Webupdate

[NewsArchive]

Hello Friedrich,

one question more. Is there an other way to manage a web update than give the
webserver login and passwort into the installer. If somebody hack the installer
and get the login data for the webserver we have to change the webserver login.
but than the webupdate will not work anymore? I´m right with this?

Thanks and best regards

Kai

[NewsArchive]

Hi Kai,

The login and password is in the Registry (or in the INI file), not in the
installer. If you enable the "Encrypt Username/Password" option then the
information is encrypted.

To be frank, I don't see any other possible solution because web update
needs that information if the web server is login/password protected.

Friedrich

[NewsArchive]

Hi Kai,

>webserver login and passwort into the installer. If somebody hack the installer
>and get the login data for the webserver we have to change the webserver login.

You could use a separate login that only gives access to the download
folder on the server. That way, even if someone hacked in, they could
only get into that one folder.

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php