Possible to MvOPEN a remote dbf with Mia

03-02-05, 12:45 PM

Possible to MvOPEN a remote dbf with Mia

That would be a HUGE security hole if that was possible.

How safe would anyone's data be if I could run a script
from my house and have it pull data from any Merchant store
I ran across? It wouldn't be to hard to figure out the
directory to your orders db, or your customer data. Even
better I could pull down the admin database and run a brute
force attack on the passwords until I found a match and
gave me access to all of your store.

This is one of the reasons my MivaScript 'sandboxes'
itself. It keeps all the dbf files in a non-web accessable
location for security.

Now, I'm sure there are ways to work around this like a
script on the remote side that would allow raw access, or
db-connectors but I would hate to see a way to straight
connect to the databases.

/Scott Mc
--- Ralph Gauer <ralphgauer@zianet.com> wrote:

> Hello,
>
> I cannot find anything in the docs, but wonder:
>
> Is it possible to run a script locally with Mia and open
> and access a
> remote dbf on an Empressa host?
>
> If so, my puny efforts at syntax aren't working, and I
> suspect it is just
> not possible....
>
> All input welcome
>
> Thanks
> rg
>
>
> Ralph Gauer
> ralphgauer@zianet.com
> www.ralphgauer.com
> 505-534-4184
> Silver City, New Mexico
>
>
>

03-02-05, 11:29 AM

Possible to MvOPEN a remote dbf with Mia

Hi Ralph,

Out-of-the-box this works only via ODBC, so your remote Unix server =
would
need a dbf-odbc bridge, which are slightly limited when it comes to =
large
memo-fields, and they are horrible to install. On a Windows server this =
is
easier because you can use the MS ODBC driver. There are however a few
eeeh... irregularities with Miva's ODBC support.=20

A second way is to map the remote data directory via Samba or similar, =
but I
never tried this. Other can probably better comment on that.

The only other "reasonably simple" possibility is via MvCall and have a
script on the remote server that provides the access. That works very =
well,
but obviously there is some overhead for creating the connection and =
parsing
of the data. I use this to synchronise different remote servers. =
Depending
on how elaborate you want to create the replication mechanism and error
handling this may require a lot of coding & testing.

Markus

-----Original Message-----
From: owner-miva-users@miva.com [mailto:owner-miva-users@miva.com] On =
Behalf
Of Ralph Gauer
Sent: Mittwoch, 2. M=E4rz 2005 19:59
To: miva-users@miva.com
Subject: [meu] Possible to MvOPEN a remote dbf with Mia

Hello,

I cannot find anything in the docs, but wonder:

Is it possible to run a script locally with Mia and open and access a =
remote
dbf on an Empressa host?

If so, my puny efforts at syntax aren't working, and I suspect it is =
just
not possible....

All input welcome

Thanks
rg

Ralph Gauer
ralphgauer@zianet.com

https://www.ralphgauer.com

505-534-4184
Silver City, New Mexico

Possible to MvOPEN a remote dbf with Mia

Leave a comment: