Re: Limiting user access to .tmpl files
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 11906
interpreted = N
texte = >It seems to me that if I have ANY customer write-access to my site at all, >the customer can upload a .tmpl file and then run it. They would be able >to do any WebDNA actions at all, eg changing a database that is not in >their realm.Yes, but since they can also upload an AppleScript, they can do even worse things like erasing your hard drive. You should be careful who has write access to files on your machine, no matter what platform or software is running.Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors =====Pacific Coast Software | WebCatalog Pro, WebCommerce Solution11770 Bernardo Plaza Court | SiteEdit Pro, SiteCheck, PhotoMasterSan Diego, CA 92128 | SiteGuard619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com
Associated Messages, from the most recent to the oldest:
>It seems to me that if I have ANY customer write-access to my site at all, >the customer can upload a .tmpl file and then run it. They would be able >to do any WebDNA actions at all, eg changing a database that is not in >their realm.Yes, but since they can also upload an AppleScript, they can do even worse things like erasing your hard drive. You should be careful who has write access to files on your machine, no matter what platform or software is running.Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors =====Pacific Coast Software | WebCatalog Pro, WebCommerce Solution11770 Bernardo Plaza Court | SiteEdit Pro, SiteCheck, PhotoMasterSan Diego, CA 92128 | SiteGuard619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com
Grant Hulbert
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
.hdr files (2004)
Which [index]? (1997)
Help name our technology! (1997)
Date or time comparisons have bugs ... (1998)
Help with (2003)
Fwd: Problems with Webcatalog Plug-in (1997)
WCS Newbie question (1997)
FW: Username and password in tcp connect/send (2001)
Emailer (1997)
RE: Credit card processing - UK (1997)
orderfile stuff (1998)
Calendar using WebCatalog? (1997)
WCS Newbie question (1997)
Question about replacing words (1998)
Banners (1997)
MY SOLUTION.... Send massmail (2000)
upgrading to windows 2000 (2001)
Globals Permissions (2003)
Interfacing WebMerchant to www.fedex.com (1997)
Shipping calculations (1997)