Sinisterly
Tutorial is it safe to add SQL info in vb? - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: Visual Basic & .NET Framework (https://sinister.ly/Forum-Visual-Basic-NET-Framework)
+--- Thread: Tutorial is it safe to add SQL info in vb? (/Thread-Tutorial-is-it-safe-to-add-SQL-info-in-vb)

Pages: 1 2


is it safe to add SQL info in vb? - Blackbone - 08-05-2013

well, im making a login system using SQL, i've heard that you can decompile the vb application, so when they decompile they will get the source code? and get the sql info? :S :S :S


RE: is it safe to add SQL info in vb? - Eternity - 08-05-2013

(08-05-2013, 12:04 AM)Blackbone Wrote: well, im making a login system using SQL, i've heard that you can decompile the vb application, so when they decompile they will get the source code? and get the sql info? :S :S :S

They will only be able to get the HostName and Connection Port.
The username and password isn't stored in the code.


RE: is it safe to add SQL info in vb? - Blackbone - 08-05-2013

(08-05-2013, 12:17 AM)Eternity Wrote:
(08-05-2013, 12:04 AM)Blackbone Wrote: well, im making a login system using SQL, i've heard that you can decompile the vb application, so when they decompile they will get the source code? and get the sql info? :S :S :S

They will only be able to get the HostName and Connection Port.
The username and password isn't stored in the code.

can you please tell me, how can I decompile it?
thank you Smile


RE: is it safe to add SQL info in vb? - nikey646 - 08-05-2013

Use a program like .Net Reflector (Paid Software) or ILSpy (Free Software).


RE: is it safe to add SQL info in vb? - Xanii - 08-05-2013

I still wouldn't say it is safe. I would just have it interact with a PHP script server sided.


RE: is it safe to add SQL info in vb? - Leumonic - 08-05-2013

(08-05-2013, 12:17 AM)Eternity Wrote:
(08-05-2013, 12:04 AM)Blackbone Wrote: well, im making a login system using SQL, i've heard that you can decompile the vb application, so when they decompile they will get the source code? and get the sql info? :S :S :S

They will only be able to get the HostName and Connection Port.
The username and password isn't stored in the code.

Actually, they'll gain access to your database hostname, your connection port, your database username, your database password, and with that, access to any database and table you have on that connection.


RE: is it safe to add SQL info in vb? - Blackbone - 08-05-2013

(08-05-2013, 05:31 AM)Sempiternal Wrote:
(08-05-2013, 12:17 AM)Eternity Wrote:
(08-05-2013, 12:04 AM)Blackbone Wrote: well, im making a login system using SQL, i've heard that you can decompile the vb application, so when they decompile they will get the source code? and get the sql info? :S :S :S

They will only be able to get the HostName and Connection Port.
The username and password isn't stored in the code.

Actually, they'll gain access to your database hostname, your connection port, your database username, your database password, and with that, access to any database and table you have on that connection.
that's why im using php script Biggrin and add some webbrowsers Smile, but how do I inform that the user has logged in?


RE: is it safe to add SQL info in vb? - Eternity - 08-05-2013

(08-05-2013, 05:31 AM)Sempiternal Wrote:
(08-05-2013, 12:17 AM)Eternity Wrote:
(08-05-2013, 12:04 AM)Blackbone Wrote: well, im making a login system using SQL, i've heard that you can decompile the vb application, so when they decompile they will get the source code? and get the sql info? :S :S :S

They will only be able to get the HostName and Connection Port.
The username and password isn't stored in the code.

Actually, they'll gain access to your database hostname, your connection port, your database username, your database password, and with that, access to any database and table you have on that connection.

Ohh, forgot about those.
You can however make the user input the Database username & password along the the others.


RE: is it safe to add SQL info in vb? - Blackbone - 08-06-2013

(08-06-2013, 07:33 AM)Tedd Wrote:
(08-05-2013, 03:30 PM)Eternity Wrote:
(08-05-2013, 05:31 AM)Sempiternal Wrote:
(08-05-2013, 12:17 AM)Eternity Wrote:
(08-05-2013, 12:04 AM)Blackbone Wrote: well, im making a login system using SQL, i've heard that you can decompile the vb application, so when they decompile they will get the source code? and get the sql info? :S :S :S

They will only be able to get the HostName and Connection Port.
The username and password isn't stored in the code.

Actually, they'll gain access to your database hostname, your connection port, your database username, your database password, and with that, access to any database and table you have on that connection.

Ohh, forgot about those.
You can however make the user input the Database username & password along the the others.

I mean that's a good idea, but how many users do you want knowing the username and password of your database? Plus, if they needed to know that, they can just decompile and get the host and port to your database and log in regularly. Not much better solution.
well, if I crypted the proogram will it still be decompilebale?


RE: is it safe to add SQL info in vb? - Shebang - 08-06-2013

(08-06-2013, 09:10 AM)Blackbone Wrote:
(08-06-2013, 07:33 AM)Tedd Wrote:
(08-05-2013, 03:30 PM)Eternity Wrote:
(08-05-2013, 05:31 AM)Sempiternal Wrote:
(08-05-2013, 12:17 AM)Eternity Wrote: They will only be able to get the HostName and Connection Port.
The username and password isn't stored in the code.

Actually, they'll gain access to your database hostname, your connection port, your database username, your database password, and with that, access to any database and table you have on that connection.

Ohh, forgot about those.
You can however make the user input the Database username & password along the the others.

I mean that's a good idea, but how many users do you want knowing the username and password of your database? Plus, if they needed to know that, they can just decompile and get the host and port to your database and log in regularly. Not much better solution.
well, if I crypted the proogram will it still be decompilebale?

Using a crypter to protect your program? It will certainly make it a bit more difficult, but anything can have symbols renamed, etc. and recompiled. It's just a matter of time.