Automatic Updates

[William Ryan]

Are you using an intranet or the internet to push the
updates? If the internet, you probably can't get there
without a web server. If you are using an intranet, you
can do it from a shared folder. Paul Kimmel has a new
book
http://www.amazon.com/exec/obidos/AS...24075/internco
m-20/002-4611773-6304806 that discusses this in depth...
I can send you some code to do it. Effectively you need
two assemblies, one that calls the second, and it looks
to somehwere 'else' to check if the somewhere 'else' on
is newer than the one it wants to use. I've done it on
the intranet at work, and on a scale of 1 to 10, it's
about a 4 the first time through, and much easier
afterward, setting the permissions is the main gotcha.

Let me know which scenario you are using and I can be of
more help.

Good Luck,

Bill

W.G. Ryan
dotnetguru@comc ast.nospam.net
www.knowdotnet.com[color=blue]
>-----Original Message-----
>I am building an application that would check for newest[/color]
releases on start[color=blue]
>and if new releases exist, it would update itself. All[/color]
reference I have[color=blue]
>found are using a web server which I don't want to use.
>
>I am doing this in VB.net, and the updates should be[/color]
stored on SQL Server[color=blue]
>2000.
>
>Any ideas how can I do this. I have heard something[/color]
about AutoUpdate class.[color=blue]
>Would it work with an SQL Server as well?
>
>Any help will be appreciated,
>
>
>--
>Dino Buljubasic
>Software Developer
>http://rivusglobal.com
>
>
>.
>[/color]

[Dino M. Buljubasic]

Re: Automatic Updates

Thanks William,

the update will be done over INTERNET. Since I am quite inexperienced with
this, can you explain to me how to do it please.

My idea is to have somewhere on my server (SQL Server or Web Server) a file
with information about the release (eg. a file with date stamp, version
number, and whatever else is needed).

Then, when my application starts, it will read the file and check if a newer
version has been stored on SQL Server (It has to be SQL Server 2000). If
yes, it will connect to the SQL Server 2000 (if it has access rights),
download vb.net executable file of the newer application which will replace
the old application on clients machine.

The thing is that the executable file of the release has to be protected
from public access, that is why I want to have it on SQL Server 2000 and
only users that have access rights can download it. The access right should
be set using user name and password.

Thank you for your help. I appreciate it very much.

--
Dino Buljubasic
Software Developer

http://rivusglobal.com

"William Ryan" <dotnetguru@com cast.nospam.net > wrote in message
news:049d01c361 e7$861ddeb0$a50 1280a@phx.gbl.. .[color=blue]
> Are you using an intranet or the internet to push the
> updates? If the internet, you probably can't get there
> without a web server. If you are using an intranet, you
> can do it from a shared folder. Paul Kimmel has a new
> book
> http://www.amazon.com/exec/obidos/AS...24075/internco
> m-20/002-4611773-6304806 that discusses this in depth...
> I can send you some code to do it. Effectively you need
> two assemblies, one that calls the second, and it looks
> to somehwere 'else' to check if the somewhere 'else' on
> is newer than the one it wants to use. I've done it on
> the intranet at work, and on a scale of 1 to 10, it's
> about a 4 the first time through, and much easier
> afterward, setting the permissions is the main gotcha.
>
> Let me know which scenario you are using and I can be of
> more help.
>
> Good Luck,
>
> Bill
>
> W.G. Ryan
> dotnetguru@comc ast.nospam.net
> www.knowdotnet.com[color=green]
> >-----Original Message-----
> >I am building an application that would check for newest[/color]
> releases on start[color=green]
> >and if new releases exist, it would update itself. All[/color]
> reference I have[color=green]
> >found are using a web server which I don't want to use.
> >
> >I am doing this in VB.net, and the updates should be[/color]
> stored on SQL Server[color=green]
> >2000.
> >
> >Any ideas how can I do this. I have heard something[/color]
> about AutoUpdate class.[color=green]
> >Would it work with an SQL Server as well?
> >
> >Any help will be appreciated,
> >
> >
> >--
> >Dino Buljubasic
> >Software Developer
> >http://rivusglobal.com
> >
> >
> >.
> >[/color][/color]

[Jon Skeet]

Re: Automatic Updates

Dino M. Buljubasic <dino.buljubasi c@rivusglobal.c om> wrote:[color=blue]
> the update will be done over INTERNET. Since I am quite inexperienced with
> this, can you explain to me how to do it please.
>
> My idea is to have somewhere on my server (SQL Server or Web Server) a file
> with information about the release (eg. a file with date stamp, version
> number, and whatever else is needed).
>
> Then, when my application starts, it will read the file and check if a newer
> version has been stored on SQL Server (It has to be SQL Server 2000). If
> yes, it will connect to the SQL Server 2000 (if it has access rights),
> download vb.net executable file of the newer application which will replace
> the old application on clients machine.
>
> The thing is that the executable file of the release has to be protected
> from public access, that is why I want to have it on SQL Server 2000 and
> only users that have access rights can download it. The access right should
> be set using user name and password.
>
> Thank you for your help. I appreciate it very much.[/color]

Is there any reason for not getting the webserver to make the
connection and serve up the file, using the username and password given
by the user? That way you wouldn't have to open up your SQL server to
the outside world. (At least, not for this particular bit of
functionality.)

--
Jon Skeet - <skeet@pobox.co m>

http://www.pobox.com/~skeet/

If replying to the group, please do not mail me too

[Jon Skeet]

Re: Automatic Updates

Dino M. Buljubasic <dino.buljubasi c@rivusglobal.c om> wrote:[color=blue]
> I am concerned about the security when using web server. That is the main
> reason I'd like to use SQL Server 2000 or maybe FTP server (but .NET does
> not offer any support for FTP)[/color]

Why do you think that putting a SQL server 2000 box or FTP server on
the net is more secure than putting a webserver there?

--
Jon Skeet - <skeet@pobox.co m>

http://www.pobox.com/~skeet/

If replying to the group, please do not mail me too

[Dino M. Buljubasic]

Re: Automatic Updates

I don't know much about security issues but I heard about crawlers and
simmilar software that can get anything from an HTTP Server.

Basically, I am looking for the best solution and since I don't have much of
experience, can you please tell me more about advantages and disadvantages
of web server, sql server and ftp server?

What do you thing is the best way to go for and why giving the requirement I
listed before.

Thank you, any suggestions are welcome.

--
Dino Buljubasic
Software Developer

http://rivusglobal.com

"Jon Skeet" <skeet@pobox.co m> wrote in message
news:MPG.19a5f2 3aa282783698a30 d@news.microsof t.com...[color=blue]
> Dino M. Buljubasic <dino.buljubasi c@rivusglobal.c om> wrote:[color=green]
> > I am concerned about the security when using web server. That is the[/color][/color]
main[color=blue][color=green]
> > reason I'd like to use SQL Server 2000 or maybe FTP server (but .NET[/color][/color]
does[color=blue][color=green]
> > not offer any support for FTP)[/color]
>
> Why do you think that putting a SQL server 2000 box or FTP server on
> the net is more secure than putting a webserver there?
>
> --
> Jon Skeet - <skeet@pobox.co m>
> http://www.pobox.com/~skeet/
> If replying to the group, please do not mail me too[/color]

[Jon Skeet]

Re: Automatic Updates

Dino M. Buljubasic <dino.buljubasi c@rivusglobal.c om> wrote:[color=blue]
> I don't know much about security issues but I heard about crawlers and
> simmilar software that can get anything from an HTTP Server.[/color]

That's rubbish. If something is password protected, it's password
protected, unless there's a bug in the server - and there can be bugs
in ftp servers and SQL servers just as easily as in web servers.
[color=blue]
> Basically, I am looking for the best solution and since I don't have much of
> experience, can you please tell me more about advantages and disadvantages
> of web server, sql server and ftp server?[/color]

Well, web servers are generally more commonly on the net than either of
the others, so are likely to have had more things thrown at them over
time. FTP servers would come second in that regard.
[color=blue]
> What do you thing is the best way to go for and why giving the requirement I
> listed before.[/color]

I would just go with a web server solution. Putting a database server
up on the net doesn't gain you anything, and opens you up *slightly*
more for denial of service attacks, I suspect.

Given that as you said before, everything is geared towards using a web
server, I'd be looking for some really pretty convincing arguments
against using a web server before considering it - and crawlers being
able to "get anything" *isn't* a convincing argument.

--
Jon Skeet - <skeet@pobox.co m>

http://www.pobox.com/~skeet/

If replying to the group, please do not mail me too

[Dino M. Buljubasic]

Re: Automatic Updates

Are you talking about IIS server when you say 'web server'?

I heard that IIS has lots of holes and compatibility issues with .NET.

Also, setting permissions for users can be troublesome. Is that right?


"Jon Skeet" <skeet@pobox.co m> wrote in message
news:MPG.19a5f7 0b5d1e1e6198a30 f@news.microsof t.com...[color=blue]
> Dino M. Buljubasic <dino.buljubasi c@rivusglobal.c om> wrote:[color=green]
> > I don't know much about security issues but I heard about crawlers and
> > simmilar software that can get anything from an HTTP Server.[/color]
>
> That's rubbish. If something is password protected, it's password
> protected, unless there's a bug in the server - and there can be bugs
> in ftp servers and SQL servers just as easily as in web servers.
>[color=green]
> > Basically, I am looking for the best solution and since I don't have[/color][/color]
much of[color=blue][color=green]
> > experience, can you please tell me more about advantages and[/color][/color]
disadvantages[color=blue][color=green]
> > of web server, sql server and ftp server?[/color]
>
> Well, web servers are generally more commonly on the net than either of
> the others, so are likely to have had more things thrown at them over
> time. FTP servers would come second in that regard.
>[color=green]
> > What do you thing is the best way to go for and why giving the[/color][/color]
requirement I[color=blue][color=green]
> > listed before.[/color]
>
> I would just go with a web server solution. Putting a database server
> up on the net doesn't gain you anything, and opens you up *slightly*
> more for denial of service attacks, I suspect.
>
> Given that as you said before, everything is geared towards using a web
> server, I'd be looking for some really pretty convincing arguments
> against using a web server before considering it - and crawlers being
> able to "get anything" *isn't* a convincing argument.
>
> --
> Jon Skeet - <skeet@pobox.co m>
> http://www.pobox.com/~skeet/
> If replying to the group, please do not mail me too[/color]

[Jon Skeet]

Re: Automatic Updates

Dino M. Buljubasic <dino.buljubasi c@rivusglobal.c om> wrote:[color=blue]
> Are you talking about IIS server when you say 'web server'?[/color]

Or Apache.
[color=blue]
> I heard that IIS has lots of holes and compatibility issues with .NET.[/color]

Did you hear about the SQL Slammer worm that went round recently too?
[color=blue]
> Also, setting permissions for users can be troublesome. Is that right?[/color]

Don't know, myself - I haven't administered any IIS boxes personally.
I'm sure it's doable though.

--
Jon Skeet - <skeet@pobox.co m>

http://www.pobox.com/~skeet/

If replying to the group, please do not mail me too