Re: Security advice needed

there are few things that you need to do. First SSL, which make the data transfer between client and server encrypted. When login from web try not to connect the user directly to the schema owner, create another user which all it does is executing modules on other schemas.
You do not have to encrypt all the information in the database, one way of deciding which one needs to be encrypted is, in order to find who is the user, what information do you need ?, name ,phone number, address, etc. all these information needs to be encrypted the rest are not that important. make sure on the login page there is no caching.

Tom

Michael D'Annunzio <nms1_at_cyberus.ca> wrote in message news:8ig2rp$1rps$1_at_news2.ottawa.cyberus.ca...
> Hello
>
> I am developing a web site that uses HTML and ASP pages to access an
 Oracle
> database.
>
> Can anyone give me some suggestions on how I can maximize security? An
> encrypted User Name and Password isn't secure enough for the client.
>
> Thank You,
>
> Mike.
>
>
Received on Tue Jun 20 2000 - 00:00:00 CDT