Moo Remake in a different Way

[Vince278]

Re: Moo Remake in a different Way

Originally posted by Earthworm
One of my recent projects required a new e-mail driven database front-end to be written, basically the ability for the database to receive e-mails and act on them, and then e-mail reports based on results or other triggers.

Wouldn't that be an open invitation to trojans?

[bongo]

Applications, unlike users can be trained to *not* open email attachements named "anna kournikova naked.jpg.exe"

That said, security still has to be addressed somehow.

[Earthworm]

Bongo is correct, the application only acts on programmed key words within the e-mail. It does not execute attached .bat files, or other attachments, and only executes those commands that I have programmed it to understand. So the system remains secure, especially since the only access users see is the e-mail, there is no direct access to the base database by the users.

It is even more secure than a client software package.

[Vince278]

Some trojans and viruses don't even need to use attachments anymore. Some need only an active preview window. The code could also attack smtp or even use its own email engine.
(I'm a network engineer, not a hacker/cracker. )