dev-cpp-users Mailing List for Dev-C++ (Page 329)
Open Source C & C++ IDE for Windows
Brought to you by:
claplace
You can subscribe to this list here.
| 2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(15) |
Oct
(115) |
Nov
(154) |
Dec
(258) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 |
Jan
(377) |
Feb
(260) |
Mar
(249) |
Apr
(188) |
May
(152) |
Jun
(150) |
Jul
(195) |
Aug
(202) |
Sep
(200) |
Oct
(286) |
Nov
(242) |
Dec
(165) |
| 2002 |
Jan
(245) |
Feb
(241) |
Mar
(239) |
Apr
(346) |
May
(406) |
Jun
(369) |
Jul
(418) |
Aug
(357) |
Sep
(362) |
Oct
(597) |
Nov
(455) |
Dec
(344) |
| 2003 |
Jan
(446) |
Feb
(397) |
Mar
(515) |
Apr
(524) |
May
(377) |
Jun
(387) |
Jul
(532) |
Aug
(364) |
Sep
(294) |
Oct
(352) |
Nov
(295) |
Dec
(327) |
| 2004 |
Jan
(416) |
Feb
(318) |
Mar
(324) |
Apr
(249) |
May
(259) |
Jun
(218) |
Jul
(212) |
Aug
(259) |
Sep
(158) |
Oct
(162) |
Nov
(214) |
Dec
(169) |
| 2005 |
Jan
(111) |
Feb
(165) |
Mar
(199) |
Apr
(147) |
May
(131) |
Jun
(163) |
Jul
(235) |
Aug
(136) |
Sep
(84) |
Oct
(88) |
Nov
(113) |
Dec
(100) |
| 2006 |
Jan
(85) |
Feb
(119) |
Mar
(33) |
Apr
(31) |
May
(56) |
Jun
(68) |
Jul
(18) |
Aug
(62) |
Sep
(33) |
Oct
(55) |
Nov
(19) |
Dec
(40) |
| 2007 |
Jan
(22) |
Feb
(49) |
Mar
(34) |
Apr
(51) |
May
(66) |
Jun
(43) |
Jul
(116) |
Aug
(57) |
Sep
(70) |
Oct
(69) |
Nov
(97) |
Dec
(86) |
| 2008 |
Jan
(32) |
Feb
(47) |
Mar
(106) |
Apr
(67) |
May
(28) |
Jun
(39) |
Jul
(31) |
Aug
(25) |
Sep
(18) |
Oct
(25) |
Nov
(5) |
Dec
(21) |
| 2009 |
Jan
(33) |
Feb
(27) |
Mar
(27) |
Apr
(22) |
May
(22) |
Jun
(10) |
Jul
(17) |
Aug
(9) |
Sep
(21) |
Oct
(13) |
Nov
(4) |
Dec
(11) |
| 2010 |
Jan
(10) |
Feb
(8) |
Mar
(4) |
Apr
(1) |
May
|
Jun
(2) |
Jul
|
Aug
(1) |
Sep
(8) |
Oct
(26) |
Nov
(9) |
Dec
(1) |
| 2011 |
Jan
(21) |
Feb
(16) |
Mar
(4) |
Apr
(19) |
May
(26) |
Jun
(9) |
Jul
(6) |
Aug
|
Sep
(4) |
Oct
(3) |
Nov
(2) |
Dec
(1) |
| 2012 |
Jan
(4) |
Feb
(7) |
Mar
(4) |
Apr
|
May
(1) |
Jun
(10) |
Jul
(1) |
Aug
(1) |
Sep
(18) |
Oct
(3) |
Nov
(1) |
Dec
(1) |
| 2013 |
Jan
(4) |
Feb
(2) |
Mar
(15) |
Apr
(6) |
May
(1) |
Jun
(3) |
Jul
(1) |
Aug
(2) |
Sep
(4) |
Oct
|
Nov
(9) |
Dec
|
| 2014 |
Jan
(4) |
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
|
Jul
(5) |
Aug
(4) |
Sep
|
Oct
(2) |
Nov
(1) |
Dec
(4) |
| 2015 |
Jan
(2) |
Feb
(3) |
Mar
(1) |
Apr
(2) |
May
(1) |
Jun
(2) |
Jul
|
Aug
(1) |
Sep
(2) |
Oct
(9) |
Nov
(35) |
Dec
(6) |
| 2016 |
Jan
(7) |
Feb
(10) |
Mar
(10) |
Apr
(9) |
May
(13) |
Jun
(9) |
Jul
(1) |
Aug
(3) |
Sep
(3) |
Oct
(1) |
Nov
(1) |
Dec
|
| 2017 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2018 |
Jan
|
Feb
|
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2019 |
Jan
(1) |
Feb
|
Mar
|
Apr
(2) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2020 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Per W. <pw...@ia...> - 2003-08-17 00:05:26
|
Why. It can't be more than once or twice / weak someone asks about the
auto-close of the console :-)
Anyway:
Try system("pause"); to keep the console until you press enter.
/Per W
On Sat, 16 Aug 2003, Smurf, Papa wrote:
> You guys should do a FAQ for these kinds of questions ;)
> Like what someone did for unsubscribing.
>
> -----Original Message-----
> From: dev...@li...
> [mailto:dev...@li...]On Behalf Of alireza
> goshtaei
> Sent: Saturday, August 16, 2003 7:30 PM
> To: dev...@li...
> Subject: [Dev-C++] Compiler
>
>
> Dear friend
> everytime I run the program in DEV-C++ the wondows
> console is closed so fast so I can't see the result.
> how come can I fix this problem ?
> thanks
> alex
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available now.
> Download today and enter to win an XBOX or Visual Studio .NET.
> http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Dev-cpp-users mailing list
> Dev...@li...
> TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm
> https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available now.
> Download today and enter to win an XBOX or Visual Studio .NET.
> http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Dev-cpp-users mailing list
> Dev...@li...
> TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm
> https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
>
|
|
From: Ed C. <em...@ed...> - 2003-08-16 23:22:24
|
Hi -
That's certainly an improvement. However, it still shows up somewhat
predictably. It looks like this in a text editor (I doubt this will =
display
correctly):
=
=FA=FF=FFj=C6=85=A9=FA=FF=FFi=C6=85=AA=FA=FF=FFl=C6=85=AB=FA=FF=FFl=C6=85=
=AC=FA=FF=FF =C6=85
^ ^ ^ ^ ^
It's a little weird, but you can see the pretty regular repetition, =
there.
It MIGHT be sufficient to my purposes to do it this way, but it's not
ideal...
Other ideas?
-Ed
-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of P.D. van
Zelst
Sent: Saturday, August 16, 2003 6:45 PM
To: 'Ed Cottrell'; 'Michael D. Smith'; =
dev...@li...
Subject: RE: [Dev-C++] Help with application security (hiding strings in
compiled binaries)
Well, it appears that if you specify your passwords as separate =
characters
in a character array, it won't turn up in the executable as a string
literal. I just tested this, as I was curious myself... The following =
code
will generate an executable with the string literal "jack" in it, but =
"jill"
won't show up as a literal (at least, not on my compiler... GCC 3.2 =
[Dev-C++
4.9.8.2]):
#include <iostream>
using std::cout;
using std::endl;
int main()
{
char szUser[] =3D "jack";
char szPass[] =3D { 'j', 'i', 'l', 'l', '\0'};
cout << szUser << endl;
cout << szPass << endl;
return 0;
}
Hope this helps you somewhat,
Paul
-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of Ed =
Cottrell
Sent: Sunday, August 17, 2003 12:02 AM
To: 'Michael D. Smith'; dev...@li...
Subject: RE: [Dev-C++] Help with application security (hiding strings in
compiled binaries)
Hi Mike & others,
I know I can't make it impossible to find, but I'd like it to be more
difficult than it is. The user logging in to the database will have =
limited
capabilities, of course, but one (the trickiest to secure) is SELECT
capability, by necessity...
I'm not sure how I could separate the logon program from the main =
program
(and put it in a secured directory) without losing functionality; the =
end
user HAS to be able to login to the database servers from the program
itself, but without having access other than through the program's own
controls. In other words, when he/she runs my app, he/she should then =
have
limited access to the database, but without knowing the authentication =
used
to get there. If the user is going to somehow invoke a separate login
program, that requires yet another layer of security, right? The user =
will
be accessing some of the data over the net, and I don't want just =
anybody to
run a login script... (NOTE: traffic sniffing isn't a concern with this =
data
- no credit cards or anything; somebody logging in and getting lots at =
once,
though, is).
NOTE: I don't mind encrypting it, somehow; I'm just not thrilled about =
it,
because it would result in definite penalties in file size, execution =
speed,
and development time.
How else can I make this more discrete?
-Ed
-----Original Message-----
From: Michael D. Smith [mailto:for...@hi...]=20
Sent: Friday, August 15, 2003 10:14 PM
To: Ed Cottrell
Subject: Re: [Dev-C++] Help with application security (hiding strings in
compiled binaries)
I've done a good bit of computer security work over the years, I first=20
programmed a UNIVAC 9200 in 1969, but I'm just now learning C, so from =
that=20
perspective...
The situation is that you can't make it impossible to the truly =
determined.=20
You might could make it take 200 people 3 years though, which is no =
doubt=20
much, much, much better than "anyone" and "notepad"
It depends on the specifics which of course you don't want to give for=20
obvious reasons. The first thing that comes to my mind is you should ask
yourself "why do people logging on have access to the logon program?" If
you could stop that, that alone would go a long way towards making you =
more=20
secure. See if you can't do something with the file/directory =
permissions=20
to make that impossible.
YOu could store it packed (as binary) but anyone can read that as well =
if=20
it's in a known code. I'm not 100% sure but I think putting it in a=20
"struct" does that in C. If not, there's certainly someway to convert =
it.=20
They would have to be a "little" (very little) more determined to crack =
it=20
but it could still be done. Still it's better than "anyone" and =
"notepad."
Even though you don't like encoding, it certainly could work. There's a=20
world of possibilities out there. Just be aware, a "good" code is going =
to=20
cost you in processing time. Maybe as much as 30 seconds per user. If=20
you're already at, or close to capacity that could be a hit. Of course =
with=20
processing speed doubling every few months "they say" you're not =
supposed=20
to worry about that. Of course with everyone not worrying about that ...
:)
And of course the current hot programming thinking is OOP (object =
oriented=20
programming). For some reason, the way they push OOP these days leaves =
out=20
the fact that it's purpose was/is security. But it too has security =
holes=20
for those in the know. I guess they figure that if you don't know that's
it's purpose, you don't make it your purpose to find the security holes.
You give the users an object that only allows them to use your method=20
(subroutine) to access/change the database or perhaps to logon to start=20
with. Your subroutine of course only does access/changes that you =
approve=20
of. I suspect this would involve rewriting the whole program which, if =
your=20
not interested in encoding, you're probably not interested in rewriting =
the=20
whole thing either. That too very much depends on your program being in =
a=20
directory they don't have permission to access.
By necessity, as I don't know much C, and don't have any specifics, I've
been rather vague but if there's anything else I can do to help (yea=20
right:) -- write anytime.
Good luck.
ms
At 04:10 PM 8/15/03, you wrote:
>Hi,
>
>I have an application that, as one of its primary features, connects to
>numerous databases with semi-sensitive to highly sensitive info in
>them. The end users of this will be employees of a large organization,=20
>and they should not have ANY direct access to the databases,=20
>themselves. So, rather than giving them a username and password, I want
>to hard-code that into the application.
>
>This is currently being done like this (simplified pseudo code):
>
> char myconnectionstring =3D
> =
"DSN=3Dsomething;server=3Dmyserver;username=3Dmyname;password=3Dmypass";
> MyConnectionFunction(myconnectionstring);
>
>The compiled file (binary), though, contains this info in plain text.
>I.e., anybody can open it up in Notepad, find the usernames and=20
>passwords, and go hack the databases. That won't work.
>
>So, how can I hide those strings in the compiled code, other than=20
>building in some sort of encryption? Would building the passwords from
individual=20
>characters (ASCII values) work? Other ideas?
>
>Thanks!
>
>-Ed
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including =
Data
Reports, E-commerce, Portals, and Forums are available now. Download =
today
and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01
/01
_______________________________________________
Dev-cpp-users mailing list
Dev...@li...
TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm
https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including =
Data
Reports, E-commerce, Portals, and Forums are available now. Download =
today
and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/=
01
_______________________________________________
Dev-cpp-users mailing list
Dev...@li...
TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm
https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
|
|
From: <sca...@ne...> - 2003-08-16 23:13:43
|
I'm using Dev-C++ Version 4.9.8.1 with Windows98. I have created, compiled and .exe a window, but I haven't been able to include resources such as menus, bitmaps or custom cursors in Win32. Could someone help me to get started? Thanks. |
|
From: David M. <ci...@ya...> - 2003-08-16 23:08:34
|
Cool, It looks like it is exactly what I want. I would apeciate it if you would tell me when you complete it. Thanks in Advance David McKen ----- Original Message ----- From: "Hossein Haeri" <ult...@em...> To: <dev...@li...> Sent: Saturday, August 16, 2003 12:09 PM Subject: Re: [Dev-C++] How do I store HUGE numbers. > Dear David, > > > Other than allocating a block of memory and interpreting > > each of the bits myself how can I store really big numbers > > (Let's stick with integers for now) in memory. > > I've got a heavy STLised library available at: > > http://www.programmersheaven.com/search/download.asp?FileID=26357 > > I describe it hifty, as it uses a pure vector as the storage. > > I have written a better version that uses a boost::shared_ptr to > the vector as the storage. But, unfortunately, it is not > downloadable. If you think you will need a copy of it, or want to > test it, send me an email to send the file to you directly. > > I'm waiting to catch a time to implement a better version, but I > always lack it! Anyway, it is likely that I start and finish this > process in the few following days. If you are not in a hurry, and > want the library to be more reliable, it could be better to wait. > > Regards, > --Hossein > -- > __________________________________________________________ > Sign-up for your own personalized E-mail at Mail.com > http://www.mail.com/?sr=signup > > CareerBuilder.com has over 400,000 jobs. Be smarter about your job search > http://corp.mail.com/careers > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > Dev-cpp-users mailing list > Dev...@li... > TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm > https://lists.sourceforge.net/lists/listinfo/dev-cpp-users __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
|
From: P.D. v. Z. <pa...@my...> - 2003-08-16 22:49:33
|
Well, it appears that if you specify your passwords as separate
characters in a character array, it won't turn up in the executable as a
string literal. I just tested this, as I was curious myself...
The following code will generate an executable with the string literal
"jack" in it, but "jill" won't show up as a literal (at least, not on my
compiler... GCC 3.2 [Dev-C++ 4.9.8.2]):
#include <iostream>
using std::cout;
using std::endl;
int main()
{
char szUser[] = "jack";
char szPass[] = { 'j', 'i', 'l', 'l', '\0'};
cout << szUser << endl;
cout << szPass << endl;
return 0;
}
Hope this helps you somewhat,
Paul
-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of Ed
Cottrell
Sent: Sunday, August 17, 2003 12:02 AM
To: 'Michael D. Smith'; dev...@li...
Subject: RE: [Dev-C++] Help with application security (hiding strings in
compiled binaries)
Hi Mike & others,
I know I can't make it impossible to find, but I'd like it to be more
difficult than it is. The user logging in to the database will have
limited capabilities, of course, but one (the trickiest to secure) is
SELECT capability, by necessity...
I'm not sure how I could separate the logon program from the main
program (and put it in a secured directory) without losing
functionality; the end user HAS to be able to login to the database
servers from the program itself, but without having access other than
through the program's own controls. In other words, when he/she runs my
app, he/she should then have limited access to the database, but without
knowing the authentication used to get there. If the user is going to
somehow invoke a separate login program, that requires yet another layer
of security, right? The user will be accessing some of the data over the
net, and I don't want just anybody to run a login script... (NOTE:
traffic sniffing isn't a concern with this data
- no credit cards or anything; somebody logging in and getting lots at
once, though, is).
NOTE: I don't mind encrypting it, somehow; I'm just not thrilled about
it, because it would result in definite penalties in file size,
execution speed, and development time.
How else can I make this more discrete?
-Ed
-----Original Message-----
From: Michael D. Smith [mailto:for...@hi...]
Sent: Friday, August 15, 2003 10:14 PM
To: Ed Cottrell
Subject: Re: [Dev-C++] Help with application security (hiding strings in
compiled binaries)
I've done a good bit of computer security work over the years, I first
programmed a UNIVAC 9200 in 1969, but I'm just now learning C, so from
that
perspective...
The situation is that you can't make it impossible to the truly
determined.
You might could make it take 200 people 3 years though, which is no
doubt
much, much, much better than "anyone" and "notepad"
It depends on the specifics which of course you don't want to give for
obvious reasons. The first thing that comes to my mind is you should ask
yourself "why do people logging on have access to the logon program?" If
you could stop that, that alone would go a long way towards making you
more
secure. See if you can't do something with the file/directory
permissions
to make that impossible.
YOu could store it packed (as binary) but anyone can read that as well
if
it's in a known code. I'm not 100% sure but I think putting it in a
"struct" does that in C. If not, there's certainly someway to convert
it.
They would have to be a "little" (very little) more determined to crack
it
but it could still be done. Still it's better than "anyone" and
"notepad."
Even though you don't like encoding, it certainly could work. There's a
world of possibilities out there. Just be aware, a "good" code is going
to
cost you in processing time. Maybe as much as 30 seconds per user. If
you're already at, or close to capacity that could be a hit. Of course
with
processing speed doubling every few months "they say" you're not
supposed
to worry about that. Of course with everyone not worrying about that ...
:)
And of course the current hot programming thinking is OOP (object
oriented
programming). For some reason, the way they push OOP these days leaves
out
the fact that it's purpose was/is security. But it too has security
holes
for those in the know. I guess they figure that if you don't know that's
it's purpose, you don't make it your purpose to find the security holes.
You give the users an object that only allows them to use your method
(subroutine) to access/change the database or perhaps to logon to start
with. Your subroutine of course only does access/changes that you
approve
of. I suspect this would involve rewriting the whole program which, if
your
not interested in encoding, you're probably not interested in rewriting
the
whole thing either. That too very much depends on your program being in
a
directory they don't have permission to access.
By necessity, as I don't know much C, and don't have any specifics, I've
been rather vague but if there's anything else I can do to help (yea
right:) -- write anytime.
Good luck.
ms
At 04:10 PM 8/15/03, you wrote:
>Hi,
>
>I have an application that, as one of its primary features, connects to
>numerous databases with semi-sensitive to highly sensitive info in
>them. The end users of this will be employees of a large organization,
>and they should not have ANY direct access to the databases,
>themselves. So, rather than giving them a username and password, I want
>to hard-code that into the application.
>
>This is currently being done like this (simplified pseudo code):
>
> char myconnectionstring =
> "DSN=something;server=myserver;username=myname;password=mypass";
> MyConnectionFunction(myconnectionstring);
>
>The compiled file (binary), though, contains this info in plain text.
>I.e., anybody can open it up in Notepad, find the usernames and
>passwords, and go hack the databases. That won't work.
>
>So, how can I hide those strings in the compiled code, other than
>building
>in some sort of encryption? Would building the passwords from
individual
>characters (ASCII values) work? Other ideas?
>
>Thanks!
>
>-Ed
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01
/01
_______________________________________________
Dev-cpp-users mailing list
Dev...@li...
TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm
https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
|
|
From: Ed C. <em...@to...> - 2003-08-16 22:02:00
|
Hi Mike & others, I know I can't make it impossible to find, but I'd like it to be more difficult than it is. The user logging in to the database will have = limited capabilities, of course, but one (the trickiest to secure) is SELECT capability, by necessity... I'm not sure how I could separate the logon program from the main = program (and put it in a secured directory) without losing functionality; the = end user HAS to be able to login to the database servers from the program itself, but without having access other than through the program's own controls. In other words, when he/she runs my app, he/she should then = have limited access to the database, but without knowing the authentication = used to get there. If the user is going to somehow invoke a separate login program, that requires yet another layer of security, right? The user = will be accessing some of the data over the net, and I don't want just = anybody to run a login script... (NOTE: traffic sniffing isn't a concern with this = data - no credit cards or anything; somebody logging in and getting lots at = once, though, is). NOTE: I don't mind encrypting it, somehow; I'm just not thrilled about = it, because it would result in definite penalties in file size, execution = speed, and development time. How else can I make this more discrete? -Ed -----Original Message----- From: Michael D. Smith [mailto:for...@hi...]=20 Sent: Friday, August 15, 2003 10:14 PM To: Ed Cottrell Subject: Re: [Dev-C++] Help with application security (hiding strings in compiled binaries) I've done a good bit of computer security work over the years, I first=20 programmed a UNIVAC 9200 in 1969, but I'm just now learning C, so from = that=20 perspective... The situation is that you can't make it impossible to the truly = determined.=20 You might could make it take 200 people 3 years though, which is no = doubt=20 much, much, much better than "anyone" and "notepad" It depends on the specifics which of course you don't want to give for=20 obvious reasons. The first thing that comes to my mind is you should ask = yourself "why do people logging on have access to the logon program?" If = you could stop that, that alone would go a long way towards making you = more=20 secure. See if you can't do something with the file/directory = permissions=20 to make that impossible. YOu could store it packed (as binary) but anyone can read that as well = if=20 it's in a known code. I'm not 100% sure but I think putting it in a=20 "struct" does that in C. If not, there's certainly someway to convert = it.=20 They would have to be a "little" (very little) more determined to crack = it=20 but it could still be done. Still it's better than "anyone" and = "notepad." Even though you don't like encoding, it certainly could work. There's a=20 world of possibilities out there. Just be aware, a "good" code is going = to=20 cost you in processing time. Maybe as much as 30 seconds per user. If=20 you're already at, or close to capacity that could be a hit. Of course = with=20 processing speed doubling every few months "they say" you're not = supposed=20 to worry about that. Of course with everyone not worrying about that ... = :) And of course the current hot programming thinking is OOP (object = oriented=20 programming). For some reason, the way they push OOP these days leaves = out=20 the fact that it's purpose was/is security. But it too has security = holes=20 for those in the know. I guess they figure that if you don't know that's = it's purpose, you don't make it your purpose to find the security holes. = You give the users an object that only allows them to use your method=20 (subroutine) to access/change the database or perhaps to logon to start=20 with. Your subroutine of course only does access/changes that you = approve=20 of. I suspect this would involve rewriting the whole program which, if = your=20 not interested in encoding, you're probably not interested in rewriting = the=20 whole thing either. That too very much depends on your program being in = a=20 directory they don't have permission to access. By necessity, as I don't know much C, and don't have any specifics, I've = been rather vague but if there's anything else I can do to help (yea=20 right:) -- write anytime. Good luck. ms At 04:10 PM 8/15/03, you wrote: >Hi, > >I have an application that, as one of its primary features, connects to >numerous databases with semi-sensitive to highly sensitive info in = them.=20 >The end users of this will be employees of a large organization, and = they=20 >should not have ANY direct access to the databases, themselves. So, = rather=20 >than giving them a username and password, I want to hard-code that into = >the application. > >This is currently being done like this (simplified pseudo code): > > char myconnectionstring =3D > = "DSN=3Dsomething;server=3Dmyserver;username=3Dmyname;password=3Dmypass"; > MyConnectionFunction(myconnectionstring); > >The compiled file (binary), though, contains this info in plain text. >I.e., anybody can open it up in Notepad, find the usernames and = passwords,=20 >and go hack the databases. That won't work. > >So, how can I hide those strings in the compiled code, other than=20 >building >in some sort of encryption? Would building the passwords from = individual=20 >characters (ASCII values) work? Other ideas? > >Thanks! > >-Ed |
|
From: Smurf, P. <smu...@xs...> - 2003-08-16 18:30:26
|
BTW: What I do is to launch the application from the cmd or command. There are other ways but this is the easiest. -----Original Message----- From: dev...@li... [mailto:dev...@li...]On Behalf Of alireza goshtaei Sent: Saturday, August 16, 2003 7:30 PM To: dev...@li... Subject: [Dev-C++] Compiler Dear friend everytime I run the program in DEV-C++ the wondows console is closed so fast so I can't see the result. how come can I fix this problem ? thanks alex __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Dev-cpp-users mailing list Dev...@li... TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm https://lists.sourceforge.net/lists/listinfo/dev-cpp-users |
|
From: Smurf, P. <smu...@xs...> - 2003-08-16 17:49:49
|
You guys should do a FAQ for these kinds of questions ;) Like what someone did for unsubscribing. -----Original Message----- From: dev...@li... [mailto:dev...@li...]On Behalf Of alireza goshtaei Sent: Saturday, August 16, 2003 7:30 PM To: dev...@li... Subject: [Dev-C++] Compiler Dear friend everytime I run the program in DEV-C++ the wondows console is closed so fast so I can't see the result. how come can I fix this problem ? thanks alex __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Dev-cpp-users mailing list Dev...@li... TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm https://lists.sourceforge.net/lists/listinfo/dev-cpp-users |
|
From: alireza g. <ago...@ya...> - 2003-08-16 17:30:27
|
Dear friend everytime I run the program in DEV-C++ the wondows console is closed so fast so I can't see the result. how come can I fix this problem ? thanks alex __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
|
From: Hossein H. <ult...@em...> - 2003-08-16 16:10:17
|
Dear David, > Other than allocating a block of memory and interpreting > each of the bits myself how can I store really big numbers > (Let's stick with integers for now) in memory. I've got a heavy STLised library available at: http://www.programmersheaven.com/search/download.asp?FileID=26357 I describe it hifty, as it uses a pure vector as the storage. I have written a better version that uses a boost::shared_ptr to the vector as the storage. But, unfortunately, it is not downloadable. If you think you will need a copy of it, or want to test it, send me an email to send the file to you directly. I'm waiting to catch a time to implement a better version, but I always lack it! Anyway, it is likely that I start and finish this process in the few following days. If you are not in a hurry, and want the library to be more reliable, it could be better to wait. Regards, --Hossein -- __________________________________________________________ Sign-up for your own personalized E-mail at Mail.com http://www.mail.com/?sr=signup CareerBuilder.com has over 400,000 jobs. Be smarter about your job search http://corp.mail.com/careers |
|
From: <ten...@ne...> - 2003-08-16 15:51:07
|
-Console: I don't know how in code. But if you click on the console icon you can left-click in the icon, click on defaults or properties, select color and once you selected them and press Ok, in the last dialog which appears you select the option which is make this permanent for this link. -Windows GUI: In the code with the SetBKColor(HDC, COLORREF);That's in code for a concrete program. -Windows GUI: For any kind of program. Just equivalent to console, affecting all winGUI programs (if they select the background color according to system colors: Control Panel->diplay->Appearance. |
|
From: Hossein H. <ult...@em...> - 2003-08-16 15:22:10
|
Dear Gary, It seems that I can help you, but not at the moment. By now, I do not have DevCpp installed on my PC. (I have bought a new one.) I will get back to that when I install DevCpp. BTW, I'm far from beeing called a guru. I may at most be called a well-experinced C++ programmer. The gurus are quite a few, including Bjarne Stroustrup, Andrei Alexandrescu, Herb Sutter, Scott Meyers, Andrew Koening, Matt Austern, Dag Schmidt, and a few more. Anyway, thanks for describing me as a guru. (That was the best trophy I had ever been given!) I will get back to the issue. Regards, --Hossein -- __________________________________________________________ Sign-up for your own personalized E-mail at Mail.com http://www.mail.com/?sr=signup CareerBuilder.com has over 400,000 jobs. Be smarter about your job search http://corp.mail.com/careers |
|
From: Hossein H. <ult...@em...> - 2003-08-16 14:46:47
|
Dear Gary, It seems that I can help you, but not at the moment. By know, I do not have DevCpp installed on my PC. (I have bought a new one.) But, I will get back to that when I install the same version. BTW, I'm far from beeing called a C++ guru. I may just be called a well-experienced C++ programmers. Grur's in C++ are a few, including big, big, big names such as: Bjarne Stroustrup, Herb Sutter, Andrei Alexandrescu, Scott Meyers, Doug Schmidt, Nico Josuttis, Matt Austern, and a few more. Anyway, thanks for calling me a guru. (This was the biggest trophy I had ever been given!) I will come back. Regards, --Hossein -- __________________________________________________________ Sign-up for your own personalized E-mail at Mail.com http://www.mail.com/?sr=signup CareerBuilder.com has over 400,000 jobs. Be smarter about your job search http://corp.mail.com/careers |
|
From: Hossein H. <ult...@em...> - 2003-08-16 14:43:25
|
Dear Gary, It seems that I can help you, but not at the moment. By now, I do not have DevCpp installed on my PC. (I have bought a new one.) I will get back to that when I install DevCpp. BTW, I'm far from beeing called a guru. I may at most be called a well-experinced C++ programmer. The gurus are quite a few, including Bjarne Stroustrup, Andrei Alexandrescu, Herb Sutter, Scott Meyers, Andrew Koening, Matt Austern, Dag Schmidt, and a few more. Anyway, thanks for describing me as a guru. (That was the best trophy I had ever been given!) I will get back to the issue. Regards, --Hossein -- __________________________________________________________ Sign-up for your own personalized E-mail at Mail.com http://www.mail.com/?sr=signup CareerBuilder.com has over 400,000 jobs. Be smarter about your job search http://corp.mail.com/careers |
|
From: P.D. v. Z. <pa...@my...> - 2003-08-16 14:41:54
|
Is there anyone who can send an e-mail with the subject filled in? I think it's even the same person again... maybe someone should teach him how to send proper e-mails... Anyway... he wants to have a different background color than the default for his application. He doesn't specify what type of application however... console or GUI. -----Original Message----- From: dev...@li... [mailto:dev...@li...] On Behalf Of OROSZI Bal=E1zs Sent: Saturday, August 16, 2003 9:57 AM To: dev...@li... Subject: Re: [Dev-C++] (no subject) yiwei li wrote: > hihi is there anyone here know how to change the background color of > where you run the programme (not the text color). Thanks Is there anyone, who understands this question? :) -- Greetings, Bal=E1zs ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01 /01 _______________________________________________ Dev-cpp-users mailing list Dev...@li... TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm https://lists.sourceforge.net/lists/listinfo/dev-cpp-users |
|
From: w.y. <yok...@ve...> - 2003-08-16 09:57:59
|
Dawood Vora wrote: > > The offending line is if (*inp++ == '?') count++; But the funny > thing is if I substitute p for inp in the while loop, then it compiles > and gives me the right answer. That is normal behavior. > I am under the impression that the post and pre increment operators > can be used on the names of char arrays. Somebody, please clear me on > this and give me some plausible explanation. > > char inp[] = "?cmewop? OWCOIJJJ?mcjmwow? cwjw?xjw?"; When you declare an array like this, 'inp' is essentially _constant_ and always contains the address of the first array element during its lifetime. > char* p = inp; p however you can change around as you already know. |
|
From: Dawood V. <da...@ku...> - 2003-08-16 08:41:47
|
I do not know, what's wrong with the code below: It simply gives me=
=20
compilation error. The compilation log is as follows:
D:/Documents/C_Notes/try.cpp: In function `int main()':
D:/Documents/C_Notes/try.cpp:11: non-lvalue in increment
The offending line is "if (*inp++ =3D=3D '?') count++;" But the funn=
y thing is=20
if I substitute p for inp in the while loop, then it compiles and giv=
es me=20
the right answer.
I am under the impression that the post and pre increment operators c=
an be=20
used on the names of char arrays. Somebody, please clear me on this =
and=20
give me some plausible explanation.
#include <cstdlib>
#include <iostream>
using namespace std;
int main()
{
char inp[] =3D "?cmewop? OWCOIJJJ?mcjmwow? cwjw?xjw?";
char* p =3D inp;
int count =3D 0;
while (*inp)
if (*inp++ =3D=3D '?') count++;
cout<<count<<'\n';
system("PAUSE");
return 0;
}
|
|
From: <or...@vp...> - 2003-08-16 07:56:33
|
yiwei li wrote: > hihi is there anyone here know how to change the background color of > where you run the programme (not the text color). Thanks Is there anyone, who understands this question? :) -- Greetings, Balázs |
|
From: Ioannis V. <iv...@em...> - 2003-08-16 06:43:07
|
> -----Original Message----- > From: dev...@li... > [mailto:dev...@li...] On Behalf > Of Dawood Vora > Sent: Friday, August 15, 2003 3:39 AM > To: Dev C++ > Subject: [Dev-C++] delete statement gives segmentation fault error > > > Hello every body, > below is a straight code from Stroustrup's classic. I > am running > bloodshed DEV-C++. At the end, it is trying to delete the > object "input" > using delete statement. It straightaway gives me invalid memory or > segmentation fault error. Also, if I comment the delete > statement, the > code works fine as it should be. Actually it happens, only > when I try to > pass the command line arguement. As u all know, it is the > famous calculator > example from the 6th chapter of the book. Right now, I am in the 6th > chapter, so I do not have a very good idea about new and delete > statements. According to me the code should work, as we are > trying to > delete the object we explicitly created. > > if (input != cin) delete input; if(input!=&cin) Ioannis Vranos * Programming pages: http://www.noicys.freeurl.com * Alternative URL 1: http://run.to/noicys * Alternative URL 2: http://www.noicys.cjb.net |
|
From: David M. <ci...@ya...> - 2003-08-16 01:41:17
|
mySQL++ seems to be the best one out there. http://www.mysql.com/downloads/api-mysql++.html ----- Original Message ----- From: "André Macário Barros" <and...@su...> To: "Dev-Cpp-Users" <dev...@li...> Sent: Friday, August 15, 2003 3:31 PM Subject: [Dev-C++] Dev-C++ with SQL > Dear Users, > > 1) Is it possible develop SQL code inside a C code in the Dev-C++ > environment? > 2) Is it possible develop SQL code inside a C++ code in the Dev-C++ > environment? > 3) If "Yes" for 1) and/or 2) do you know where can I get a free > documentation > for free download? > > Regards > Andre Barros > > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > Dev-cpp-users mailing list > Dev...@li... > TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm > https://lists.sourceforge.net/lists/listinfo/dev-cpp-users __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com |
|
From: Ed C. <em...@to...> - 2003-08-15 21:43:15
|
Hi,
=20
I have an application that, as one of its primary features, connects to
numerous databases with semi-sensitive to highly sensitive info in them. =
The
end users of this will be employees of a large organization, and they =
should
not have ANY direct access to the databases, themselves. So, rather than
giving them a username and password, I want to hard-code that into the
application.=20
=20
This is currently being done like this (simplified pseudo code):
=20
char myconnectionstring =3D
"DSN=3Dsomething;server=3Dmyserver;username=3Dmyname;password=3Dmypass";
MyConnectionFunction(myconnectionstring);
=20
The compiled file (binary), though, contains this info in plain text. =
I.e.,
anybody can open it up in Notepad, find the usernames and passwords, and =
go
hack the databases. That won't work.
=20
So, how can I hide those strings in the compiled code, other than =
building
in some sort of encryption? Would building the passwords from individual
characters (ASCII values) work? Other ideas?
=20
Thanks!
=20
-Ed
|
|
From: Mark H. <mh...@wi...> - 2003-08-15 20:10:43
|
I am using Dev-C++ v4.9.1 under Windows ME. I compile a simple console program and it will run normally. Output is displayed in a DOS window. If I re-run the program from the built-in debugger (not Insight), the program runs, but the DOS display screen is blank. What to do? |
|
From: <and...@su...> - 2003-08-15 19:44:32
|
Dear Users,
1) Is it possible develop SQL code inside a C code in the Dev-C++
environment?
2) Is it possible develop SQL code inside a C++ code in the Dev-C++
environment?
3) If "Yes" for 1) and/or 2) do you know where can I get a free
documentation
for free download?
Regards
Andre Barros
|
|
From: Mark L. W. <ma...@al...> - 2003-08-15 19:43:04
|
Hello all! I am working in the following environment: Windows98 Dev-C++ 4.9.6.6 gcc (version?) gdb (version?) I am trying to debug a library function that I am writing. When I run the debugger on my main routine and try to "step into" the library function, the gdb output shows "<mylibaryfunctionname>.cpp not found". However, the debugger actually enters the function and I can watch variables and know where I am. What am I doing wrong that the gdb cannot find the source of the library? Thanks in advance for your help! Mark L. Wise |
|
From: Mark H. <mh...@wi...> - 2003-08-15 17:42:59
|
I'm a new user to Dev-C++ and I am having trouble getting the debugger to work. I have compiled a simple console based program that runs and displays to standard output. However, if I run the program from the debugger, the console window does not show standard output or standard error. Just a blank window. So, I tried downloading Insight from http://www.bloodshed.net/dev/packages/index.html, but the link to Insight 5 fails. What to do? Mark |