Hi
I am working with a client at the moment who has developed an MS Access DB that accesses data from a remote SQL server by accessing asp pages stored on the SQL server. The asp page uses a string passed in the URL to query the database and returns a string
of data. (Not even XML is seperated by "|"). The MS Access DB than decodes this string and seperates the field and presents the data to the DBA Form. If changes are made the DBA also uses the same method to pass the changes to the database via an asp page.
As far as I can see all this data in string format is passed unencrypted through open html ports. The only security in place is between the asp page and the SQL DB. Which could be gotten around by simply entering the correct string value in the URL.
I intend to increase the security in this process, eventually I am going to rewrite the whole application but that is another thread entirely. In the meantim ...
Go to the complete details ...