[ASK] How to safely include password in the source code

[michaelslamet]

Dear fellow members,

I need to access to my website's database, therefore I need to supply a password.

I have no idea how to pass the password without being declare it in the source code, but what if somebody get the application and able to decompile it?

Is there any safe way to do this?

Thanks

[water]

Is there any safe way to do this?

No. You can't store anything securely in a compiled AutoIt script.

Search the forum on this subject and you will find a lot of threads explaining it in greater detail.

[trancexx]

Even if there would be no obvious way to "decompile", you shouldn't put password inside your script. Better solution is to use password hash and calculate hash of the input comparing them then.

Edited January 26, 2013 by trancexx

[michaelslamet]

Even if ther would be no obvious way to "decompile", you shouldn't put password inside your script. Better solution is to use password hash and calculate hash of the input comparing them then.

Hi trancexx a.k.a LoveTruck

Can you give an example for this password hash thing?

Thanks a lot

[michaelslamet]

No. You can't store anything securely in a compiled AutoIt script.

Search the forum on this subject and you will find a lot of threads explaining it in greater detail.

Thanks, water

[Melba23]

Hi,

Just stopping the hamster wheel before it starts spinning too fast......

M23