Jump to content

internal authentication


Guest

This topic is 5296 days old. Please don't post here. Open a new topic instead.

Recommended Posts

as we know we have a login script to enter but is there any script so that we can enter username and password that we made it personally inside filemaker which cant be cracked by other 3rd party softwares . hope u understood login script with username and password we defined other than filemaker default accounts

Link to comment
Share on other sites

Have you been reading the other posts on password cracking?

As far as internal accounts go, passwords are not stored in the file. A *hash* of the password is stored. Crackers can open the file, but they cannot reveal what the account passwords are.

If you have a script with a Login step and store a username a password within this script step, then its possible that this information could be discovered.

But IMHO there is no need to do things like this. This is a symptom of bad design. Use FileMaker's built-in accounts and privileges as they are designed to be used and you'll get maximum security. Anything else introduces vulnerabilities.

Link to comment
Share on other sites

Please pay attention to what Vaughan said. Storing the password in a script step or, worse yet, inside a field, makes it vulnerable.

One of the worst practices is a script that as part of its process temporarily relogs into the file with a [Full Access] Account. That makes the file completely vulnerable.

Steven

Link to comment
Share on other sites

This topic is 5296 days old. Please don't post here. Open a new topic instead.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.