Discussions tagged Security

Is there any way to secure a pbl so that only certain users can access it?  We are looking at the possibility of creating an Infomaker report that contains FERPA data.  Since it contains FERPA data, we want to limit the users that can see the report....
Buenas dios,  Tengo una aplicación PowerBuilder cliente servidor. Actualmente en los equipos se instala la aplicación y una software VPN como ser Forticlient o OpenVPN.  Esta misma aplicación la migre a la versión Cloud, en un servidor se instálalo...
Dear Appeon: There is another security issue to ask your advice, Is there any way for Powerbuiilder to prevent code injection by marking memory regions as non-executable? as we known ASLR, DEP, and SafeSEH are considered best practices for all devel...
Hello everyone!Do you know if it still makes sense (PB 2022 R3) to apply this security when our C/S app runs on Windows 10/11?I have never used it and I want to see in which case I would use it. I would like to know if this configuration has a signi...
Hi team, Powerserver deployed application undergone for VA/PT process and observed that SSL pinning to be enabled in application, how we can do this? any guide help us Below is the observation Vulnerability: Application is vulnerable to MITM Attac...
Short of writing a custom interface, can anyone suggest an alternative to the PB standard functions GetFileOpenName() and GetFileSaveName()? We are wanting to let users select a file for open or save, but restrict their ability to change the folder b...
Hi Everyone, What can be done to avoid DLL hijacking for a Powerbuilder application in a Windows environment. Files may be signed using Microsoft sign tool but this will not protect from hijacking unless you somehow use verify to check the  files ...
Hi PB users, With the new Security Bulletin: Apache Log4j2 Remote Code Execution Vulnerability (CVE-2021-44228) we start to answer our customers that they are not affected by our applications because we only use classic Powerbuilder branch and we do...
Hi PowerBuilder community, Currently, all PowerBuilder runtime DLL files have been signed, which is great. Part of the PowerBuilder runtime (for PowerBuilder 2019 R3) is pbdwr.pbd.That file isn't signed as far as I can tell. Perhaps it cannot be si...
Hello fellows, Are there tools to provide code protection, obfuscation and software system licensing for applications genertated in Powerbuilder (powerscript)?. Thanks....
We are currently using Infomaker 2019.  We have some forms that were created with Infomaker.  We are adding some fields to one of these forms.  However, the fields we are adding have some confidential information.  As a result, we want the user to ve...
Are there any samples or guidance for securing a ASP.NET Core 3.1 Web API as templated by SnapDevelop?   For example, I am working from the following fine sample: ASP.NET Core 3.1 - Simple API for Authentication, Registration and User Management | ...
Hi All! How sign a xml file with a certificate x.509? Here we use many many xml files to exchange information between companies and we need sign with certificate x.509 (A1, A3...) these files to guarantee the security... Is there a resource in PB ...
Hi all, One of my apps uses the PFC security app to set up users, groups and access to windows, etc (I know old school right). I only use it to prevent certain users from seeing [admin] options on the menu and being able to click on them to open win...
We've just had a security review and one thing that has been highlighted as important is that the PDFs generated by Powerbuilder PDFLib contain metadata.. which in of itself is okay, but one of the elements is the name of the windows user who created...
Hello All, We have our applications on Powerbuilder 2019. Due to third party requirement, we need to scan our code for vulnerabilities using any 'Source code Analysis tools' and generate report. I didn't find any tool for PB scripts. Can anyone kin...
We have number of applications in Power Builder 10.x and 12.x with SQL server as back end database using ODBC connections. These are built using Power builder Classic. I know PB 10.x/12.x is not supported anymore. I need an advice from experts on wha...
Can someone please provide guidance on how to configure a database connection to use SSL to a Sybase ASE database?  I need to know how to connect from both the Powerbuilder IDE and, separately, from a client/server application. We are currently usin...
Hello, I'm trying to understand security for a PowerServer deployment when used to deploy a traditional Powerbuilder (classic) application. Is there good documentation that I could read, and could be shown to security architects? In particular, I'...
Hi everyone, currently I'm using PowerBuilder 2017 connected to Oracle 19C. During some audit test of my app I received some notifications about my tool. When I have SQL scripts embedded in my code, if I run the tool and test the memory, those scrip...

Find Questions by Tag

.EXE .NET 6.0 .NET Assembly .NET Core 3.1 .NET Core Framework .NET DataStore .NET Std Framework 32-bit 64-bit ADO.NET AEM AI Algorithm Amazon AWS Android Apache API APK App Store App Store (Apple) Appeon Workspace Appeon Xcelerator Plug-in Architecture Array ASE Asynchronous Methods Authentication AutoBuild AutoCompiler Automated Testing Automation AutoScript Azure Barcode Base64 Batch BigData BLOB Branch & Merge Browser Bug Build Button C# C# Class Importer C# Editor C# Model generator Calendar Camera Certificate Chrome Citrix Class Client Client/Server Cloud Cluster Collection COM Command Line Compiler Compression Computed Field Configuration Controls Cookies Cordova Crash Cross-Platform Crosstab CSharpAssembly CSharpObject CSS CSV Cursor Data Database Database Driver Database Painter Database Profile Database Provider DataObject DataSource DataStore DataStore (C#) DataStore (PS) DataType DataWindow DATE DATETIME DB2 Debug Debugger Debugging Deployment Design DLL DO-WHILE Dockable Docker Documentation DOUBLE Download DragDrop Edge Edit Style Editor Elevate Conference Email Embedded SQL Emulator Encoding Encryption Enhancement Request Entity Entity Framework ERP Error Event Event Handler Event Handling Excel Exception Export Expression External Functions F# Field File File Access Filter Firefox Firewall Font FOR-NEXT Foreground Format Function Garbage Collection GeoLocation Git Graph HANA Hash Header HTML/5 HTTP/S HTTPClient Icon IDE Identity IIS IMAPI Import InfoMaker Inheritance Installation Integer IntelliSense Interface Internet Internet Explorer iOS IPA iPad iPhone IWA J# Java JavaScript JBoss JDBC JOIN JSON JSONGenerator JSONParser Kestrel Label Lambda Large File LDAP Library License LINQ Linux OS Load Balancing Localization Localized PBVM Log In Log Out Logging LONG LONGLONG macOS MAPI Maps MDI Memory Memory Leak Menu Merge MessageBox Messagging Method Migration MIME TYPE Mobile Model ModelStore ModelStore (C#) MSOLEDBSQL Multi Threading MVC MySQL n-Tier Namespace NativePDF NVO OAuth ODATA ODBC Office Offline OLE OLEDB Online Open Source OpenAPI OpenSSL Oracle OrcaScript Other Outlook Output Package Parameter Patch PayPal PB Classic PB Native PB.NET PBC PBD PBDOM PBG PBJVM PBL PBNI PBORCA PBVM PBX PDF Performance Permission PFC Picture Pipeline Play Store (Google) Plugin Popup Port POST PostgreSQL PowerBuilder PowerBuilder (Appeon) PowerBuilder (SAP) PowerBuilder Compiler PowerBuilder Runtime PowerClient PowerScript (PS) PowerScript IDE PowerScript Migrator PowerServer PowerServer Mobile PowerServer Toolkit PowerServer Web PowerServerLabel Print Properties Proxy Publish PULL PUSH Query Regression Release Renew Resize Response REST Retrieve RibbonBar RibbonBar Builder Rich Text Roadmap RPC Runtime Packager SaaS Scaffolding Script SDI SDK Security Server Service Session Single Sign-on Size SMTP SMTPClient SnapDevelop SOAP Sort Source Code Speech Recognition SQL SQL Anywhere SQL Server SqlBuilder SqlExecutor SQLite SqlModelMapper Storage Stored Procedure Subscription SVN Swagger Syntax TabbedBar TabbedView Tablet TabPage Target TE Control Testing Text TFS Theme TIME Timer TLS/SSL Tomcat TortoiseGit TortoiseSVN Transaction Transparency Trial Trigger TRY-CATCH TX Control Type UI ULONG UltraLite Uninstall Unit Test Unit Testing UNIX OS Update Upgrade Upload URL User Center User Object UWP Validation VARCHAR Variable Versioning Visual Studio Visual Studio Code VM Voice Warning WCF Web API Web Extensions Web Service WebBrowser WebForms WebLogic WebSphere WildFly WinAPI Window Windows OS WinForms Wizard Workgroup Workspace WPF XCODE XHTML XML Zoom