Re: Limiting user access to .tmpl files

This WebDNA talk-list message is from

1997


It keeps the original formatting.
numero = 11906
interpreted = N
texte = >It seems to me that if I have ANY customer write-access to my site at all, >the customer can upload a .tmpl file and then run it. They would be able >to do any WebDNA actions at all, eg changing a database that is not in >their realm.Yes, but since they can also upload an AppleScript, they can do even worse things like erasing your hard drive. You should be careful who has write access to files on your machine, no matter what platform or software is running.Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors ===== Pacific Coast Software | WebCatalog Pro, WebCommerce Solution 11770 Bernardo Plaza Court | SiteEdit Pro, SiteCheck, PhotoMaster San Diego, CA 92128 | SiteGuard 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com Associated Messages, from the most recent to the oldest:

    
  1. Re: Limiting user access to .tmpl files (Kenneth Grome 1997)
  2. Re: Limiting user access to .tmpl files (Thomas Wedderburn-Bisshop 1997)
  3. Re: Limiting user access to .tmpl files (Kenneth Grome 1997)
  4. Re: Limiting user access to .tmpl files (Grant Hulbert 1997)
  5. Re: Limiting user access to .tmpl files (Thomas Wedderburn-Bisshop 1997)
  6. Re: Limiting user access to .tmpl files (Grant Hulbert 1997)
  7. Re: Limiting user access to .tmpl files (Kenneth Grome 1997)
  8. Limiting user access to .tmpl files (Thomas Wedderburn-Bisshop 1997)
>It seems to me that if I have ANY customer write-access to my site at all, >the customer can upload a .tmpl file and then run it. They would be able >to do any WebDNA actions at all, eg changing a database that is not in >their realm.Yes, but since they can also upload an AppleScript, they can do even worse things like erasing your hard drive. You should be careful who has write access to files on your machine, no matter what platform or software is running.Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors ===== Pacific Coast Software | WebCatalog Pro, WebCommerce Solution 11770 Bernardo Plaza Court | SiteEdit Pro, SiteCheck, PhotoMaster San Diego, CA 92128 | SiteGuard 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com Grant Hulbert

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

.hdr files (2004) Which [index]? (1997) Help name our technology! (1997) Date or time comparisons have bugs ... (1998) Help with (2003) Fwd: Problems with Webcatalog Plug-in (1997) WCS Newbie question (1997) FW: Username and password in tcp connect/send (2001) Emailer (1997) RE: Credit card processing - UK (1997) orderfile stuff (1998) Calendar using WebCatalog? (1997) WCS Newbie question (1997) Question about replacing words (1998) Banners (1997) MY SOLUTION.... Send massmail (2000) upgrading to windows 2000 (2001) Globals Permissions (2003) Interfacing WebMerchant to www.fedex.com (1997) Shipping calculations (1997)