Sign in to follow this  
Followers 0
clifox

How to store data secure?

12 posts in this topic

Hello Everyone,

I need your advice on which method is the best to securely save user data for my program!

Thanks.

Share this post


Link to post
Share on other sites



Hello Everyone,

I need your advice on which method is the best to securely save user data for my program!

Thanks.

StringReplace() and StringSplit should work.

Share this post


Link to post
Share on other sites

Prompt the user for a password, then use that to encrypt the data using one, or more, of the many encryption functions (search around the example scripts, there are lots). Thats my vote.


MUHAHAHAHAHA

Share this post


Link to post
Share on other sites

I mean to store data in file, perhaps encrypted so that it could not be eye read.

Share this post


Link to post
Share on other sites

I mean to store data in file, perhaps encrypted so that it could not be eye read.

If you really want to encrypt, shift all the data up one level, that's what my friend did though(don't know the detail), best is search around forum and look for some very good examples.

Share this post


Link to post
Share on other sites

Prompt the user for a password, then use that to encrypt the data using one, or more, of the many encryption functions (search around the example scripts, there are lots). Thats my vote.

That's a good idea, but here comes another question: where to save the user password?

Share this post


Link to post
Share on other sites

#7 ·  Posted (edited)

In the users memory? lol. I would expect the user to remember the pass otherwise i dont think these is a secure way to go about it, you would have to store the password some where and that could easily be hacked out. Even encrypting the pass would not work as the pass to the password encryption would be easily gotten.

Edited by smstroble

MUHAHAHAHAHA

Share this post


Link to post
Share on other sites

In the users memory? lol. I would expect the user to remember the pass otherwise i dont think these is a secure way to go about it, you would have to store the password some where and that could easily be hacked out. Even encrypting the pass would not work as the pass to the password encryption would be easily gotten.

Where or how to save the MD5 hash to minimize the posibility to be deleted?

Share this post


Link to post
Share on other sites

Umm, well in the script directory, windows folder (though i personally dont like it when programs leave files in my windows folder), user directory, or if you want to be really sneaky inside the compiled script itself (sort of..) using Alternate Data Streams (NTFS only), for example saveing to myscript.exe:hash.txt would store hash.txt inside of myscript.exe (this will not protect it from hackers, etc. but it is sneaky :) ).


MUHAHAHAHAHA

Share this post


Link to post
Share on other sites

Umm, well in the script directory, windows folder (though i personally dont like it when programs leave files in my windows folder), user directory, or if you want to be really sneaky inside the compiled script itself (sort of..) using Alternate Data Streams (NTFS only), for example saveing to myscript.exe:hash.txt would store hash.txt inside of myscript.exe (this will not protect it from hackers, etc. but it is sneaky :) ).

But what if the user wants to change the password?

Share this post


Link to post
Share on other sites

They would have to know the old password but, you could prompt for the password, prompt for a new password, decrypt with old pass, then encrypt with new pass.


MUHAHAHAHAHA

Share this post


Link to post
Share on other sites

Hello Everyone,

I need your advice on which method is the best to securely save user data for my program!

Thanks.

Look in the help file at the StringEncrypt() function. You can encrypt with a password, and it will only be decrypted with the same password. If the user will be changing the password, then your script needs to read the old data with the old password, then re-encrypt to save it with the new password.

:)


Valuater's AutoIt 1-2-3, Class... Is now in Session!For those who want somebody to write the script for them: RentACoder"Any technology distinguishable from magic is insufficiently advanced." -- Geek's corollary to Clarke's law

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0