i.makar
Posts: 5
Joined: Fri Mar 01, 2013 4:12 pm

Server-side user data verification

Hello! We are doing some evaluation of the Advanced Installer before purchase and quite happy with it so far!
But let me clarify some points, likely somebody could give the advice or the reference to the correct tutorial.
We want to collect the user date (email, user ID, etc) and send it to the server for verification. The questions are:
1. Is the information POSTed to the server is somehow hashed/encrypted ? Is there any way to perform the message hashing in Advanced Installer ?
2. I've read some tutorials and figured out out that property HttpPostServerResponse can be used to check the server response. Our server send the respond as json string in format: {"code":401,"message":"Wrong credentials!"}.
Is it OK for Advanced Installer ?

Any guidance or hints are very much appreciated as we are new to Advanced Installer.
Thanks!
Ihor
Daniel
Posts: 8276
Joined: Mon Apr 02, 2012 1:11 pm
Contact: Website

Re: Server-side user data verification

Hello Ihor,
1. Is the information POSTed to the server is somehow hashed/encrypted ?
No, the information is not encrypted. The information is silently submitted using POST method.
Is there any way to perform the message hashing in Advanced Installer ?
I'm afraid we don't have predefined support for this. However, in order to achieve this you can create your own custom action which will encrypt the related properties values.
2. I've read some tutorials and figured out out that property HttpPostServerResponse can be used to check the server response. Our server send the respond as json string in format: {"code":401,"message":"Wrong credentials!"}.
Is it OK for Advanced Installer ?
Yes. You can take a look on our "SendCollectedData : Http Return Code" thread which debates a similar issue.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube
i.makar
Posts: 5
Joined: Fri Mar 01, 2013 4:12 pm

Re: Server-side user data verification

Hello,
thanks for the respond. I have checked the Http return code. Then I am examining for the substring of the property that contains the Json object.
It works fine!!
But could you please clarify how to create own custom action which will encrypt the related properties values.
Can I call a method from the usual win32 dll ? Or Advanced Installer requires the special procedure for teh dll creation to be used in custom actions ?
I have a dll that contains a function to perform a md5 encryption of the string. I can not figure out how to modify the property using that dll, so far..

Thanks
Ihor
Daniel
Posts: 8276
Joined: Mon Apr 02, 2012 1:11 pm
Contact: Website

Re: Server-side user data verification

Hello Ihor,

Yes, you can create your own dll which will get the related properties values, encrypt them and, then set the properties with the encrypted values. If you want to set or get a property value from within a DLL you would need to use the MsiSetProperty or MsiGetProperty functions.

Also, you can take a look on our "Serial Number Validation DLL" article which contains an example about how to develop a dll custom action.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Building Installers”