[VirtualFrost]

I had plans to maybe one day in the future make a program that users a login system. After creating(attempted) a login/register system, I read a comment where someone said it's really insecure and that we should simply make a PHP login with PDO and implement it into the form. Something about being able to get the credentials out of the program once you decompile it?

[Killpot]

I had plans to maybe one day in the future make a program that users a login system. After creating(attempted) a login/register system, I read a comment where someone said it's really insecure and that we should simply make a PHP login with PDO and implement it into the form. Something about being able to get the credentials out of the program once you decompile it?

Yeah, it's very insecure to have raw SQL connection info inside your app, C# and any .Net language for that matter is VERY easy to decompile/reverse, on top of this someone could packet sniff your connection info. At a minimum, I would create a PHP file to handle the connection info for you so the client never knows the SQL db IP, password, username, etc.

[VirtualFrost]

I had plans to maybe one day in the future make a program that users a login system. After creating(attempted) a login/register system, I read a comment where someone said it's really insecure and that we should simply make a PHP login with PDO and implement it into the form. Something about being able to get the credentials out of the program once you decompile it?

Yeah, it's very insecure to have raw SQL connection info inside your app, C# and any .Net language for that matter is VERY easy to decompile/reverse, on top of this someone could packet sniff your connection info. At a minimum, I would create a PHP file to handle the connection info for you so the client never knows the SQL db IP, password, username, etc.

Yeah, they said something about you can connect a PHP script(I guess all the connection stuff) to your form etc and let it run through there. Something I'll probably look into now, just wanted to make sure as I've never seen how to decompile C# programs, I'll keep this in mind. Thanks!

[hybris.softwares]

I had plans to maybe one day in the future make a program that users a login system. After creating(attempted) a login/register system, I read a comment where someone said it's really insecure and that we should simply make a PHP login with PDO and implement it into the form. Something about being able to get the credentials out of the program once you decompile it?

Yeah, it's very insecure to have raw SQL connection info inside your app, C# and any .Net language for that matter is VERY easy to decompile/reverse, on top of this someone could packet sniff your connection info. At a minimum, I would create a PHP file to handle the connection info for you so the client never knows the SQL db IP, password, username, etc.

Yeah, they said something about you can connect a PHP script(I guess all the connection stuff) to your form etc and let it run through there. Something I'll probably look into now, just wanted to make sure as I've never seen how to decompile C# programs, I'll keep this in mind. Thanks!

Take a look at this : http://ilspy.net It will blow your mind.

[VirtualFrost]

Yeah, it's very insecure to have raw SQL connection info inside your app, C# and any .Net language for that matter is VERY easy to decompile/reverse, on top of this someone could packet sniff your connection info. At a minimum, I would create a PHP file to handle the connection info for you so the client never knows the SQL db IP, password, username, etc.

Yeah, they said something about you can connect a PHP script(I guess all the connection stuff) to your form etc and let it run through there. Something I'll probably look into now, just wanted to make sure as I've never seen how to decompile C# programs, I'll keep this in mind. Thanks!

Take a look at this : http://ilspy.net It will blow your mind.

I'll check this out and see how I go, thank you for that!