Re: About the + sign: security alert
This WebDNA talk-list message is from 2002
It keeps the original formatting.
numero = 45921
interpreted = N
texte = >[interpret][url][TechnicalSkillsKeywords][/url][/interpret]Not sure where the idea of putting [interpret] around this came from, but it's a very bad idea, and it doesn not assist with getting [url] right. If someone types WebDNA code into that TechnicalSkillsKeywords field, it will get executed on the server with full privileges. Don't ever wrap [interpret] around any text that could come from an untrusted source, such as a form input on a web page. -- _______________________________________________________________________________ Grant Hulbert | Internet Software Architect | http://www.hulbertfamily.com/------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
>[interpret][url][TechnicalSkillsKeywords][/url][/interpret]Not sure where the idea of putting [interpret] around this came from, but it's a very bad idea, and it doesn not assist with getting [url] right. If someone types WebDNA code into that TechnicalSkillsKeywords field, it will get executed on the server with full privileges. Don't ever wrap [interpret] around any text that could come from an untrusted source, such as a form input on a web page. -- _______________________________________________________________________________ Grant Hulbert | Internet Software Architect | http://www.hulbertfamily.com/------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Grant Hulbert
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Help! WebCat2 bug (1997)
Hard Questions ? (1997)
Document Contains No Data! (1997)
webcat2b12 CGI -- Date comparisons (1997)
The beginning (1997)
WebCat2 beta 11 - new prefs ... (1997)
[OT] See Flash? (2003)
Multiple fields on 1 input (1997)
mailto: tag (2001)
Emailed problem (2000)
Plugin or CGI or both (1997)
[WebDNA] php/mySQL version of WebDNA Speed Test? (2009)
Newbie question (1998)
Credit card processing - UK (1997)
WC2.0 Memory Requirements (1997)
posting problems + Webcat 3.0.7 available - did anyone know? (2000)
RE: Formulas.db + Users.db (1997)
Share cost of training videos! (1998)
Location of Browser Info.txt file (1997)
Time for a hard questions. (1997)