RE: How Secure is Windows, Really?

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: Jim Franz
>
> > If you're worried thast someone with a valid user profile and password
> > will
> > do this sort of thing, then you better turn off ODBC immediately.
> there is no "turn off odbc..." button on the i.

Sure there is.  ENDHOSTSVR *DATABASE.

And if you want to filter requests, you can write an exit program for the
QIBM_QZDA_SQL exit points.


> And sql is executable in
> many ways besides odbc, even from a cmd line with runsqlstm

Yeah, but if you turn off ODBC and force someone through a green screen (or
a web browser), then you can remove their access to the command line.
Regular users shouldn't have access to the command line. 

Joe