LiveCode Forums

Hi, yes obviously, but i'm thinking always as a login form, which the user can insert text and symbols if he wants. This is the worst case i think. By the way i think that with sql injection we are done. And what about database connections? I read that when trying to open databases, we can add a par...

Yes, sure. Just like: replace "'" with "\'" in myDataToQuery. I think that this one prevents the 90% of the sql injection attacks. it could be used for quotes, semi colon, ecc.. I think this is the best way from preventing us.

Regards
Edoardo

Here i am, I've read everything. Let's say that the article with the rsa and aes discussions was VERY useful. Exactly what i needed :) Anyway, it seems that there are no way to prevent from an SQL-injection attack. We can not(i think) manipulate user's inputs, since (as mentioned) there could be quo...

Thank you very much for your answers! They are very useful(Even the one of FourthWorld ;) )!! Once i will have the time i will read the one posted by igor (Thank you very much). So, as i see, the best way of keep apps protected is to manage user inputs, even from sql injection and cross site scripti...

Ok but this does not involve LiveCode. If i have a LiveCode app server which accept sockets and db connections, and all goes in plain text, the only way to hide everything is to encrypt before let it pass, and decrypt on server side, am i right? Or there are other ways? Another example is: How to ge...

Yes, if the db is local on the machine the only way to make it secure is by having a strong password and all of other things you mentioned. Other point of view: For example if i want to save my data on files, is there a way to encrypt them? If the db is not local: a cooworker of mine, told me that w...

Thanks for your answer. Think of this: I have an application which works with a LOCAL database. In this database there is a table which describe every account for my app: Username,password,adrress,name, surname ecc ecc.. What would you do to make it the more secure you can? The only thing that comes...

Hi all, i'm new in this forum and i think it's time to ask you something. I decided to use LiveCode as the argument of my thesis and i have been asked to focus on security/privacy of data. I'm trying to find all the functions and ways that LiveCode uses for keep our private data from beeing discover...