Re: Password protect access DB?

Tech-Archive recommends: Fix windows errors by optimizing your registry


What is the purpose of your security ... to protect sensitive data or
protect your data from being manipulated without the interface or prevent
third party software from accessing you data or to protect your investment
from being reversed engineered.

- if it is to protect sensitive data ... either you will need to abonded
Access or implement field level encryption for the sensitive data (ie have
the application encrypt data before storing it, and have it decrypt the data
when retrieveing it - a little extra but can be done very easily in a base
class - do this with MSSQL server application that handle patient medical
information).

- if it is to prevent manipulation of data ... simply warn the user that any
support agreement is null and void if the data is tampered with directly in
the database.

- if it is to prevent third party software from accessing you data ... I
would suggest going to MSSQL ... again, as previously mentioned, any IT
person (developer or not) should be able to crack an access password in
about 5 minutes ... this includes searching the web and installing the
necessary crack software. How ethical is this? Not very. Is it done? ...

- if it is to protect your property ... spend a little time to investigate /
develop a solution that uses MSSQL server and forget about Access all
together.

Access has it place in the world of stand-alone applications (Sage -
SimplyAccounting); but when security is concerned, its place is on the
sideline!

Jeff




"Anil Gupte" <anil-list@xxxxxxxxxxx> wrote in message
news:eq%230pvkYHHA.3628@xxxxxxxxxxxxxxxxxxxxxxx
I have this problem too. I just want a basic level of security, but the
database has to be local because I am distributing this with my
application.

Thanx,
--
Anil Gupte
www.keeninc.net
www.icinema.com

"rowe_newsgroups" <rowe_email@xxxxxxxxx> wrote in message
news:1173441110.376947.52020@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Mar 9, 4:21 am, teeja...@xxxxxxxxx wrote:
Hi,

I am new to programming with databases and was wanting some help.

Is there any way to password protect an access database and access
sent sql commands to it via vb.net code?

Any help would be much appreciated.

Thanks in advanced.

Tom.

If security is your goal, Access is not the product you want to use.
All it's password protection schemes have been broken and the "hacks"
are posted all over the internet. I'm not saying Sql Server is
perfect, but if security is your goal you may want to download the
express edition and use it.

Also, I'm not sure I know what you mean by "access sent sql commands"?
Are you trying to encrypt the queries that you execute?

Thanks,

Seth Rowe





.

Relevant Pages

  • Re: My words
    ... Internet Connection Firewall for SP1 and Windows Firewall for SP2 ... download all the security updates - Critical updates with Express ... Get into Safe Mode and password protect it. ...
    (microsoft.public.windowsxp.newusers)
  • [NEWS] Lotus Domino View ACL Bypass
    ... Lotus Domino View ACL Bypass ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... A Lotus Notes database contains documents that are organized into views. ... nor are they intended to protect the documents they ...
    (Securiteam)
  • Re: BEWARE: New EULA lets MS ADMIN YOUR Systems!
    ... Microsoft and owners of content secured with Windows Media DRM to limit the ... Digital Rights Management (Security). ... You agree that in order to protect ... Microsoft may provide security related updates to the OS ...
    (microsoft.public.security)
  • Re: Front End/Back End communication
    ... I believe we should further protect the FE Exchange Server: ... the FE is located on the internal network with typical full-stack access to ... There is no such thing as security perfection. ...
    (Focus-Microsoft)
  • Re: Finally, a secure computer
    ... > security at the IBM website is compromised, ... Therefore it is extremely unlikely that any hacker ... > a tiny system served by IIS or the PWS protect himself with the same ... > ICF which does not listen on ports but only opens to responses to messages ...
    (microsoft.public.inetserver.iis.security)