Page 1 of 1

Hide Sql Script During Install ?

Posted: Sun Jul 16, 2006 9:12 pm
by Yort
Hi,

When using the MS Sql plug-in to execute a sql script, the install shows the lines of script being executed in the progress label.

Since one of my scripts sets up the schema, this isn't good from a security perspective because anyone running the script can get some detailed information about my schema and then use it to attempt sql injection or similar attacks.

Also, the script looks kinda ugly to a user who doesn't understand Sql, and it isn't really useful as 'progress' information anyway.

Is there any way to prevent the script from being displayed ?

Posted: Mon Jul 17, 2006 1:48 am
by MichaelNesmith
Hi Yort,

I'd show a custom progress dialog with the progress field replaced with a generic textbox that reads along the lines "configuring database".

We find that during long operations users are especially suspicious of locked/hanged installations, this is the reason for the default behavior.

Posted: Mon Jul 17, 2006 4:25 pm
by Yort
Thanks. I'll give that a try. I assume you mean show the custom dialog only during the database update ? Otherwise how do I show normal progress text during the rest of the install ?

I can understand users being suspicious of long operations, but the progress bar does still move (I assume between each sql command, and each of my commands is relatively short running), so there is still an indicator that progress is being made.

Posted: Mon Jul 17, 2006 6:05 pm
by MichaelNesmith
Yes exactly - just a custom dialog to show while running the scripts.