Re: [WebDNA] Putting '&search' into URL killing all search contexts on my sites
This WebDNA talk-list message is from 2010
It keeps the original formatting.
numero = 105383
interpreted = N
texte = BTW if i put these into the windows preparse, I cannot save any future = adminprefs.tpl settings. I have to disable these, set my settings and = reapply. Just FYI and no I have tried to figure out which context is the = issue. BTW I don't need any commands through url can I disable all, by removing = or are some needed inherently in the systems, in use by shopping etc. On Jun 15, 2010, at 4:20 PM, Tom Duke wrote: > Brian, >=20 > Hi - no panic here. I just worry that the code on our sites could = have > been exposed and it would appear that the issue has been known about = for > some time at least. >=20 > It's obviously bad practice on my part but I have left things in = WebDNA > comments that I wouldn't want in the public domain in the belief that = they > would never be served out. I also use tables a lot and this problem = can > expose their contents. >=20 > Anyhow in the meantime I have added the following code at the top of = my > pre-parse script to deal with the problem. I checked using = [elapsedtime] > and it doesn't appear to put much if any overhead on the serving of = pages. >=20 > - Tom >=20 >=20 > [formvariables name=3D!][redirect /][/formvariables] > [formvariables name=3Daddfields][redirect /][/formvariables] > [formvariables name=3Daddlineitem][redirect /][/formvariables] > [formvariables name=3Dappend][redirect /][/formvariables] > [formvariables name=3Dappendfile][redirect /][/formvariables] > [formvariables name=3Dapplescript][redirect /][/formvariables] > [formvariables name=3Darrayget][redirect /][/formvariables] > [formvariables name=3Darrayset][redirect /][/formvariables] > [formvariables name=3Dauthenticate][redirect /][/formvariables] > [formvariables name=3Dboldwords][redirect /][/formvariables] > [formvariables name=3Dbrowsername][redirect /][/formvariables] > [formvariables name=3Dcalcfilecrc32][redirect /][/formvariables] > [formvariables name=3Dcapitalize][redirect /][/formvariables] > [formvariables name=3Dcart][redirect /][/formvariables] > [formvariables name=3Dcase][redirect /][/formvariables] > [formvariables name=3Dclearlineitems][redirect /][/formvariables] > [formvariables name=3Dclosedatabase][redirect /][/formvariables] > [formvariables name=3Dcommand][redirect /][/formvariables] > [formvariables name=3Dcommitdatabase][redirect /][/formvariables] > [formvariables name=3Dconvertchars][redirect /][/formvariables] > [formvariables name=3Dconvertwords][redirect /][/formvariables] > [formvariables name=3Dcopyfile][redirect /][/formvariables] > [formvariables name=3Dcopyfolder][redirect /][/formvariables] > [formvariables name=3Dcountchars][redirect /][/formvariables] > [formvariables name=3Dcountwords][redirect /][/formvariables] > [formvariables name=3Dcreatefolder][redirect /][/formvariables] > [formvariables name=3Ddate][redirect /][/formvariables] > [formvariables name=3Dddeconnect][redirect /][/formvariables] > [formvariables name=3Dddesend][redirect /][/formvariables] > [formvariables name=3Ddecrypt][redirect /][/formvariables] > [formvariables name=3Ddelete][redirect /][/formvariables] > [formvariables name=3Ddeletefile][redirect /][/formvariables] > [formvariables name=3Ddeletefolder][redirect /][/formvariables] > [formvariables name=3Ddos][redirect /][/formvariables] > [formvariables name=3Delapsedtime][redirect /][/formvariables] > [formvariables name=3Delse][redirect /][/formvariables] > [formvariables name=3Dencrypt][redirect /][/formvariables] > [formvariables name=3Dexclusivelock][redirect /][/formvariables] > [formvariables name=3Dfilecompare][redirect /][/formvariables] > [formvariables name=3Dfileinfo][redirect /][/formvariables] > [formvariables name=3Dfindstring][redirect /][/formvariables] > [formvariables name=3Dflushcache][redirect /][/formvariables] > [formvariables name=3Dflushdatabases][redirect /][/formvariables] > [formvariables name=3Dformat][redirect /][/formvariables] > [formvariables name=3Dformat][redirect /][/formvariables] > [formvariables name=3Dformvariables][redirect /][/formvariables] > [formvariables name=3Dfounditems][redirect /][/formvariables] > [formvariables name=3Dfreememory][redirect /][/formvariables] > [formvariables name=3Dfunction][redirect /][/formvariables] > [formvariables name=3Dgetchars][redirect /][/formvariables] > [formvariables name=3Dgetcookie][redirect /][/formvariables] > [formvariables name=3Dgetmimeheader][redirect /][/formvariables] > [formvariables name=3Dgrep][redirect /][/formvariables] > [formvariables name=3Dhideif][redirect /][/formvariables] > [formvariables name=3Dhtml1][redirect /][/formvariables] > [formvariables name=3Dhtml2][redirect /][/formvariables] > [formvariables name=3Dhtml3][redirect /][/formvariables] > [formvariables name=3Dhttpmethod][redirect /][/formvariables] > [formvariables name=3Dif][redirect /][/formvariables] > [formvariables name=3Dinclude][redirect /][/formvariables] > [formvariables name=3Dinput][redirect /][/formvariables] > [formvariables name=3Dinterpret][redirect /][/formvariables] > [formvariables name=3Dipaddress][redirect /][/formvariables] > [formvariables name=3Dissecureclient][redirect /][/formvariables] > [formvariables name=3Dlastautonumner][redirect /][/formvariables] > [formvariables name=3Dlastrandom][redirect /][/formvariables] > [formvariables name=3Dlineitems][redirect /][/formvariables] > [formvariables name=3Dlistchars][redirect /][/formvariables] > [formvariables name=3Dlistcookies][redirect /][/formvariables] > [formvariables name=3Dlistdatabases][redirect /][/formvariables] > [formvariables name=3Dlistfields][redirect /][/formvariables] > [formvariables name=3Dlistfiles][redirect /][/formvariables] > [formvariables name=3Dlistmimeheaders][redirect /][/formvariables] > [formvariables name=3Dlistpath][redirect /][/formvariables] > [formvariables name=3Dlistvariables][redirect /][/formvariables] > [formvariables name=3Dlistwords][redirect /][/formvariables] > [formvariables name=3Dlookup][redirect /][/formvariables] > [formvariables name=3Dlookup][redirect /][/formvariables] > [formvariables name=3Dloop][redirect /][/formvariables] > [formvariables name=3Dlowercase][redirect /][/formvariables] > [formvariables name=3Dmath][redirect /][/formvariables] > [formvariables name=3Dmiddle][redirect /][/formvariables] > [formvariables name=3Dmovefile][redirect /][/formvariables] > [formvariables name=3Dobject][redirect /][/formvariables] > [formvariables name=3Dorderfile][redirect /][/formvariables] > [formvariables name=3Dpassword][redirect /][/formvariables] > [formvariables name=3Dplatform][redirect /][/formvariables] > [formvariables name=3Dproduct][redirect /][/formvariables] > [formvariables name=3Dprotect][redirect /][/formvariables] > [formvariables name=3Dpurchase][redirect /][/formvariables] > [formvariables name=3Drandom][redirect /][/formvariables] > [formvariables name=3Draw][redirect /][/formvariables] > [formvariables name=3Dredirect][redirect /][/formvariables] > [formvariables name=3Dreferrer][redirect /][/formvariables] > [formvariables name=3Dremovehtml][redirect /][/formvariables] > [formvariables name=3Dremovelineitem][redirect /][/formvariables] > [formvariables name=3Dreplace][redirect /][/formvariables] > [formvariables name=3Dreplacefounditems][redirect /][/formvariables] > [formvariables name=3Dreturn][redirect /][/formvariables] > [formvariables name=3Dreturnraw][redirect /][/formvariables] > [formvariables name=3Dscope][redirect /][/formvariables] > [formvariables name=3Dsearch][redirect /][/formvariables] > [formvariables name=3Dsendmail][redirect /][/formvariables] > [formvariables name=3Dsetcookie][redirect /][/formvariables] > [formvariables name=3Dsetheader][redirect /][/formvariables] > [formvariables name=3Dsetlineitem][redirect /][/formvariables] > [formvariables name=3Dsetmimeheader][redirect /][/formvariables] > [formvariables name=3Dshell][redirect /][/formvariables] > [formvariables name=3Dshowif][redirect /][/formvariables] > [formvariables name=3Dshownext][redirect /][/formvariables] > [formvariables name=3Dspawn][redirect /][/formvariables] > [formvariables name=3Dsql][redirect /][/formvariables] > [formvariables name=3Dsql][redirect /][/formvariables] > [formvariables name=3Dsqlconnect][redirect /][/formvariables] > [formvariables name=3Dsqldisconnect][redirect /][/formvariables] > [formvariables name=3Dsqlexecute][redirect /][/formvariables] > [formvariables name=3Dsqlinfo][redirect /][/formvariables] > [formvariables name=3Dsqlrelease][redirect /][/formvariables] > [formvariables name=3Dsqlresult][redirect /][/formvariables] > [formvariables name=3Dswitch][redirect /][/formvariables] > [formvariables name=3Dtable][redirect /][/formvariables] > [formvariables name=3Dtcpconnect][redirect /][/formvariables] > [formvariables name=3Dtcpsend][redirect /][/formvariables] > [formvariables name=3Dtext][redirect /][/formvariables] > [formvariables name=3Dthen][redirect /][/formvariables] > [formvariables name=3Dthisurl][redirect /][/formvariables] > [formvariables name=3Dtime][redirect /][/formvariables] > [formvariables name=3Dunurl][redirect /][/formvariables] > [formvariables name=3Duppercase][redirect /][/formvariables] > [formvariables name=3Durl][redirect /][/formvariables] > [formvariables name=3Dusername][redirect /][/formvariables] > [formvariables name=3Dvalidcard][redirect /][/formvariables] > [formvariables name=3Dversion][redirect /][/formvariables] > [formvariables name=3Dversion][redirect /][/formvariables] > [formvariables name=3Dwaitforfile][redirect /][/formvariables] > [formvariables name=3Dwritefile][redirect /][/formvariables] > [formvariables name=3Dxmlnode][redirect /][/formvariables] > [formvariables name=3Dxmlnodes][redirect /][/formvariables] > [formvariables name=3Dxmlnodesattributes][redirect /][/formvariables] > [formvariables name=3Dxmlparse][redirect /][/formvariables] > [formvariables name=3Dxsl][redirect /][/formvariables] > [formvariables name=3Dxslt][redirect /][/formvariables]
Associated Messages, from the most recent to the oldest:
BTW if i put these into the windows preparse, I cannot save any future = adminprefs.tpl settings. I have to disable these, set my settings and = reapply. Just FYI and no I have tried to figure out which context is the = issue. BTW I don't need any commands through url can I disable all, by removing = or are some needed inherently in the systems, in use by shopping etc. On Jun 15, 2010, at 4:20 PM, Tom Duke wrote: > Brian, >=20 > Hi - no panic here. I just worry that the code on our sites could = have > been exposed and it would appear that the issue has been known about = for > some time at least. >=20 > It's obviously bad practice on my part but I have left things in = WebDNA > comments that I wouldn't want in the public domain in the belief that = they > would never be served out. I also use tables a lot and this problem = can > expose their contents. >=20 > Anyhow in the meantime I have added the following code at the top of = my > pre-parse script to deal with the problem. I checked using =
[elapsedtime] > and it doesn't appear to put much if any overhead on the serving of = pages. >=20 > - Tom >=20 >=20 > [formvariables name=3D!][redirect /][/formvariables] > [formvariables name=3Daddfields][redirect /][/formvariables] > [formvariables name=3Daddlineitem][redirect /][/formvariables] > [formvariables name=3Dappend][redirect /][/formvariables] > [formvariables name=3Dappendfile][redirect /][/formvariables] > [formvariables name=3Dapplescript][redirect /][/formvariables] > [formvariables name=3Darrayget][redirect /][/formvariables] > [formvariables name=3Darrayset][redirect /][/formvariables] > [formvariables name=3Dauthenticate][redirect /][/formvariables] > [formvariables name=3Dboldwords][redirect /][/formvariables] > [formvariables name=3Dbrowsername][redirect /][/formvariables] > [formvariables name=3Dcalcfilecrc32][redirect /][/formvariables] > [formvariables name=3Dcapitalize][redirect /][/formvariables] > [formvariables name=3Dcart][redirect /][/formvariables] > [formvariables name=3Dcase][redirect /][/formvariables] > [formvariables name=3Dclearlineitems][redirect /][/formvariables] > [formvariables name=3Dclosedatabase][redirect /][/formvariables] > [formvariables name=3Dcommand][redirect /][/formvariables] > [formvariables name=3Dcommitdatabase][redirect /][/formvariables] > [formvariables name=3Dconvertchars][redirect /][/formvariables] > [formvariables name=3Dconvertwords][redirect /][/formvariables] > [formvariables name=3Dcopyfile][redirect /][/formvariables] > [formvariables name=3Dcopyfolder][redirect /][/formvariables] > [formvariables name=3Dcountchars][redirect /][/formvariables] > [formvariables name=3Dcountwords][redirect /][/formvariables] > [formvariables name=3Dcreatefolder][redirect /][/formvariables] > [formvariables name=3Ddate][redirect /][/formvariables] > [formvariables name=3Dddeconnect][redirect /][/formvariables] > [formvariables name=3Dddesend][redirect /][/formvariables] > [formvariables name=3Ddecrypt][redirect /][/formvariables] > [formvariables name=3Ddelete][redirect /][/formvariables] > [formvariables name=3Ddeletefile][redirect /][/formvariables] > [formvariables name=3Ddeletefolder][redirect /][/formvariables] > [formvariables name=3Ddos][redirect /][/formvariables] > [formvariables name=3Delapsedtime][redirect /][/formvariables] > [formvariables name=3Delse][redirect /][/formvariables] > [formvariables name=3Dencrypt][redirect /][/formvariables] > [formvariables name=3Dexclusivelock][redirect /][/formvariables] > [formvariables name=3Dfilecompare][redirect /][/formvariables] > [formvariables name=3Dfileinfo][redirect /][/formvariables] > [formvariables name=3Dfindstring][redirect /][/formvariables] > [formvariables name=3Dflushcache][redirect /][/formvariables] > [formvariables name=3Dflushdatabases][redirect /][/formvariables] > [formvariables name=3Dformat][redirect /][/formvariables] > [formvariables name=3Dformat][redirect /][/formvariables] > [formvariables name=3Dformvariables][redirect /][/formvariables] > [formvariables name=3Dfounditems][redirect /][/formvariables] > [formvariables name=3Dfreememory][redirect /][/formvariables] > [formvariables name=3Dfunction][redirect /][/formvariables] > [formvariables name=3Dgetchars][redirect /][/formvariables] > [formvariables name=3Dgetcookie][redirect /][/formvariables] > [formvariables name=3Dgetmimeheader][redirect /][/formvariables] > [formvariables name=3Dgrep][redirect /][/formvariables] > [formvariables name=3Dhideif][redirect /][/formvariables] > [formvariables name=3Dhtml1][redirect /][/formvariables] > [formvariables name=3Dhtml2][redirect /][/formvariables] > [formvariables name=3Dhtml3][redirect /][/formvariables] > [formvariables name=3Dhttpmethod][redirect /][/formvariables] > [formvariables name=3Dif][redirect /][/formvariables] > [formvariables name=3Dinclude][redirect /][/formvariables] > [formvariables name=3Dinput][redirect /][/formvariables] > [formvariables name=3Dinterpret][redirect /][/formvariables] > [formvariables name=3Dipaddress][redirect /][/formvariables] > [formvariables name=3Dissecureclient][redirect /][/formvariables] > [formvariables name=3Dlastautonumner][redirect /][/formvariables] > [formvariables name=3Dlastrandom][redirect /][/formvariables] > [formvariables name=3Dlineitems][redirect /][/formvariables] > [formvariables name=3Dlistchars][redirect /][/formvariables] > [formvariables name=3Dlistcookies][redirect /][/formvariables] > [formvariables name=3Dlistdatabases][redirect /][/formvariables] > [formvariables name=3Dlistfields][redirect /][/formvariables] > [formvariables name=3Dlistfiles][redirect /][/formvariables] > [formvariables name=3Dlistmimeheaders][redirect /][/formvariables] > [formvariables name=3Dlistpath][redirect /][/formvariables] > [formvariables name=3Dlistvariables][redirect /][/formvariables] > [formvariables name=3Dlistwords][redirect /][/formvariables] > [formvariables name=3Dlookup][redirect /][/formvariables] > [formvariables name=3Dlookup][redirect /][/formvariables] > [formvariables name=3Dloop][redirect /][/formvariables] > [formvariables name=3Dlowercase][redirect /][/formvariables] > [formvariables name=3Dmath][redirect /][/formvariables] > [formvariables name=3Dmiddle][redirect /][/formvariables] > [formvariables name=3Dmovefile][redirect /][/formvariables] > [formvariables name=3Dobject][redirect /][/formvariables] > [formvariables name=3Dorderfile][redirect /][/formvariables] > [formvariables name=3Dpassword][redirect /][/formvariables] > [formvariables name=3Dplatform][redirect /][/formvariables] > [formvariables name=3Dproduct][redirect /][/formvariables] > [formvariables name=3Dprotect][redirect /][/formvariables] > [formvariables name=3Dpurchase][redirect /][/formvariables] > [formvariables name=3Drandom][redirect /][/formvariables] > [formvariables name=3Draw][redirect /][/formvariables] > [formvariables name=3Dredirect][redirect /][/formvariables] > [formvariables name=3Dreferrer][redirect /][/formvariables] > [formvariables name=3Dremovehtml][redirect /][/formvariables] > [formvariables name=3Dremovelineitem][redirect /][/formvariables] > [formvariables name=3Dreplace][redirect /][/formvariables] > [formvariables name=3Dreplacefounditems][redirect /][/formvariables] > [formvariables name=3Dreturn][redirect /][/formvariables] > [formvariables name=3Dreturnraw][redirect /][/formvariables] > [formvariables name=3Dscope][redirect /][/formvariables] > [formvariables name=3Dsearch][redirect /][/formvariables] > [formvariables name=3Dsendmail][redirect /][/formvariables] > [formvariables name=3Dsetcookie][redirect /][/formvariables] > [formvariables name=3Dsetheader][redirect /][/formvariables] > [formvariables name=3Dsetlineitem][redirect /][/formvariables] > [formvariables name=3Dsetmimeheader][redirect /][/formvariables] > [formvariables name=3Dshell][redirect /][/formvariables] > [formvariables name=3Dshowif][redirect /][/formvariables] > [formvariables name=3Dshownext][redirect /][/formvariables] > [formvariables name=3Dspawn][redirect /][/formvariables] > [formvariables name=3Dsql][redirect /][/formvariables] > [formvariables name=3Dsql][redirect /][/formvariables] > [formvariables name=3Dsqlconnect][redirect /][/formvariables] > [formvariables name=3Dsqldisconnect][redirect /][/formvariables] > [formvariables name=3Dsqlexecute][redirect /][/formvariables] > [formvariables name=3Dsqlinfo][redirect /][/formvariables] > [formvariables name=3Dsqlrelease][redirect /][/formvariables] > [formvariables name=3Dsqlresult][redirect /][/formvariables] > [formvariables name=3Dswitch][redirect /][/formvariables] > [formvariables name=3Dtable][redirect /][/formvariables] > [formvariables name=3Dtcpconnect][redirect /][/formvariables] > [formvariables name=3Dtcpsend][redirect /][/formvariables] > [formvariables name=3Dtext][redirect /][/formvariables] > [formvariables name=3Dthen][redirect /][/formvariables] > [formvariables name=3Dthisurl][redirect /][/formvariables] > [formvariables name=3Dtime][redirect /][/formvariables] > [formvariables name=3Dunurl][redirect /][/formvariables] > [formvariables name=3Duppercase][redirect /][/formvariables] > [formvariables name=3Durl][redirect /][/formvariables] > [formvariables name=3Dusername][redirect /][/formvariables] > [formvariables name=3Dvalidcard][redirect /][/formvariables] > [formvariables name=3Dversion][redirect /][/formvariables] > [formvariables name=3Dversion][redirect /][/formvariables] > [formvariables name=3Dwaitforfile][redirect /][/formvariables] > [formvariables name=3Dwritefile][redirect /][/formvariables] > [formvariables name=3Dxmlnode][redirect /][/formvariables] > [formvariables name=3Dxmlnodes][redirect /][/formvariables] > [formvariables name=3Dxmlnodesattributes][redirect /][/formvariables] > [formvariables name=3Dxmlparse][redirect /][/formvariables] > [formvariables name=3Dxsl][redirect /][/formvariables] > [formvariables name=3Dxslt][redirect /][/formvariables]
"Mr. Robert Minor Jr."
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Installing WebDNA DEveloper edition on Mac OS X (2004)
[WebDNA] PayPal integration code examples? (2011)
Pricing (1998)
Price Not Appearing (2000)
REPOST: Upgrage pricing... The future of WebCatalog is comingwith 4.0... (2000)
WebMerchant 1.6 and SHTML (1997)
Bug or syntax error on my part? (1997)
WebCat2b12 CGI Mac -- Problems propagating the cart through frames...still (1997)
sorted cart? (1998)
Shopping Cart Limits? (1998)
Sample Tearoom Search Error - Solved! (1997)
Errata: WCS Newbie question (1997)
Date problems-more (1997)
problem: type 2 errors (1997)
Using Applescript to process WebCatalog functions (1998)
Test (2006)
RE:DatabaseHelper (1997)
SET (1998)
CAll me Crazy (2000)
Nested vs conditional (1997)