Re: SQL 2005 express security issue

yes, they will get a copy of the mdf file......it is included in the distribution of my application.
It is a local standalone application, no network connection required.

Using Access, I can set password to MDB, although some said it is easy to crack.


"Daniel Crichton" <msnews@xxxxxxxxxxxxxxxx> 在郵件 news:%233L5VsBaIHA.5900@xxxxxxxxxxxxxxxxxxxx 中撰寫...
stm wrote on Wed, 6 Feb 2008 00:19:17 +0800:

but anyone can install his own SQL Express in their own machine, and
view anything.......

Only if they then get hold of the MDF and LDF files and attach them to their instance of SQL Server - if you allow access to the underlying files then you're at risk no matter what software you use. If they just install SQL Express on their own machine and then connect to a different server where your data lies they'd need to have the sa password on the remote server - they can't just connect using the local sa login and then pull it across.

If you're really concerned about restricting access to the data, then look into using the built-in encryption features - using these would also require the person who gets the MDF and LDF files to also gain access to the certificate used to encrypt/decrypt the data, and that is likely going to be much harder.

--
Dan


.

Relevant Pages

  • Re: How do I remove my development server log from my client site during login?
    ... How are you logging in and what tool are you using? ... The mdf & ldf files know nothing of the server they may have been attached to. ...
    (microsoft.public.sqlserver.setup)
  • Re: Removing SQL Instance Name
    ... copy off the mdf and ldf files to a safe location ... "Senthil" wrote in message ... I've the server as an instance. ...
    (microsoft.public.sqlserver.server)
  • Re: SQL 2005 express security issue
    ... Only if they then get hold of the MDF and LDF files and attach them to their ... instance of SQL Server - if you allow access to the underlying files then ...
    (microsoft.public.sqlserver.security)
  • Re: sp_attach_single_file_db
    ... You can put the MDF and LDF files wherever you want and attach them with ... sp_attach_single_file_db (which is for MDF file only). ... > Is there a way to specify NEW file locations when using ... > You see the issue I have here is that, on one of my server ...
    (microsoft.public.sqlserver.server)
  • Re: Newbie Question about SQL Server 2005 Express connection...
    ... This my first attempt at deploying a distributed windows app, ... similar issues with connecting to an .mdf. ... you said the .mdf needs to be attached to the server. ... Access file - a connection string in the app would point to the central ...
    (microsoft.public.dotnet.distributed_apps)