View Full Version : how to go about it
12-11-2002, 08:55 AM
I wonder if someone could point me out to resources for the following problem:
I need to visit 3 separate web sites, enter 3 separate passwords in order to access 3 different databases and look for items.
What I would like to achieve -through my web site -to automate the search. What I mean is to enter my own web site and search for the item I request without having to log into one site, come out and log into another and so on.
Have I been clear?
How can I achieve this?
12-11-2002, 11:19 AM
If you have three seperate passwords and three databases, I would undoubtedly suggest that you will have to log in to the sites. If you do so, that will mean you will need some sort of serverside script, in order to make sure that you can automatically do this.
For you to do this, it would mean that you will have to state the name of the sites, along with the passwords and the database names for the sites, which is not a safe thing to do at all, so I would not recommend it.
Pretty much the same answer. I assume when you say a database, you mean a web-page that looks into a database.
Connecting remotely to a database is a whole different problem and a pretty messy one, as a rule.
12-11-2002, 02:59 PM
To think about it, why would you need to log into the sites in order to search their database? If all the information is freely viewable, I guess running a normal search will be viable.
If it a site like Microsoft, then you should be able to search it somewhat with ease... I am not sure of the code, and it will take me a while to figure out/find.
The problem with this suggestion - I may not have been clear, is that you will have to store your database passwords and usernames, if you need them, on your server which is accessible and readable by anyone.
I, myself could easily read every single page on any site, and view any file used on the site, be it developed on a client side script, or on a server side script, exceptionally easily.
When you store a password and or username, I can easily decrypt any page, within a few seconds, and retrieve the encoded information.
It is a major security risk, and I will hope that you will think twice about doing this, it will make all the database files in great risk if you do so.
If you are serious about this, I will see what I can do, but I am not too sure about how I should go about this.
12-11-2002, 03:23 PM
thanks for the reply
"why would you need to log into the sites in order to search their database? "
I guess there is an id to identify the customer and get more commercial info on them.
Now this is my situation. I have just finishe a programming course (OO)about which I shall not make any comment :rolleyes: and I am doing a short placement.
Here my employer has asked the infamous question "Can I do a search bla bla bla?"
I thought this is a good opportunity to learn few things I never learnt on the course and at the same time show some interest in the guy's issue.
To me it's learning curve here. It seems clear what you have just said (I need to create a mini db where I have the passwords, although you say it's not secure)
I am not asking you to bother any further with this, just any technical and theoretical explanation you can give me. Very curious about ", myself could easily read every single page on any site, and view any file used on the site, be it developed on a client side script, or on a server side script, exceptionally easily. ":)
Not expecting you share all your secrets with me but I am very curious about the dynamics of all this. Obviously there is quite a bit of theory I am lacking
Ciao and thanks
12-11-2002, 03:31 PM
It is pretty simple, well somewhat simple if you know C++ Programming indepth... I just made a program that can scan a site, and categorically list all the files and their directories on the particular site, be they images or well abolutely anything. Basically, it looks a little like Explorer, listing all the categories, and I just choose which category I want to look at, and it lists all the files on the side panel.
It will list the files, and if I want to view them, I just double click the file, and there you go, I can view it, much like the view source feature, but it is somewhat more advanced. On the top, it shows all the files that the page is connected to, images, executables, etc.
Why do I need something like this? Well I only use it for my site, I like to categorise everything in neat little chunks, so that I can access them more easily.
I alter the file, and when I choose to save, it uploads the files back onto my server. Very quick, and simple.
Never know, I may sell it on sometime in the future, but with all this stuff about people ripping off other peoples site, I doubt that I will. :(
Anyhow it is something that I just like using for my own site.
12-11-2002, 04:27 PM
Can I still take the offer on of you having a look around or tellling me where to look for that problem (the unsecure solution)?