Re: Question on client/server application

From: Alf Christophersen (alf.christophersen_at_basalmed.uio.no)
Date: 01/29/05 

Date: Sat, 29 Jan 2005 14:29:33 +0100

On Thu, 23 Dec 2004 01:27:42 -0500, John E. Doe
<nobodyyouknow@dontneedspam.com> wrote:

>there's no problem there. But obviously this isn't terribly secure,
>because anybody with enough skills can easily browse the .EXE file and
>find my password in there. Using a resource compressor might hide the
>password from a straight hex editor, but once again, anybody with some
>know-how would be able to decompress the .EXE file with about 5
>minutes of effort.

Instead of storing the password in clear text, define 62 char
variables spread around in the data definition area, and make the
password at runtime from adding the needed variables, like

A = 'a';

another place define
B = 'b';

_B = 'B';

_0 = '0'

_1 = '1';

etc.

And Password = A +_B+ _0 +A;
...
...
...
Password := Password + Z + _at (@) etc.

Obscures the password somewhat.
:-)