Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

Re: Storing Images in SQL Server (2005)

Subject: Re: Storing Images in SQL Server (2005)
Date: Wed, 20 Sep 2006 14:19:01 -0700

That's what I've been doing with this app for the last 10 years ;)  It's
just that when you need document/image "portability," the file-system method
gets messy from a security standpoint.

Take synchronizing a sub-set of "internal" images and documents to a
least-privileged DMZ segment.  Doing this from a file-system standpoint gets
complex when you do it securely - and besides, storing the image name/path
in the DB requires that I replicate both db data and file system data.  If I
can replicate everything within a single, encrypted connection, that makes
things much easier.

But I totally agree with static content.  All the static content will be
file based, as it should. And you actually sparked an idea as I write this--
which would be to securely replicate data to my destinations (my remote
facility and to different DMZ segments) but to then extract the data to the
filesystem where I can more granularly control access.  That's not a bad
idea, actually.  More complex from a development standpoint, but it nicely
addresses the "portability" issue while still taking advantage of strong
controls and performance.  I'll have to think about that some more.

t




On 9/20/06 12:33 PM, "matthew patton" <pattonme@yahoo.com> spoketh to all:

what makes sense is to store the path to the image file in a database
and then shove that string into the generated HTML. that way the
browser and the static content webserver do what they are good at.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

---------------------------------------------------------------------------
---------------------------------------------------------------------------






---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>