New Command prefs ...
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 10341
interpreted = N
texte = Okay, so ...If commandSecurity=F, then there is no command security used by WebCat2 whatsoever, and anyone can type any WebCat2 $command they wish into a web browser, and WebCat2 will perform that command ... right?And it really makes no difference what's typed into the CommandsAllowed pref when commandSecurity=F because the CommandsAllowed pref is ignored when commandSecurity=F ... right?But when commandSecurity=T, that's when WebCat2 actually looks at the commands in the CommandsAllowed pref ... right?And when commandSecurity=T and WebCat2 finds a particular command in the CommandsAllowed pref (such as Replace, for example) then it tells WebCat2 to continue to allow that command to be executed from a URL, even though that URL might have been typed into a remote browser ... right?But when the CommandsAllowed pref does *not* have a particular command in the CommandsAllowed pref (such as Append, for example) then anytime someone attempts to do an Append from a URL, the append will fail ... right?From my understanding, a command typed into the URL or Location field of a web browser will look exactly the same to WebCat2 as an identical command that someone has preformatted and placed into a hyperlink ... right?So, if I use hyperlinks on my website to execute preformatted commands, I do *not* want to leave those commands out of the CommandsAllowed pref list - or the commands I leave out will no longer work from my hyperlinks ... right?Sincerely, Ken
Associated Messages, from the most recent to the oldest:
Okay, so ...If commandSecurity=F, then there is no command security used by WebCat2 whatsoever, and anyone can type any WebCat2 $command they wish into a web browser, and WebCat2 will perform that command ... right?And it really makes no difference what's typed into the CommandsAllowed pref when commandSecurity=F because the CommandsAllowed pref is ignored when commandSecurity=F ... right?But when commandSecurity=T, that's when WebCat2 actually looks at the commands in the CommandsAllowed pref ... right?And when commandSecurity=T and WebCat2 finds a particular command in the CommandsAllowed pref (such as Replace, for example) then it tells WebCat2 to continue to allow that command to be executed from a URL, even though that URL might have been typed into a remote browser ... right?But when the CommandsAllowed pref does *not* have a particular command in the CommandsAllowed pref (such as Append, for example) then anytime someone attempts to do an Append from a URL, the append will fail ... right?From my understanding, a command typed into the URL or Location field of a web browser will look exactly the same to WebCat2 as an identical command that someone has preformatted and placed into a hyperlink ... right?So, if I use hyperlinks on my website to execute preformatted commands, I do *not* want to leave those commands out of the CommandsAllowed pref list - or the commands I leave out will no longer work from my hyperlinks ... right?Sincerely, Ken
Kenneth Grome
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
WebCatalog 4.0.1 has been released! (2000)
WebCat2: multiple currency support (1997)
Replacing the db file (2000)
[WebDNA] OAuth - anybody done this yet? (2009)
Help name our technology! (1997)
Error:Too many nested [xxx] contexts (1997)
Show if file exists (2004)
Security Issue (1997)
ReturnRaw Returns (2000)
form data submission get (1997)
Bad creator codes which cause access denied errormessage (1997)
PCS Frames (1997)
Applescript, WebDNA, and PDF (1997)
Error 404 problem (2003)
Problems getting parameters passed into email. (1997)
emailer (1997)
RE: [WebDNA] [sendmail] attachment on unix (2014)
read and write you own cookies with webcat (1997)
Problem with [CART] number (1998)
Simple and Direct Question for SMSI (2002)