Using ODAC in PlugIn's

Discussion of open issues, suggestions and bugs regarding ODAC (Oracle Data Access Components) for Delphi, C++Builder, Lazarus (and FPC)
Post Reply
Vasiliy

Using ODAC in PlugIn's

Post by Vasiliy » Thu 07 Jul 2005 07:55

Hi !

I'm using ODAC and I decided to add PlugIn functionality to my program.
I followed your example of using ODAC in DLL and i found out that i can read current oracle user password from PlugIn. It is unacceptable for security reasons. Can you please help me to solve this problem.

Thanks !

Alex
Posts: 655
Joined: Mon 08 Nov 2004 08:39

Post by Alex » Thu 07 Jul 2005 14:49

There is no such feature in ODAC to create TOraSession object by session handle. You can use Proxy session feature to connect without password, but in any case password is located in the same adress space with your PlugIn and is passed in plain text to the OCI, so there is no big difficulties to intercept it. To protect your address space you need to use third-party products.

Post Reply