Re: Limiting user access to .tmpl files

This WebDNA talk-list message is from

1997

It keeps the original formatting. numero = 11916
interpreted = N
texte = >My site can definitely serve .tmpl files outside of the WebCat folder. >How can I change it?WebCatalog must be able to serve files outside the WebCat folder, otherwise it can't process your WebDNA in the rest of your site. The feature you are looking at prevents it from serving files outside the WebSTAR folder.But all of this is moot -- your original question asked if someone could mess up another database by writing some WebDNA in their own portion of the site. The answer is yes. It makes no difference whether or not WebCat can serve files outside its own folder: you can always write WebDNA that messes with any database WebCatalog knows about, regardless of what folder that WebDNA resides in.Clarification: anonymous people cannot mess with your site. The only way someone can do something bad is under the following conditions:1) They can write files to your hard drive2) They have admin priveleges in WebCatalogIf you have someone writing nasty files to your hard drive (AppleScripts that erase files, WebDNA that messes with databases), then you should take steps to prevent them from doing that ever again. They may be using FTP or SiteEdit to write files on your hard drive.There is no anonymous way for someone to issue a WebCatalog command that writes a file to your hard drive, unless you explicitly give them some kind of form that uses WebDNA to write such a file. Anonymous people can append records to your databases, but you have a preference for turning this off.If you put two extra fields in your databases: username and password, then WebCatalog will never replace/delete that record unless the browser's current username/password match. This will prevent many of the problems you are foreseeing.Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors =====Pacific Coast Software | WebCatalog Pro, WebCommerce Solution11770 Bernardo Plaza Court | SiteEdit Pro, SiteCheck, PhotoMasterSan Diego, CA 92128 | SiteGuard619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com Associated Messages, from the most recent to the oldest:

Re: Limiting user access to .tmpl files (Kenneth Grome 1997)
Re: Limiting user access to .tmpl files (Thomas Wedderburn-Bisshop 1997)
Re: Limiting user access to .tmpl files (Kenneth Grome 1997)
Re: Limiting user access to .tmpl files (Grant Hulbert 1997)
Re: Limiting user access to .tmpl files (Thomas Wedderburn-Bisshop 1997)
Re: Limiting user access to .tmpl files (Grant Hulbert 1997)
Re: Limiting user access to .tmpl files (Kenneth Grome 1997)
Limiting user access to .tmpl files (Thomas Wedderburn-Bisshop 1997)

>My site can definitely serve .tmpl files outside of the WebCat folder. >How can I change it?WebCatalog must be able to serve files outside the WebCat folder, otherwise it can't process your WebDNA in the rest of your site. The feature you are looking at prevents it from serving files outside the WebSTAR folder.But all of this is moot -- your original question asked if someone could mess up another database by writing some WebDNA in their own portion of the site. The answer is yes. It makes no difference whether or not WebCat can serve files outside its own folder: you can always write WebDNA that messes with any database WebCatalog knows about, regardless of what folder that WebDNA resides in.Clarification: anonymous people cannot mess with your site. The only way someone can do something bad is under the following conditions:1) They can write files to your hard drive2) They have admin priveleges in WebCatalogIf you have someone writing nasty files to your hard drive (AppleScripts that erase files, WebDNA that messes with databases), then you should take steps to prevent them from doing that ever again. They may be using FTP or SiteEdit to write files on your hard drive.There is no anonymous way for someone to issue a WebCatalog command that writes a file to your hard drive, unless you explicitly give them some kind of form that uses WebDNA to write such a file. Anonymous people can append records to your databases, but you have a preference for turning this off.If you put two extra fields in your databases: username and password, then WebCatalog will never replace/delete that record unless the browser's current username/password match. This will prevent many of the problems you are foreseeing.Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors =====Pacific Coast Software | WebCatalog Pro, WebCommerce Solution11770 Bernardo Plaza Court | SiteEdit Pro, SiteCheck, PhotoMasterSan Diego, CA 92128 | SiteGuard619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com Grant Hulbert

DOWNLOAD WEBDNA NOW!

Re: Limiting user access to .tmpl files

1997

Top Articles:

Related Readings: