Re: Best method of saving data between the normal and SSL stuff

From: Aaron Bertrand [MVP] (aaron_at_TRASHaspfaq.com)
Date: 03/11/04


Date: Thu, 11 Mar 2004 18:29:07 -0500

I would use a central SQL Server to host both secure and non-secure data.
Security is another issue, of course. But replicating Access data, even on
the same server, is not something you want to deal with, trust me.

-- 
Aaron Bertrand
SQL Server MVP
http://www.aspfaq.com/
"Laphan" <news@DoNotEmailMe.co.uk> wrote in message
news:Oo$CNh6BEHA.1456@TK2MSFTNGP09.phx.gbl...
> Hi Guys
>
> Wonder if you could give me some tips on what the best way is re my
problem.
>
> I'm currently using the session id with an Access DB table method to keep
> hold of a shopping cart as the user goes through a site and then another
> Access DB on my secure server to hold their address, contact and payment
> details.
>
> What I want to do is store their completed orders so that they can look at
> them anytime they want and I also want to allow them to store
> wishlists/quotes so that they can store them and use them to order as and
> when they want.
>
> I know these are not minor features and I don't want you to tell me
exactly
> how to do them (although that would be nice ;0).  I just need your
pointers
> to make sure I'm going the right way about it.
>
> I know I could duplicate the data between the normal hosted Access DB and
> the secure hosted Access DB to store this data, but if I'm going to use
> MySQL or SQL Server do I basically call the same DB and the actual data
that
> is entered onto the web page is dealt with by the browser eg, the http and
> https state?  In otherwords do I need to worry that my https data is
posted
> to same http 'hit' DB?
>
> Is this how all MySQL/SQL Server DBs are used?
>
> Rgds
>
> Laphan
>
>


Relevant Pages

  • Secure access to a SQL Server database
    ... securely accessing SQL Server. ... script text, computer launched from, user launching. ... the hash value that gets authenticated against the secure table. ... ASP Currently we use SQL Server authentication and stuff something in a ...
    (microsoft.public.sqlserver.security)
  • Re: Best method of saving data between the normal and SSL stuff
    ... I would use a central SQL Server to host both secure and non-secure data. ... > What I want to do is store their completed orders so that they can look at ... > to same http 'hit' DB? ...
    (microsoft.public.inetserver.asp.db)
  • Re: How to prevent my stored procedure code from being decrypted?
    ... > How should I do to secure my code? ... the primary way to protect intellectual property is with license ... this alias are considered for inclusion in future versions of SQL Server. ... > I found some freewares which can decrypt the encrypted stored procedure. ...
    (microsoft.public.sqlserver.security)
  • Re: [Full-disclosure] Database servers on XP and the curious flaw
    ... that by default it's secure. ... received at least 3 emails that have pointed this out that SQL server is ... running database servers on their system. ... >>well if the configuration allows the guest account access to the database. ...
    (Full-Disclosure)
  • Re: Port 1433 is open to internet, how can I secure db?
    ... Security is not only what is in-built into the product, ... organisation needs to be taken into account when considering how secure your ... applies to SQL Server, but the OS and other software that is running on your ... That does not stop a burgular kicking in all the electrical sockets ...
    (microsoft.public.sqlserver.security)