Re: Execute Applescript
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 10731
interpreted = N
texte = >>If we use WebCat2 to build a guestbook or anything that use>>database, dybamic data publishing, would it be possible for>>someone just type in the [applescript] [/applescript] tag>>and execute an Applescript on the server side?>We are considering a global preference thay disables the tag entirely.I think this is a very good idea! :)>Typing WebDNA tags into a database field: when database fields are>displayed on a page, they are not executed as WebDNA. So no one can>type some WebDNA [AppleScript] tags into your guestbook and have them>executed by simply viewing the guestbook. Yes, by surrounding the>[fieldname] with [Interpret]..[/Interpret] tags you can have the WebDNA>executed, but again you control whether or not that is put in the>template.Question: If I set my WebCat Prefs to InterpretAll=T, does this eliminatemy need to place all those [Interpret]..[/Interpret] tags into my HTML ...or does the InterpretAll=T preference only deal with the [tags] it finds onfiles without a .tmpl suffix or without a tag?Sincerely,Ken
Associated Messages, from the most recent to the oldest:
>>If we use WebCat2 to build a guestbook or anything that use>>database, dybamic data publishing, would it be possible for>>someone just type in the [applescript] [/applescript] tag>>and execute an Applescript on the server side?>We are considering a global preference thay disables the tag entirely.I think this is a very good idea! :)>Typing WebDNA tags into a database field: when database fields are>displayed on a page, they are not executed as WebDNA. So no one can>type some WebDNA [AppleScript] tags into your guestbook and have them>executed by simply viewing the guestbook. Yes, by surrounding the>[fieldname] with
[interpret]..[/Interpret] tags you can have the WebDNA>executed, but again you control whether or not that is put in the>template.Question: If I set my WebCat Prefs to InterpretAll=T, does this eliminatemy need to place all those
[interpret]..[/Interpret] tags into my HTML ...or does the InterpretAll=T preference only deal with the [tags] it finds onfiles without a .tmpl suffix or without a tag?Sincerely,Ken
Kenneth Grome
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
form data submission gets truncated (1997)
WebDelivery downloads alias, not original ? (1997)
Separate SSL Server (1997)
WriteFile wrong format (2003)
Cart Number Propagation (1997)
(1997)
[orderfile Orders/[cart]] (2000)
Date range (2006)
Extended [ConvertChars] (1997)
Re:Item options w/ price adjustment (1997)
Country & Ship-to address & other fields ? (1997)
[Webcat 2]Next (1997)
Pull down menu Search (1999)
Stability complaints (2002)
searching by date range help needed (1997)
TeaRoom Order fields email account remain empty even thoughthewy are filled. (1997)
acrobat -> wc (1998)
RAM variables (1997)
Text data with spaces in them... (1997)
Changing SubTotal (2003)