Re: Hiding Contexts

This WebDNA talk-list message is from

2000


It keeps the original formatting.
numero = 36458
interpreted = N
texte = >I'm a real newbie to WebDNA and I'm having some trouble. I'm running >Typhoon Pro on OS9 on a G4/400.Which version? >. >What I have found is that someone with a little knowledge of HTML >can download the form, modify the client name and then gain access to >another client's account.Prevent this by requiring the referring page to come from your server, or by making the visitor login with a username and password that you store in the users.db, or by other similar methods ... >I first thought that this could be solved with encrypting the template, but >for some reason I cannot get this to work.Encrypting templates does nothing to change the HTML sent to the browser. The reason for encrypting your templates is to prevent people who have direct access to those templates from seeing your webdna code -- not to prevent the browser from receiving the proper HTML code. If you write a commercial solution that you want to sell, that's when you need to protect your templates. ================================ Kenneth Grome, WebDNA Consultant 808-737-6499 http://webdna.net ================================------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. Re: Hiding Contexts (Peter Ostry 2000)
  2. Re: Hiding Contexts (John Butler 2000)
  3. Re: Hiding Contexts (Peter Ostry 2000)
  4. Re: Hiding Contexts (Kenneth Grome 2000)
  5. Hiding Contexts (Steve Dannaway 2000)
>I'm a real newbie to WebDNA and I'm having some trouble. I'm running >Typhoon Pro on OS9 on a G4/400.Which version? >. >What I have found is that someone with a little knowledge of HTML >can download the form, modify the client name and then gain access to >another client's account.Prevent this by requiring the referring page to come from your server, or by making the visitor login with a username and password that you store in the users.db, or by other similar methods ... >I first thought that this could be solved with encrypting the template, but >for some reason I cannot get this to work.Encrypting templates does nothing to change the HTML sent to the browser. The reason for encrypting your templates is to prevent people who have direct access to those templates from seeing your webdna code -- not to prevent the browser from receiving the proper HTML code. If you write a commercial solution that you want to sell, that's when you need to protect your templates. ================================ Kenneth Grome, WebDNA Consultant 808-737-6499 http://webdna.net ================================------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/ Kenneth Grome

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

different sized random banners (2003) WebCat2 - Getting to the browser's username/password data (1997) Orderfile Encryption (2007) New public beta available (1997) PCS Frames (1997) Emailer setup (1997) More on ShippingCost help needed (1998) Db crash in win98 (2000) Re:No Data (1997) Meet your competition (2000) Forms Search Questions (1997) 256 character limit in URL? Kinda urgent... (2004) Suggestion to expand [convertchars] ... (2000) shipcost (1997) The Top Ten (2002) More on the email templates (1997) Stumped on ShowNext -using variables (1997) .eml files (2001) WebCat2b13MacPlugIn - [include] doesn't allow creator (1997) writefiles (1999)