C / C++ / MFC

28-Jun-04 9:33

I have a dialog box application that I would like to remember some strings that i type in for the next time the program starts... I don't want to just write them to a text file for obvious security problems, i was thinking more like writing them to a string table, but i don't know if i can do that while the program is running rather than while programming it...

Any suggestions will be greatly appreciated and i can give more information if need be.

thx

ix

palbano28-Jun-04 9:44

28-Jun-04 9:44

First, depending on who you are securing the data from, string tables are no more secure than a text file.

Second, security is a large complex issue, you should read much about it before you begin to assume what is secure.

Third, you cannot write the resources of a file that is currently loaded.

"No matter where you go, there your are." - Buckaroo Banzai

-pete

OBRon28-Jun-04 9:54

28-Jun-04 9:54

The registry is the best place to house this sort of information. If security is that important though, you could always encrypt your data before writing it.

ixcaliber28-Jun-04 10:07

28-Jun-04 10:07

I guess i should clarify, security isn't that important, really i just don't want to have a text file with the strings in it... Its for an ftp program, where you can write in lots of different usernames and passwords so it remembers them all for next time... the registry is where i do that?

thanx for the replys.

OBRon28-Jun-04 10:09

28-Jun-04 10:09

Yep, just about every application that remembers the application options and various settings stores that information in the registry.

ixcaliber28-Jun-04 10:20

28-Jun-04 10:20

Hey thanks alot folks... thats an amazingly fast answer to my problem!!! now i gonna have to learn some more stuff Big Grin | :-D

palbano28-Jun-04 10:56

28-Jun-04 10:56

>> where you can write in lots of different
>> usernames and passwords
>> the registry is where i do that?

If this is going to be a production product then I would seriously advise against that. Storing passwords a clear text anywhere is not going to be considered acceptable.

As I stated previously, security is a large subject, you can't really know until you start to investigate it. There are so many resources available these days on the net for reading about software security issues. You really should take some time to understand the subject more thoroughly.

But, that's just my opinion… I could be wrong.

"No matter where you go, there your are." - Buckaroo Banzai

-pete

John M. Drescher28-Jun-04 16:50

John M. Drescher

28-Jun-04 16:50

I agree this is definitly an area where security is a must and the data must be encrypted. Storing unencrypted values in the registry is not much better than storing them in a file named passwords...

John

Good registry tutorials?

ixcaliber28-Jun-04 10:56

Re: Good registry tutorials?

28-Jun-04 10:56

Does anyone know a good site for learning how to edit the registry from inside a program?

thx

OBRon28-Jun-04 11:07

28-Jun-04 11:07

The CRegKey class is what you want to use:

// Read a DWORD from the registry
DWORD dwValue = 0;
CString csKEY = "Software\\Company";
CRegKey key;
if ( key.Open(HKEY_LOCAL_MACHINE, csKEY, KEY_READ) == ERROR_SUCCESS)
{
if (key.QueryDWORDValue("MyKey", dwValue) == ERROR_SUCCESS)
AfxMessageBox("You read it into dwValue");

key.Close();
}

// Write a DWORD to the registry
DWORD dwValue = 3;
CString csKEY = "Software\\Company";
CRegKey key;
if ( key.Create(HKEY_LOCAL_MACHINE, csKEY) == ERROR_SUCCESS)
{
if (key.SetDWORDValue("MyKey", dwValue) == ERROR_SUCCESS)
AfxMessageBox("You wrote it");

key.Close();
}

Thx

ixcaliber28-Jun-04 12:10

Using CInternetFile::WriteString()

28-Jun-04 12:10

Man you folks are awesome! that looks just like what i need... a bitto fanagling and it should be perfect!!

thx

brdavid28-Jun-04 9:19

28-Jun-04 9:19

(still stuck Frown | :(

I am having a bit of trouble running CInternetFile::WriteString() and seeing results appear on the server file I am trying to change.

Here is a snipet of code that open the HTTP Connection, then opens a CInternetFile pointer then sends a request to write data (I hope). "strData" is the data I am sending.

pServer = session->GetHttpConnection("www.myserver.com", 80, "username", "password");

pFile = pServer->OpenRequest(CHttpConnection::HTTP_VERB_POST, "/folder/file.txt");

pFile->SendRequestEx(strData.GetLength());
pFile->QueryInfoStatusCode(dwRet);

pFile->WriteString(strData);
pFile->EndRequest();

Does anyone see any problems with what I have here? I am kinda basing this off an example I found but the file I am trying to write to is not affected. The permissions on the file are set to a+rwx but I am wondering if there is something in the code I am missing or perhaps on the server. I can read from the file just fine. I just can't write to it.

Thanks!

palbano28-Jun-04 9:36

28-Jun-04 9:36

You need to find some information on HTTP and read about it. You can't update a file on the server using HTTP. You have to add that capability by introducing the behavior on the Server. There are a number of methods for doing this. You need to study the problem.

"No matter where you go, there your are." - Buckaroo Banzai

-pete

brdavid28-Jun-04 9:51

28-Jun-04 9:51

I understand. This was something I questioned myself thinking I shouldn't be able to update using HTTP but perhaps I could using FTP or some other means. I tried looking for up whatever information I could on CInternetFile but in everything I see, I get the same example and it tells me what I have done should work, but I believe you. I don't think it's that easy. So, in general, I'm a little stuck on what I should be reading. Do you recommend any articles? Sites? Thanks! Blush | :O

OBRon28-Jun-04 10:00

28-Jun-04 10:00

If you are attempting to create a file named file.text within your /folder virtual, you can do that with your code by making 2 changes. First, change the HTTP_VERB_POST to HTTP_VERB_PUT. Second, you must ensure the virtual directory named /folder on your web server allows write privileges.

But you would be better off not allowing write access to a virtual and using a post to an ASP page on that virtual. Within that ASP page, you could take the posted data and create a file.

palbano28-Jun-04 11:03

28-Jun-04 11:03

Yes my previous post was incorrect. Since IIS4 the PUT command is supported. I don't know about other servers. There is good information on that here:

IIS HTTP PUT

"No matter where you go, there your are." - Buckaroo Banzai

-pete

palbano28-Jun-04 11:33

VC++ Tool for building AfxMessageBox

28-Jun-04 11:33

How rude of me! I forgot to say "Thanks". Thanks for not letting me pass out bad information. Big Grin | :-D

"No matter where you go, there your are." - Buckaroo Banzai

-pete

brdavid28-Jun-04 8:16

Re: VC++ Tool for building AfxMessageBox

28-Jun-04 8:16

I remember there was this wonderful tool for setting up AfxMessageBox/MessageBox dialogs. I can't find it here and thought this was were I downloaded it. Does anyone know where this application is?

Thanks!

John R. Shaw28-Jun-04 18:51

John R. Shaw

28-Jun-04 18:51

You mite be talking about the XMessageBox By Hans Dietrich (@codeproject). There was a messagebox (@codeproject) that used RTF to display the message using multiple colors, but I do not seem to be able to find that one.

INTP

Re: VC++ Tool for building AfxMessageBox

brdavid29-Jun-04 0:41