Hide Sql Script During Install ?

Got a problem you cannot solve? Try here.
Yort
Posts: 12
Joined: Thu May 25, 2006 11:48 pm

Hide Sql Script During Install ?

Postby Yort » Sun Jul 16, 2006 9:12 pm

Hi,

When using the MS Sql plug-in to execute a sql script, the install shows the lines of script being executed in the progress label.

Since one of my scripts sets up the schema, this isn't good from a security perspective because anyone running the script can get some detailed information about my schema and then use it to attempt sql injection or similar attacks.

Also, the script looks kinda ugly to a user who doesn't understand Sql, and it isn't really useful as 'progress' information anyway.

Is there any way to prevent the script from being displayed ?

MichaelNesmith
Posts: 3452
Joined: Thu Dec 22, 2005 7:17 pm
Contact:

Postby MichaelNesmith » Mon Jul 17, 2006 1:48 am

Hi Yort,

I'd show a custom progress dialog with the progress field replaced with a generic textbox that reads along the lines "configuring database".

We find that during long operations users are especially suspicious of locked/hanged installations, this is the reason for the default behavior.
Michael Nesmith
InstallAware
Home of The Next Generation MSI Installer
Get your free copy today - http://www.installaware.com/

Yort
Posts: 12
Joined: Thu May 25, 2006 11:48 pm

Postby Yort » Mon Jul 17, 2006 4:25 pm

Thanks. I'll give that a try. I assume you mean show the custom dialog only during the database update ? Otherwise how do I show normal progress text during the rest of the install ?

I can understand users being suspicious of long operations, but the progress bar does still move (I assume between each sql command, and each of my commands is relatively short running), so there is still an indicator that progress is being made.

MichaelNesmith
Posts: 3452
Joined: Thu Dec 22, 2005 7:17 pm
Contact:

Postby MichaelNesmith » Mon Jul 17, 2006 6:05 pm

Yes exactly - just a custom dialog to show while running the scripts.
Michael Nesmith

InstallAware

Home of The Next Generation MSI Installer

Get your free copy today - http://www.installaware.com/


Return to “Technical Support”

Who is online

Users browsing this forum: No registered users and 195 guests