Subscribe via RSS
Toggle Submenu
  1. Categories
  2. Recent
  3. Tags
View Replies (2)

Resolved Sensitive information found in PBD libraries

  1. How-to
0
Votes
Undo
  1. Erick Siliezar
    Erick Siliezar
  2. PowerBuilder
  3. Monday, 2 November 2020 18:02 PM UTC

Currently we are applying a revision in our Power Builder tools. In our deployed files using PB 2019 R3 (64 bit compilation) if we analyze PBD files for sensitive information, we found hardcoded SQL queries in it. Basically the hardcoded SQL queries are the queries located in the Datawindow components

My question is, if there is a way to hide the SQL queries. I'm using a FileAlyzer tool to review our Power Builder deployments.

Attached an image example

Attachments (1)
evidence.png evidence.png
IDE crashes in System Options dialog
AsymmetricSign using external encrypted private ke...
Accepted Answer
Chris Pollach
Chris Pollach Accepted Answer Pending Moderation
  1. Monday, 2 November 2020 18:23 PM UTC
  2. PowerBuilder
  3. # Permalink

Hi Erick;

  That would only occur when you work & save the SQL in the DW Painter in "Syntax" mode. If you work & save your DWO's from "Graphics" mode, the the SQL is kept in PB's proprietary PBSelect mode. Which is much harder to recognize when reverse compiling (or even in-memory spying). The same for in-line SQL, convert these to Graphics mode based DWO's too be better protected.

  Of course if your processing and/or SQL is really sensitive, then you probably want to seriously think about using Stored Procedures and/or Web Services instead.  ;-)

Regards ... Chris

Comment
There are no comments made yet.
Responses (2)
Armeen Mazda @Appeon
Armeen Mazda @Appeon Accepted Answer Pending Moderation
  1. Monday, 2 November 2020 18:35 PM UTC
  2. PowerBuilder
  3. # 1

Hi Erik,

Just use the new PowerClient deployment option of PB 2019 R3.  This will encrypt the PBDs so you will not be able to see the SQL.  Please note this encryption feature is in the final release not in the beta.

Best regards,
Armeen

Comment
Erick Siliezar
  1. Erick Siliezar
  2. Tuesday, 3 November 2020 18:57 PM UTC
Hi Armeen, you are referring PB 2019 R3 release, but I noticed you only have beta version for download.



Regards Erick.
  1. Helpful
Armeen Mazda @Appeon
  1. Armeen Mazda @Appeon
  2. Tuesday, 3 November 2020 19:19 PM UTC
Yes, final release should be middle of January. The beta doesn't have the encryption feature, but you can still try the beta to understand what this new feature is and report any bugs.
  1. Helpful
There are no comments made yet.
  • Page :
  • 1


There are no replies made for this question yet.
However, you are not allowed to reply to this question.