Java Is Web-Based Accounting With PHP and JavaScript the Way to Go?

  • Thread starter Thread starter Omid
  • Start date Start date
AI Thread Summary
Executing a binary (.exe) file on a client machine through a PHP page raises significant security concerns and is generally not feasible. ActiveX and Java applets, which could potentially run binaries, are limited by security protocols that prevent arbitrary execution of executable files. The discussion highlights the risks associated with allowing such functionality, including the potential for viruses and spyware. Alternatives suggested include allowing users to manually launch applications like "scan.exe" or using a simple upload form for scanned files, which avoids the complications of executing remote programs. The conversation also touches on the broader implications of developing a web-based accounting system using PHP and JavaScript, questioning whether this approach is effective compared to client-side applications that could utilize technologies like ADO.NET for better interaction with databases. Overall, the consensus leans towards prioritizing user security and simplicity in application design.
Omid
Messages
181
Reaction score
0
Through a PHP page, how can we execute a binary (.exe) on a client runnig windows?
Windows filesystem object looks good but it only manipulates text files.
 
Technology news on Phys.org
No answers?!

You mean there's no Activex or Java applet which be able to execute a binary file?
 
I don't know if you can, but it doesn't seem like a good idea.. potential security risk!
 
Omid said:
Through a PHP page, how can we execute a binary (.exe) on a client runnig windows?
Windows filesystem object looks good but it only manipulates text files.

I don't think you can run any old exe, that would impose a secuirty risk we can't not even begin to imagine. But Java does classify its code in security segments. You can run scripts, java apps, and if you allow, ActiveX controls. All of which (ecxept the scripts) are binary files. Is this what you were referring too?
 
We have a web based accounting system which is on a server in the Internet. Our clients are connected to that server via Internet.
Sometimes we need to launch a utility, like the scanner manager, for the user. i.e when the user pushes "Scan" botton in our page in MS internet explorer we want to launch "scan.exe" for the user on his machin.
Windows scripting Host has so many good functions for manipulating files but they just handle .txt files. What shall we do? Ask the user to launch the scan.exe by double clicking on it? That looks fairly good but my boss wants me not to bother the users :((
 
I think your are over-developing this accounting system. Let the person use whatever scanning program they want to use to scan local images. Then just have a simple upload form to get the file on the server. If I was to develop this system I would avoid executing remote programs because that could easily turn into a security risk. Your also limiting what browser the person can use.
 
This is probably NOT a good idea... but I think
on a webpage, this will launch notepad on the client machine running Windows. (Of course, the path must be known ahead of time.)
Code:
<a href="file:///D:/WINNT/system32/notepad.exe">notepad</a>
As dduardo has repeately said, this is a security risk. Imagine all of the virii and spyware that could invade the client (especially if the client is tricked into executing something).

As eNathan suggested, you could try to write something in java. Read the section called "Remote scanning" from http://www.programmersheaven.com/2/Java-Twain-image-acquisition .
http://www.gnome.sk/Twain/tutorial/remote.html
Since your application appears to be for commercial purposes, you need to check if you can include this in your package.
http://www.javaworld.com/javaforums/showthreaded.php?&Board=DeviceProgramming&Number=8862
 
Last edited by a moderator:
Now that our (damn) system is well known for PF people let's take a deeper look at it.
Nowdays the most important question to me is this: Are we heading the right direction?
Is it a good idea to develope a web based accounting system, in pure PHP and javascript, ...?
Have you ever seen such an application working on the web?
In Iran I haven't seen any, what about other countries?
You know, here nobody gives even one penny to Microsoft or... Here the CopyLeft rules. Why don't we use .NET or JBuilder? My boss is strongly against that idea. I mean developing client side (windows based) applications which work on the clients and interact at certain times thruogh Internet to have nescessary interactions and updating our databases.
I've heard that ADO.NET is made for that purpose. What do you suggest? Will ADO.NET make it easier to develope the application? or the current PHP based work is better?
Any advice?
 

Similar threads

Replies
15
Views
3K
Replies
33
Views
8K
Replies
9
Views
2K
Replies
4
Views
3K
Replies
1
Views
2K
Replies
4
Views
6K
Replies
3
Views
3K
Back
Top