Re: CommandSecurity?

This WebDNA talk-list message is from

1997


It keeps the original formatting.
numero = 12634
interpreted = N
texte = >I removed Replace and Delete from the CommandsAllowed preference ... while >leaving CommandSecurity=T. > >I did this in an effort to 'shut off' all commands performed by forms and >URL's ... but it also seems to prevent context commands from working too. I >had to make CommandSecurity=F to get replace and delete to work without >adding them to the CommandsAllowed pref ... but setting CommandSecurity=F >completely eliminates all command security, right?I see nothing in the code that would prevent embedded contexts such as [Delete] or [Replace] from working regardless of what the CommandSecurity setting is. CommandSecurity is only for $(command) remote URL-style commands.Are you sure you've got the right passwords for those embedded contexts you're using?Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors ===== Pacific Coast Software | WebCatalog Pro, WebCommerce Solution 11770 Bernardo Plaza Court | SiteEdit Pro, SiteCheck, PhotoMaster San Diego, CA 92128 | SiteGuard 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com Associated Messages, from the most recent to the oldest:

    
  1. Re: CommandSecurity? (Grant Hulbert 1997)
  2. Re: CommandSecurity? (Kenneth Grome 1997)
  3. Re: CommandSecurity? (Kenneth Grome 1997)
  4. Re: CommandSecurity? (Grant Hulbert 1997)
  5. CommandSecurity? (Kenneth Grome 1997)
  6. CommandSecurity? (Kenneth Grome 1997)
>I removed Replace and Delete from the CommandsAllowed preference ... while >leaving CommandSecurity=T. > >I did this in an effort to 'shut off' all commands performed by forms and >URL's ... but it also seems to prevent context commands from working too. I >had to make CommandSecurity=F to get replace and delete to work without >adding them to the CommandsAllowed pref ... but setting CommandSecurity=F >completely eliminates all command security, right?I see nothing in the code that would prevent embedded contexts such as [delete] or [replace] from working regardless of what the CommandSecurity setting is. CommandSecurity is only for $(command) remote URL-style commands.Are you sure you've got the right passwords for those embedded contexts you're using?Grant Hulbert, V.P. Engineering | ===== Tools for WebWarriors ===== Pacific Coast Software | WebCatalog Pro, WebCommerce Solution 11770 Bernardo Plaza Court | SiteEdit Pro, SiteCheck, PhotoMaster San Diego, CA 92128 | SiteGuard 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com Grant Hulbert

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

wish list (2002) Internet Explorer and caching (2000) Only charge card when product shipped ? (1997) Online CC Processing (2002) Limit to Field Length in DB (1998) Review comparison by PC Magazine: Open for On-line Business (1997) form crasehes server (1997) Question about links (1999) Questions (1998) TCPConnect to query for Domain expiration (2000) creator code (1997) [append] vs. [appendfile] delta + question? (1997) ConverChars (1999) Possible Bug in 2.0b15.acgi (1997) What am I doing wrong? (2000) Problem 2: Prefs file... (1997) Moment of Thanks (1997) WebCat b13 CGI -shownext- (1997) blank page from template (1997) [founditems][replacefounditems] (2003)