key encryption algorithm at some point) for the transfer. If you set up a web service or HTTP server it's straightforward to use SSL. This prevents someone from sniffing the packets of someone else's data, but it doesn't affect their ability to decompile and get the credentials.
The only real way to avoid that is to require people to log in, so the application doesn't have the credentials at all. That's obviously annoying and can often have a bigger cost than the security concern.
It's usually a good idea to proxy a database by having a service layer (either a web service or a TCP server application) in between. That insulates you from a particular database implementation, and it also allows you to restrict the actions a user can do, even with the credentials. If, for example, your concern is corruption of data as opposed to viewing it, this application can sanity check any requested updates to the database.
|
|
|
|
|
Thanks all for the great suggestions. So for example i have
Application(e.g login)
|
connect to remote database
|
application requests data
|
database sends data
|
application handles it.
---------------
from the suggestions a possible secure method to change to?:
Application
|
connect to webservice and initiate connection to db(ssl)
|
application sends query string for e.g to the web service(ssl)
|
application requests data encrypted from the webservice of which connects to the database retrieves the data and sends it to the app(ssl)
|
application handles it.
modified 11-Mar-21 21:01pm.
|
|
|
|
|
Your application should not know anything about the database including connection strings, queries, tables, etc. The web service should do all that and expose an API that your app will consume.
An TCP/IP socket server will vastly out-perform a web service. Also, 2-way communication is a PITA in a web service.
* you need to think how many simulataneous users will connect
* typical internet connection of your users
* if you will need 2 way communication
|
|
|
|
|
Thank you, I will take all this advice on-board and do some research into web services and such. I am knew to working with databases in a desktop application so I am learning a lot.
Thank you so much for advice. 
modified 11-Mar-21 21:01pm.
|
|
|
|
|
Hello Sir This is rahul tiwary
My problem is that i want to mail Email body in asp.net C#.not Attechment .but not retrive Can u help me .my code is
try
{
string EmailID = dt.Rows[0][1].ToString();
MailMessage MyMessage1 = new MailMessage();
string Bodyurl = "http://www.basnext.com/CheckOrderStatus.aspx?OrderTrackingNomber=" + Ordertrackingnumber + "&UserID=" + Session["UserID"].ToString() + "";
MailMessage MyMessage = new MailMessage();
MyMessage.To.Add(EmailID);
MyMessage.From = new MailAddress("sales@basnext.com");
MyMessage.Subject = "Order Details";
MyMessage.Body = "";
MyMessage.IsBodyHtml = true;
MyMessage.Body = "<HTML><BODY BGCOLOR=#0000FF> Dear " + Session["UserName"].ToString() + "
Thank you for making an Order Detail of product items.
We appreciate to serve you.
Your Order Tracking Number is " + Ordertrackingnumber + ". We will get you back soon.
You Can Check your Order Status anytime on clicking below porvided link.
" + Bodyurl + "
Thanks & Regard
Sales Team
Email:- sales@stsinfo.com.
</BODY></HTML>";
Stream mem = cry.ExportToStream(ExportFormatType.PortableDocFormat);
mem.Seek(0, System.IO.SeekOrigin.Begin);
Attachment att = new Attachment(mem, "OrderDetails.pdf", "application/pdf");
MyMessage.Attachments.Add(att);
MyMessage.Body = "<HTML><BODY BGCOLOR=#0000FF>"+att+" Dear " + Session["UserName"].ToString() + "
Thank you for making an Order Detail of product items.
We appreciate to serve you.
Your Order Tracking Number is " + Ordertrackingnumber + ". We will get you back soon.
You Can Check your Order Status anytime on clicking below porvided link.
" + Bodyurl + "
Thanks & Regard
Sales Team
Email:- sales@stsinfo.com.
</BODY></HTML>";
Stream ms = cry.ExportToStream(ExportFormatType.WordForWindows);
ms.Seek(0, System.IO.SeekOrigin.Begin);
Attachment att1 = new Attachment(ms, "OrderDetails.doc", "application/.doc");
MyMessage1.Attachments.Add(att1);
MyMessage1.To.Add("rahultiwary19@stsinfo.com");
MyMessage1.From = new MailAddress("sales@basnext.com");
MyMessage1.Subject = "Order Details";
MyMessage1.IsBodyHtml = true ;
MyMessage1.Body = "<HTML><BODY BGCOLOR=#0000FF>Dear Sales Team
Mr. " + Session["UserName"].ToString() + " has made an Order Details of some products item.
Please find the attachment of the Order Details.
Thanks & Regard
</BODY></HTML>";
MyMessage1.Body = "";
smtpClient.Host = "mail.bioroles.com";
// smtpClient.Host = "174.142.169.34";
smtpClient.Port = 25;
smtpClient.UseDefaultCredentials = true;
smtpClient.Credentials = new System.Net.NetworkCredential("sales@bioroles.com", "**********");
//smtpClient.Credentials = new System.Net.NetworkCredential("sales@basnext.com", "***********");
smtpClient.Send(MyMessage);
smtpClient.Send(MyMessage1);
mem.Dispose();
ms.Dispose();
}
catch (Exception ex)
{
//litStatus.Text = ex.ToString();
}
}
Please Help
|
|
|
|
|
What's the problem?
I wasn't, now I am, then I won't be anymore.
|
|
|
|
|
Just look at what you are doing with the Body property of the messages. You set them, then give contents, and then overwrite the contents again.
And actually I expect a runtime error at
Attachment att = ...
MyMessage.Body = "<HTML><BODY BGCOLOR=#0000FF>"+att+"
|
|
|
|
|
Hi all,
I would like to write a function of type Bool that checks an array for a certain value or a function of type Void to simply sort an array. If I write a function for only a particular array type, the function is pretty straight forward but inflexible. However, if I want the function to work on any kind of array regardless of it's type, it is pretty tricky. I have tried to do this by using a For Loop in the function. Then I tried to pass in the name of the array and it's length as parameters but got stuck. The problem is if I pass in the name of an array as a parameter, that parameter must have a type. Then I tried to use the ForEach Loop where I can enter the array name but it seems it also needs to know what array type it is dealing with. The following are what I have tried:
public bool myFunction(ARRAYTYPE myArrayName, int myArrayLength)
{
for(int i = 0; i<myArrayLength;i++)
{
}
}
public void myFunction(ARRAYTYPE myArrayName )
{
foreach (ARRAYTYPE value in myArrayName)
{
}
}
I'm beginning to think this can't be done but I'm really hoping someone has a solution. Thanks in advance for your reply.
modified 16-Oct-12 8:42am.
|
|
|
|
|
The examples you post aren't really suitable for handling in a single method because the internal implementations are too different. In other words, they don't have common behaviour, so you shouldn't try to treat them as though they do.
On a general note, you can use generics to pass in a type to a method when you want to be able to use different types, decided at compile time. To do this, you would declare it like this (changing the array to a generic list instead):
public void MyFunction<T>(List<T> myCollection){
}
|
|
|
|
|
Note that you can also do this with arrays:
public void MyFunction<T>(T[] myArray){
}
Dave Doknjas
Convert between VB, C#, C++, & Java
www.tangiblesoftwaresolutions.com
Instant C# - VB to C# Converter
Instant VB - C# to VB Converter
|
|
|
|
|
ASPnoob wrote: I would like to write a function of type Bool that checks an array for a certain value or a function of type Void to simply sort an array
Try the recommended approach; IComparable[^].
Bastard Programmer from Hell 
if you can't read my code, try converting it here[^]
|
|
|
|
|
how to get an data from sql in data gride view want all detail about data grid view
|
|
|
|
|
|
|
I have a class
class Commentable
{
public void Addcomment()
}
public Interface ICommentable
{
Commentable Comment{ get; }
}
public Class Article:Someclass,ICommentable
{
#region ICommentable Members
public Commentable Comment{
{
get { return new Commentable(); }
}
#endregion
}
public class Program
{
static void Main()
{
Article objArticle = new Article();
objArticle.comment.AddComment();
}
}
Instead of " objArticle.comment.AddComment();" in main method I want objArticle.AddComment().How do I do that without implementing the AddComment() method in Article.?
|
|
|
|
|
If you want direct access to the child of a child class and you don't want to reimplement AddComment, you either have to have that indirection in there, or you make Article derive from Commentable. There is no other way.
|
|
|
|
|
Using an extension method[^]. It's fugly BTW, it'd be a lot cleaner to simply talk to the object that you're actually using, as opposed to hiding implementation-details. Makes debugging (and thus, maintenance) a whole lot worse.
Bastard Programmer from Hell
if you can't read my code, try converting it here[^]
|
|
|
|
|
Hmmm, an interesting suggestion, but ultimately, it boils down to roughly the same IL - and it would require a reimplementation of the offending AddComment method (even if he just chooses to use a different name).
|
|
|
|
|
Pete O'Hanlon wrote: it boils down to roughly the same IL
..but not the same source-code. Hiding the member in a different (static) class does not improve readability much.
Applying Demeters' law would be costly.
Bastard Programmer from Hell
if you can't read my code, try converting it here[^]
|
|
|
|
|
Thank u so much for the suggestion it really helped me a lot 
|
|
|
|
|
Hi,
I want to develop an windows desktop application to play videos from memory stream.i'm downloading video files from internet and put in to byte stream array in memory. it is working and i dont want to save them in hard disk.i want to play that video streams from memory.I'm using c# (VS2010).
I'm highly appreciate your advice and time.
Thanks
|
|
|
|
|
SumithF wrote: it is working
SumithF wrote: i dont want to save them in hard disk.i want to play that video streams from
memory
Well, I have no idea what your code looks like, so I'm going to have to guess here, but what are the overloads available for playing the video stream? I suspect that at least one of them will accept a Stream object - all you need do is pass in a MemoryStream and it will behave as you want.
|
|
|
|
|
SumithF wrote: I'm highly appreciate your advice and time.
That explains the downvote on the first post.
SumithF wrote: I want to develop an windows desktop application to play videos from memory stream.i'm downloading video files from internet and put in to byte stream array in memory. it is working and i dont want to save them in hard disk.i want to play that video streams from memory.I'm using c# (VS2010).
..and your question is this; you have the data in-memory in a stream, now how do you get it in the Media Player? Is that correct? ..and you're looking for a "tutorial" or a code-sample that you can copy?
I'm not writing code today, so you'd have to do that yourself. The documentation is here[^], complete with an example. Give it a try.
Bastard Programmer from Hell
if you can't read my code, try converting it here[^]
|
|
|
|
|
I am updating an old project developed with VS2008, and as part of the deployment it needs to create a directory in the root of C: and a number of subdirectories.
The top level of these directories gets created in the [Targetdir] and the subdirectories in the root of C:
Does anyone know way to fix this without going to Installshield? It must be possible although I can't see too many options to choose from.
Happy programming!!
|
|
|
|
|
Forget it and go to InstallShield LE. It does a better job of EVERYTHING compared to the Setup and Deployment project.
The only way I know of, using the built in Setup and Deployment project, that can cause this is that you setup the folders in the project to be created off of some root folder, such as SystemDrive.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
