Re: [WriteFile] problems
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 10896
interpreted = N
texte = >I'm really confused at this point. We have about finished a big site >that will give an unlimited number of users access to a database and a >library of templates so they can render their pages to disk at will so >their pages will be found by the search engines. And it seems to be >working fine and WebStar has no problem serving these rendered pages >regardless of the file type issue. So will this or won't this approach >work??Sorry about the confusion -- I hadn't thought it all the way through before. The fact that WebSTAR can see those files created by [WriteFile] is considered a security bug at this point. We want the default file type to be one that WebSTAR won't let people see. You're OK for now because b15 doesn't change the file type.This is a big enough deal that I've broken the 'code lockout' rule and changed the upcoming b16 so that you can optionally tell WebCatalog to make files secure. The default is going to be secure, but you will be able to override it with the following syntax:[WriteFile file=xx.txt&secure=F] [AppendFile file=xx.txt&secure=F]So Karl, for b16 you'll have to change all your templates to use the above syntax if you want rendered pages to be visible.The old syntax, [WriteFile xx.txt] will still work, and it will be equivalent to [WriteFile file=xx.txt&secure=T]Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors ===== Pacific Coast Software | WebCatalog Pro, WebCommerce Solution 11770 Bernardo Plaza Court, #462 | SiteEdit Pro, SiteCheck, PhotoMaster San Diego, CA 92128 | SiteGuard 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com
Associated Messages, from the most recent to the oldest:
>I'm really confused at this point. We have about finished a big site >that will give an unlimited number of users access to a database and a >library of templates so they can render their pages to disk at will so >their pages will be found by the search engines. And it seems to be >working fine and WebStar has no problem serving these rendered pages >regardless of the file type issue. So will this or won't this approach >work??Sorry about the confusion -- I hadn't thought it all the way through before. The fact that WebSTAR can see those files created by
[writefile] is considered a security bug at this point. We want the default file type to be one that WebSTAR won't let people see. You're OK for now because b15 doesn't change the file type.This is a big enough deal that I've broken the 'code lockout' rule and changed the upcoming b16 so that you can optionally tell WebCatalog to make files secure. The default is going to be secure, but you will be able to override it with the following syntax:[WriteFile file=xx.txt&secure=F] [AppendFile file=xx.txt&secure=F]So Karl, for b16 you'll have to change all your templates to use the above syntax if you want rendered pages to be visible.The old syntax, [WriteFile xx.txt] will still work, and it will be equivalent to [WriteFile file=xx.txt&secure=T]Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors ===== Pacific Coast Software | WebCatalog Pro, WebCommerce Solution 11770 Bernardo Plaza Court, #462 | SiteEdit Pro, SiteCheck, PhotoMaster San Diego, CA 92128 | SiteGuard 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com
Grant Hulbert
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Question about links (1999)
NetSplat and WebCat2 (1997)
X etc.... (1999)
select multiple (1997)
WebCatalog for guestbook ? (1997)
searches with dash, period etc. (back form politeness) (2000)
Range Comparisons (2000)
Spaces in FormVariables (2001)
Multiple prices (1997)
WC Host Needed (2000)
Advice on MacOS & TCP Connects (2000)
download database (2000)
suffix mapping for NT? (1997)
Null Chars (1999)
How flexible is Shipping? (1997)
Search design (1997)
MySQL 5/Float (2007)
quickfix for view cart in storebuilder ??? (2002)
WebCat2 several catalogs? (1997)
japanese characters (1997)