Re: Execute Applescript
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 10731
interpreted = N
texte = >>If we use WebCat2 to build a guestbook or anything that use>>database, dybamic data publishing, would it be possible for>>someone just type in the [applescript] [/applescript] tag>>and execute an Applescript on the server side?>We are considering a global preference thay disables the tag entirely.I think this is a very good idea! :)>Typing WebDNA tags into a database field: when database fields are>displayed on a page, they are not executed as WebDNA. So no one can>type some WebDNA [AppleScript] tags into your guestbook and have them>executed by simply viewing the guestbook. Yes, by surrounding the>[fieldname] with [Interpret]..[/Interpret] tags you can have the WebDNA>executed, but again you control whether or not that is put in the>template.Question: If I set my WebCat Prefs to InterpretAll=T, does this eliminatemy need to place all those [Interpret]..[/Interpret] tags into my HTML ...or does the InterpretAll=T preference only deal with the [tags] it finds onfiles without a .tmpl suffix or without a tag?Sincerely,Ken
Associated Messages, from the most recent to the oldest:
>>If we use WebCat2 to build a guestbook or anything that use>>database, dybamic data publishing, would it be possible for>>someone just type in the [applescript] [/applescript] tag>>and execute an Applescript on the server side?>We are considering a global preference thay disables the tag entirely.I think this is a very good idea! :)>Typing WebDNA tags into a database field: when database fields are>displayed on a page, they are not executed as WebDNA. So no one can>type some WebDNA [AppleScript] tags into your guestbook and have them>executed by simply viewing the guestbook. Yes, by surrounding the>[fieldname] with
[interpret]..[/Interpret] tags you can have the WebDNA>executed, but again you control whether or not that is put in the>template.Question: If I set my WebCat Prefs to InterpretAll=T, does this eliminatemy need to place all those
[interpret]..[/Interpret] tags into my HTML ...or does the InterpretAll=T preference only deal with the [tags] it finds onfiles without a .tmpl suffix or without a tag?Sincerely,Ken
Kenneth Grome
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
NT Version on IIS 4.0 (1997)
Escape the Root! (2002)
Credit Card Number checking (1997)
Stymied by [ShowNext] with drop down list on a form (1998)
Emailer choke (1997)
Discounting prices across a site (1997)
OS X, Communigate Pro & Line Breaks (2003)
error (2000)
Hiding HTML and page breaks (1997)
Looping Search (2006)
Sort order (1998)
Signal Raised Error (1997)
Tab Charactor (1997)
Setting up shop (1997)
Sendmail (1997)
[WriteFile] problems (1997)
[LOOKUP] (1997)
WebMerchant Config problems (2000)
PIXO support (1997)
Exclamation point (1997)