Hi,
When using the MS Sql plug-in to execute a sql script, the install shows the lines of script being executed in the progress label.
Since one of my scripts sets up the schema, this isn't good from a security perspective because anyone running the script can get some detailed information about my schema and then use it to attempt sql injection or similar attacks.
Also, the script looks kinda ugly to a user who doesn't understand Sql, and it isn't really useful as 'progress' information anyway.
Is there any way to prevent the script from being displayed ?
Hide Sql Script During Install ?
-
- Posts: 3452
- Joined: Thu Dec 22, 2005 7:17 pm
- Contact:
Hi Yort,
I'd show a custom progress dialog with the progress field replaced with a generic textbox that reads along the lines "configuring database".
We find that during long operations users are especially suspicious of locked/hanged installations, this is the reason for the default behavior.
I'd show a custom progress dialog with the progress field replaced with a generic textbox that reads along the lines "configuring database".
We find that during long operations users are especially suspicious of locked/hanged installations, this is the reason for the default behavior.
Michael Nesmith
InstallAware
Home of The Next Generation MSI Installer
Get your free copy today - http://www.installaware.com/
InstallAware
Home of The Next Generation MSI Installer
Get your free copy today - http://www.installaware.com/
Thanks. I'll give that a try. I assume you mean show the custom dialog only during the database update ? Otherwise how do I show normal progress text during the rest of the install ?
I can understand users being suspicious of long operations, but the progress bar does still move (I assume between each sql command, and each of my commands is relatively short running), so there is still an indicator that progress is being made.
I can understand users being suspicious of long operations, but the progress bar does still move (I assume between each sql command, and each of my commands is relatively short running), so there is still an indicator that progress is being made.
-
- Posts: 3452
- Joined: Thu Dec 22, 2005 7:17 pm
- Contact:
Yes exactly - just a custom dialog to show while running the scripts.
Michael Nesmith
InstallAware
Home of The Next Generation MSI Installer
Get your free copy today - http://www.installaware.com/
InstallAware
Home of The Next Generation MSI Installer
Get your free copy today - http://www.installaware.com/
Who is online
Users browsing this forum: No registered users and 195 guests