How to access unknown database

Scriptcase 9 General
#1

I have certain challenge to take and I’m hoping I will be able to get some input here, so here we go:

Certain company has a database driven website. Members can login and do certain activity. There is a mobile App which somehow logs in to the database and can show some data through that mobile App. This is basically the same data which is available through the website login (although presented in different way). The company is running SharePoint so it is all based on MSSQL and .Net
When I looked up the source on the login page I have discovered some reference to the API’s in the code.
At this point I would rather not to contact mobile App developer (for number of reasons) to ask how his mobile App could access the data. My question might be stupid or tivial, but perhaps this is something we all might want to learn one day.

Is this possible that SP Server has some API’s installed which allow to access the database through that API and present it in completely different App ?
Here is the fragment of the code:

var YoungLiving = YoungLiving || {};
    YoungLiving.Urls = YoungLiving.Urls || {};
    YoungLiving.Urls = {
        requireJsBaseUrl: "/vo/150319163721",
        cacheRevision: "150319163721",
        virtualOfficeWebSite: "https://beta.youngliving.com/vo",
        legacyVirtualOfficeWebSite: "https://www.youngliving.com/signup",
        legacyVirtualOfficeWebSiteWithCart: "https://www.youngliving.org/rs_frn_login.asp",
        accountsService: "https://beta.youngliving.com/api/accounts",
        shoppingService: "https://beta.youngliving.com/api/shopping",
		downlineService: "https://beta.youngliving.com/vo.dlv.api/",
		voDlvService: "https://beta.youngliving.com/vo.dlv/"
    };

Here is a link to the login page: view-source:https://beta.youngliving.com/vo/#/login

obviously I do not know the server IP, database name etc, but perhaps this can be discovered…

Arthur

#2

Seeing how the pages “https://beta.youngliving.com/api/accounts” and such do seem to exist but return nothing when input like that I’d assume it is just your average API, thing is you’ll have to get the API documentation from somewhere to actually get anything out of it, which’d either be with the people that made the site or further down the code where the API is called.

#3

I think this is hosted at edgecast networks… Chances are that it is a mysql thus.

#4

no I’m sure the database is MSSQL and it is run on SHARE POINT server

#5

Well if the ddatabase is accessiable from your server then you should be able to connectwith it using the 32 bits! mssql native drivers (which you thus need to install). There is a whole piece on this somewhere else in the forum…

#6

If the data would be on my server I would not ask this question. I was wondering if knowing just a web address, then username and password (not for the admin) would allow to access dB?
Art

#7

I guess my reply was misunderstood. Can you access that mssql database with odbc (32 bits) or by using the msssql native drivers from your own machine? If so then you should be able to reach it with scriptcase as well. Just remember to enable the mssql drivers in your php.ini if they are not yet enabled. And remember that on some operating systems (e.g. windows) running applications under the webserver (e.g. IIS) access to the outside world and even access outside the www directory path is not allowed. This can be quickly resolved tho.
The first step is to setup and test a working connection simply from the desktop. If you can not get that working then chances are that the remote mssql server uses a different port or has blocked ip addresses or uses some other extra security.

#8

I guess my reply was misunderstood. Can you access that mssql database with odbc (32 bits) or by using the msssql native drivers from your own machine? If so then you should be able to reach it with scriptcase as well. Just remember to enable the mssql drivers in your php.ini if they are not yet enabled. And remember that on some operating systems (e.g. windows) running applications under the webserver (e.g. IIS) access to the outside world and even access outside the www directory path is not allowed. This can be quickly resolved tho.
The first step is to setup and test a working connection simply from the desktop. If you can not get that working then chances are that the remote mssql server uses a different port or has blocked ip addresses or uses some other extra security.
Anyway it is possible that the access is arranged in another way, but a way out would be to simply connect to the mssql server. basically sharepoint itself also can connect to various databases so I see (apart from security measures) no reason why you couldnt.