Re: Protect
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 14256
interpreted = N
texte = >I think you should give some very serious thought to allowing ANY of>your users to create WebDNA templates on your site. My personal>opinion is that it is not worth the risk.People coming from UNIX and NT backgrounds don't normally have these concerns -- end-users are allowed to upload programs and execute them with no fear of malicious 'crossover', because the programs execute with lower security settings that only allow changes to stuff they have rights to change. MacOS was not designed for such an environment, and we realize this is a limitation that should be addressed.We are investigating ways of making WebDNA less susceptible to such issues. For now, you should all realize that anyone who can create templates has incredible power over your web server, and Bennie's Fear of God approach is probably the best for his situation.Grant Hulbert, V.P. Engineering | ==== eCommerce for the Rest of Us ====Pacific Coast Software | WebCatalog, WebMerchant11770 Bernardo Plaza Court | SiteEdit Pro, PhotoMasterSan Diego, CA 92128 | SiteGuard619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com
Associated Messages, from the most recent to the oldest:
>I think you should give some very serious thought to allowing ANY of>your users to create WebDNA templates on your site. My personal>opinion is that it is not worth the risk.People coming from UNIX and NT backgrounds don't normally have these concerns -- end-users are allowed to upload programs and execute them with no fear of malicious 'crossover', because the programs execute with lower security settings that only allow changes to stuff they have rights to change. MacOS was not designed for such an environment, and we realize this is a limitation that should be addressed.We are investigating ways of making WebDNA less susceptible to such issues. For now, you should all realize that anyone who can create templates has incredible power over your web server, and Bennie's Fear of God approach is probably the best for his situation.Grant Hulbert, V.P. Engineering | ==== eCommerce for the Rest of Us ====Pacific Coast Software | WebCatalog, WebMerchant11770 Bernardo Plaza Court | SiteEdit Pro, PhotoMasterSan Diego, CA 92128 | SiteGuard619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com
Grant Hulbert
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Hosting Service (1998)
Server Freeze (1998)
Fwd: [ANNOUNCE] BIAP W*API Patch plug-in (1998)
math on date? (1997)
WebCat3.04/w*4/OS8.5.1 and aliases (1999)
re: emailer prob (1998)
[price] via a search (1998)
WebDNA FAQ or FAQs -- was "weird problem" (2004)
Feature Request (1999)
switching users (1998)
Add to Cart & List of Products (1997)
Misc Stuff That Might Help (1997)
Cart Transfer from Un-Secure to Secure (2000)
[WebDNA] sem_open bugfix for os x version 6.2 (2012)
notification solutions (1997)
WebCat2 several catalogs? (1997)
Review comparison by PC Magazine: Open for On-line Business (1997)
Associative lookup style? (1997)
Repeating Fields (1997)
Deleting with contexts (2001)