DDE fails in window 10

Question

0.00/5 (No votes)

See more:

I have an old app that is a DDE server. I access if with my app that connects and gets data points. All has been working until Windows 10. Now the server app does not respond to the data requests. This is not using NetDDE. All communications are between apps on the same computer, started by the same user.

Does anyone have an explanation for this problem. Is there some new security protocol that must be implemented? I have searched extensively, but most posts on the subject are with regard to Microsoft Office programs, and networking issues with DDE.

Thanks, Russ

What I have tried:

Using Spy++ to see that there are no responses to the DDE request.

Posted 9-Aug-21 5:49am

Russ Pillsbury

Updated 9-Aug-21 5:50am

Add a Solution

Comments

Dave Kreskowiak 9-Aug-21 13:26pm

Not a solution, but DDE is so ridden with security issues, it shouldn't be used by anything.

Microsoft has finally put options into Office to disable DDE between Office apps after a decade of people screaming about it.

Russ Pillsbury 9-Aug-21 15:02pm

Well, ok, but I have no choice because I did not write the server app, have no source, and no support. And no other app that can do what this one does. Also, how is it a security risk when both apps are running on the same machine. As long as the machines themselves are secure I do not see how DDE is a risk at all.

In any case I really would like to have some idea if this is fixable by some permission setting or perhaps modification to the DDE client (which IS my program).

Dave Kreskowiak 9-Aug-21 15:14pm

DDE has been full of security holes since it's inception, decades ago. It may not be obvious to you, but think about it this way. How does the DDE server app know which app is calling it and running under which account?

Hint: It doesn't.

Russ Pillsbury 9-Aug-21 15:53pm

Right, but that doesn't matter because the user of the computer controls both apps. There is no case where an outside connection can make it different than what the user sets up. These apps are designed to run in a stand-alone situation, often without even internet access. The server reports the position of a satellite, and the client positions an antenna to track it. How can that not be secure?

Dave Kreskowiak 9-Aug-21 16:02pm

I'm not saying this stuff applies to you directly. I'm saying this is why DDE is a dead technology.

If you have the capability of rewriting the server app, and use a different IPC method, do it.

Russ Pillsbury 10-Aug-21 8:12am

Ok, Thanks. The server has great graphics which is why many guys still want to use it. It is not a project for me - I'm not that good at graphics and at 78, I don't think I will try to learn...

KarstenK 10-Aug-21 2:15am

My tip are some security settings, so the server dont get the request at first. I guess you have to dig trough some dirt ;-)

[no name] 12-Aug-21 10:41am

Run your app and server on a (windows 7) virtual machine. Modify "your" app to output to a file that a "file watcher" (or concurrent queue) app can hand off to Windows 10.

Russ Pillsbury 12-Aug-21 11:42am

Interesting method Gerry. I could do that but I don't think most users will want to deal with that complexity. I am actually asking for a guy in New Zealand, not for myself. Thanks though - a method to keep in mind...

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)