Re: [WriteFile] problems
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 10896
interpreted = N
texte = >I'm really confused at this point. We have about finished a big site >that will give an unlimited number of users access to a database and a >library of templates so they can render their pages to disk at will so >their pages will be found by the search engines. And it seems to be >working fine and WebStar has no problem serving these rendered pages >regardless of the file type issue. So will this or won't this approach >work??Sorry about the confusion -- I hadn't thought it all the way through before. The fact that WebSTAR can see those files created by [WriteFile] is considered a security bug at this point. We want the default file type to be one that WebSTAR won't let people see. You're OK for now because b15 doesn't change the file type.This is a big enough deal that I've broken the 'code lockout' rule and changed the upcoming b16 so that you can optionally tell WebCatalog to make files secure. The default is going to be secure, but you will be able to override it with the following syntax:[WriteFile file=xx.txt&secure=F] [AppendFile file=xx.txt&secure=F]So Karl, for b16 you'll have to change all your templates to use the above syntax if you want rendered pages to be visible.The old syntax, [WriteFile xx.txt] will still work, and it will be equivalent to [WriteFile file=xx.txt&secure=T]Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors ===== Pacific Coast Software | WebCatalog Pro, WebCommerce Solution 11770 Bernardo Plaza Court, #462 | SiteEdit Pro, SiteCheck, PhotoMaster San Diego, CA 92128 | SiteGuard 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com
Associated Messages, from the most recent to the oldest:
>I'm really confused at this point. We have about finished a big site >that will give an unlimited number of users access to a database and a >library of templates so they can render their pages to disk at will so >their pages will be found by the search engines. And it seems to be >working fine and WebStar has no problem serving these rendered pages >regardless of the file type issue. So will this or won't this approach >work??Sorry about the confusion -- I hadn't thought it all the way through before. The fact that WebSTAR can see those files created by
[writefile] is considered a security bug at this point. We want the default file type to be one that WebSTAR won't let people see. You're OK for now because b15 doesn't change the file type.This is a big enough deal that I've broken the 'code lockout' rule and changed the upcoming b16 so that you can optionally tell WebCatalog to make files secure. The default is going to be secure, but you will be able to override it with the following syntax:[WriteFile file=xx.txt&secure=F] [AppendFile file=xx.txt&secure=F]So Karl, for b16 you'll have to change all your templates to use the above syntax if you want rendered pages to be visible.The old syntax, [WriteFile xx.txt] will still work, and it will be equivalent to [WriteFile file=xx.txt&secure=T]Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors ===== Pacific Coast Software | WebCatalog Pro, WebCommerce Solution 11770 Bernardo Plaza Court, #462 | SiteEdit Pro, SiteCheck, PhotoMaster San Diego, CA 92128 | SiteGuard 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com
Grant Hulbert
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Quickie question on the email templates (1997)
Re: (1998)
Indexing Web sites? (2000)
PCS Emailer's role ? (1997)
Another question about credit cards (1997)
Where is f2? (1997)
Shopping carts and reloading pages (1997)
PIXO support (1997)
Problems appending to database (1997)
ShowNext (1997)
Somewhat OT: IE issues (2002)
Bug? (1997)
File Uploads... (1997)
PCS Frames (1997)
Authenticating users without dialog box (1997)
flushdatabases (1997)
Thanks and Big News!!! (1997)
[WebDNA] To be or not to be friendly (URLs) (2011)
OT: Photo Resources (2002)
Cookie based session management Q (2002)