[fpc-pascal] Resource strings, passwords etc.

Mark Morgan Lloyd markMLl.fpc-pascal at telemetry.co.uk
Wed Jul 13 09:31:11 CEST 2016


Michael Van Canneyt wrote:
> On Tue, 12 Jul 2016, Mark Morgan Lloyd wrote:
> 
>> Please excuse one of my regular silly questions. Elsewhere, a (former) 
>> Delphi programmer is uneasy having found that his binaries have had 
>> embedded SQL queries, passwords and so on visible "in clear" for the 
>> last 20 years or so.
>>
>> Can FPC be told to obfuscate ResourceStrings?
> 
> No. The default value for resourcestrings is stored as-is in the binary.
> 
> To solve this, I store the username/password encrypted in the binary as 
> consts, and they are decrypted when needed.

Sometimes it's difficult to avoid having to do that sort of thing, or 
obfuscating them in an external file.

-- 
Mark Morgan Lloyd
markMLl .AT. telemetry.co .DOT. uk

[Opinions above are the author's, not those of his employers or colleagues]



More information about the fpc-pascal mailing list