I want to transer files from my desktop software to an internet server via
ftp.

The user of my program must not know the ftp account name and the password.

So the  account name and the password is hardcoded to the program.

I think it is quite easy to catch the password on the way to the server
because the password is transmitted as plain text, is it?

Is there any secure possibilty to tranfer files to a ftp-server?

with a modified server and client it would be possible however the
encryption would need to be dynamic so that someone couldn't just capture
the code and resend it. My suggestion is to have 128 different keys or more
if you like and depending on what the server sends on connection determines
the next sequence.  Or you could use the cookie idea and detemine the ip and
serial number of the sender before connection. After connection you could
vary the cookie value via encryption on your FTP connection ready for the
next session. None of these numbers would give away your encryption as these
numbers ore only used to modify your encryption key. Synchronisation could
be a problem thought. Dynamic session encryption!!!!
Littlefish

On Thu, 11 Jul 2002 21:04:47 +0200, "Klaus Kasumi"

If the FTP server supports SSL, or if the server machine can be
altered to use an "SSL tunnel", then the Catalyst Development
SocketTools Secure Visual Edition and Secure Library Edition contain
FTPS components (an  ActiveX control and a DLL, respectively) that
will encrypt not only the user name and password, but the files as
well.  These SocketTools products come with FTPS samples in VB and
C++. You can download evaluation copies from www.catalyst.com

David

----

Catalyst Development Corporation   | application with ActivePatch. Download
http://www.catalyst.com/           | the SDK from www.activepatch.com