Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi all!
I have noticed a very strange thing using QVD files... Inside the file, I can read in plain text my QlikView script, including the connection string with password!
How it can be possible?
Only a quick question in the similar direction. The same safety issues occured when using the -prj subfolders for version control. There passwords were also stored in plain text in the xml files. Has this been fixed as well ?
Regards
Christian
Henke,
This is not related, this is the expected behaviour in the prj folders:
In the prj files it is stored as it is stored in QV i.e. if the script is in clear text and if the script includes the connection string without scramble then it is unscrambled in the prj file but if it is scrambled then it is scrambled in the prj.
All of the hidden script part is scrambled so if this is used it is not readable.
I am using QV10SR3.
I make an oracle connection with scrambled credentials in the script,
than I go to the -prj folder and double click on DocProperties.xml the file opens in InternetExplorer showing the full xml outline. At the end you have a section Lineage, LineageInfo, Discriminator where the log in is visible in clear text !!
Is this issue solved as well ?
Christian
Hi Christian,
I don't know if this issue is solved in your case but why don't you install QV10SR4 and try it?
Regards
Luca Jonathan Panetta
What does Luca get for discovering the bug? A t-shirt at least?
Ahahah!!!
Good idea Juan.
Thanks to sponsoring me
In QV 11 IR, the whole Lineage section (including LineageInfo and Discriminator) seems to be removed from DocProperties.xml.