Visual Basic Forum for Visual Basic Programmers VB - Interactive Visual Basic Forum .NET Programming & Help

ourspt · Freshman Joined: 14 Dec 2004 Posts: 34

Hi,

I am working on a project developed in VB/SQL Server. We use MS Excel for reports.

The problem we have is that through our excel reoprts users are able to access the system

and from there access the network. (Use Save As from excel and double click on Command.exe

file. This gives access to the c prompt. From here, they can access anyfile in the network).

This provides a grave security threat.

Is there any way we could come out of it. The problem is we cannot remove the Save As option

from Excel as the users would need to save their own copy of the reports for later use.

Any suggestions/pointers?

Thanks in advance
ourspt

DoobieKeebler · Posted: Oct 6th, 2005 08:40 AM Post subject:

Going at this problem from VB/VBA (if that's indeed what you're looking to do) seems to me to be entirely the wrong approach. What you're describing is merrly a symptom of security gone horribly wrong. OK, that's a bit dramatic but it's still a big problem.

Networks aren't my thing so I couldn't tell you how to fix the problem. But it's not through VB/VBA. You need to get those holes closed and tighten security ASAP.
_________________
Always take into account what a user would never ever in a million years do, because someone will.

"In theory, there's no difference between theory and practice. In practice, there is." -- Yogi Berra