Re: insert into a db...

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ray Costanzo [MVP] (my)
Date: 08/25/04


Date: Wed, 25 Aug 2004 10:21:13 -0400

Is it a requirement to have encrypted data in the database itself? Where I
work, there are also many guidelines that we have to follow. The US's OCC
(http://www.occ.gov/) has lots of rules like this that they're always
auditing our Web site security. While we must encrypt all data that is sent
from the browser to the server when it is anything remotely customer
related, (i.e. via httpS), we are not required to store the data encrypted
in the database itself.

As far as coding things the same in VB and ASP, well, that depends on what
you're doing in VB. I assume that you'll be using VB Script as your ASP
language, yes? So, the code should be pretty similar. Browse around some
of the FAQs at www.aspfaq.com for some code samples. One specific one that
you may want to read prior to duplicating VB coding style in an ASP page is
this one. http://www.aspfaq.com/show.asp?id=2191

Ray at work

"Brad Pears" <donotreply@notreal.com> wrote in message
news:%23nN7ZwqiEHA.1656@TK2MSFTNGP09.phx.gbl...
> Our graphic designer has just finished redeveloping our website. On the
> site, we use SSL to secure the area where a user enters their personal
> information to order items from us. (we do not do many transactions -
> maybe
> 1 per day...) We are a log home mfg company so they would only order plan
> books, maybe a video etc...
>
> When the user clicks "Submit Order", we want to encrypt each data item
> (because of new legislation governing customer personal info etc...) and
> write a record to an access db. From here it will be imported into our
> Customer DB leads database...
>
> I do not use ASP but program in VB 6 and Access 2000. ASP looks similiar
> in
> many ways...
>
> Does someone have a good ASP script for encrypting data? And, if so, is it
> fairly strong encryption?
>
> Also, is there any trick to writing an "insert" SQL script in ASP or is it
> exactly the same as I would do in VB or Access? Maybe someone has an
> "insert" script handy they could pass along including the command to
> actually execute it?
>
> Thanks,
>
> Brad
>
>



Relevant Pages

  • Re: insert into a db...
    ... Is it a requirement to have encrypted data in the database itself? ... While we must encrypt all data that is sent ... I assume that you'll be using VB Script as your ASP ...
    (microsoft.public.inetserver.asp.general)
  • Re: Database encryption.
    ... > I am writing application that encrypt paradox type database with IDEA ... which is used to mark end of string. ...
    (sci.crypt)
  • Re: 2 Keys decrypts same message
    ... > I don't want to encrypt each row twice (with a admin password ... Keeping the database secret. ... lots of disk storage and high speed LAN (Local Area ...
    (sci.crypt)
  • Re: SSN encryption
    ... >> We want to encrypt social security numbers in a database. ... address and SSN are always excluded. ... exposed if there were a breakdown in the other security precautions. ...
    (sci.crypt)
  • Re: Secure data in SQL Server 2005 Mobile Edition
    ... We have decided to go ahead with encrypted the entire database for now, ... replicate this database on SQL Server Mobile Edition on a mobile device. ... for my database connection string and checked the encrypt option. ...
    (microsoft.public.sqlserver.ce)