Re: Major Security Hole
This WebDNA talk-list message is from 1998
It keeps the original formatting.
numero = 18815
interpreted = N
texte = >BUT Macs are susceptible to this as well! And you can't, or at least I >couldn't, map .tmpl::$DATA to webcatalog. It still reveals the WebDNA tags. >NOT good if you are showing and hiding text based on passwords like [showif >[password]=3294.bob]. Now it becomes simple to find the once hidden >passwords.Yes, the $ is the problem here, but I don't see your symptom. When I type a URL like that I get password-challenged (because $DATA is not one of the commands WebCatalog allows without a password). Do you have your WebCatalog preferences set up to only allow certain $commands, or do you let them all thru?Technical Support | ==== eCommerce and Beyond ==== Pacific Coast Software | WebCatalog, WebMerchant, 11770 Bernardo Plaza Court | SiteEdit Pro, PhotoMaster, San Diego, CA 92128 | Typhoon 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com/
Associated Messages, from the most recent to the oldest:
>BUT Macs are susceptible to this as well! And you can't, or at least I >couldn't, map .tmpl::$DATA to webcatalog. It still reveals the WebDNA tags. >NOT good if you are showing and hiding text based on passwords like [showif >
[password]=3294.bob]. Now it becomes simple to find the once hidden >passwords.Yes, the $ is the problem here, but I don't see your symptom. When I type a URL like that I get password-challenged (because $DATA is not one of the commands WebCatalog allows without a password). Do you have your WebCatalog preferences set up to only allow certain $commands, or do you let them all thru?Technical Support | ==== eCommerce and Beyond ==== Pacific Coast Software | WebCatalog, WebMerchant, 11770 Bernardo Plaza Court | SiteEdit Pro, PhotoMaster, San Diego, CA 92128 | Typhoon 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com/
PCS Technical Support
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
taxTotal, too (1997)
WebMerch/Emailer Error (1998)
Freeze (2003)
Email within tmpl ? (1997)
dollar $ signs in database (2000)
Log-in Scheme (2003)
Emailer setup (1997)
[OT] Apple and 128bit SSL (2003)
Great product and great job ! (1997)
Upload via Browser (1999)
Beta Documentation (1997)
The IBC root beer has arrived! (1997)
WebCat2b15MacPlugin - showing [math] (1997)
OT: Poll Please (2002)
Re: (2000)
Calculating multiple shipping... (1997)
Download URL & access on the fly ? (1997)
Writing files (2000)
[HIDEIF] inside [FOUNDITEM] (1997)
Credit card types (1997)