Home All Groups Group Topic Archive Search About

VB6 How To ?: Storing Confidential Information

Author
10 Oct 2005 6:48 PM
cincode5
Hello...

I'm new to both this group and VB6, so if this seems like a really
stupid question, then it probobly is, and I claim immunity from
ridicule by virtue of ignorance - so, sorry in advance!

I'm writing my first VB6 program (mostly for educational purposes) that
requires users to store confidential information (such as passwords,
pin numbers, etc.) for later retrieval.  I know how to mask this data
from view using a password character, however, where and how do I store
this data.  I tried a .dat file but this can be read using notepad.
Can this be stored within the program itself and edited, deleted or
added as needed?  I must have completely missed the chapter on data
files and how to keep them confidential.  S.O.S.

Thanks,

Author
10 Oct 2005 7:03 PM
Ken Halter
Show quote Hide quote
"cincode5" <stephen.d***@hp.com> wrote in message
news:1128970109.428862.144970@z14g2000cwz.googlegroups.com...
> Hello...
>
> I'm new to both this group and VB6, so if this seems like a really
> stupid question, then it probobly is, and I claim immunity from
> ridicule by virtue of ignorance - so, sorry in advance!
>
> I'm writing my first VB6 program (mostly for educational purposes) that
> requires users to store confidential information (such as passwords,
> pin numbers, etc.) for later retrieval.  I know how to mask this data
> from view using a password character, however, where and how do I store
> this data.  I tried a .dat file but this can be read using notepad.
> Can this be stored within the program itself and edited, deleted or
> added as needed?  I must have completely missed the chapter on data
> files and how to keep them confidential.  S.O.S.
>
> Thanks,

There's nothing built in. You can encrypt strings before storing if you
want.....

EzCryptoEngineOCX
http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=50290&lngWId=1


--
Ken Halter - MS-MVP-VB - http://www.vbsight.com
DLL Hell problems? Try ComGuard - http://www.vbsight.com/ComGuard.htm
Please keep all discussions in the groups..
Author
10 Oct 2005 7:10 PM
Ralph
Show quote Hide quote
"cincode5" <stephen.d***@hp.com> wrote in message
news:1128970109.428862.144970@z14g2000cwz.googlegroups.com...
> Hello...
>
> I'm new to both this group and VB6, so if this seems like a really
> stupid question, then it probobly is, and I claim immunity from
> ridicule by virtue of ignorance - so, sorry in advance!
>
> I'm writing my first VB6 program (mostly for educational purposes) that
> requires users to store confidential information (such as passwords,
> pin numbers, etc.) for later retrieval.  I know how to mask this data
> from view using a password character, however, where and how do I store
> this data.  I tried a .dat file but this can be read using notepad.
> Can this be stored within the program itself and edited, deleted or
> added as needed?  I must have completely missed the chapter on data
> files and how to keep them confidential.  S.O.S.
>
> Thanks,
>

IMHO, DON'T attempt to secure an application or data file by any 'local'
programming means - use system services provided for that purpose.

You could perhaps come up with some scheme that would allow you to hide a
key and do some encrypt/decrypt of 'publically' available information. But
it is doomed to fail. Especially around students - they are the worse,
because they have the time, the desire (whether curiosity or to show-off),
and no moral sense of being dishonest (it is just playing around).

Invoke system services of the desktop/servers you are using. ie - setup
separate logins, create groups, separate folders, profiles.

If this is too much, here is a minimal setup that may work...
Create a folder and give it Execute-Only permission to the outside world.
Create an app a student can call that accepts passwords/usernames, etc. And
then stores that information in that folder. It works as your gatekeeper.
The app can read your .dat file and read/write to material in that folder,
but no one else can (except the admin of course). You can also encrypt most
of the files in that folder, etc.

-ralph